Last updated 7 October 2026
Circle Two Group Pty Ltd (ABN 41 642 601 241), trading as Wipers Direct (“Wipers Direct”, “we”, “us” or “our”), values your privacy. This Privacy Policy explains how we collect, hold, use and disclose your personal information, and how you can access, correct or complain about it, in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Key points
- We collect the information needed to process orders, provide support and market to you. We never sell your personal information.
- We never store your full card details. Card payments are processed by Stripe.
- We use cookies and tracking pixels for analytics and retargeted advertising, and you can opt out at any time.
- You can ask to access or correct your information, or make a complaint, at no cost.
1About this policy
This policy applies to personal information collected by Wipers Direct through wipersdirect.com.au (the “Site”), our marketing emails and SMS, our social media pages, our customer support channels and employment applications.
“Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable.
This policy is available free of charge on the Site. If you would like a copy in another form, contact us and we will take reasonable steps to provide it.
2What personal information we collect
The kinds of personal information we collect and hold include:
| Type | Examples |
|---|---|
| Identity and contact details | Name, delivery and billing address, email address and phone number. |
| Order and transaction information | Products ordered, vehicle make and model, order history, delivery details and payment status. |
| Limited payment information | Payment method and, for cards, the card type and last four digits. We never receive or store your full card number. |
| Account information | Login ID and account preferences, if you create an account. |
| Customer support records | Messages, photos and videos you send us, for example for returns or warranty claims. |
| Marketing preferences | Whether you have subscribed to or unsubscribed from our emails or SMS. |
| Technical and browsing information | IP address, browser type, device information, pages viewed and other Site usage data collected through cookies and tracking pixels. |
| Advertising interaction data | Whether you have viewed or clicked our ads on third-party platforms. |
| Email and SMS engagement data | Whether you open our marketing emails or click links in our emails and SMS. |
| Reviews | Reviews, ratings and comments you choose to submit. |
| Employment applications | Your resume, work history and referee details, if you apply for a role with us. |
We do not intentionally collect sensitive information, such as health information, about our customers. If you choose to include sensitive information in a message to us, we will only use it for the purpose you provided it.
We do not adopt, use or disclose government related identifiers, such as tax file numbers or driver licence numbers, as our own identifier of you.
3How we collect personal information
We collect personal information directly from you when you:
- place an order or create an account on the Site;
- contact us through our Contact page, by email, by message on social media or otherwise;
- subscribe to our emails or SMS;
- make a return, guarantee or warranty claim;
- leave a review; or
- apply for a job with us.
We also collect information automatically through cookies and tracking pixels on the Site and in our marketing emails, and through the following advertising and analytics platforms:
- Google (Google Ads and Google Analytics 4);
- Microsoft (Microsoft Advertising);
- Meta (Facebook and Instagram);
- TikTok;
- Reddit; and
- OpenAI (ChatGPT advertising).
We may also receive information about you from our service providers, such as payment providers confirming a payment, couriers confirming delivery, and review platforms.
If we receive personal information we did not ask for and could not have collected under the APPs, we will destroy or de-identify it as soon as practicable, where lawful and reasonable to do so.
If you do not provide the information we ask for, we may be unable to process your order, deliver your Products, assess a claim or respond to your enquiry.
4Why we collect and use personal information
We collect, hold and use personal information to:
- process, deliver and support your orders, including payment and delivery;
- provide customer support and handle returns, guarantee and warranty claims;
- send transactional messages, such as order confirmations, tracking updates and installation videos;
- send marketing communications, in line with your preferences;
- run retargeting and remarketing campaigns based on how you interact with the Site, our ads and our emails;
- invite you to review your purchase;
- improve the Site, our Products and our services through analytics;
- detect and prevent fraud and misuse of the Site;
- assess employment applications; and
- comply with our legal obligations, such as tax and consumer law, and resolve disputes.
We only use or disclose personal information for the purpose we collected it, a related purpose you would reasonably expect, or as otherwise permitted or required by law.
We do not sell your personal information. We disclose it to the service providers and platforms listed in clause 7, including for marketing and advertising purposes, but never in exchange for payment.
5Cookies, tracking pixels and retargeting
We use cookies and tracking pixels, including those provided by Google, Microsoft, Meta, TikTok, Reddit and OpenAI, to collect information such as:
- pages visited, actions taken and time spent on the Site;
- device, browser and operating system details;
- whether a marketing email has been opened or a link in it clicked; and
- whether you have viewed or interacted with our ads on those platforms.
We use this information to:
- make the Site work and remember your preferences, such as items in your cart;
- show you relevant ads on Google, Microsoft (including Bing), Meta, TikTok, Reddit and ChatGPT based on your previous interactions with us;
- measure how well our marketing performs; and
- improve the Site and your experience.
You can decline or limit tracking at any time, at no cost and without logging in, by:
- adjusting your browser’s cookie settings;
- using Google’s My Ad Center or the Google Analytics opt-out add-on;
- using Microsoft’s ad settings;
- using Meta’s ad preferences;
- using the ad settings in your TikTok, Reddit or ChatGPT account; or
- unsubscribing from our marketing emails.
Declining tracking will not stop you browsing the Site or placing an order. Some features, such as a saved cart, may not work, and the ads you see may be less relevant.
