User Deletion Policy

Version 1.1 | Effective date: 21 October, 2025

User Deletion Policy

Karia Technology Pty Ltd

USER ACCOUNT AND DATA DELETION POLICY

Version 1.1

  1. Right to Request Deletion

You have the right to request deletion of your account and associated personal information at any time. We are committed to processing your deletion request in accordance with Australian privacy law and our obligations under the Privacy Act 1988 (Cth).

  1. How to Request Account Deletion

To request deletion of your account and data, you may:

  • Email us at support@karia.com.au;

  • Submit a request through your account settings in the Novated Driver application;

  • Contact us in writing at Level 22, 120 Spencer St, Melbourne, Vic, 3000.

Your deletion request must include sufficient information to verify your identity, including your full name, email address associated with your account, and any other identifying information we may reasonably require.

  1. Identity Verification

For your security and to prevent unauthorised deletion requests, we will verify your identity before processing any deletion request. This may involve:

  • Confirming access to the email address associated with your account;

  • Answering security questions;

  • Providing additional identification documents if necessary.

  1. Processing Timeframe

Once we have verified your identity, we will process your deletion request within 30 business days. You will receive confirmation via email when:

  • We have received your deletion request

  • Your identity has been verified

  • The deletion process has been completed

  1. Grace Period

After submitting a deletion request, there will be a [14-day / 30-day] grace period during which you may cancel your deletion request. During this period, your account will be deactivated but not permanently deleted. After the grace period expires, deletion will be permanent and irreversible.

  1. What Information Will Be Deleted

    Upon processing your deletion request, we will delete or anonymise:

  • Your account credentials (username, password, login information);

  • Personal identification information (name, email address, phone number, postal address);

  • Profile information and preferences;

  • User-generated content (posts, comments, uploads, messages);

  • Communication history with our support team;

  • Marketing preferences and consent records;

  • Device and usage information;

  • Payment method details (credit card information, billing addresses).

  1. Information We May Retain

Certain information may be retained for legitimate business purposes or legal compliance, including:

Legal and Regulatory Obligations

  • Financial records and transaction history required under taxation law (typically 7 years);

  • Records necessary for compliance with the Corporations Act 2001 (Cth);

  • Information subject to legal holds, court orders, or regulatory investigations;

  • Records required for dispute resolution or potential legal claims;

Legitimate Business Interests

  • Anonymised or aggregated data that cannot identify you personally;

  • Information necessary to prevent fraud or abuse of our services;

  • Records of account deletion to prevent automatic account recreation;

  • Backup copies stored in our disaster recovery systems (deleted within [90 days / 180 days]);

Third-Party Obligations

  • Information processed by third-party service providers may be subject to their retention policies;

  • We will notify relevant third parties of your deletion request where contractually obligated.

  1. Effect of Account Deletion

Once your account is permanently deleted:

  • You will no longer be able to access any services associated with your account;

  • All subscriptions and services will be terminated;

  • Any unused credits, points, or benefits will be forfeited;

  • You will not be able to recover any content, data, or information;

  • Outstanding obligations (payments, contractual commitments) will remain enforceable.

  1. Deletion of Data from Third Parties

If we have shared your personal information with third-party service providers, we will take reasonable steps to notify them of your deletion request. However, we cannot guarantee deletion of information held by third parties who operate independently of our systems.

  1. Backup and Archive Systems

Personal information may persist in backup or archive systems for up to [90 days / 180 days] following deletion from active systems. These backup copies are maintained solely for disaster recovery purposes and are not accessible for operational use.

  1. Exceptions to Deletion

We may decline or delay a deletion request if:

  • We are required by law to retain the information;

  • The information is necessary for the establishment, exercise, or defence of legal claims;

  • There are outstanding payments or unresolved disputes associated with your account;

  • We need to verify your identity and you have not provided sufficient information;

  • The request is manifestly unfounded or excessive.

If we decline your deletion request, we will provide you with written reasons and information about your right to complain to the Office of the Australian Information Commissioner (OAIC).

  1. Partial Deletion Requests

If you wish to delete specific information rather than your entire account, please specify this in your request. We will accommodate partial deletion requests where technically feasible and legally permissible.

  1. Reactivation After Deletion

Once the grace period has expired and your account has been permanently deleted, you will not be able to reactivate your account or recover any associated data. If you wish to use our services again, you will need to create a new account.

  1. Children's Data

If we become aware that we have collected personal information from a child under 18 without appropriate parental consent, we will take steps to delete that information as quickly as possible. Parents or guardians may request deletion of their child's information by contacting us using the methods outlined above.

  1. Changes to This Policy

We may update this User Deletion Policy from time to time. Any changes will be posted on our website with an updated "Last Modified" date. Continued use of our services after changes constitutes acceptance of the updated policy.

  1. Contact Us

If you have questions about this User Deletion Policy or wish to exercise your deletion rights, please contact us:

Email: support@karia.com.au
Postal Address: Level 22, 120 Spencer St, Melbourne, Vic, 3000

  1. Complaints

If you are not satisfied with how we have handled your deletion request, you have the right to lodge a complaint with:

Office of the Australian Information Commissioner (OAIC)
GPO Box 5218, Sydney NSW 2001
Phone: 1300 363 992
Email: enquiries@oaic.gov.au
Website: www.oaic.gov.au

Last Modified: 21st October 2025