Global Locations

    IAA Privacy Notice

    Effective: 1 April 2025

    RITCHIE BROS. AUCTIONEERS PTY LTD - ACN 080 895 898 d/b/a IAA Australia ("IAA," "we," or, "us"), a part of the RB Global, Inc. family of companies, is bound by the Privacy Act 1988 (Cth) (“Privacy Act”) and the Australian Privacy Principles (“APPs”). This Privacy Notice explains how we may collect, share, use and process information about you, including when you visit our websites or our mobile applications ("apps"), when you utilize our services (regardless of how you access or use the services), when you complete forms, when you communicate with us, and when you utilize our other offerings (e.g., newsletters, discussion lists, and announcement lists), and how you can exercise your privacy rights (the "Services"). Throughout this Privacy Notice, our websites and apps may be jointly referred to as our "Sites."

    This Privacy Notice incorporates and should be read in conjunction with the Terms of Use and SMS Policy.

    In this Privacy Notice, "personal information" means any information or opinion about you that identifies you or makes you identifiable. Information that has been anonymized so that it does not identify a specific individual is not "personal information.

    INFORMATION THAT WE COLLECT
    WHY WE PROCESS YOUR PERSONAL INFORMATION
    HOW WE USE THE INFORMATION WE COLLECT
    SMS TEXT MESSAGING
    COOKIES
    WHO WE SHARE YOUR PERSONAL INFORMATION WITH
    LINKS TO OTHER SITES
    CROSS-BORDER TRANSFERS OF PERSONAL DATA
    DATA PRIVACY FRAMEWORK
    CHILDREN AND MINORS’ PRIVACY
    RETENTION OF PERSONAL DATA
    PROTECTING YOUR PERSONAL DATA
    YOUR RIGHTS IN RELATION TO YOUR PERSONAL DATA
    DATA CONTROLLER
    CHANGES TO THIS PRIVACY NOTICE

    INFORMATION THAT WE COLLECT

    When you use our Services, we collect information about your use of our Services and information that you send us. We may collect and store the following information when running the Service:

    The types of personal information that we collect about you may include:

    • Identification data – such as your name, job title, photograph and date of birth.
    • Contact details – such as your home and business address, email address and telephone number.
    • Recruitment-related information – such as your name, email address, location, telephone number, qualifications, employment history, referees, interests, types of roles you are interested in, your work application form and resume or CV. If you progress through the interview process, we may also collect interview notes, references, results of any psychometric tests and background checks (including criminal records or identity checks), your work visa and other information to verify your identity and right to work.
    • Device information. We may collect information about devices you use to access the Services and Sites and how you use the Services, such as your Internet Protocol (“IP”) address and which websites you visited before accessing our Services and Sites.
    • Performance and log data. Our servers may automatically record information created by your use of our Services and Sites, which may include information such as, but not limited to, your IP address, browser type, operating system, command line information, diagnostic information related to the Services (e.g., crash activity reports), the referring web page, pages visited, location, your mobile carrier, device and application IDs, and search terms. For instance, when we send you an email, we may collect certain information including the nature of the email, whether you opened or deleted our email, action you took upon receipt of our email, or your name and contact information.
    • Audio, visual and other electronic data. We may collect audio, visual, and other electronic data, such as through CCTV footage from our premises, and call recordings.
    • Online activity and browsing information. When you search for, bid on, and purchase vehicles through our Sites, we receive information concerning your searching, bidding, and purchasing practices (e.g., vehicle segment, actual cash value (ACV), vehicle class, mileage, vehicle age). If you provide your consent, we may access the microphone on your mobile device to allow you to use voice controls when searching for vehicles. If you provide your consent, we may access the camera on your mobile device, so you can scan vehicle identification number (VIN) barcodes and request information about particular vehicles.
    • Location information. When you grant permission, we may collect physical location information that is sufficiently precise to allow us to locate a specific person or device (“Location Information”). Location Information may be used and provided to third parties to provide you with content and services that are relevant to a particular location, such as advertising, search results, auctions in the area, and directions.
    • Information we receive from Third Parties. When we receive personal information about you from third parties, such as financial institutions, manufacturing companies, and dealerships, we take measures to ensure that these third parties have a lawful or contractual right to collect, use, or disclose your information before providing any data to us.
    • Social Networks. If you connect with us from a social network, such as LinkedIn or Facebook, we will collect personal information from the social network in accordance with your privacy settings on that social network or your device. The connected social network may provide us with information such as your name, profile picture, network, gender, username, user ID, age or age range, language, country, friends list, follower list, and any other information you have agreed it can share or that the social network provides to us. We will assume that such social network or other third parties are entitled to collect and share such personal information with us in accordance with your settings and permissions.
    • Information from other sources. We may combine information that you provide to us with information we receive from our affiliates and other sources, as well as with other information that is automatically collected. The combined information may include information about your use of the Sites, your use of other websites, devices and mobile applications and information from our affiliates and other sources.
    • Other information – this includes communications with you (including complaints or concerns raised by you or any feedback or survey responses that you provide to us) and other information you voluntarily provide to IAA including user generated content or data that you input into our systems.

