Privacy Policy

Last updated: 7 September 2026

RepliKey is operated by REPLIKEY PTY LTD (ACN 699 049 726 · ABN 93 699 049 726).

In this policy, "RepliKey", "we", "us" and "our" refer to REPLIKEY PTY LTD, the company responsible for the personal information described below.

This policy explains how we collect, use, store and share personal information when you visit our website, join our waitlist, place an order or pre-order, provide reference photos, or contact us.

Information we collect

Depending on how you interact with RepliKey, we collect:

• Contact information: your name, email address, shipping and billing addresses, and telephone number if provided.
• Order information: products purchased, customisation details, payment status, transaction references, delivery information and order history.
• Reference material: car photos, videos, vehicle details, design instructions and feedback you provide. Uploaded files may contain metadata, such as location information.
• Communications: emails, social media messages, support requests and other correspondence, including photos or videos you send us to support a return, refund or Perfect Match Guarantee claim.
• Waitlist and marketing information: your email address, preferences and any optional details you provide when signing up.
• Website and device information: your IP address, browser and device details, cookie identifiers, pages viewed and interactions with our store.

We receive information directly from you, automatically through our website and Shopify, and from providers involved in payments, delivery and other services you use.

Payments are handled by the payment providers available at checkout. We receive information needed to confirm and manage your payment, but do not receive your full payment card number or security code.

How we use your information

We use personal information to:

• Process payments and manage orders, pre-orders and production batches.
• Create and refine your personalised design.
• Send design previews and respond to requested changes.
• Arrange shipping and provide tracking information.
• Handle enquiries, delivery issues, returns, refunds, Perfect Match Guarantee claims and other support, including comparing a returned product against the reference material you supplied.
• Send waitlist updates and marketing communications in accordance with your preferences and applicable law.
• Operate, secure and improve our website and services.
• Prevent fraud, resolve disputes and meet legal, accounting and record-keeping obligations.

Some information is necessary to fulfil your order. If you do not provide essential contact, delivery or reference information, we may be unable to complete it.

Reference photos and design production

We use the reference material you provide to create the personalised design displayed on your RepliKey.

Third-party AI tools assist with parts of the design production process. Reference images and relevant instructions may be uploaded to third-party AI image and video generation providers to produce design material.

AI-generated material forms part of our workflow. We review the design and may manually edit, retouch, animate or otherwise refine it using image and video editing software before preparing it for your device.

AI providers may retain uploaded material and generated results, and may use them to develop or train their models under their applicable terms. Their retention practices can differ from ours. Deleting a photo from our own records does not automatically delete a provider's copy or reverse training that has already occurred.

Where separate consent is legally required for an additional use of personal information, we will seek that consent separately. This policy does not itself constitute consent to every use described.

Please provide only material relevant to your car and design. Avoid including identifiable people, addresses, documents or other unnecessary personal information, and remove location metadata where possible.

If you have concerns about how your reference material will be processed, contact support@replikey.com before sending it.

Photos, designs and reviews used publicly

Sending reference photos or approving a design does not automatically give us permission to publish your photos or identifiable design material for advertising.

We will obtain your permission before using your identifiable photos, videos or personalised design in our own marketing or social media content.

Reviews submitted for publication may be displayed with the name or display name you provide. Private feedback sent by email or direct message will not automatically be treated as permission to publish a testimonial.

Shopify and other service providers

Our store is hosted by Shopify, which processes personal information when you browse, place an order or otherwise interact with our store.

We also share relevant information with providers involved in:

• Payment processing and fraud prevention.
• Shipping, tracking and delivery, including return shipping labels.
• AI-assisted design, image and video production.
• Email, communications, file storage and customer support.
• Accounting, legal advice and other business administration.

These providers may process information on our behalf or, for certain activities, act independently under their own privacy notices.

We may also disclose information where required by law, to respond to lawful requests, or to establish, exercise or defend legal claims.

Shopify Network Intelligence

Shopify Network Intelligence is enabled for our store.

Shopify uses information from interactions with our store together with information from interactions with other merchants and Shopify to provide enhanced services, including personalisation, analytics, improvements and advertising-related services.

Information may be shared with Shopify and other parties in different countries for these purposes. Certain advertising uses may constitute "sharing" or "targeted advertising" under applicable US state privacy laws.

Read the Shopify Consumer Privacy Policy for details. You can also use the Shopify Privacy Portal to exercise rights relating to Shopify's processing.

Cookies and privacy choices

Our website and Shopify use cookies and similar technologies for essential store functions, remembering preferences, analytics, personalisation and advertising-related purposes.

We use Shopify's automated cookie banner and data-sharing opt-out tools in the regions where they are configured to appear.

Where consent is required, you can accept or reject optional technologies through the cookie controls. You can also use the store's available privacy controls to change your choices.

For Shopify Network Intelligence, Shopify's integrated controls recognise supported Global Privacy Control (GPC) opt-out signals and apply relevant consent and advertising opt-out choices.

