Privacy Policy – Data2Power

Effective Date: 3rd June 2026

Owner: Comrack Pty Ltd (ABN 68 606 050 597) trading as Data2Power

Applies to: Data2Power and www.data2power.com.au

Effective date: 6 September 2026

Privacy contact: support@data2power.com.au | (07) 3122 6100

1. About this policy

Comrack Pty Ltd ABN 68 606 050 597, trading as Data2Power (Comrack, Data2Power, we, us or our), respects the privacy of individuals whose personal information we handle.

This Privacy Policy explains how we collect, hold, use and disclose personal information, how individuals may access or correct their information, and how privacy enquiries and complaints may be made. It applies to Data2Power’s business activities and the website www.data2power.com.au.

For clarity, Comrack is not legally part of the Complete Wiring Group. References to Comrack or Data2Power in this policy do not include Complete Wiring Harnesses Pty Ltd or any other entity merely because the businesses may be associated for marketing or commercial purposes.

We manage personal information in accordance with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs), where they apply to us. Other laws may also apply to particular information or communications.

2. What is personal information?

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not the information or opinion is true or recorded in a material form.

Sensitive information is a category of personal information and includes certain information about health, racial or ethnic origin, political opinions, religious or philosophical beliefs, professional or trade association or union membership, sexual orientation or practices, criminal records, genetic information and certain biometric information. We do not ordinarily collect sensitive information. If we need to do so, we will only collect it where reasonably necessary and with consent or where otherwise permitted by law.

3. The personal information we collect

The kinds of personal information we may collect depend on how a person deals with us and may include:

identity and contact details, including name, business name, role, postal or delivery address, telephone number and email address;
account, enquiry, quotation, order, delivery, return, warranty and customer-service information;
transaction and payment-related information, such as payment status and limited payment details made available by our payment providers;
business information, including an ABN, purchasing history and communications with us;
information supplied by trade-account applicants, guarantors or credit referees where applicable;
website and device information, including IP address, browser or device type, pages viewed, referral source, approximate location and cookie or analytics identifiers;
marketing preferences and records of consent, subscription or opt-out requests;
records of telephone, email, web-form and other communications; and
recruitment information, if a person applies to work with us, including a resume, employment history, qualifications, references and work-right information.

We do not ordinarily retain full payment-card details. Online payments are processed by third-party payment providers. Those providers handle payment information under their own terms and privacy policies.

We seek to collect only information reasonably necessary for our functions and activities. If information is not provided, we may be unable to respond to an enquiry, process or deliver an order, establish an account, provide support or consider an application.

4. How we collect personal information

We may collect personal information:

directly from the individual, including through our website, online store, email, telephone, forms, orders, account applications and other communications;
from a person authorised to act for the individual or from the individual’s employer or organisation;
from payment providers, couriers, service providers, suppliers, business partners and professional advisers;
from publicly available sources where collection is lawful and reasonably necessary; and
automatically when the website is used, through cookies, server logs and analytics or similar technologies.

Where practicable, an individual may deal with us anonymously or under a pseudonym. This may not be practicable where we need to verify identity, process payment, provide credit, deliver goods, meet legal obligations or provide ongoing support.

If a person provides us with another individual’s personal information, they should only do so where authorised and should make that individual aware of this policy where appropriate.

5. Why we collect, hold, use and disclose information

We may collect, hold, use and disclose personal information to:

respond to enquiries and provide information, quotations, goods and services;
open and administer customer or trade accounts;
process payments, orders, deliveries, returns, warranties and refunds;
provide technical, sales and customer support;
communicate about orders, accounts, products, service changes and safety or recall matters;
maintain customer, supplier, accounting, warranty and business records;
manage suppliers, contractors and other commercial relationships;
operate, maintain, secure and improve our website, systems, products and services;
detect or prevent fraud, misuse, cyber incidents and other unlawful activity;
conduct business analysis, product planning, research and service improvement;
send marketing communications where permitted by law and manage communication preferences;
assess employment applications and manage recruitment;
manage complaints, disputes, legal claims, insurance and risk; and
comply with contractual, taxation, accounting, regulatory and other legal obligations.

We will generally use or disclose personal information for the purpose for which it was collected, for a related purpose that would reasonably be expected, with consent, or as otherwise authorised or required by law.

