Privacy Policy

XPENG Cardiff is committed to safeguarding the privacy of individuals. This Privacy Policy sets out how XPENG Cardiff manages personal information. It is structured as follows:

Personal information XPENG Cardiff collects
Use and disclosure of personal information
Automated decision making
Cookies
Links to other websites
Marketing
Overseas transfers
Access and correction
Contacting XPENG Cardiff and complaints
Changes to Privacy Policy

1. Personal information XPENG Cardiff collects

The main types of personal information XPENG Cardiff collects and holds are:

contact and identification information for individuals seeking to buy or sell vehicles with XPENG Cardiff such as name, date of birth, contact number(s), email address(es), residential and/or business address(es), demographic information (such as postcode, age, gender) and driver's licence details;
vehicle and servicing details for XPENG Cardiff's customers including vehicle registration, vehicle purchase details, service appointment bookings;
finance details for XPENG Cardiff's customers seeking finance such as financial, insurance or credit information, marital status, employment details and history;
contact details for individuals working for XPENG Cardiff's business partners and suppliers;
information provided by an individual as part of a recruitment process such as name, contact details, prior employment history, qualifications, referee details and, if applicable, details for background checks; and
other information provided by individuals while interacting with XPENG Cardiff.

XPENG Cardiff collects personal information in the course of running its business in a range of different ways, typically through:

interactions with individuals (e.g. through any records XPENG Cardiff keeps of telephone calls, or emails received, or messages sent to XPENG Cardiff or posted on XPENG Cardiff's pages on social media);
XPENG Cardiff's website;
use of social media;
employment applications;
third party service providers; and
provision of customer service and support.

Where practicable, XPENG Cardiff collects personal information in connection with running its business directly from the individual concerned. On occasion XPENG Cardiff may collect personal information from someone else such as when speaking to a referee for a job applicant or doing screening for onboarding a new supplier or customer.

2. Use and disclosure of personal information

XPENG Cardiff stores personal information in electronic and paper form.

XPENG Cardiff uses and discloses personal information as follows:

to source vehicles and sell them to XPENG Cardiff's customers and to provide other related services to customers such as vehicle servicing and assist with arranging financing to purchase a vehicle;
to manage arrangements with XPENG Cardiff's customers and prospective customers;
to obtain products, services or information from XPENG Cardiff's suppliers;
to assess what vehicles a person may be interested in purchasing (e.g., based on the person's interests and other information XPENG Cardiff knows about them);
to operate and manage XPENG Cardiff's website, social media and other communications and media channels;
subject to applicable laws, to conduct marketing;
for processing and assessing employment applications; and
for such other purposes authorised or required by law.

It may be necessary to share personal information with organisations that provide products or services to XPENG Cardiff. For example, XPENG Cardiff may use third party service providers for the organisation of customer care, implementation of promotions, development of offers, communication and contact with customers, organization of events and for the purpose of obtaining advice and managing its affairs. XPENG Cardiff also uses third party service providers for credit card processing/payment and for IT services (hosting services, database maintenance, etc.).

3. Automated decision making

XPENG Cardiff uses computer programs to make decisions affecting a person's interests to offer products or services that could be of interest. This is typically done via AI Agents within website chat or SMS. The sorts of personal information XPENG Cardiff uses in the operation of the computer program is browsing history on XPENG Cardiff's websites, name, contact information, and other information you may input into XPENG Cardiff's websites. The level of human oversight XPENG Cardiff provides over these decisions is limited — responses and recommendations may be generated automatically, with human review available where a person requests it or where required for follow-up by XPENG Cardiff's staff.

4. Cookies

XPENG Cardiff uses cookies on its website. Cookies are small text files that are stored by the website user's browser when they visit a website. This identifies the browser used and can be recognised by XPENG Cardiff's web server. XPENG Cardiff may use cookies to associate a user with social media platforms and, if the user so chooses, enable interaction between the user's activities on XPENG Cardiff's platforms and those social media platforms. XPENG Cardiff's website also uses cookies to analyse website traffic and help provide a better website visitor experience. Website users can make certain choices about the use of cookies through their browser settings. However, if the user disables certain cookies, this may prevent the user from taking full advantage of XPENG Cardiff's website.

5. Links to other websites

XPENG Cardiff's website may contain links to third party websites. XPENG Cardiff does not control or otherwise determine the privacy practices of these third party sites. To find out about their privacy practices, you should check their websites for their privacy policy, or otherwise ask them about their privacy practices.

6. Marketing

If you have received a direct marketing communication from XPENG Cardiff and do not wish to receive these communications from XPENG Cardiff in the future, just use the “unsubscribe” function in the email or SMS, or tick the opt out box on postal communications and return the mailed item to XPENG Cardiff.

7. Overseas transfers

XPENG Cardiff's website/s are hosted in Australia. On occasion, a third party service provider XPENG Cardiff engages or that XPENG Cardiff is instructed to provide information to may be outside of Australia however, the location of the third party would depend on the specific situation.

8. Access and correction

An individual may request access to or correction of any of the personal information XPENG Cardiff holds about them by contacting XPENG Cardiff during business hours on 02 4014 9970 or via the contact page.

XPENG Cardiff may require an individual making a request to verify their identity before processing their request.

XPENG Cardiff will aim to respond to all requests promptly and within 30 days.

XPENG Cardiff may refuse a request where permitted or required by law. XPENG Cardiff will comply with any regulatory requirement to give reasons for its decision.

9. Contacting XPENG Cardiff and complaints

If you have any queries, concerns or complaints about how XPENG Cardiff handles your personal information please contact XPENG Cardiff during business hours on 02 4014 9970 or via the contact page. XPENG Cardiff may require an individual making a request to verify their identity before processing their request.

Please provide sufficient details so that XPENG Cardiff can understand the nature of your concern. In most cases, XPENG Cardiff will ask that you put your request in writing.

XPENG Cardiff takes all complaints seriously and will use reasonable endeavours to investigate and respond to a complaint in writing within 30 days of receiving the written complaint. If you remain unsatisfied by XPENG Cardiff's response to your complaint, you may be entitled to refer your complaint to the Office of the Australian Information Commissioner.

Phone: 02 4014 9970
Mailing Address: 2 Sturt Rd, Cardiff, NSW, 2285

10. Changes to Privacy Policy

XPENG Cardiff may make changes to this Privacy Policy by posting the revised policy on its website. Please check back from time to time to review this Privacy Policy.