MCT Group respects your privacy and is committed to safeguarding the personal information of our customers and website visitors.
This Privacy Policy (“Policy”) applies to MCT Automotive Group Pty Ltd (ACN 636 285 017 / ABN 59 636 285 017) and its related bodies corporate, including MCT Wholesale Cars Pty Ltd (ACN 670 888 936 / ABN 16 670 888 936) and EZ Prestige Pty Ltd (ACN 653 962 335 / ABN 27 653 962 335) (together, “MCT Group”, “we”, “us” or “our”).
This Policy applies to all websites, subdomains and associated online services operated or controlled by MCT Group (together, “our websites”). At the date of this Policy, our websites include:
mctgroup.com.au
mctmotorsport.com.au
cars4us.com.au
carbuyersaus.com.au
buyyourcar.com.au
loans4us.com.au
ezprestige.com.au
We may add new brands and services, or consolidate or retire existing websites, from time to time. This Policy applies to all websites operated or controlled by MCT Group, whether or not specifically listed above.
We comply with the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs) contained in it. This Policy explains how we collect, hold, use and disclose your personal information, and the choices you have in relation to that information.
Where you enquire about or apply for finance through Loans4uS, or through a finance-related journey on another MCT Group website, additional handling of personal information and credit-related information is described in the applicable Loans4uS credit-related privacy policy, consent, or notice. That credit-specific document applies only to those finance-related interactions, in addition to this Policy.
The entity primarily responsible for the personal information collected through our websites and services is:
MCT Automotive Group Pty Ltd
ACN 636 285 017 / ABN 59 636 285 017
116 Holt Street, Eagle Farm QLD 4008
Depending on the brand and service you interact with, personal information may also be collected, held, used, or disclosed by one or more related bodies corporate within MCT Group in connection with that interaction. All such handling is subject to this Policy, except where a separate credit-specific privacy policy, consent, or notice applies.
The personal information we collect depends on how you interact with us. The categories below describe the typical information we collect by interaction type.
When you interact with us, including when you reserve or purchase a vehicle, request a valuation or sell your vehicle, make a finance-related enquiry, book a service or roadworthy inspection, or make a general enquiry, we may collect personal information such as your name and contact details, your address, vehicle-related details (including registration, VIN, condition and photographs), payment or settlement banking details, and the content of your enquiry.
The specific information collected depends on the nature of the interaction.
If you proceed into a finance application or finance assessment process, we may also collect additional personal information, including identity, financial, employment, and credit-related information, as described in Section 11 and the applicable credit-specific privacy documentation.
If you do not provide information that we reasonably require, we may be unable to respond to your enquiry, provide the product or service you request, or progress your transaction or finance-related process.
When you visit our websites we automatically collect:
IP address and approximate geolocation derived from it;
device type, operating system, browser and screen settings;
referring URL and pages viewed (including time and duration);
search and filter terms used on our websites;
interaction data such as button clicks, form interactions, scrolling behaviour, page navigation, and similar usage information;
server logs and security event records;
cookies and similar tracking technologies (see Section 8).
We may also receive personal information about you from:
other MCT Group brands or teams, including where your enquiry is referred internally for follow-up or further assessment;
finance application, workflow, customer relationship management, or lead management platforms used in connection with finance-related enquiries and applications;
credit reporting bodies, credit providers, aggregation partners, insurers, guarantors and related applicants, employers, landlords, real estate agents, and other persons involved in or reasonably necessary to verify, assess, or progress a finance-related enquiry or application;
vehicle listing platforms, referrers, or agents acting on your behalf;
the Personal Property Securities Register (PPSR), motor vehicle registries, and other public registers;
agents acting on your behalf (for example, an attorney under an Enduring Power of Attorney);
advertising, analytics, and other digital platform providers, including where they provide us with aggregated or pseudonymised information; and
other sources where it is reasonable and necessary to do so in connection with the products and services you have requested.
We may combine information we receive from these sources with information you provide directly to us where it is reasonable and necessary to do so in connection with the products and services you request from us.
