Privacy policy
In effect from 28 August 2026
This explains what we collect, why we collect it, where it lives, how long we keep it, and what you can ask us to do with it. We have tried to write it so you can actually finish it.
Who we are
mycarcheck is an Australian vehicle history checking service, operated by Fairgo Logistics (ABN 94 279 467 365). Fairgo Logistics is the APP entity responsible for the information described here, and is the entity you deal with when you buy a report.
Contact: use our contact form. We do not publish an address here. One printed on a public page is harvested and resold within days, and the form reaches the same people. Ask and we will give you a postal address.
What we collect
Only what the service needs to work. In practice that is:
| What | When | Why |
|---|---|---|
| Registration plate and state, or a VIN | You type it into a search | It is the question you are asking us |
| Email address | At checkout, or when you create an account | To send your report, and to attach it to your account |
| Name | If you give one at checkout or in your account | To address you properly on receipts and email |
| Payment details | At checkout | Handled entirely by our payment provider (see below) |
| IP address and a session identifier | Automatically, on every request | To stop abuse of the free checks, and to keep your purchase attached to your browser |
| Records of reports you opened | When you view or download one | So we can answer questions about who accessed a report, including yours |
You do not need an account. A free check asks nothing of you at all, and a report can be bought as a guest. We need an email address to send it to, and nothing else. An account exists so you can come back to a report you have already paid for, not because we need one to sell you anything.
Some things we deliberately do not do:
- We never see your card number. Payment is handled on our payment provider’s own page. We hold a token and enough to show you “Visa ending 4242”, and nothing in our systems can charge a card.
- We do not run advertising or analytics trackers. There is no Google Analytics, no advertising pixel and no third-party session recorder on this site. The single exception is described under “the contact form” below, and it runs on that one page.
- We do not put your plate or VIN in a web address. Result pages are reached by an opaque reference, so a shared link or a browser history entry does not disclose the vehicle you searched.
- We do not send vehicle data to artificial intelligence tools. This is a contractual prohibition as well as our own position.
Where your information is held
In Australia. All of our infrastructure (databases, storage, backups, logs and the identity system that holds your sign-in) runs in the Sydney region, and our systems are built to refuse to start rather than run elsewhere.
Three exceptions, all narrow, all worth naming:
- Payments. Our payment provider operates internationally. We send them an order reference and an amount. They never receive a plate, a VIN or any part of your report.
- Your own inbox. When we email you a report, it goes wherever your mail provider keeps it, which may be outside Australia. That is a consequence of sending you your own purchase, and you can ask us to send a link only.
- Our home page. The page at mycarcheck.com.au is served by an international hosting company. It sees the request (your IP address and which page you asked for) and nothing else, because that page holds no search, no report and no account. Everything you actually do here runs on our Australian infrastructure.
- Bot screening. We use Cloudflare Turnstile to screen automated scripts and protect public lookups without tracking individuals or harvesting data for advertising. Cloudflare’s Turnstile Privacy Addendum and Terms of Service apply.
Who else touches it
| Who | What they see | Where |
|---|---|---|
| Our cloud provider | Everything, as our infrastructure | Australia only |
| Our payment provider | Order reference, amount, your email and card (never vehicle data) | International |
| Official Australian vehicle registries | The plate or VIN you asked about, and that we asked on your behalf | Australia |
| Your mail provider | Whatever we email you | Wherever you keep your email |
| Our home page host | The request for that one page: an IP address, nothing else | International |
| Bot protection (Cloudflare Turnstile) | Challenge tokens to screen automated scrapers (never vehicle or account data) | International |
We do not sell your information, and we do not disclose it to anyone else except where the law requires it.
How long we keep it
| What | How long | Why |
|---|---|---|
| Your report | 365 days from the search | So you can open it again. After that it is deleted |
| A guest link to a report | 30 days | A link sitting in an inbox weakens as a credential over time |
| Your account details | Until you delete your account | It is your account |
| Orders, receipts and payment records | 7 years | Australian tax law requires it |
| Records of searches we made on your behalf | 7 years | Required by our agreements with the registries, and how a dispute about a search gets answered |
A report is a snapshot of a moment. Registries change constantly, so an old report describes the day it was run and not today.
What you can ask us to do
- See what we hold. Your account has a one-click export that returns your details, orders and reports as a file.
- Correct it. Tell us and we will fix it. If the error is in what a registry holds, we will tell you that too, and we are obliged to report it to them.
- Delete it. Deleting your account removes your details, empties your reports, and detaches any saved card at our payment provider.
What deletion cannot reach, and we would rather say so than surprise you: receipts and the records of searches made on your behalf. We are required to keep those for seven years. What survives is a financial and audit record, not a profile of you, and it is not used to market to you or to answer anyone else’s question.
A report we have already emailed you is yours. It sits in your inbox and we have no way to reach it. Deleting your account deletes our copy, not the one you were sent.
The contact form
Our contact form is protected by Google reCAPTCHA, which checks that a submission came from a person rather than a script. To do that, Google receives your IP address and information about how you interacted with the page, and may set cookies. That processing happens outside Australia and is governed by Google’s Privacy Policy and Terms of Service.
It runs on the contact page and registration checks to safeguard free previews against automated scraping. It never sees a purchased report or your payment details.
Security
Reports are readable only by the account that owns them or by someone holding the link we issued, and every view is recorded. Access to our systems by our own staff is individually identified, protected by two-factor authentication, and logged.
If something goes wrong that puts your information at serious risk, we will tell you and notify the Office of the Australian Information Commissioner, as the notifiable data breach scheme requires.
If you are unhappy
Tell us through the contact form and we will answer within 30 days. If our answer does not satisfy you, you can take the matter to the Office of the Australian Information Commissioner at oaic.gov.au. You do not need our permission, and you can go to them directly.
Changes to this policy
If we change it, we will update the date at the top. If a change materially affects what we do with information we already hold, we will email account holders rather than relying on you to notice.
See also our terms of service.