Yloodrive Privacy Policy - Your Privacy is Important to Us

Effective date: 21st May 2026

This privacy policy explains how YLOO handles personal information for all current and future versions of the YLOO platform, including the soft‑launched YLOO V3.0 service at platform.yloodrive.com.

YLOO Group Pty Ltd (ABN 86 637 582 391 (“YLOO”, “we”, “us” or “our”) respects your privacy and is committed to managing personal information in an open and transparent way in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Notifiable Data Breaches scheme.

This Privacy Policy explains how YLOO collects, holds, uses and discloses personal information through our websites, the YLOO platform at platform.yloodrive.com (V3.0), embedded booking widgets, and related services (together, the Services).

This Privacy Policy is intended to satisfy the requirements of APP, which requires APP entities to have a clearly expressed and up-to-date privacy policy that explains how personal information is managed.

1. Who this policy applies to

This Privacy Policy applies to people and organisations who use or interact with the Services, including learner drivers, parents and guardians, instructors, schools, registered training organisations, not-for-profit organisations, and website visitors.

Because many users of the Services are under 18, YLOO applies additional care to the handling of children’s personal information and aims to align its practices with current OAIC guidance and the developing Children’s Online Privacy Code framework.

2. What personal information we collect

The kinds of personal information YLOO collects and holds depend on how the Services are used, but generally include:

• first name and last name;
• email address;
• mobile number;
• pickup address and other booking-related location details entered by the user;
• role and account information, such as whether a user is a student, instructor, school administrator, parent or guardian;
• instructor-related details, including instructor name, vehicle registration details and profile image;
• booking and transaction details, including lesson type, date and time, booking status, price and GST;
• technical and usage information, including IP address, browser type, device information, timestamps, logs, cookies and similar technologies used for security, session handling and analytics; and
• communications and support records where users contact YLOO or interact through the Services.

Sensitive information

In some parts of the Services, particularly where YLOO supports schools, community programs, not-for-profit programs, training services or welfare-oriented activities, YLOO may collect or store additional information provided by users or authorised organisations that goes beyond basic contact and booking details.

Where YLOO handles information that is “sensitive information” under the Privacy Act, YLOO applies a higher level of care and only collects, uses and discloses that information where reasonably necessary for the relevant service, programme administration, safeguarding, legal compliance, or another permitted purpose under the Privacy Act.

YLOO does not knowingly collect biometric templates or use facial recognition or similar biometric processing through the Services.

3. How we collect personal information

YLOO collects personal information in a number of ways, including:

• directly from users when they create an account, submit a booking, complete a form, verify a mobile number, contact support, or otherwise interact with the Services;
• from parents, guardians, schools, registered training organisations or other authorised organisations that set up, manage or use accounts for learners or instructors;
• automatically through the operation of the Services, including through logs, cookies, analytics tools, session technologies and security monitoring; and
• from service providers and partners where necessary to deliver the Services, such as payment confirmations, SMS delivery events, and address autocomplete responses.

If YLOO receives personal information about an individual from a third party, YLOO will handle that information in accordance with this Privacy Policy and applicable law.

4. Why we collect, hold, use and disclose personal information

YLOO generally collects, holds, uses and discloses personal information for the following purposes:

• to create and manage accounts and user roles;
• to verify mobile numbers and help maintain service integrity and fraud controls;
• to enable lesson bookings, scheduling, rescheduling, cancellations, reactivations and related service delivery;
• to process or support payments through third-party payment providers;
• to communicate with users about bookings, support requests, account activity and service updates;
• to support schools, instructors, registered training organisations and community or not-for-profit programmes using the Services;
• to improve, secure, monitor and maintain the Services;
• to comply with legal, regulatory, risk-management and record-keeping obligations; and
• to investigate complaints, security incidents, misuse or suspected unlawful activity.

YLOO may also use de-identified or aggregated information for analytics, reporting, operational improvement and service development where that information no longer identifies an individual.

5. Children’s privacy

YLOO recognises that many users of the Services are under 18. YLOO treats privacy issues affecting children as requiring additional care and aims to design and operate the Services in a way that supports the best interests of child users, consistent with current OAIC guidance and the developing Children’s Online Privacy Code.

Where appropriate, YLOO may involve a parent or guardian in account setup, service use, requests relating to personal information, or decisions affecting how a child’s information is handled.

YLOO does not sell children’s personal information and does not knowingly use children’s personal information for behavioural advertising.

6. AI and automated tools

YLOO may use approved AI-assisted tools for internal drafting, coding, quality assurance, operational efficiency and similar internal business purposes. YLOO does not permit AI tools to operate without human oversight or to independently make material decisions about pricing, privacy, customer eligibility, safety, compliance, or outcomes that significantly affect individuals.

Human review and control remain responsible for decisions that affect users, services, compliance and the handling of personal information.