If you provide personal information about another person to us, you should only do so where you are authorised to provide that information, and you should direct that person to this Policy.
We do not generally collect sensitive information as defined in the Privacy Act (such as information about your health, race, political opinions or religious beliefs). Credit-related personal information and credit information collected in connection with finance-related interactions is handled in accordance with this Policy and any applicable credit-specific privacy policy, consent, or notice.
If we receive personal information that we did not solicit, we will assess whether we could have collected it under the APPs. If we could not, and we are not required to retain it by law, we will destroy or de-identify it as soon as practicable. If we retain unsolicited personal information, we will handle it in accordance with this Policy and will not disclose it unless permitted or required by law.
We collect, hold and use your personal information primarily to:
respond to your enquiries and provide the products and services you have requested;
process valuations, vehicle sales, vehicle purchases, finance applications, service bookings and any other transactions;
verify your identity and meet our obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) and the National Consumer Credit Protection Act 2009 (Cth) in connection with finance-related enquiries, applications, and assessments;
communicate with you about your enquiry or transaction;
administer aftersales support, service communications, and warranty or claim-related processes;
maintain and manage our relationship with you;
undertake internal administration, reporting, record keeping, and audit functions; and
protect the safety, security, and integrity of our people, systems, websites, and business operations.
We may also use your personal information for purposes that are related to the primary purpose and that you would reasonably expect, including:
improving and personalising our products, services and websites;
conducting market research, analytics and business planning;
detecting, preventing and investigating fraud, misuse and security incidents;
managing risk and meeting internal audit and compliance obligations.
Where required by law, or where information is to be used for a purpose that you would not reasonably expect, we will only use your personal information with your consent. We will notify you of such collection and use through a note next to the relevant form, a notice on our websites, or by another reasonable means. Where consent is required, we will seek it through the relevant form, process, or notice shown at the time. Consent to receive marketing communications is described in Section 4.5.
We may use your personal information where the use is authorised or required by law, including in response to lawful requests by government agencies, regulators, law enforcement or courts.
Where permitted by law, and where we have the appropriate consent or other lawful basis to do so, we may send you marketing communications about MCT Group products, services and offers. You can opt out of marketing at any time by:
clicking unsubscribe in any marketing email;
replying STOP to a marketing SMS; or
contacting us using the details in Section 13.
Opting out of marketing does not affect transactional or service-related communications.
If you no longer wish to receive marketing communications from us, you may unsubscribe or opt out at any time using the methods above.
We may disclose your personal information to the following categories of recipient, only as necessary for the purposes described in Section 4.
Where we disclose personal information to third parties, we take reasonable steps to require them to handle that information in a manner consistent with applicable privacy obligations.
We may share personal information within the MCT Group where reasonably necessary to respond to your enquiry, provide the product or service you have requested, manage internal workflows, or support our business operations.
We use third-party service providers acting on our behalf, including providers of:
website hosting, cloud infrastructure, content delivery, DNS, and website security;
customer relationship management, lead management, form handling, workflow, and database tools;
communications, email, SMS, chat, and enquiry handling tools;
analytics, website performance, session recording, heatmapping, and user behaviour tools;
digital advertising, remarketing, audience measurement, and conversion tracking tools;
click fraud detection and campaign protection tools;
payment, banking, and settlement processing services;
vehicle listing, lead referral, and marketplace services;
vehicle appraisal, valuation, and inspection platforms, and related vehicle data services; and
marketing, web development, and related agency services.
Examples of providers used across our websites from time to time include Google, Microsoft, Meta, Cloudflare, AWS, Hotjar, Podium, Jotform, Mailchimp, Klaviyo, Zapier, Dealer Studio, EvalExpert, and relevant vehicle marketplace platforms.
Where you make a finance-related enquiry or proceed into a finance application or finance assessment process, we may exchange personal information and credit-related information with:
MCT Automotive Group Pty Ltd in its capacity as Authorised Credit Representative Number 536785;
Finance Ezy Pty Ltd (Australian Credit Licence Number 392182);
credit reporting bodies;
credit providers and lenders;
aggregation partners;
insurers;
guarantors and related applicants; and
third parties reasonably necessary to verify your identity, financial position, or application information, including employers, landlords, real estate agents, and relevant financial institutions.