We share only the minimum information needed with each platform, we do not knowingly share sensitive information through these technologies, and we review our use of them periodically.
6Direct marketing and opting out
We may send you marketing emails and SMS about our Products, offers and news where you have subscribed or where permitted by law. We comply with the Spam Act 2003 (Cth).
You can opt out at any time, free of charge:
- Email: use the unsubscribe link in any marketing email.
- SMS: follow the opt-out instructions in any marketing SMS.
- Retargeted ads: use the tools in clause 5.3.
- Any channel: contact us or email [email protected].
We will process opt-out requests promptly, and within 5 business days for email and SMS. Opting out will not stop transactional messages about your orders, returns or claims.
You can ask us where we obtained your personal information for direct marketing, and we will tell you unless it is impracticable or unreasonable to do so.
7Who we disclose personal information to
We may disclose personal information to:
- Payment providers: Stripe, PayPal and Afterpay, to process payments and screen for fraud;
- Logistics providers: our Melbourne third-party logistics warehouse and our couriers (Australia Post, StarTrack, Couriers Please and Aramex), to pack and deliver orders;
- Customer support providers: such as Freshdesk, to manage and respond to your enquiries and claims;
- Marketing providers: such as Klaviyo for email and SMS, and Reviews.io for customer reviews;
- Advertising and analytics platforms: Google, Microsoft, Meta, TikTok, Reddit and OpenAI, for the purposes in clause 5;
- Other service providers: who host the Site and help us with accounting and IT;
- Business partners: organisations providing products or services marketed under the Wipers Direct brand;
- Professional advisers: such as our lawyers and accountants;
- Authorities: government agencies, law enforcement or regulators, where required or authorised by law; and
- Others with your consent: any person or organisation you have agreed we may disclose your information to.
We require our service providers to handle personal information only for the services they provide to us and to protect it appropriately.
If our business, or part of it, is sold or restructured, personal information may be transferred to the new owner, who will be bound to handle it in line with this policy.
8Overseas disclosure
Some of the providers in clause 7, including our advertising and analytics platforms, payment providers, and customer support, email, SMS and review platforms, store or process personal information outside Australia. Your personal information is likely to be held or processed in Australia, the United States and the United Kingdom, among other countries where these providers or their data centres operate.
Before disclosing personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the APPs, including by reviewing their published privacy and data protection commitments. Privacy laws in those countries may differ from Australian law.
9Anonymity and pseudonyms
You can browse the Site and make general enquiries without identifying yourself, or by using a pseudonym.
To place an order, deliver Products or assess a return or warranty claim, we need your name, contact details and delivery address, so we cannot deal with you anonymously for those purposes.
10Storage, security and retention
Personal information is stored electronically on secure systems operated by us and our service providers.
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. These include secure servers, SSL encryption across the Site, access controls and regular security reviews. Card payments are processed by Stripe, and we never store your full card details.
No method of transmitting information over the internet is completely secure. While we take reasonable steps to protect your information, we cannot guarantee the security of information you send to us online.
We keep personal information only for as long as we need it for the purposes in this policy or to meet legal obligations. For example, we keep order and transaction records for at least 5 years to meet Australian tax record-keeping requirements.
When we no longer need personal information, we take reasonable steps to destroy or de-identify it.
11Data breaches
If we suspect a data breach, we will act promptly to contain it and assess whether it is likely to result in serious harm to anyone affected.
If a breach is likely to result in serious harm, we will notify affected individuals as soon as practicable, tell them what steps they can take to protect themselves, and notify any regulator where required by law.
12Automated decisions
When you pay on the Site, our payment providers (Stripe, PayPal and Afterpay) use automated fraud screening systems that may block or decline a payment without human review, for example where a card or transaction appears suspicious.
These systems may use information such as your name, email address, billing and delivery address, card or account details, IP address, device and browser information, and order details.
If your payment is declined, you can try another payment method or contact us, and we will help where we can. Each payment provider’s own privacy policy and terms also apply to its fraud screening.
Other than this payment screening, Wipers Direct does not use computer programs to make decisions using your personal information that could reasonably be expected to significantly affect your rights or interests.
13Accessing and correcting your personal information
You can ask to access the personal information we hold about you, or ask us to correct it if you think it is inaccurate, out of date, incomplete, irrelevant or misleading. You can update some details yourself in your account on the Site.
To make a request, contact us or email [email protected]. We may need to verify your identity before acting on it.
We will respond within 30 days. There is no charge to make a request. If providing access involves significant cost, we may charge a reasonable fee, and we will tell you before proceeding.
If we refuse access or correction, we will tell you why in writing, unless it would be unreasonable to do so. If we refuse a correction, you can ask us to attach a statement to your information noting that you believe it is incorrect.
14Complaints
If you believe we have mishandled your personal information, please contact us or email [email protected] with details of your concern.
We will acknowledge your complaint within 5 business days, investigate it, and give you a written response within 30 days.
15Changes to this policy
We may update this policy to reflect changes in our practices, our use of new advertising or analytics platforms, or the law. The updated policy will be published on the Site with a new “Last updated” date.
16Contact us
For privacy questions, requests or complaints, contact us or email [email protected].