6. Who we may disclose information to

Where reasonably necessary for the purposes above, we may disclose personal information to:

employees and contractors who need the information to perform their duties;
website, e-commerce, hosting, cloud, email, telecommunications, IT support, cybersecurity, data storage and analytics providers;
payment processors, banks, credit providers and fraud-prevention providers;
manufacturers, suppliers, distributors, couriers, freight companies and fulfilment providers;
accountants, auditors, insurers, legal advisers and other professional advisers;
debt-recovery, dispute-resolution and investigation providers;
government, regulatory, law-enforcement and judicial bodies where authorised or required by law;
a purchaser, adviser or other participant in a proposed or completed sale, restructure or transfer of all or part of our business, subject to appropriate confidentiality arrangements; and
other parties with consent or as otherwise authorised or required by law.

We do not sell personal information.

7. Direct marketing

We may use contact details to send information about Data2Power products, services, offers or business updates where permitted by law. Marketing communications may be sent by email, post, telephone or other electronic means appropriate to the consent or relationship involved.

A person may opt out at any time by using the unsubscribe facility in an electronic marketing message or contacting us using the details in section 16. We do not charge for opting out and will action requests within the period required by law. An opt-out from marketing will not prevent essential transactional, account, safety or service communications.

8. Cookies, analytics and website technologies

Our website may use cookies, pixels, tags, server logs and analytics or similar technologies to operate the online store, remember preferences, maintain security, understand website use, diagnose problems, measure performance and, where used, support advertising.

Some technologies are necessary for the website or shopping cart to function. Others may be provided by third parties and may collect identifiers, device information and online activity. Browser settings may allow cookies to be blocked or deleted, although doing so may affect website functionality. Where our website provides a cookie preference tool, choices can also be managed through that tool.

Third-party services operate under their own privacy terms. We periodically review the technologies used on our website and update this policy where our practices materially change.

9. Overseas disclosure and storage

Some of our service providers, or their related entities and infrastructure, may be located outside Australia. As a result, personal information may be disclosed to or accessible from overseas, including in India, New Zealand, the United Kingdom and the United States of America. The countries involved may change as service-provider arrangements change.

Before disclosing personal information overseas, we take reasonable steps required by law to ensure that the recipient handles the information consistently with the APPs, unless an exception applies. In some circumstances, we may remain accountable under the Privacy Act for the overseas recipient’s handling of the information.

10. Security

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. Measures may include role-based access restrictions, account and authentication controls, security software, backups, secure cloud and business systems, staff awareness measures and contractual controls for service providers.

No internet transmission or storage system is completely secure. Individuals should avoid sending payment-card details or other highly sensitive information through ordinary email unless specifically requested through an appropriate secure channel.

11. Retention and disposal

We retain personal information only for as long as it is reasonably required for the purpose for which it was collected, for related business purposes, and to meet legal, taxation, accounting, warranty, insurance, dispute-resolution and recordkeeping requirements. Retention periods vary according to the type of record.

When personal information is no longer required and we are not legally required to retain it, we take reasonable steps to destroy it securely or permanently de-identify it.

12. Access and correction

An individual may request access to personal information we hold about them or ask us to correct information they believe is inaccurate, out of date, incomplete, irrelevant or misleading. Requests should be made using the contact details in section 16. We may need to verify identity before responding.

We will respond within a reasonable period. We will not charge for making a request. Where permitted by law, we may charge a reasonable fee reflecting the cost of providing access and will advise of that fee in advance.

There may be circumstances in which we are permitted or required to refuse access or correction. If so, we will provide written reasons where required and explain available complaint mechanisms.

13. Data breaches

We maintain processes for responding to suspected loss of or unauthorised access to or disclosure of personal information. Where a breach is likely to result in serious harm and the Notifiable Data Breaches scheme applies, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law.

14. Automated decisions

We do not currently arrange for computer programs to use personal information to make decisions that could reasonably be expected to significantly affect an individual’s rights or interests. If this changes, we will update this policy and provide the information required by applicable privacy law.

15. Privacy complaints

A privacy enquiry or complaint may be sent to our Privacy Officer using the details in section 16. A complaint should describe the concern and provide enough information for us to investigate it.

We aim to acknowledge a formal complaint within five business days and respond within 30 days. If more time is reasonably required, we will explain why and provide progress updates.

If a complainant is not satisfied with our response, they may contact the Office of the Australian Information Commissioner through www.oaic.gov.au or by telephone on 1300 363 992.

16. Contact us

Privacy Officer

Comrack Pty Ltd trading as Data2Power

Email: support@data2power.com.au

Telephone: (07) 3122 6100

Post: PO Box 388, Capalaba QLD 4157

17. Changes to this policy

We may update this Privacy Policy to reflect changes to our practices, technology, service providers or legal obligations. The current version will be published at www.data2power.com.au and will state its effective date. Where a change materially affects how we handle personal information, we will take reasonable steps to provide appropriate notice.tralia