Privacy policy
Last updated 24 October 2026 · applies to CarPay Rentals at rentals.apaycar.com
1. Scope
This policy explains how we handle personal information collected through the CarPay Rentals marketplace, consistent with the Australian Privacy Principles in the Privacy Act 1988 (Cth). The marketplace is operated by KyriTech Information Technology Pty Ltd (ABN 52 701 119 351), and that company is the entity responsible for the personal information described below. Contact: info@kyritech.com.
2. What we collect
- Enquiry details you give us: your name, phone number, and — if you choose to provide them — your email address and a message, together with the listing you enquired about and the time you submitted it.
- Waitlist details you give us: your email address and — if you choose to provide them — the suburb you are looking in and the most you can pay a week, together with the time you joined.
- Technical information: standard web server and security logs (such as IP address and browser type) generated when you load a page. These are used to keep the service running and to limit abuse, including rate-limiting repeated enquiry submissions.
- Usage statistics: CarPay Rentals uses Vercel Web Analytics, which sets no cookies. It counts page views and four actions — a search, a listing being opened, a tap on Enquire, and an enquiry being sent — with the page address (search filters removed), the listing or store involved, and, for a search, the suburb typed in and how many rideshare platforms were ticked. Vercel also reads general details from the request, such as country, browser and the referring site. It never receives your name, phone number, email address or message. Visits are told apart by a hash that Vercel discards after 24 hours, and we see the figures only as totals.
We do not ask for a licence number, date of birth, financial details or identity documents on this site, and you should never send them through an enquiry message. This site does not use advertising or tracking cookies, and you do not need an account to browse or enquire.
3. Why we collect it, and what we do with it
We collect your enquiry details for one purpose: to pass them to the operator whose listing you enquired about, so that operator can contact you. We also use them to notify that operator, to keep a record of the enquiry, and to detect misuse of the enquiry form.
If you join the waitlist, we use your email address for one purpose: to tell you when a listing matching what you asked for is published here. Suburb and weekly budget are optional, and are used to decide what counts as a match. We also count them in aggregate — as numbers, with nothing that identifies you attached — so we can tell operators where drivers are waiting and at what price. We do not send marketing to the waitlist.
4. Who we share it with
- The operator of that listing — and only that operator. Your enquiry is not distributed to other operators, and we do not sell or rent personal information to anyone.
- Nobody, in the case of waitlist details. Your waitlist email, suburb and budget are not passed to operators or to anyone else. What an operator may be shown is a count — how many drivers are waiting in an area, or under a weekly price.
- Service providers who host the site and store the data on our behalf (our hosting and database providers), under obligations to protect it.
- Where required by law, or to protect someone’s safety or our legal rights.
Once an operator has your details, their own handling of that information is their responsibility. What they do with it after you make contact is governed by their arrangements with you.
5. Overseas storage
Our hosting and database providers may store or process data on servers located outside Australia. We take reasonable steps to ensure providers we use handle personal information consistently with the Australian Privacy Principles.
6. Security and retention
Data is transmitted over encrypted connections and access is restricted to the relevant operator and to our administrators. No system is perfectly secure, but we take reasonable steps to protect information from misuse, loss and unauthorised access. We keep enquiry records only for as long as they are needed for the purpose above and for our record-keeping obligations, then delete or de-identify them. Waitlist records are kept until you ask to come off the list, or until they are no longer needed for the purpose above, and are then deleted or de-identified.
7. Access, correction and deletion
You can ask us what personal information we hold about you, ask us to correct it, ask us to delete an enquiry you sent, or ask us to take you off the waitlist. Email info@kyritech.com from the address you used, or tell us the phone number you submitted, and we will respond within a reasonable period. If an operator already holds a copy of your enquiry, you may also need to contact them directly.
8. Complaints
If you think we have mishandled your personal information, email info@kyritech.com and we will investigate and reply. If you are not satisfied with our response, you can refer the matter to the Office of the Australian Information Commissioner.
9. Changes to this policy
We may update this policy. The version published here applies from the date shown at the top of this page.