You can also contact support@replikey.com to request help or exercise an applicable opt-out right. Shopify-specific choices are available through the Shopify Privacy Portal.

Blocking essential cookies may prevent parts of the store or checkout from working correctly.

Waitlist and marketing communications

If you join our waitlist or subscribe to marketing, we use your details to send the updates you requested, such as launch announcements, product availability and offers.

You can unsubscribe from marketing emails using the link included in those emails or by contacting us.

Unsubscribing does not stop necessary order communications, such as payment confirmations, design previews, production updates and shipping notifications.

We may retain a minimal record of your opt-out so that we can respect your preference.

International processing

RepliKey operates in Australia, but information may be stored or processed overseas even if you are an Australian customer.

Our Shopify store's current data hosting location is the United States. Shopify and its service providers may also process information in other countries.

Our third-party AI provider identifies operations in the United States and Kazakhstan, together with service providers in other locations.

Privacy laws in these countries may differ from those in your country.

Where international-transfer requirements apply, transfers must have a lawful basis and any required protections. Shopify describes its transfer arrangements, including contractual safeguards, in its international data transfer information.

Contact support@replikey.com to request further information about recipients, processing locations or safeguards applicable to your information.

How long we keep information

We retain information for as long as reasonably necessary for the purpose for which it is held, taking account of ongoing orders, support needs, legal requirements and disputes.

In particular:

• Reference photos and design files may be retained after delivery to support revisions, troubleshooting, replacements, return and Perfect Match Guarantee claims, and order-related enquiries.
• Order and transaction records are retained for fulfilment, accounting, tax, fraud prevention and legal obligations.
• Correspondence is retained where needed to manage your order, support requests or disputes.
• Marketing records are retained while you remain subscribed, together with limited records needed to respect an unsubscribe request.
• Material approved for publication may be retained while it remains in authorised use.

We do not promise automatic deletion of all reference photos immediately after design completion.

When information is no longer needed, we will delete it or remove identifying details as appropriate. Backup copies and records subject to legal retention requirements may take longer to remove.

You can request deletion by emailing support@replikey.com. We will assess the request under applicable law and explain any information that must be retained. Where required, we will also communicate the request to relevant providers.

Legal grounds for processing

Where applicable law requires us to identify a legal basis, we rely on:

• Performance of a contract: to process and fulfil your order and provide related support.
• Consent: for activities requiring your permission, including certain marketing, optional tracking and public use of customer material.
• Legitimate interests: where permitted, to operate and improve our business, maintain security, prevent fraud and manage legal claims, balanced against your rights.
• Legal obligations: to comply with applicable record-keeping requirements and lawful requests.

You may withdraw consent where processing relies on it. Withdrawal does not affect processing that was lawful before withdrawal.

Your privacy rights

Depending on your location and the law that applies, you may have rights to:

• Access your personal information and receive information about its use.
• Correct inaccurate or incomplete information.
• Request deletion or restrict certain processing.
• Receive a portable copy of certain information.
• Object to processing, including direct marketing.
• Withdraw consent.
• Opt out of qualifying sales, sharing or targeted advertising.
• Appeal a decision about a privacy request where that right applies.

You can object to the use of your personal information for direct marketing at any time.

These rights may apply to customers in Australia, Canada, the United States, the United Kingdom, the European Economic Area and other locations, subject to the relevant law and its scope.

To make a request, email support@replikey.com. We may ask for information reasonably necessary to verify your identity. Authorised agents may submit requests where permitted by law.

We will respond within the applicable legal timeframe. If a request cannot be fully granted, we will explain why and any available review or appeal options. We will not unlawfully discriminate against you for exercising your rights.

Security

We use reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse and disclosure.

No online service or storage system can guarantee absolute security. If a breach occurs, we will take action and provide notifications where required by applicable law.

Children

Our store is intended for adults aged 18 and over. We do not knowingly collect children's personal information for marketing.

If you believe a child has provided personal information to us, contact support@replikey.com so we can investigate and take appropriate action.

Questions and complaints

Contact support@replikey.com with any privacy question, request or complaint. Please explain your concern and provide enough information for us to identify the relevant records.

You may also complain to the privacy authority responsible for your location, including:

• Australia: the Office of the Australian Information Commissioner.
• Canada: the Office of the Privacy Commissioner of Canada or the relevant provincial authority.
• United Kingdom: the Information Commissioner's Office.
• European Economic Area: your national or local data protection authority.
• United States: the relevant state privacy regulator or attorney general.

You do not need to contact us first where the law permits you to complain directly to an authority.

Changes to this policy

We may update this policy to reflect changes to our practices, services or legal requirements. The latest version will appear on our website with an updated date.

Where required, we will provide additional notice or seek consent before introducing a relevant change.

Contact

Email: support@replikey.com Instagram: @replikey.co

REPLIKEY PTY LTD ACN 699 049 726 · ABN 93 699 049 726