BOSS Group ("we", "us", or "our") operates service stations, motels, and laundrettes. This Privacy Policy explains how we collect, use, and protect information across our physical business locations and our automated internal software services. We do not conduct sales, e-commerce, or consumer transaction activities on our website.

Information We Collect

• On-Site Retail & Service Transactions: We only collect information strictly necessary to process point-of-sale transactions and bookings at our service stations, motels, and laundrettes (such as payment card transaction tokens, guest registration details, purchase amounts, and transaction timestamps).
• Customer Inquiries: If you contact us directly via email, phone, or messaging, we collect your name, contact details, and message contents solely to address your inquiry or booking request.

Google User Data & Automated Services

We operate internal automation tools and services to manage administrative and operational workflows.

• Data Accessed: Our internal applications may access operational emails, booking notifications, sender details, message metadata, and attachments via Google APIs strictly for designated business operations across our service stations, motels, and laundrettes.
• Data Use: We use Google user data solely to read, process, and dispatch operational communications. We do not use this data for advertising, profiling, marketing, or general consumer analytics.
• Data Sharing & Disclosure: We do not sell, rent, or transfer any Google user data to third parties. Data is only accessible to authorized internal personnel.

How We Use Information

We use collected information exclusively to:

• Process retail sales, motel guest reservations, and laundrette services at our physical locations.
• Manage internal business administration, supplier communication, and operational correspondence.
• Maintain the security and integrity of our physical premises and internal IT infrastructure.
• Comply with applicable legal, accounting, and taxation obligations under Australian law.

Data Retention and Security

• Security: We apply technical safeguards, secure protocols (HTTPS/TLS), and restricted role-based access controls to safeguard all operational data against unauthorized access, loss, or disclosure.
• Retention: Transaction, guest, and financial records are retained only as long as required by Australian tax, hospitality, and accounting regulations. Operational data processed via Google APIs is retained only for the duration necessary to complete automated operational tasks.

Third-Party Sharing

We do not sell, license, or trade your personal information. We only share information with third parties in the following limited circumstances:

• Authorized payment processors and banking institutions to clear point-of-sale card transactions.
• IT and cloud infrastructure providers operating under strict confidentiality obligations.
• Law enforcement, regulatory bodies, or emergency services where required by Australian law.