Further details about the collection, use, and disclosure of credit-related personal information are set out in the applicable credit-specific privacy policy, consent, or notice.
We may disclose personal information to government and regulatory bodies, including state government agencies responsible for motor vehicle registrations, the police, the OAIC, ASIC, AUSTRAC and the courts, where required or authorised by law.
To the extent reasonably necessary to complete or facilitate your transaction or service request, we may disclose information to relevant counterparties and service participants, including insurers, transport companies, financiers settling a payout, and the buyer or seller of a vehicle.
If MCT Group sells, merges with or transfers part of its business, we may disclose personal information to the prospective buyer, merger partner or transferee, subject to confidentiality arrangements and consistent with this Policy.
Your personal information is stored in a combination of paper and electronic systems, including systems operated by our service providers. Electronic information is held on cloud and on-premise infrastructure managed under contractual security and confidentiality controls.
We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps include physical, electronic, and organisational measures such as restricted access controls, encryption in transit, network security, staff training, and other reasonable technical and organisational safeguards.
While we take reasonable steps to protect your information, no method of transmission over the internet, or of electronic storage, is completely secure.
We retain your personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, reporting, compliance, and record-keeping requirements.
We determine retention periods having regard to the nature of the information, the purposes for which it is used, and applicable legal obligations. When personal information is no longer required, we take reasonable steps to destroy or de-identify it, unless we are required or authorised by law to retain it.
Some of our service providers, including those used in connection with finance-related enquiries and applications, may operate from, store information in, access information from, or otherwise process information in jurisdictions outside Australia.
This may occur, for example, where we use cloud infrastructure, analytics, advertising, communications, form, workflow, finance-related, IT administration, support, or group reporting arrangements that involve operations, support personnel, affiliates, subcontractors, or data centres located outside Australia.
This may include storage or processing in jurisdictions such as the United States, the United Kingdom, the European Union, Singapore, New Zealand, Hong Kong, Thailand, Japan, and other jurisdictions used by our global technology providers from time to time.
Overseas access by group companies, affiliates, service providers, or support personnel is not intended to occur as a matter of routine, but may occur where required for authorised IT administration, support, reporting, security, or related operational purposes.
Where personal information is disclosed to an overseas recipient, we will take reasonable steps, where required by law, so that the recipient handles the information consistently with the APPs, unless an exception under the Privacy Act applies.
Because some of the technology platforms we use are global in nature, the jurisdictions involved may change from time to time depending on the provider’s infrastructure and support arrangements.
A cookie is a small text file placed on your device by a website. Cookies and similar technologies (web beacons, pixels, fingerprinting, SDKs) allow us and authorised third parties to recognise your device when you return, remember your preferences, understand how our websites are used, and deliver and measure advertising.
Cookies on our websites fall into the following categories:
Strictly necessary — required for our websites to function (session management, security, fraud prevention).
Performance — help us understand how visitors use our websites so we can improve them.
Functional — remember choices you make (such as your preferred location or language).
Targeting / Advertising — used to measure the effectiveness of our advertising and to deliver relevant ads on third-party sites you visit.
First-party cookies are set by the MCT Group website you are visiting. Third-party cookies are set by an external service loaded on our website (for example, an analytics or advertising provider). We do not control the data collected through third-party cookies; these are governed by the third party’s own privacy policy.
In addition to cookies, our websites may use web beacons, tracking pixels, and software development kits embedded in pages or emails. These technologies serve similar purposes to cookies and are addressed in this Section.
Depending on the website, page, and feature you use, we may use cookies and similar technologies provided by third parties for purposes such as:
website analytics and performance monitoring;
advertising, remarketing, and measurement of campaign effectiveness;
fraud prevention, click fraud detection, and website security;
chat, enquiry handling, and form completion;
session recording, heatmapping, and user behaviour analysis; and
workflow, automation, and lead handling.
