1. Who we are
manGO (ABN to be confirmed) provides wheelchair accessible and general passenger transport in South Australia and Victoria. This policy explains how we handle your personal information, and it applies to our website, our booking platform and the transport services we provide.
We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where we deliver NDIS-funded supports we also handle your information in line with our obligations to the NDIS Quality and Safeguards Commission.
2. What we collect
Information you give us
- Name, email address, phone number and postal address.
- Pick-up and drop-off addresses, and the notes you add to a booking.
- Accessibility needs — wheelchair use, ramp and securing requirements, and any access notes you choose to give a driver.
- The number of passengers and carers travelling.
- NDIS participant number, plan details, support category and item numbers, and your plan manager's or support coordinator's details, where these apply.
- Payment details, where you pay by card. Card numbers are handled by our payment provider and are never stored on our systems.
Information we generate
- Your booking, trip and invoice history.
- Driver check-in and check-out times and trip notes.
- Records of which version of our Terms & Conditions you accepted, and when.
- Technical information such as your IP address, browser type and the pages you visit, used to keep the service secure and working.
Accessibility and health-related details are sensitive information under the Privacy Act. We only collect them because they are necessary to transport you safely, and only with your consent.
3. Why we collect it
We use your personal information to:
- Plan, confirm, dispatch and complete your trips safely.
- Tell your driver what they need to know to support you.
- Invoice you, your plan manager or the NDIA, and reconcile payments.
- Contact you about a booking, including changes and reminders.
- Meet our record-keeping, safety and reporting obligations.
- Handle complaints and improve the service.
We do not sell your personal information, and we do not use it for third-party advertising.
4. Who we share it with
We disclose your personal information only where it is necessary:
- Our drivers and operations staff — the details needed to complete your trip.
- Your plan manager, support coordinator or nominee — where you have approved that link, and only within the scope you approved.
- The NDIA — where we claim against your plan.
- Our service providers — cloud hosting, email delivery, payment processing and accounting software, each bound to handle your information only on our instructions.
- Regulators, insurers and law enforcement — where we are required or authorised by law.
5. Where your information is stored
Your information is stored in databases hosted in Australia (ap-southeast-2). Some of our service providers — for example email delivery and error monitoring — may process limited information overseas. Where that happens, we take reasonable steps to ensure the overseas recipient handles your information consistently with the Australian Privacy Principles.
6. How we protect it
- Access is restricted by role: staff can only see the information their role needs, and every access to participant records is logged.
- Data is encrypted in transit and at rest.
- Passwords are stored only as salted hashes — never in a readable form.
- Changes to financial and participant records are recorded in an append-only audit trail.
No system is perfectly secure. If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
7. How long we keep it
We keep booking, invoice and trip records for at least seven years, which is what our tax, insurance and NDIS record-keeping obligations require. Records of which terms you accepted are kept for as long as the related booking record is kept. When information is no longer needed and we are not required to keep it, we destroy or de-identify it.
8. Accessing and correcting your information
You can view and update much of your information yourself from your profile and dashboard.
You can also ask us for a copy of the personal information we hold about you, or ask us to correct it, by emailing support@mangocar.com.au. We will respond within 30 days. We do not charge for making a request, and we will tell you in writing if we cannot give you access, and why.
9. Withdrawing consent
You can withdraw your consent to us holding your accessibility information at any time. Please be aware that without it we may not be able to transport you safely, and we may have to decline future bookings.
10. Cookies
We use cookies to keep you signed in and to remember your language and currency preferences. We do not use advertising or cross-site tracking cookies. You can block cookies in your browser, but you will not be able to stay signed in.
11. Complaints
If you think we have mishandled your personal information, contact us first at support@mangocar.com.au or 1300 000 000. We will acknowledge your complaint and respond within 30 days.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner on 1300 363 992 or at oaic.gov.au.
12. Changes to this policy
We may update this policy. Each update is published as a new version with its own effective date, and every earlier version stays available so you can see what has changed.
13. Contact us
manGO Address to be confirmed Email: support@mangocar.com.au Phone: 1300 000 000