    HOW WE USE THE INFORMATION WE COLLECT

    We process personal information to conduct our business – this includes complying with and managing our contractual relationships, recruitment, monitoring access to our Sites and Services, managing safety and security risks, and complying with our legal obligations. We also process personal information where you have provided your consent or it is necessary to comply with legal obligations.

    The purposes for which we process your personal information will depend on the type of personal information collected and the context in which it was collected. However, the primary purposes for which we process personal information include:

    • To provide our Services to you, including creating and managing your accounts and providing customer service;
    • To respond to your inquiries, such as your questions, concerns, feedback, disputes or issues;
    • To offer other products or services and/or the products or services performed by others;
    • To communicate about, and plan, host and administer, special events, programs, surveys, contests, sweepstakes and other offers or promotions;
    • To enable you to interact with the Sites and others through various means, such as through social media;
    • To research and develop our business;
    • To diagnose and address technical and service issues;
    • To ensure the security of the Services;
    • To enforce our terms or agreements or our legal rights;
    • To perform data analyses, including in markets, industries, trends and finance;
    • To personalize your experience with the Services;
    • To engage in marketing activities;
    • To improve, monitor and enhance customer service or our products and services;
    • To comply with applicable legal requirements and our policies;
    • To provide vehicle sale information, transaction data and other information and material to third parties directly involved in the sale (e.g., consigners);
    • To contact you via telephone, text or chat;
    • To evaluate you for potential employment;
    • To verify information you have given to us.

    DIRECT MARKETING

    We and our social media and analytics partners use various technologies such as cookies, tags and pixels to personalize and improve your customer experience. Cookies and similar technologies may also help us to detect fraudulent activity or to prevent security breaches and so we may collect information about your device from within the cookie.

    These technologies may be used within the apps and Services to do the following:

    • Improve the way the Services and apps work by personalizing your experience and remembering your preferences;
    • Improve the performance of the Services and apps by helping us understand how they are being used (for example, if you receive an error message while using the Services or apps);
    • Measure the effectiveness of our marketing communications, including online advertising (for example, if you have seen a specific advertisement, and how long it has been since you have seen it). This information allows us to measure the effectiveness of our online advertising campaigns and control the number of times you are shown an advertisement. We also use cookies and similar technologies to measure the effectiveness of our marketing communications;
    • Communicate relevant advertising, including via third party platforms and social media. Technologies used within the Services and apps may collect information about your online behavior, such as your IP address, the website you arrived from and information about your purchase history;
    • IAA may share your de-personalized information along with information on which advertisement to display for the purpose of displaying relevant advertisements to you on our websites and on other organisations’ websites.

    If you wish to limit or restrict direct marketing or the use of these technologies you can opt out of receiving further marketing communications by following the opt-out instructions provided in the communication.

    WHO WE SHARE YOUR PERSONAL INFORMATION WITH

    In connection with the purposes set forth in this Privacy Notice, we may share your personal information within the IAA group of companies and external third parties in order to provide you with various products and services you select. We have contracts with third parties with whom we share your personal information for a business purpose. Such contracts describe the purpose of the processing and require the recipient to maintain confidentiality and not use your personal data for any purpose except performing the contract. In the last twelve (12) months we have disclosed the following categories of personal information for a business purpose to the third parties indicated below.

