Last updated 30/09/2026
BENDA Moto Australia Pty Ltd (Motor Dealer Licence 4938092) — “BENDA”, “we”, “us” — collects personal information in order to sell, register, deliver and service motorcycles. This policy explains what we collect, why, who we give it to, and how you can see it or have it corrected. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
1. What we collect
Depending on how you deal with us, we may collect:
- Who you are — name, date of birth, and for business buyers a company name, ABN or ACN.
- How to reach you — email address, phone number, residential address, and the address where the motorcycle will be garaged if that differs.
- Your driver licence — licence number, issuing state, expiry date, and photographs of the front and back of the card. We need these to register a motorcycle in your name and to confirm you are licensed to ride one before a test ride.
- Your purchase — the vehicle, the contract, the settlement figures, payments and refunds, trade-in details, and the documents generated along the way.
- Signatures and their audit trail — when you sign electronically we record the signature, the time, your IP address and your browser's user agent, so the signature can be shown to be genuine.
- Test rides — licence details, the agreement you sign, odometer readings, and photographs of the motorcycle's condition before and after.
- Your dealings with us — enquiries, the email conversation, notes our staff make, whether you opened an email we sent you, and (where you have consented) the pages you view and the motorcycles you configure on this site.
- Community photos — if you post a photo to our community page, we keep the photo, your caption, the username you chose, and a record that you agreed to it being published (the date, your IP address and your browser's user agent). See section 5.
We never hold your card number. Card payments are captured directly by our payment provider; all we keep is a reference to the transaction.
2. How we collect it
Usually from you — a form on this site, an order, a test-ride booking, an email, a phone call, or a conversation in one of our yards. Our staff may scan your licence on a device to save you reading it out. We also collect information from a trade-in you offer us, and from public registers such as the PPSR when we check a vehicle.
If someone else gives us your details — a finance broker, a family member buying for you — we'll treat them under this policy and tell you we hold them if you ask.
3. Why we collect it, and what we do with it
- to answer your enquiry and prepare a quote;
- to sell you a motorcycle and prepare the contract and tax invoice;
- to register the motorcycle in your name and complete the statutory forms your state transport authority requires;
- to take payment, and to issue refunds;
- to arrange delivery, warranty, insurance and finance where you ask us to;
- to confirm you are licensed before a test ride;
- to service and support the motorcycle afterwards, including warranty and recalls;
- to meet our obligations as a licensed motor dealer, and any other legal obligation;
- with your consent, to send you news and offers.
If you don't give us what we ask for, we may not be able to sell you a motorcycle, register it, or let you ride one — a registration form with fields missing is rejected by the transport authority.
4. Website activity and cookies
Some cookies are essential: they keep you signed in to your account and remember your privacy choice. These are always set, because the site cannot work without them.
We also keep an anonymous count of visits — the page, the day, the kind of device, and the website you arrived from, if any. No cookie is used for this and nothing is stored that identifies you. To tell one visit from another we use a scrambled code worked out from your network address, which changes every day and cannot be turned back into your address; your address itself is never stored. That means we can see how many people came and what they read, and we cannot see that it was you, or connect today's visit to yesterday's. Because nobody is identified, this is not personal information and we don't ask permission for it.
Beyond that, we ask before we track you. When you first arrive we ask whether you're happy for us to record the pages you visit and the motorcycles you configure against your own record. If you agree, and you later identify yourself — by making an enquiry, booking a ride or placing an order — that activity is linked to you so the person looking after you can see what you've been considering.
If you decline, nothing is recorded against you, no visitor cookie is set, and the site works exactly the same — only the anonymous count above continues. You can change your mind at any time using the Cookie choices link in the footer.
If you agree, we also use the Meta Pixel. Meta (the company behind Facebook and Instagram) places a cookie that tells it which of our pages you visit and which bikes you look at, so we can see which of our ads work and show our ads to people likely to be interested. If you then book a test ride, we also tell Meta directly from our own systems — through its Conversions API — that a booking was made, sending your email address and phone number only in a scrambled (hashed) form it can match to an account but we cannot turn back, together with your network address and browser type. Meta handles this under its own privacy policy and may process it overseas. If you decline, the pixel is never loaded and nothing about you is sent to Meta.
