Google user data (Sign in with Google)
When you choose Sign in with Google, we request the minimum OAuth scopes required for authentication: openid, email, and profile. From Google we receive your unique Google ID (sub), email address and verification status, display name, given/family name, and profile photo URL (if available). We do not request Gmail, Drive, or other sensitive/restricted scopes for basic sign‑in.
How we use Google user data
- Authenticate your account, maintain your session, and personalise your in‑app experience (e.g., show your name/photo).
- Provide support, secure our services, and comply with legal obligations.
We do not sell Google user data, use it for targeted advertising, train AI models on it, or use it for purposes unrelated to user‑facing features.
Sharing & transfers of Google user data
We do not disclose Google user data to third parties except to vetted service providers acting on our instructions (under confidentiality and security obligations), for security purposes, to comply with law, or as part of a corporate transaction.
Retention & deletion
Identity data received from Google is retained while your account remains active and as needed for security/audit logs. You may request deletion of your account/data by contacting us (see “Contact us” below). You can also revoke our access at any time via your Google Account permissions: https://myaccount.google.com/permissions.
Security for Google user data
- Encryption in transit and at rest (e.g., TLS for data in transit; provider‑managed encryption for stored data).
- Access controls (least privilege, MFA for internal access) and audit logging.
- Key/secret management, environment segregation, and vulnerability management.
Policy compliance
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Google Business Profile Data and OAuth Access
Metis Reputation, a module within the Digital Dealer platform, integrates with Google Business Profile through Google’s secure OAuth 2.0 authentication process.
When a user chooses to connect their Google Business Profile account, Digital Dealer is granted access only to the data that the authenticated user already owns or manages within their Google account.
This may include:
- Business profile account and location information
- Customer review data
- Review responses associated with those locations
This access is:
- Explicitly authorised by the user via Google OAuth
- Limited to the permissions granted during authentication
- Used solely to provide functionality within the Digital Dealer platform
Digital Dealer does not:
- Access or manage Google Business Profiles without user authorisation
- Collect or monitor data for businesses not connected by the user
- Sell, share, or distribute Google Business Profile data to third parties
Users may revoke access to their Google account at any time via their Google account settings or by disconnecting the integration within the Digital Dealer platform.
All data accessed via Google Business Profile APIs is handled securely and in accordance with applicable privacy and data protection laws.
Digital Dealer uses Google APIs in compliance with Google API Services User Data Policy, including requirements for limited use of data obtained through Google APIs.
Do we disclose your personal information to anybody?
Digital Dealer may disclose your personal information in certain circumstances.
For example: Sometimes we are required or authorized by law to disclose your personal information. For example we may disclose your personal information during the registration or transfer of a vehicle, or to an insurance company transacting Compulsory Third Party insurance. We may also disclose your personal information to the Motor Vehicle Manufacturer or Distributor to ensure the proper registration of Warranty details for the protection of the customer’s vehicle.
Ensuring your personal information is up to date
Digital Dealer relies upon the personal information we hold about you to efficiently conduct our business of providing motor vehicle sales and services. For this reason it is extremely important that the information we collect is accurate, complete and up to date.
During the course of our business relationship with you, we may ask you, from time to time to tell us of any changes to your personal information; however, you may wish to contact us at anytime to furnish us with changes to your circumstances.
Is my personal information secure?
The protection of your personal information is a priority for Digital Dealer.
We take all reasonable precautions to safeguard your personal information from loss, misuse, unauthorized access, modification or disclosure.
Digital Dealer employs a number of means to protect your personal information including:
- Restricted access to personal information
- We enter into confidentiality agreements with employees, contractors and third party organizations
- Regular reviewing and testing of our technology in order to improve the levels of security
- We encrypt all data in transit using TLS and encrypt data at rest using provider‑managed encryption. We enforce role‑based access control and least‑privilege access for staff, with MFA and audit logging for administrator actions.
Can I access the personal information DIGITAL DEALER holds about me?
You may request access to any of the personal information we hold about you.
In most cases, a summary of personal information such as your name and address details, contact telephone numbers are freely available to you by contacting any one of our branches.
All requests for access to personal information will be handled as quickly as possible and we shall endeavour to process any request for access within 30 days of having received the request. For requests for information which may be held in archives, a fee may be charged to cover the cost of retrieval and the supply of the information to you.
Digital Dealer may be required by law to retain your personal information for a period of time after you have finished a relationship with us. After the required time has passed, we will attend to the destruction or deletion of your personal information.
If you would like to access the information we hold about you or more information on our privacy policy, please contact us on 1300 184 001 or go to this page