Privacy Policy

1. Who we are

Workshop HQ is a business name operated by EA Performance Group Pty Ltd, ABN 80 700 625 878, in Queensland, Australia. Privacy questions and requests can be sent to [email protected].

2. Information we handle

Depending on how Workshop HQ is used, we may handle:

• names, business details, email addresses, phone numbers and addresses;
• workshop staff accounts, roles, login security and activity records;
• customer, vehicle, booking, repair, inspection, invoice and payment records;
• photos, videos, documents, messages, approvals and consent records;
• billing, subscription, support and early-access enquiry information; and
• technical information such as IP address, browser details, security events and service logs.

Workshops choose the information they enter into the platform and are responsible for giving their customers and staff any notices or obtaining any consents required for that collection.

3. How and why we collect information

We collect information directly from users, from workshops using the platform, through approved imports and integrations, and automatically when the service is accessed. We use it to provide and secure the platform, authenticate users, support workshop operations, deliver requested communications, respond to enquiries, administer subscriptions, prevent misuse, meet legal obligations and improve the service.

We do not sell personal information or use workshop customer data for unrelated advertising.

4. Service providers and overseas processing

Core application and database services are hosted in Sydney, Australia. We use carefully selected providers for hosting, email, communications, security, support and other platform functions. These providers receive only the information reasonably required to perform their service.

Some providers may process information outside Australia. In particular, transactional email metadata, addresses and message content processed through Resend may be stored in the United States. A workshop may also connect its own providers, whose processing locations are governed by that workshop's arrangements with them.

5. Security and retention

We use access controls, encrypted connections, restricted production access, tenant separation, audit records and other reasonable safeguards. No online service can guarantee absolute security. Information is retained only while needed for the service, legal, security, backup and dispute-resolution purposes, then deleted or de-identified where reasonably practicable.

6. Access, correction and complaints

You may ask to access or correct personal information we hold about you, or make a privacy complaint, by emailing [email protected]. Please include enough detail for us to identify the relevant information. We may need to verify your identity and consult the workshop that controls the record. We aim to acknowledge complaints promptly and provide an outcome within a reasonable period.

7. Changes to this policy

We may update this policy when our product, providers or legal obligations change. The current version and its effective date will remain available on this page.