Our emails tell us if you opened them. An email we send you carries a small invisible image, and a link in it goes through our own website before taking you where you were going. So we can see roughly when you opened it and whether you pressed a link, which is how the person looking after you knows their quote or their contract actually reached you.
It is not reliable, in both directions, and we would rather say so than have you assume otherwise. Many mail apps block images by default, so plenty of the emails you read will look unopened to us; others load images the instant a message arrives, so an email you have never looked at can look opened. Nothing here tells us what you did with the email, how long you spent on it, or where you were.
If you would rather we could not see it at all, turn images off in your mail app— that stops it, and the email still reads perfectly. You can also ask us to destroy what we already hold: see section 8. We keep this for our own emails only, and we never buy or receive this kind of information about you from anybody else.
5. Who we give it to
What you post to our community page is public. If you choose to post a photo, it appears on this website for anyone to see, beside the username you chose. It does not carry your name or your contact details. We check every photo before it appears, and you can remove one at any time from your account — but a photograph that has been public may have been copied or indexed by others while it was up, and we cannot undo that.
Otherwise we disclose personal information only where we need to:
- State transport authorities — to register and transfer motorcycles.
- Our payment provider — to take card payments and process refunds.
- Finance and insurance partners — only when you ask us to refer you.
- Freight and delivery providers — to get the motorcycle to you.
- The manufacturer — for warranty claims, parts and safety recalls.
- Our service providers — the companies that host our systems, store our files and send our email, under obligations of confidentiality.
- An artificial-intelligence provider — we use an AI service to help our staff draft vehicle advertisements and read our own sales figures. We do not send your personal information to it, and it is not used to make decisions about you.
- Meta — only if you accept cookies: the pages and bikes you view, and that you booked a test ride (see section 4).
- Others — where you agree, or where the law requires or permits it.
We do not sell your personal information.
6. Information sent overseas
Our database, our file storage — including your licence photographs and signed documents — and the application itself are hosted in Australia, in Sydney.
Some of our service providers still operate outside Australia, including in the United States: our payment processor, our email delivery provider, the push-notification service used by our staff app and, if you accept cookies, Meta. Where we disclose your information to them, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.
The BENDA owners app and our online service history service run on a separate database hosted in Japan. When your motorcycle is handed over we record its VIN there so you can claim it in the app, and when we service it we publish the date, the distance shown on the odometer and what was done. We do not send your name, your contact details or what the work cost.
7. How we keep it safe
Access to our systems is restricted to staff who need it, controlled by individual logins and permissions, and protected by two-factor authentication for staff accounts. Documents and identity images — including your licence photographs — are held in private storage that is not publicly readable, and links to them expire.
Community photos are the exception, and deliberately so: they are held in public storage because the page they appear on is public. Nothing else is.
No system is perfectly secure. If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.
8. How long we keep it
We keep records of a sale for as long as the law requires us to as a licensed motor dealer — contracts, invoices and statutory forms are kept for years, not months, and we can't delete them on request while that obligation runs.
Information we hold for no continuing reason is destroyed or de-identified. Identity images in particular are held only while there is a reason to hold them: you can remove a licence photograph yourself from your account at any time, and doing so deletes the file rather than hiding it.
If you ask us to erase what we hold, we destroy your licence images, your browsing history and the record of which of our emails you opened. We keep the sale itself — the contract, the invoice, the statutory forms — and the fact that we emailed them to you, because those are the records the law requires us to hold on to.
9. Seeing your information, and correcting it
You can ask us for a copy of the personal information we hold about you, and we'll provide it unless the law allows us to refuse — in which case we'll tell you why.
If something is wrong, tell us and we'll fix it. Much of it you can correct yourself: your name, contact details, address and licence details are all editable in your account, and correcting them there is the fastest way to keep your registration paperwork right.
10. Marketing
If you subscribe, we'll send you news about our motorcycles. Every message has an unsubscribe link, and you can also just ask us to stop. Unsubscribing from marketing doesn't stop the messages we have to send about an order you've placed.
11. If you're not happy
Tell us first — email sales@bendamoto.com.au or call 1800 023 632, and mark it for the attention of our Privacy Officer. We'll acknowledge your complaint and aim to resolve it within 30 days.
If we can't resolve it between us, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
12. Changes to this policy
We'll update this page when our practices change, with the effective date at the top.