Your Privacy
Privacy Policy
What we collect, why we collect it, who we share it with, and how to access, correct or complain about it.
Effective 16 August 2026
1. Who we are
Bigg Boxx Rentals is operated by Riverina Associates Pty Ltd (ABN 74 675 416 190), of 11 Jutland Way, Epping 3076, Victoria. In this policy “we”, “us” and “our” mean Riverina Associates Pty Ltd.
We are bound by the Australian Privacy Principles in the Privacy Act 1988 (Cth). This policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have.
2. What we collect
We only collect what we need to rent you a vehicle and meet our legal obligations:
- Identity and contact details — name, date of birth, email address, phone number and residential address.
- Driver licence details — licence number, issuing state or country, expiry, and photographs of the front and back of your licence.
- Identity verification documents — passport (for non-Australian licence holders) and a selfie, used to confirm the licence belongs to you.
- Booking information — pickup and drop-off depots, dates, vehicle type, extras, additional drivers and any special conditions.
- Payment information — the amount, date and status of your payments. We never see or store your full card number: card details are entered directly on our payment provider’s secure payment page.
- Business details, where you hire as a company — company name, ABN or ACN.
- Vehicle telematics — where a tracking device is fitted, its location, route of travel and related data about how the vehicle is used (see section 6).
- Technical information — device, browser and usage data collected through cookies and similar technologies (see section 7).
3. How we collect it
Mostly directly from you — when you request a quote, complete a booking, create an account, upload documents to your customer portal, sign a rental agreement, or contact us by phone, email or SMS. We may also collect information from an authorised additional driver you nominate, from your vehicle while it is on hire, and from third parties such as payment processors, credit reporting bodies (only where clause 11.4 of the rental terms applies) and toll road operators.
4. Why we use it
We use your personal information to:
- quote, take and manage your booking, and prepare and issue your rental agreement;
- verify your identity and licence, and confirm you are eligible to drive the vehicle;
- take payment, hold and refund your security bond, and issue tax invoices and receipts;
- contact you about your booking — confirmations, payment links, reminders, pickup and return details;
- manage damage, insurance claims, tolls, fines and infringements;
- recover a vehicle or an unpaid debt; and
- meet our obligations under Australian law.
We do not sell your personal information. We only send you marketing if you have opted in, and every marketing message includes a way to opt out.
5. Who we share it with
We disclose personal information only where it is necessary, and only to:
- Our payment provider — a PCI-DSS compliant payment gateway that processes card payments and refunds;
- Our messaging providers — to deliver booking and payment emails and SMS;
- Our hosting and cloud infrastructure providers — who store our database and uploaded files and secure account sign-in;
- insurers, assessors and repairers, where there is damage, theft or a claim;
- toll road operators, police and regulators, where required for tolls, fines or infringements;
- debt collectors, credit reporting bodies and lawyers, where an amount remains unpaid; and
- anyone else you have authorised, or where we are required or permitted by law.
Some of these providers store data outside Australia (including in the United States and the European Union). We take reasonable steps to ensure any overseas recipient handles your information consistently with the Australian Privacy Principles.
6. Vehicle tracking devices
Some vehicles are fitted with a tracking device. As set out in clause 15.2 of our rental terms, it records the vehicle’s location and route of travel and provides data about how the vehicle is being driven. We use this to protect and recover the vehicle, to support insurance and damage claims, and to confirm where and how the vehicle was used during your rental. You consent to this collection and use when you sign the rental agreement, and you must not tamper with or remove the device.
7. Cookies
We use cookies and similar technologies on this website. You can choose which categories you allow at any time using the Cookie Settings option in the banner at the bottom of the page.
- Strictly necessary — always active. Required for the site to work: your session, your booking in progress and security. These cannot be switched off.
- Functional — remembers your preferences, such as your chosen depot or the details of a quote you started.
- Performance — helps us understand which pages are used so we can fix and improve them.
- Targeting — used to measure and improve the relevance of our advertising.
You can also block or delete cookies in your browser settings, though parts of the booking flow may stop working if you do.
8. How we keep it safe
Your information is held in access-controlled systems. Staff accounts are individually permissioned so people only reach the parts of the system their role requires, and changes to records are restricted to administrators. Payment card data never touches our servers. No system is perfectly secure, but we take reasonable steps to protect your information from misuse, interference, loss and unauthorised access, modification or disclosure.
9. How long we keep it
We keep your information for as long as needed for the purpose we collected it, and afterwards for as long as we are required to by law — including tax and business records, and any period needed to resolve a claim, damage matter, toll, fine or debt. When it is no longer needed and we are not required to keep it, we destroy or de-identify it.
10. Accessing and correcting your information
You can see and update much of your information yourself in your customer account. You may also ask us for a copy of the personal information we hold about you, or ask us to correct it, by emailing bookings@biggboxx.com.au. We will respond within a reasonable period. If we cannot give you access or make a correction, we will tell you why in writing.
11. Complaints
If you believe we have mishandled your personal information, contact us at bookings@biggboxx.com.au or 03 8560 7038 and we will investigate and respond. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
12. Changes to this policy
We may update this policy as our services or legal obligations change. The current version is always published on this page with its effective date. Where a change is significant, we will tell you.
Riverina Associates Pty Ltd · ABN 74 675 416 190 · 11 Jutland Way, Epping 3076, Victoria · bookings@biggboxx.com.au · 03 8560 7038