These technologies may be provided by, or integrated with, analytics providers, advertising platforms, campaign tools, chat and enquiry tools, form tools, and related service providers used across the MCT Group websites.
You can manage cookies and similar technologies through your browser and, where available, through the settings or opt-out tools offered by relevant third-party providers.
Browser settings: Most browsers allow you to view, block or delete cookies. Refer to your browser’s help documentation:
Google Chrome — chrome://settings/cookies
Apple Safari — Preferences → Privacy
Mozilla Firefox — Options → Privacy & Security
Microsoft Edge — Settings → Cookies and site permissions
Industry opt-out tools for advertising cookies:
Your Online Choices Australia: www.youronlinechoices.com.au
Network Advertising Initiative: www.networkadvertising.org/choices
Digital Advertising Alliance: www.aboutads.info/choices
Provider-specific opt-outs:
Google Analytics: tools.google.com/dlpage/gaoptout
Meta (Facebook): facebook.com/settings?tab=ads
If you disable cookies, some parts of our websites may not function as intended (for example, you may not be able to use the Reserve Now or Get a Quote features).
Our websites may contain links to, or embed content from, third-party websites, platforms, or services. We are not responsible for the privacy practices of those third parties. Third-party websites and platforms are responsible for informing you about their own privacy practices, and you should review their privacy policies before interacting with them or providing them with personal information.
You have the following rights under Australian privacy law and this Policy.
You can request access to the personal information we hold about you (APP 12). We will respond within a reasonable period. We may charge a reasonable fee for retrieving extensive records, but not for making the request.
If you believe the personal information we hold is inaccurate, out of date, incomplete, irrelevant or misleading, you can ask us to correct it (APP 13).
Where lawful and practical, you have the option of interacting with us anonymously or using a pseudonym (APP 2). However, this is often not practical for vehicle purchase, sale, finance or service transactions.
You can withdraw consent for any processing that depends on consent. You can opt out of marketing at any time (see Section 4.5).
You can complain about how we handle your personal information (see Section 10).
We do not charge a fee for you to exercise any of the above rights, other than (where applicable) a reasonable fee for retrieving extensive access records.
If you believe we have breached the Privacy Act, the APPs or any registered privacy code that applies to us, please contact us first using the details in Section 12. We aim to provide a substantive response within 30 days.
If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au. If your complaint relates to credit-related information handled in connection with a finance-related enquiry or application, additional complaint avenues may also be available, including through the Australian Financial Complaints Authority (AFCA) at www.afca.org.au, as described in the applicable credit-specific privacy documentation.
Finance-related enquiries and applications submitted through Cars4Us, MCT Motorsport, Loans4uS, or another MCT Group website may be handled by MCT Automotive Group Pty Ltd, including under the Loans4uS brand, in its capacity as Authorised Credit Representative Number 536785 of Finance Ezy Pty Ltd (Australian Credit Licence Number 392182).
If you proceed into a finance application, finance assessment, or pre-approval process, including through a finance application or workflow platform used by us, we may collect additional personal information and credit-related information, including identity, financial, employment, and credit information.
That information may be collected, held, used, and disclosed for the purposes of assessing your application, verifying your identity and financial circumstances, obtaining credit reports and verification services, arranging finance and related insurance, and communicating with you about the process.
In connection with those finance-related interactions, your information may also be disclosed to Finance Ezy Pty Ltd, finance application or workflow platforms, credit reporting bodies, credit providers, aggregation partners, insurers, guarantors and related applicants, and other persons reasonably necessary to verify information or progress the application.
Further details about the handling of credit-related information are set out in the applicable credit-specific privacy policy, consent, or notice provided as part of the relevant finance-related journey.
For privacy-related queries:
Email: [email protected]
Mail: MCT Automotive Group Pty Ltd, 116 Holt Street, Eagle Farm QLD 4008
We may update this Policy from time to time. The current version is always available on our websites. Material changes will be notified by a prominent notice on our websites or by direct communication where reasonably practicable.
Last updated: 22 July 2026
