Privacy Policy

1. Information We Collect

We only collect information that is necessary to process your order and provide customer support. This includes:

• Name — so we know who to address on invoices and dispatch labels.
• Email address — for order confirmations and support correspondence.
• Shipping address — to deliver your order anywhere in Australia.
• Order history — the parts you have purchased, quantities, and prices, retained for warranty and support purposes.
• Payment information — handled entirely by Stripe (see section 5). We do not store card numbers or CVV codes on our systems.
• Technical data — standard web server logs, including your IP address and browser type, retained briefly for security and debugging purposes.

We do not collect sensitive information (as defined in the Privacy Act) such as health, financial, or government identity information.

2. How We Use Your Information

We use your personal information for the following purposes:

• Processing and fulfilling your order, including dispatch and delivery.
• Sending transactional emails — order confirmations, shipping updates, and support replies.
• Handling warranty claims, returns, or part-compatibility queries related to a purchase.
• Maintaining records as required by Australian tax and consumer protection law.
• Detecting and preventing fraudulent transactions or misuse of our website.

We will not use your email address to send marketing communications without your explicit consent. If you do opt in to marketing emails, you can unsubscribe at any time using the link in any email we send.

3. Data Storage & Security

Your data is stored in a PostgreSQL database hosted by Neon on servers located in the AWS Asia Pacific (Sydney) region, keeping your data on Australian soil.

Our website is served via Vercel, which uses HTTPS (TLS) for all connections, meaning data is encrypted in transit between your browser and our servers.

We take reasonable technical steps to protect your information from unauthorised access, loss, or disclosure. However, no internet transmission is completely secure, and we encourage you to use a strong, unique password if you create an account with us.

4. Cookies

We use a small number of cookies to make the site work properly:

• Session cookies — used to keep you logged in during your visit and to maintain your shopping cart. These are deleted when you close your browser.
• Authentication cookies — if you create an account, a secure cookie keeps your session active so you do not have to log in on every page.

We do not currently use advertising trackers, remarketing pixels, or third-party analytics cookies (such as Google Analytics). If this changes, we will update this policy and notify you.

You can disable cookies in your browser settings, but doing so may prevent the cart and checkout from functioning correctly.

5. Third-Party Services

Stripe (Payments)

All payment processing is handled by Stripe, Inc.. When you enter your card details at checkout, that information goes directly to Stripe's servers over an encrypted connection. We never see, handle, or store your raw card data. Stripe is PCI DSS Level 1 certified.

Stripe may retain transaction records in accordance with their own privacy policy and applicable law. We receive only a tokenised reference and a payment confirmation from Stripe.

Shipping Carriers

To deliver your order, we share your name and shipping address with our courier partners (such as Australia Post or StarTrack). This is the minimum information required to dispatch and track your parcel. We do not share your email address with carriers unless required for delivery notifications.

6. Your Rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or out-of-date information.
• Request deletion of your data, subject to any legal retention obligations (for example, we may be required to retain invoice records for GST purposes).
• Complain about how we handle your personal information to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

To exercise any of these rights, email us at info@mg-parts.com.au and we will respond within 30 days.

7. Contact Us

If you have any questions about this Privacy Policy or the way we handle your personal information, please get in touch:

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If the changes are material, we will make reasonable efforts to notify you by email (if we hold your email address) or by displaying a notice on our website. Continued use of the site after any update constitutes your acceptance of the revised policy.