Toyota Connected Services Privacy Policy

Collection of Sensitive information

We only collect sensitive information about you as described above and with your consent, unless the law permits, requires or authorises us to collect it. Sensitive information has the meaning given in the Privacy Act and includes information about your health, race, ethnic origin and religious beliefs.

Providing someone else’s personal information

If you give us personal information about another person (such as a joint vehicle owner, authorised driver (Guest Driver) or contact person), you must tell them about this policy so they know you have shared their information with us and can read this policy to understand how we will handle it. You must get all necessary consents from the other person before giving us their personal information (including a parent's or legal guardian’s permission for minors).

5. How can you opt out of Connected Services?

If you want to stop using any or all Connected Services, you can opt out in the following ways:

• For additional Connected Services you subscribe to via the myToyota Connect App: go to “MyGarage” or tap your vehicle’s nickname, then “Subscriptions”, then select the relevant package and cancel your subscription. Some additional Connected Services depend on each other (because they rely on the same vehicle data). If you unsubscribe from one, it may affect others. The myToyota Connect App will tell you about any other services that will be affected before you confirm your opt-out.
• For Safety Services (SOS Emergency Assistance (SOS) and Automatic Collision Notification (ACN)) and Connected Services automatically enabled on delivery: contact your Toyota dealer or call myToyota Connected Account Enquiries on 1800 869 682.

6. Why does Toyota collect this information?

We collect, hold, use and share information about your use of Connected Services (which may include personal information) for the purposes set out in the table in section 4 above

We only use personal information collected through Connected Services to provide those services to you, or as the law otherwise permits, requires or authorises.

If you want to use Connected Services but do not give us your personal information, we may not be able to provide you with all Connected Services, or we may only be able to offer them with limited features.

We may also use and share information collected from your vehicle through Connected Services to help us develop our products and services. We only use de-identified information for this purpose.

7. To which other parties does Toyota usually share this information?

When you use Connected Services, we may share information about your use of these services (which may include personal information) with other parties for the purposes described in sections 4 and 6 above. We may share this information with:

• Toyota Dealers or Toyota Western Australia, including any dealer you have nominated as your ‘preferred dealer’ as part of the Service Connect Communication feature, to contact you about vehicle servicing, and otherwise only where you ask a Dealer or Toyota WA to provide you with products or services (for example, where you ask a Dealer to service your vehicle, the Dealer may access vehicle maintenance information from your vehicle);
• emergency service providers, but only as part of the Safety Services described in section 4;
• the police, where you have requested Stolen Vehicle Tracking (SVT) services from us and the police request the location of your vehicle from us.
• our related companies and service providers who help us provide and support Connected Services, including:
  • Toyota entities overseas such as Toyota Motor Corporation in Japan, Toyota Motors North America and Toyota Connected North America;
  • customer support providers (e.g. Toyota Emergency Call Centre operators);
  • information technology service providers (e.g. KDDI, Aisin and TomTom); and
  • lawyers and other professional advisors.

In certain circumstances, we may share information about you or your vehicle (which may include personal information) collected while providing Connected Services with other parties (which may include government or law enforcement agencies, bodies or regulators):

• where an Australian law or a court or tribunal order requires or authorises us to do so; or
• as otherwise permitted under the Privacy Act.

We will handle any such disclosures in accordance with applicable laws.

Other than as described above, we do not share information about your use of Connected Services with anyone else unless you ask us to.

8. Sharing your information overseas

We may share your information (which may include personal information) with organisations located overseas to support the purposes described in this policy. These may include:

• our parent company Toyota Motor Corporation in Japan and other Toyota entities overseas including in the USA; and
• our service providers that are located in, or hold data overseas including in the USA, Japan, Singapore, India, the UK, Ireland, the Philippines and Sweden.

9. Direct Marketing

We do not use personal information collected from the Services for direct marketing.

With your consent, we may use the contact information we collect through the myToyota Connect App so that the OneToyota Network (or any of its member entities, including their agents and contractors) can send you marketing about products, services, special offers, programs, promotions and events that may interest you. These marketing messages may include joint promotions with Toyota dealers or other promotion partners. We may send them to you by post, telephone, email or SMS.

