Privacy Policy

1. About this policy

Sydney Diesel Marine Pty Ltd(“SDM”, “we”, “us”) services, repairs and rebuilds marine diesel engines and sells genuine parts. This policy explains what personal information we collect through our website and in the course of our work, why we collect it, how we use and protect it, and how you can access or correct it.

2. What we collect

Contact and booking details. When you book a service through our Work Authority form, buy from our store, make a parts enquiry or contact us, we collect your name, email address, phone number and, where you provide them, your residential and postal addresses.

Vessel and engine details.To service your vessel properly we record its name, type, make, model and location, and your engine’s make, model and serial number, along with a description of the work you have asked for and the service history of work we have carried out.

Payment card details. When you authorise work, your card details are collected and held directly by Stripe, our payment provider. We never see or store your full card number - we hold only the card type, the last four digits and a Stripe reference so we can identify the card. Your card is not charged when you book; we invoice you when the work is complete, and the stored card is only charged in accordance with the terms you accept on the Work Authority.

Work Authority records. When you accept a Work Authority online we record the date, time and IP address of your acceptance as evidence of your authorisation, and email you a PDF copy for your records.

Store orders. When you buy from our online store we collect your name, email address and details of what you ordered.

Technical data. Standard website logs (IP address, browser and device type, pages visited) and anonymised usage statistics collected via Google Analytics 4 that help us understand how the site is used. Analytics measurement is active for all visitors; advertising features are disabled.

3. Why we collect it

• To book, carry out, invoice and warrant the work you ask us to do
• To keep a service history for your vessel and engines, so future work is faster and better informed
• To process store orders and parts enquiries
• To secure payment for completed work in line with the Work Authority terms
• To respond to your enquiries
• To meet our legal and tax obligations
• To improve our website and services

4. Who we share it with

We do not sell your personal information. We share it only with the service providers we use to run the business:

• Stripe - payment processing and secure card storage (United States)
• Supabase - secure database hosting for bookings, customer records and service history
• Vercel and Google Cloud - website and store hosting
• Resend - sending booking confirmations, order confirmations and service emails (United States)
• Xero - invoicing and accounting
• Google Analytics 4 - anonymised website analytics (advertising features disabled; data processed in the United States)

Some of these providers store or process data outside Australia. We take reasonable steps to ensure any overseas recipient handles your information consistently with the APPs. We may also disclose information where required by law.

5. How we protect it

• All website traffic is encrypted (HTTPS)
• Card details are held by Stripe, a PCI-DSS Level 1 certified payment provider - never on our systems
• Access to customer records is restricted to SDM staff who need it to do the work
• Customer account sign-in uses one-time email codes - we never store a password for you

No system is perfectly secure, but we take reasonable precautions and use reputable providers with their own security certifications.

6. Your rights

Under the Australian Privacy Principles you can:

• Ask for a copy of the personal information we hold about you
• Ask us to correct anything that is inaccurate or out of date
• Ask us to delete your information, subject to records we must keep by law
• Ask us to remove your stored card at any time

To do any of the above, call us on 0420 363 077 or write to us at Level 1, 36 Hotham Parade, Artarmon NSW 2064. We aim to respond within 30 days.

7. Complaints

If you believe we have mishandled your personal information, contact us first and we will do our best to sort it out. If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner at www.oaic.gov.au or on 1300 363 992.

8. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised. Our full terms for service work are in our Terms & Conditions.