Privacy Policy

KVC Technology Pty Ltd (ACN 698 813 062), trading as Protunes Engine Management and Protunes ("we", "us", "our"), is committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains how we collect, use, disclose, and safeguard your data.

1. What We Collect

When you register or use the platform we may collect:

• Company name, contact name, email address, and phone number
• Billing and payment information (processed by Stripe — we do not store card details)
• Vehicle and ECU data submitted with tuning orders
• Communications between you and our tuners via the messaging panel
• Usage data (pages visited, actions taken) for platform improvement
• A record of any contact-form submission our automated spam filter stops or marks as suspicious. That record holds the name, email address and phone number given on the form, the sending IP address, an excerpt of the message, and the reason the filter acted. It is kept so we can check the filter is not wrongly stopping genuine enquiries, which means it also captures submissions from real customers the filter merely flagged. It is used for nothing else, is visible only to our staff, and is deleted after 30 days

2. How We Use It

We use your information to:

• Create and manage your dealer account
• Process tuning orders and deliver calibration files
• Send quote, payment, and order completion notifications
• Respond to support enquiries
• Arrange delivery of physical goods, including contacting you by phone about a consignment
• Prevent payment fraud — we assess completed orders for signs of stolen-card use before goods are dispatched, which may include verifying that the contact phone number you supplied is a real, allocated number and what type of line it is. This checks the number only; it does not identify you, retrieve your location, or contact you
• Protect our contact forms from automated abuse — we apply automated checks to submissions made through the enquiry, review and password-reset forms so that bulk spam does not bury genuine enquiries. Most of these checks happen entirely on our own servers. We keep a short-lived record of what the filter stopped or flagged (see above) so that we can find and correct mistakes it makes. Where the additional bot check described below is enabled, your browser also completes a verification with Cloudflare
• Comply with legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-Party Services

We use the following processors to deliver our services:

• Stripe — payment processing. Subject to Stripe's Privacy Policy.
• Email delivery — transactional emails (order notifications). No marketing lists.
• Analytics — where enabled, privacy-focused analytics tools (such as Google Analytics and Microsoft Clarity) measure aggregate usage — pages visited, clicks and scrolling — to improve usability. These providers are global and some data may be processed overseas. We do not use analytics for advertising.
• Phone number verification — where enabled, we check a contact phone number supplied with an order against carrier records using Twilio (subject to Twilio's Privacy Notice), solely to detect payment fraud before goods are dispatched. Only the phone number is sent — never your name, email address, delivery address, order contents or card details. Twilio is a United States company, so this is a disclosure of personal information overseas within the meaning of APP 8. We disclose no other personal information to this provider and use it for no other purpose.
• Bot protection on our forms — where enabled, our public enquiry, review and password-reset forms use Cloudflare Turnstile to distinguish people from automated scripts (subject to Cloudflare's Privacy Policy). When it is enabled, loading a page that carries one of those forms discloses your IP address, browser characteristics and interaction signals to Cloudflare for that check — this happens when the page loads, before you submit anything, and whether or not you go on to send the form. Pages without one of those forms do not contact Cloudflare for this purpose at all. Cloudflare is a United States company, so this is a disclosure of personal information overseas within the meaning of APP 8. Turnstile does not use this data to build an advertising profile and sets no advertising cookie. We disclose nothing else to it — not your name, email address, message, order contents or card details — and use it for no purpose other than telling a person from a script. If it is not enabled, no visitor data leaves our servers for this purpose at all.
• Reviews of your purchase — where enabled, the order confirmation page offers you the choice to take part in Google Customer Reviews (subject to Google's Privacy Policy). When it is enabled, loading that page contacts Google (disclosing your IP address and browser details) and passes Google's opt-in module your email address, your order number, the delivery country and the date we expect your order to arrive, so that it can ask whether you would like to take part. Google emails you once, after delivery, only if you opt in; your rating may then appear as a seller rating on Google. We do not share your name, delivery address, order contents or card details. Google is a United States company, so this is a disclosure of personal information overseas within the meaning of APP 8. You can decline on the confirmation page, and Google's email lets you opt out. We may also email you once, a week or more after dispatch, to invite a review of the product on this site; that message carries an unsubscribe link, and we never ask twice.

4. Data Security & Limitation of Liability

We implement industry-standard measures to protect your data, including HTTPS encryption, secure file storage, and access controls. Notwithstanding the above, the Customer acknowledges that no method of electronic transmission or storage is 100% secure, and Protunes cannot guarantee absolute security of data transmitted over or stored via the internet.

To the maximum extent permitted by law, Protunes excludes all liability for any loss, damage, harm, or consequential loss arising from a data breach, unauthorised access, or inadvertent disclosure of personal information, except where such liability cannot lawfully be excluded under the Privacy Act 1988 (Cth).

Where we become aware of an eligible data breach within the meaning of Part IIIC of the Privacy Act 1988 (Cth) (the Notifiable Data Breaches scheme), we will assess and notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by law.

5. Vehicle & Calibration Data

In connection with calibration orders, we collect and store vehicle-specific data including ECU files, calibration maps, and vehicle specifications submitted by the Customer. This data is used solely to deliver the ordered calibration service.

We implement access controls to restrict calibration data to authorised staff only. However:

• The Customer acknowledges that no digital storage system is immune from breach or failure;
• Protunes is not liable for any loss, commercial harm, or consequential damage arising from the inadvertent disclosure of vehicle data, ECU files, or calibration files, except where such liability cannot lawfully be excluded;
• Calibration files and vehicle data submitted to Protunes are not shared with third parties except as required to deliver the ordered service (e.g. assigned tuner staff), or as required by law.

6. Data Retention

Order records and associated files are retained for a minimum of 7 years to comply with Australian tax and business record-keeping requirements. Account data is retained while your account is active and for 12 months after closure.

7. Your Rights

Under the Australian Privacy Principles you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or outdated information
• Make a complaint about how we handle your information

To exercise any of these rights, contact us using the details below.

8. Cookies

We use session cookies for authentication and security. Where analytics are enabled, we also use analytics cookies (see section 3) to measure how the site is used; we do not use tracking or advertising cookies for marketing. You may disable cookies in your browser, but this will prevent you from logging in.

9. Complaints

If you believe we have breached the Australian Privacy Principles you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

10. Contact

KVC Technology Pty Ltd trading as Protunes Engine Management
Office : 16 Somerton Park Dr, Campbellfield 3061
Melbourne, Australia
Email: [email protected]