The OneToyota Network is comprised of authorised Toyota dealers in Australia, Toyota Motor Corporation Australia Limited, Toyota Finance Australia Limited, Aioi Nissay Dowa Insurance Company Australia Pty Ltd (trading as Toyota Insurance), and Toyota Western Australia. These are separate organisations. If you do not want to receive marketing from a member of the OneToyota Network, you can contact that organisation at any time using the details in their privacy policy or the “unsubscribe” or opt-out option in their marketing messages.

If you do not want to receive any marketing from us, contact us using the details in section 15 “Contacting us” below, or use the “unsubscribe” option in our electronic messages. We may need to contact you to verify your identity or clarify your request before we can action it.

If the law requires us to send you information about our products or services (for example, product recalls), we will do so even if you have opted out of marketing.

10. Protecting your personal information

We may hold your personal information in digital and paper form. We take reasonable steps to protect it from misuse, loss, interference, unauthorised access, modification and disclosure.

Some of the ways we protect your personal information include:

• physical security for our external and internal premises;
• using secure servers;
• limiting access to your information to staff who need it for their role;
• using security tools to prevent unauthorised access to or damage to electronically stored information, such as identifiers and passwords, firewalls, encryption and anti-virus software; and
• limiting Connected Services to only the features you have chosen to receive.

11. Data Retention

We store, process and keep your personal information for the purposes described in this Privacy Policy. When we no longer need it, we take reasonable steps to destroy or de-identify it, unless the law requires or authorises us to keep it for longer.

12. Accessing and correcting your information

You can see what information Toyota collects as part of Connected Services at any time by visiting the “Data Consents and Terms” section of the myToyota Connect App.

You can ask us to give you access to, or correct, personal information we hold about you by contacting us using the details at the end of this policy.

If you request access to your personal information, we may charge a reasonable fee to cover the costs of providing that access. This fee only covers the cost of providing access, not the cost of making the request. Before acting on your request, we will give you an estimate of any fee and ask you to agree to it.

The Privacy Act allows us to refuse access in certain circumstances. If we refuse or restrict your access, we will write to you to explain why. You can complain about a refusal to the Office of the Australian Information Commissioner (website: www.oaic.gov.au/, telephone: 1300 363 992).

We rely on the personal information we hold about you to provide our products and services and to run our business. It is important that this information is accurate, complete, up to date and relevant. From time to time, we may ask you to confirm that your information is still correct. If you find that any personal information we hold about you is wrong, please contact us straight away and we will take reasonable steps to correct it.

13. Your responsibilities

To help us keep your personal information accurate, complete, up to date and relevant, you must:

• tell us if you sell or transfer your Toyota vehicle; and
• tell us if you bought or received your Toyota vehicle outside of the Toyota Dealer network.

If you do not tell us about a sale, purchase, acquisition or transfer of a vehicle, we may continue to send communications about that vehicle to the last known registered owner in our records.

To protect your privacy and the privacy of others, we recommend that you:

• never share your myToyota Connect App password;
• remove your vehicle from myGarage on the myToyota Connect App if you sell the vehicle or return a rented vehicle;
• tell passengers and drivers of your connected vehicle that we collect and use vehicle data to provide Connected Services; and
• if you share a Digital Key with someone else, let them know that their contact name, as it appears in your phone contact list, will be shared with us.

14. Resolving concerns

If you believe we have breached the Privacy Act, you can make a complaint. You can complain by contacting the person or department you were dealing with, or by using the contact details at the end of this policy.

We aim to respond to your complaint in writing within 30 calendar days. If we cannot do so, we will contact you to let you know how long it will take.

If you are not satisfied with our response, you can contact us to discuss your concerns, or lodge a complaint with the Office of the Australian Information Commissioner by visiting oaic.gov.au, calling 1300 363 992 or emailing [email protected].

15. Contacting us

If your enquiry is about Connected Services Privacy, you can contact us by:

• Email: [email protected]
• Telephone: 1800 TOYOTA (1800 869 682)
• Post: Toyota Australia, GPO Box 2006S, Melbourne, Vic 3001

If your enquiry is about Connected Services more generally, you can contact us by:

• Email: [email protected]
• Telephone: Toyota Connected Account Enquiries on 1800 TOYOTA (1800 869 682)

You can contact us without identifying yourself or by using a pseudonym. However, if you do not identify yourself or give us your contact details, we may not be able to respond to your query. If you contact us on behalf of another person, we will need evidence of your authority to act for them.