YLOO seeks to use providers and contractual arrangements that do not use YLOO customer content to train general AI models. YLOO does not knowingly allow third-party AI providers to use customer personal information submitted through the Services for their own model training purposes where contractual controls state otherwise.

Perplexity for approved internal use

YLOO has adopted a written internal AI policy and may use Perplexity for approved internal business purposes in accordance with that policy.

Perplexity’s Enterprise Terms of Service state: “Perplexity shall not use (or authorize third parties to use) Customer Content to train, retrain, fine-tune or otherwise improve any generative artificial intelligence models.”

Perplexity’s Data Processing Addendum states: “Personal Data will not be used for training of Perplexity’s large language models.”

Perplexity’s Help Centre also states that Enterprise customer data is never used for AI training and that Perplexity’s agreements with third-party model providers prohibit the use of Perplexity data for training external models.

Information about Perplexity’s business terms is available here:

• Perplexity Enterprise Terms of Service
• Perplexity Data Processing Addendum
• Perplexity Enterprise data retention and privacy information

7. Disclosure of personal information

YLOO may disclose personal information:

• to instructors, schools, registered training organisations, parents or guardians, and authorised programme administrators where needed to deliver the Services;
• to service providers that help YLOO operate the Services, including hosting, database, messaging, payment, address autocomplete, analytics, monitoring and support providers;
• to professional advisers, insurers and auditors where reasonably necessary;
• where required or authorised by law, including to courts, regulators, law enforcement agencies or government authorities; and
• as part of a business sale, restructuring, financing, merger or acquisition, subject to appropriate confidentiality and legal safeguards.

YLOO does not sell personal information to data brokers or unrelated third parties.

8. Third-party service providers

YLOO uses third-party service providers to support the operation of the Services. Depending on the feature being used, those providers may include payment processors, SMS and communications providers, infrastructure and database providers, and address autocomplete or mapping providers.

For example, YLOO currently uses Stripe for payment processing, Twilio for SMS delivery, Google Places for address autocomplete, and cloud and database infrastructure providers to host and operate the platform.

These providers may handle personal information on YLOO’s behalf in order to provide their services. YLOO takes reasonable steps to ensure that service providers are subject to appropriate privacy, security and confidentiality obligations.

9. Cross-border disclosure and data location

Some of YLOO’s service providers may store or process personal information outside Australia. For example, cloud infrastructure, communications providers, payment providers and other software vendors may operate global networks or process data in multiple countries.

YLOO takes reasonable steps to ensure that overseas recipients do not breach the APPs in relation to personal information disclosed to them, as required by APP 8, subject to any applicable exceptions under the Privacy Act.

10. Data security

YLOO takes reasonable technical and organisational steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure, consistent with APP 11.

These measures may include encrypted transport, access controls, role-based permissions, server-side validation, tenant-scoped data separation, logging, monitoring and other security practices appropriate to the Services.

No method of transmission over the internet or electronic storage is completely secure. While YLOO takes reasonable steps to protect personal information, YLOO cannot guarantee absolute security.

11. Data retention

YLOO keeps personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain records, resolve disputes, comply with legal obligations and protect the integrity of the platform.

When personal information is no longer reasonably required, YLOO will take reasonable steps to destroy it or de-identify it, subject to any legal obligation to retain it.

12. Cookies and similar technologies

YLOO may use cookies and similar technologies to support essential functionality, maintain sessions, improve performance, enhance security, remember settings and understand how the Services are used.

Users may be able to control cookies through browser settings or other available controls, although disabling some cookies may affect how the Services function.

13. Access and correction

Individuals may request access to personal information YLOO holds about them, and may request correction of personal information that is inaccurate, out of date, incomplete, irrelevant or misleading, subject to the Privacy Act.

Requests for access or correction can be made using the contact details below.

14. Complaints and contact details

If there is a question, concern or complaint about how YLOO has handled personal information, contact:

Privacy Contact
YLOO Group Pty Ltd
Email: support@yloodrive.com
Address: PO Box 276 Noosa Heads, 4567, Queensland, Australia

YLOO will consider privacy complaints and respond within a reasonable period.

If a complaint is not resolved satisfactorily, a complaint may be made to the Office of the Australian Information Commissioner (OAIC). Information about making a privacy complaint to the OAIC is available at the OAIC website.

15. Data breaches

If YLOO becomes aware of an eligible data breach that is likely to result in serious harm, YLOO will comply with the Notifiable Data Breaches scheme, including assessment, containment and notification where required.

16. Changes to this Privacy Policy

YLOO may update this Privacy Policy from time to time to reflect changes in legal requirements, technology, service features or business practices. The current version will be published on YLOO’s website and/or platform.

Where a change materially affects how personal information is handled, YLOO may provide an additional notice through the Services or by other appropriate means.