    • Our affiliates: Your personal information may be shared with any member or affiliate of our corporate group.
    • Other data subjects: Your personal information may be shared with other users of our Sites (e.g., when you upload videos, comments, feedback, and other information).
    • Select business partners and third-party service providers: Your personal information may be shared with our business partners, third-party service providers, contractors and sub-contractors, including:
      • Electronic payment vendors: We use electronic payment vendors to process credit card data and to utilize I-Pay, which enables qualified buyers with company check writing privileges to make payments directly from a U.S.-based bank account via the Internet.
      • Advertising, social media, and analytics partners: We also share your personal information about your use of the Sites with our social media, advertising and analytics partners. Our third-party ad networks and social media companies may use cookies, tags and other technology to collect information about your browsing activities over time and across different websites when you visit our Sites. Third party vendors or ad networks may use cookies, tags and other mechanisms to serve ads on other sites based on a user’s prior visits to our Sites. You may opt out of participation with various third-party networks by visiting the Network Advertising Initiative opt out page. We also share information about your use of our Sites with our third-party providers that assist us with improvement and optimization of our Sites. We use information to better understand how our buyers, vendors or customers engage with us and our products and offerings, including behavior and preferences. We administer surveys and questionnaires, such as for market research or buyer satisfaction purposes. We also use information for other research and analytical purposes, such as to evaluate and improve our products and business operations, to develop services and features, and for internal quality control and training purposes. For example, we may use information about how buyers, vendors or customers engage with iaai.com to develop products, to better understand the best ways to organize and present product offerings on our Sites.
      • App, platform or other service providers: We share the personal information we collect with third-party app, platform and other service providers, such as database managers/developers, SMS texting platforms, and web developers/hosting companies that assist us with certain processing activities, such as storing/backing up data, enhancing/maintaining databases, publishing content, communicating with you, and developing/offering a variety of products/services. If you use our Sites, your personal information, including name, contact information and any stored biographical/firm information within IAA’s database, may be stored and processed through some of our third-party app vendors. We also use third party providers to distribute organizational emails. We share Personal Identifiers and Opt-In and Web-Access Information with our information technology service providers, which helps us keep track of your communications with us across platforms, including text messages, emails, and mobile applications and otherwise provide SMS texting to you. Personal Identifiers and Opt-In and Web-Access Information may be shared with our telecommunications providers, including SMS text message platforms. For further information, please view our SMS Statement available upon request at dataprotection@rbglobal.com.
      • Transportation vendors: If a buyer chooses to transport a vehicle using IAA Transport services, IAA shares the buyer’s contact information, including shipping address with our transportation vendors for the purpose of obtaining quotes, scheduling transportation, and tracking shipments.
      • Call centers: If a call is routed to a call center, IAA shares your personal information, such as contact information and transaction history, for the purpose of allowing the call center to provide assistance with your transaction.
      • Marketing Alliance Partners: If you register for and/or attend one of our seminars, we may share your personal information with our marketing alliance partners, so they can assist you with purchases or arranging for transportation and shipping or other services.
      • Charities: When you donate a vehicle, we may share your personal information with the benefactor charity for the purpose of allowing the benefactor charity to personally thank you for your donation.
      • In other circumstances with your consent: We may ask if you would like us to share your personal information with other unaffiliated third parties who are not described elsewhere in this notice.
    • Governmental entities and third parties in connection with legal obligations, remedies and claims: We may disclose personal information about you to governmental entities, such as regulatory agencies, law enforcement, and judicial authorities, as well as other third parties under any of the following conditions: (a) if we have your consent to do so; (b) to comply with a subpoena, legal order, court order, warrant, legal process, or other legal obligation; (c) to enforce or apply any of our terms and conditions, policies, or other agreements; (d) to exchange information with other companies and organizations for the purposes of fraud protection and credit risk reduction; or (e) as necessary to pursue available legal remedies or defend legal claims. We also may be required to disclose personal information in response to requests by public authorities, including to meet national security or law enforcement requirements.
    • Third parties in connection with a potential reorganization: We may share your personal information to a prospective or actual seller or buyer in the event of a potential reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of IAA’s assets or stock, including without limitation, in connection with any bankruptcy or similar proceeding, provided that such entity will not be permitted to process your personal information other than as described in this Privacy Notice without providing you notice and, if required by applicable laws, obtaining your consent.
    • Third parties in connection with screenings for jobs: We may also share your personal information with third parties who provide services to us such as recruitment agencies, consultants, background services, professional advisors such as accountants and lawyers. If your personal information is shared in this way, IAA does so only on a “need-to-know” basis and will seek to ensure it is only used in connection with the functions or services these parties will be performing for IAA and that your personal information is treated by them in a confidential manner. These service providers that IAA uses may change over time but we will always seek to ensure that any third parties who handle your personal information will do so in a manner consistent with this Privacy Notice and in accordance with applicable law.

