What you provide
The form asks for your name, email, phone, postcode, vehicle requirements, budget and timing. If you have a trade-in, you can also provide vehicle, condition and estimated finance payout details. Please do not include a licence, identity documents, bank details or card details.
Why we use it
Changeover Auto uses your enquiry to contact you, clarify your requirements, prepare a proposed scope and fee, and manage follow-up. Submitting does not engage the service or authorise a vehicle purchase. It does not subscribe you to marketing.
Where it goes
Your submission is stored in the website’s hosted database and is available through the protected coordinator workspace. The website uses Cloudflare hosting, Supabase for email authentication and Resend for sign-in and workspace notification email delivery. Hosting may involve processing outside Australia. Enquiry details are not published on the website or automatically sent to dealerships.
Email sign-in
Supabase checks your email identity and Resend delivers one-time sign-in emails. The website uses secure, HTTP-only cookies to keep you signed in and connect a requested link to your browser. These cookies support the private portal; they are not advertising cookies. Temporary hashed email and IP counters limit sign-in abuse. Only invited email addresses can receive a portal sign-in link. Authentication providers may process information outside Australia.
Your service agreement and private workspace
If you engage Changeover Auto, the private workspace stores issued service agreements, your typed acceptance name, signed-in account identifier and email, acceptance time, document version and acknowledgements. It also stores dated dealer offers, messages and coordination records. These records are available to you through your invited account and to the coordinator. Relevant details are shared with dealers only within the authority you agree to. Earlier accepted versions remain available as part of the engagement record.
Secure card setup and service payments
When enabled, card setup takes place on Stripe’s secure payment page. Changeover Auto shares your name, email, customer-file reference and payment metadata with Stripe to save your card and collect the agreed service fee after qualifying delivery, with your explicit permission. Stripe processes the card details; this website stores Stripe identifiers, card brand and last four digits, the exact payment permission and its acceptance record, delivery confirmation, payment status and receipt link. It does not store your full card number or security code. Stripe processing may occur outside Australia. You can withdraw permission for future card charges in your private portal before collection starts; this does not remove any fee already payable under your agreement. Contact your coordinator about a payment, correction, refund or dispute. Payment setup and collection remain unavailable until the Stripe connection is enabled.
Before dealers are approached
The service scope, fee, relevant relationships and permission to share details with dealers must be agreed separately. If a purchase proceeds, the dealer provides the contract and payment instructions directly or through your coordinator. Licence documents should be collected through the dealer’s secure process.
Your acknowledgement
The website displays a reference after saving your enquiry. Automatic enquiry acknowledgement emails and SMS are not connected. When workspace email notices are enabled, Resend sends a brief notice when your coordinator publishes a proposal or replies, and notifies the coordinator when you post an update. Notices link to the signed-in workspace and exclude message text and vehicle figures. Pending notices are stored for delivery retries; delivery records are retained for up to 30 days. Keep your on-screen reference so you can quote it during follow-up.
Access, corrections and removal
You can contact Changeover Auto at aaron@changeoverauto.com.au to request access to, correction of or removal of an enquiry. Quote the enquiry reference. Enquiry details remain in the coordinator workspace for follow-up and record keeping; they are not automatically removed on a fixed schedule.
Abuse prevention
To limit spam, the website temporarily stores submission counters with hashed email and, when supplied by the hosting platform, IP address keys. It does not store raw IP addresses in enquiry records. These counters expire after the rate-limit window and are cleared during subsequent submissions.