Last updated: 15 February 2026
Openroads Group PTY LTD (32660507951), (“us,” “we,” or “the Company”) respect the privacy of the users of our websites (“Sites”), mobile applications (“App”), our customers and other individuals who interact with us. We have created this privacy policy to explain how we collect, store, use and disclose personal information across both our Sites and our App.
Access to our privacy policy is free. If you would like us to post you a copy of our privacy policy, or have any questions about it or its contents, please call us on +61 458 505 886.
Personal information is defined in the Privacy Act 1988 (Cth) (“Privacy Act”) as:
“Information or an opinion about an identified individual, or an individual who is reasonably identifiable:
a) Whether the information or opinion is true or not; and b) Whether the information or opinion is recorded in a material form or not.”
The Privacy Act was most recently amended on 12 March 2014. The new legislation includes thirteen Australian Privacy Principles (APPs). The APPs regulate the way companies collect, use, hold and disclose personal information.
Our practices and internal policies are consistent with our obligations under the Privacy Act and our staff are required to ensure compliance as a condition of their employment. In any third-party contracts we enter into there is a duty to maintain personal information in accordance with this privacy policy and in a manner consistent with the Privacy Act.
From time to time we will update this privacy policy without prior notice. We will notify you by updating the policy published on our Sites and within the App.
The Company collects personal information in a number of ways. The most common ways we collect personal information include:
Our Sites may collect other information that may or may not be personal information. For each visitor to the Site, our server automatically recognises and stores the individual’s IP address, the type of internet browser being used, the address of the site that “referred” the individual to our website, and clickstream data. If this information cannot be used or combined with other data to identify you, it will not be personal information.
We also collect personal information for the purpose of providing you with any goods or services that you request, to update our Sites, to improve the services or goods that we provide and to develop our business.
We aim to only collect personal information that is necessary to fulfil the purpose for which you have disclosed it, or as required by law.
If you ask us to provide you with information, goods or services, sign up to join one of our clubs or mailing lists, or submit a competition entry form, you will be asked to provide contact information (such as your name, telephone number, postal address and email address). You may also be asked for demographic information (such as your age and gender) and/or profile data.
In some instances we may need to ask you for additional information necessary to provide you with the goods or services you have requested. When we ask you for further information in addition to that you provide to us initially, we will tell you why we are collecting that information.
We aim to only collect information that is absolutely necessary to provide you with any service you have requested. If you would prefer to remain anonymous, we are happy to still deal with you provided that we don’t need to know who you are. Instances where this may be possible include where you are providing us with anonymous feedback that does not require a response.
We do not collect sensitive personal information.
This section applies specifically to users of the OpenRoads Rally mobile application, available on Android and iOS. The App is a rally event management and tracking tool that enables riders to navigate rally tracks, record their routes, and auto-complete checkpoints using GPS.
When you create an account in the App, we collect the following personal information:
| Data | Purpose |
|---|---|
| Email address | Account identification and communication |
| First name and surname | Personalising your profile and ride logs |
| Phone number | Contact information (entered during onboarding or profile editing) |
| Profile photo | Personalising your profile (captured via camera or selected from your photo library) |
| Account creation and update timestamps | Account management |
You may create an account using email and password, Google Sign-In, or Apple Sign-In. When using social sign-in, we receive your name, email address, and profile photo URL from the respective provider.
The App collects precise location data (GPS), including when the App is running in the background.
Location data is central to the App’s core functionality — tracking your progress along rally routes and automatically completing checkpoints when you are within proximity. We collect:
| Data | Purpose |
|---|---|
| Latitude and longitude | Recording your rally route and calculating distance travelled |
| Altitude | Recording elevation along your rally route |
| Timestamps | Associating each GPS reading with the time it was recorded |
When is location collected?
FOREGROUND_SERVICE_LOCATION) to maintain GPS tracking when the screen is off or the App is in the background. A persistent notification is displayed whenever tracking is active.How is location data used?
Location data is not used for advertising, analytics, or any purpose other than the rally tracking features described above.
Permissions required:
| Permission | Platform | Purpose |
|---|---|---|
ACCESS_FINE_LOCATION |
Android | Precise GPS tracking during rally rides |
ACCESS_COARSE_LOCATION |
Android | Required alongside fine location |
ACCESS_BACKGROUND_LOCATION |
Android | GPS tracking when the App is in the background or screen is off during an active ride |
FOREGROUND_SERVICE_LOCATION |
Android | Running the foreground location tracking service with a visible notification |
| Location When In Use | iOS | GPS tracking during rally rides |
| Location Always | iOS | GPS tracking when the App is in the background during an active ride |
When you complete a ride, the following data is recorded and stored:
The App requests access to your camera and photo library solely for the purpose of setting or updating your profile photo. Photos are uploaded to our secure cloud storage. We do not access your camera or photo library for any other purpose.
The App stores certain data locally on your device to support offline functionality:
If the App crashes or encounters an error, we collect crash reports and diagnostic data through Firebase Crashlytics. This may include:
Crash data is only collected in release (production) builds of the App and is used solely for identifying and fixing bugs.
The App uses Firebase Analytics for basic, automatic session and screen usage data. We do not log any custom analytics events, and we have explicitly disabled advertising ID (AD_ID) collection. Analytics data is used solely to understand general App usage patterns and improve the App experience.
The App uses local notifications only (not push notifications from a remote server). Notifications are triggered on your device to alert you when you are approaching or have reached a checkpoint during an active ride.
A persistent notification is also displayed on Android while location tracking is active, as required by the operating system for foreground services.