    LINKS TO OTHER SITES

    As a resource to our visitors, our Sites contain offerings from other companies that you can link to through our Sites (such as Automotive Finance Vendors, Licensed Brokers, Transportation/Shipping Vendors, and Inspection Vendors). When you click on such a link on our Sites, you will be taken to the website of the other company, and its privacy practices will govern your use of that website and your interactions with that company.

    The presence on our Sites of links to non-IAA websites does not mean that IAA endorses or accepts any responsibility for the content or use of such websites. IAA has no control over such websites, and has no responsibility for the privacy practices of such websites.

    CROSS-BORDER TRANSFERS OF PERSONAL DATA

    We store our data on servers in [Australia and the United States]. IAA may also disclose your personal information to recipients that are located outside of Australia. Those recipients are likely to be located in India, Jamaica, the United States and the Philippines for the purposes described in this Privacy Policy. We have in place contractual arrangements (where appropriate) that require overseas recipients to handle your personal information in a way that has the effect of protecting the information in a way that is at least substantively similar to the APPs.

    CHILDREN AND MINORS’ PRIVACY

    Our Sites are not directed to individuals under the age of 18. We do not knowingly collect or use any personal data from users under 18 years of age. No information should be submitted to our Sites by visitors under 18 years of age, and visitors under 18 years old are not allowed to register for our contests, newsletter, clubs or activities. You must be 18 years or older to purchase products. If we learn that we have collected personal information from someone under 18, we will take steps to delete the information as soon as possible.

    RETENTION OF PERSONAL INFORMATION

    The personal information that we collect from you is stored on our secure servers for as long as is reasonably necessary for the purposes for which the personal information is processed and to meet IAA’s legal obligations. We keep your personal information to enable your continued use of our services, for as long as it is required in order to fulfill the relevant purposes described in this Privacy Notice, as permitted or as may be required by applicable law, or as otherwise communicated to you. For example, we retain your transaction history so that you can review past purchases and to improve the relevance of products, services and content we recommend.

    PROTECTING YOUR PERSONAL INFORMATION

    We have implemented technical and organizational measures designed to assist in preventing the misuse, interference or loss or unauthorized access, modification or disclosure of your personal information.

    In addition to the technical and organizational measures that IAA has in place aimed to protect your personal information, you should use appropriate security measures to protect your personal information. If you believe that your IAA account or any information you provided to us is no longer secure, notify us immediately at dataprotection@rbglobal.com. In the event that we are required by applicable law to notify you of a breach to your personal information, we may notify you electronically, in writing, or by telephone, if permitted to do so by such law.

    YOUR RIGHTS IN RELATION TO YOUR PERSONAL DATA

    You may access or request correction of the personal information that we hold about you, by sending a request to dataprotection@rbglobal.com.

    There is no charge for requesting access to your personal information, but we may require you to meet our reasonable costs in providing you with access (such as photocopying costs or costs for time spent on collating large amounts of material).

    We will respond to your requests to access or correct personal information in a reasonable time and will take all reasonable steps to ensure that the personal information we hold about you remains accurate, up to date, complete, relevant and not misleading.

    It is important to us that all of the information we hold about you is correct and up-to-date, so let us know promptly if there are any errors or other changes should be made.

    COMPLAINTS

    If you are concerned about how we are dealing with your personal information or any privacy issues, including your request for access or correction of your personal information, please contact us at dataprotection@rbglobal.com.

    We will consider your complaint and determine whether it requires further investigation. We will notify you of the outcome of this investigation and any subsequent internal investigation.

    If you are unsatisfied with how we have handled a privacy issue, you may approach an independent advisor or contact the Office of the Australian Information Commissioner (“OAIC”) (www.oaic.gov.au) for guidance on alternative courses of action that may be available.

    CHANGES TO THIS PRIVACY NOTICE

    We may update this Privacy Notice from time to time as we add new products, services, and apps; as we improve our current offerings and technologies; and as laws change. It is our policy to post any changes we make to our Privacy Notice on the Sites. Any changes will become effective upon our posting of the revised Privacy Notice on the Sites. If we make material changes to how we treat the personal information that falls within the scope of this Privacy Notice, we will notify you by email (to the email address specified in your account) or through a notice posted on the Sites prominently. This Privacy Notice includes an “effective” and “last updated” date at the top. The effective date refers to the date that the current version took effect. The last updated date refers to the date that the current version was last modified.