The App uses background services in the following limited ways:
The App relies on the following third-party services provided by Google Firebase:
| Service | Data Processed |
|---|---|
| Firebase Authentication | Email, password (hashed), OAuth tokens |
| Cloud Firestore | User profiles, ride logs, event and track data |
| Firebase Storage | Profile images, GPX route files |
| Firebase Crashlytics | Crash reports, error diagnostics, user email |
| Firebase Analytics | Automatic session and screen data (no advertising ID) |
When you sign in using Google Sign-In, Google receives and processes data as described in Google’s Privacy Policy. When you sign in using Apple Sign-In, Apple receives and processes data as described in Apple’s Privacy Policy.
We do not share your data with any advertising networks, data brokers, or other third-party services beyond those listed above. The App does not contain any third-party advertising SDKs.
You may request deletion of your account at any time by contacting us at the details provided below. Upon account deletion:
In some instances, where you have provided consent, or consent is deemed to have been provided or conferred (in compliance with the APPs) we may use your personal information for the purpose of sending you marketing communications including by electronic means, SMS, MMS for an unlimited period. You may opt-out of receiving such messages at any time provided such messages are sent by us. We will give you the opportunity to opt-out within the message that we send to you. You may also opt-out by contacting us (using the details provided below).
In some instances, where you have provided consent, or consent is deemed to have been provided or conferred (in compliance with the APPs) we may also send you electronic updates including via email, SMS, MMS for an unlimited period relating to products or services you have ordered, used or enquired about, to keep you informed of changes to the Site or App, and the products or services offered via the Site, App, or from other production companies. You may opt-out of receiving such messages at any time provided such messages are sent by us. We will give you the opportunity to opt-out within the message that we send to you. You may also opt-out by contacting us (using the details provided below).
Any information we collect about you will be kept securely by us unless an event beyond our control disrupts the measures we have in place. We use up-to-date security, firewall, anti-virus and encryption software to ensure the security of the data we keep and to prevent unauthorised access, destruction, use, modification or disclosure. We have procedures in place with regards to staff access to personal information and ensure that only those staff who need to know have access to your information.
Data collected via the App is stored securely using Google Firebase infrastructure, which employs industry-standard encryption in transit and at rest. Local data stored on your device (such as temporary GPS readings) is held in a private application database that is not accessible to other applications.
We will only store personal information for so long as it is required either to fulfil the purpose for which it was collected or to fulfil our obligations at law. We will conduct regular reviews of the personal information we hold and destroy or de-identify information no longer required.
Generally, personal information will not be disclosed to individuals or organisations outside of the Company without your prior consent. However, in the circumstances described below, personal information may be disclosed to:
If we disclose personal information to a third party under outsourcing or contracting arrangements (a service provider), we will take steps to ensure that they have:
Like many organisations, we use IT infrastructure and service providers who are based or hosted in countries other than Australia including the United States, New Zealand, Hong Kong, Singapore, India, United Kingdom, and Malaysia. Google Firebase services may store and process data in data centres located outside of Australia, including in the United States. Where we have a relationship with such providers we ensure that we complete a privacy due diligence on their own practices and procedures to ensure that they are of a high quality. Our contractual arrangements with these providers include obligations of confidence and an obligation to comply with our privacy policy. We complete a re-assessment of overseas providers at least every six months. Australian law may not apply in some of these jurisdictions.
Under the Privacy Act, you have the right to seek access and to update or correct the personal information that we hold about you. If you wish to exercise your right under the Privacy Act to seek access to the personal information held for you, you should make the request in writing (to the address specified below).
Ordinarily we will not charge for providing access/copies of personal information we hold about you, and will generally respond to access requests of this type within 30 days. If we anticipate there being a fee (for the time we spend locating and compiling the information you have asked for) we will provide you with an estimate before proceeding. If a fee is payable it will be based on an hourly rate plus the cost of photocopying or other out of pocket expenses. For legal and administrative reasons we may also store records containing personal information in archives. Access to these historical records may result in a charge being incurred (an estimate will be provided to you prior). Due to the nature of archive, requests for access to historical records may take longer to process than with current records.
You may correct the personal information we hold about you at any time; you should make the request in writing (to the address specified below). We do not charge a fee to correct personal information held.
On review of your request, if we agree that the personal information held is not accurate, complete and up to date, it will be corrected by the appropriate person. If we do not agree, you will be provided with the reason(s) for the views and the opportunity to make a statement of your view and have it included with the information held.
You have a right to complain to us if you are concerned about your privacy, how we have dealt with your personal information or in relation to the Privacy Act.
If you are concerned about how we have dealt with your personal information you should first contact us (using the details set out below). We will endeavour to send you a written response within 10 business days.
If you are not satisfied with the way we have managed or attempted to resolve your complaint you may complain to the Office of the Australian Information Commissioner by calling them on 1300 363 992, via their website at www.oaic.gov.au or by mail to the Office of the Australian Information Commissioner, GPO Box 5218 Sydney NSW 2001.
Our Sites and App may contain links to third-party websites for individuals’ convenience and information. Individuals should be aware that when they access a third-party website, we are not responsible for the privacy practices or policies of that third party and will not be liable for any use or disclosure of your personal information by any third party to whom your information is sent. We suggest that you review the privacy policy of each website you visit.
By using the Sites or the App, you signify your acceptance of this privacy policy. If you do not agree to this policy, please do not use our Sites or App or provide us with your personal information. The Company reserves the right to modify, alter or otherwise update this policy at any time. Should the Company modify, alter or otherwise update this policy, it will prominently post notice(s) of the changes on the Sites and/or within the App.
OpenRoads Group PTY LTD
Email: info@openroadsrally.com
Mailing address: 32 Rennison Street, Parkdale VIC 3195, Australia