PRIVACY POLICY

Last updated: 26 October 2026

1. About this policy

Triple Eight Race Engineering Pty Ltd ACN 105 906 518 (“Triple Eight”, “we”, “us”) is committed to complying with the Privacy Act 1988 (Cth) (Privacy Act), including the 13 Australian Privacy Principles (APPs), and other applicable privacy laws.

This Privacy Policy explains how we collect, hold, use and disclose personal information, and how you can access or correct it or make a complaint.

“Personal information” means information or an opinion about an individual who is identified or reasonably identifiable, whether the information is true or not and whether it is recorded in a material form or not.

2. Who we are

Triple Eight operates the Red Bull Ampol Racing team and the website at redbullampolracing.com.au. This policy applies to personal information collected by Triple Eight through that website, our events, our social media channels, and our other dealings with fans, customers, partners, suppliers and job applicants.

This policy does not cover third-party websites linked from our website, including the official merchandise and memorabilia stores. Those websites have their own privacy policies.

3. What personal information we collect

The kinds of personal information we may collect and hold include:

• identity and contact details: your name, email address, postal address, telephone number, date of birth;

• account, membership and purchase details, including transaction history;

• payment information, such as credit card details (we use a third-party payment provider and do not store

full card numbers);

• competition and promotion entries;

• your preferences and communications with us, including enquiries and survey responses;

• online identifiers and usage information, such as IP address, device and browser type, cookie IDs and pages visited (see section 9);

• photographs, video and CCTV footage taken at our premises and events (see section 4);

• for job applicants and contractors: your resume, work history, qualifications, referee details and right-to-work information; and

• any other information you voluntarily provide to us.

Sensitive information: We only collect sensitive information (for example health information, such as dietary or accessibility needs for an event, or details of an injury on our premises) with your consent or where the law allows.

4. How we collect personal information

We collect personal information directly from you, for example when you:

• use our websites or contact us by email, telephone, mail or social media;

• purchase a membership, product or experience;

• enter a competition or promotion we run, either directly or through a marketing agent;

• sign up for our newsletters or other communications;

• attend an event, hospitality function or tour at our premises or at a race; or

• apply for a job with us, directly or through a recruitment agency.

Third parties, such as our merchandise provider, ticketing and event partners, team partners and sponsors, and social media platforms, may also share personal information with us.

Events and premises: Our premises use CCTV for safety and security. We and our partners take photographs and video at races and events, and these may show people who attend. We may use these images in our publications, website and social media. If you do not want to appear in a published image, please contact us.

If you do not provide the information we ask for, we may not be able to provide the product, service or experience you request.

5. How we use personal information

We only collect personal information that is reasonably necessary for our functions and activities, or as required by Australian law or a court or tribunal order.

We may use your personal information:

• to provide products, services, memberships and experiences you request, and to process payments;

• to respond to your enquiries and provide customer support;

• to run a competition or promotion you have entered;

• to tell you about other products and services that may be of interest to you (see section 8);

• to learn more about your level of satisfaction and your expectations of us;

• to operate, secure and improve our websites and services, and to understand how they are used (see section 9);

• to manage safety and security at our premises and events;

• to assess job applications;

• for other purposes to which you have consented; and

• as required or permitted by relevant laws and regulations.

We generally use personal information for the purpose for which it was collected and for related purposes (directly related for sensitive information) which you would reasonably expect.

6. Disclosing personal information

We may disclose personal information to:

• our related companies;

• service providers who help us operate our business, such as information technology and cloud hosting providers, mailing houses, email and SMS platforms, payment processors, analytics and advertising providers, event and ticketing partners, and our merchandise provider;

• our team partners and sponsors, where you have agreed to this or for a joint promotion you have entered;

• our professional advisers, insurers and auditors; and

• government agencies, regulators and law enforcement as required or authorised by relevant laws and regulations.

We require our service providers to handle personal information in line with the Privacy Act. We will not sell, rent or trade your information to or with any other organisation.

Overseas disclosure

Some of the recipients above are located, or store data, outside Australia. We are likely to disclose personal information to recipients in:

• New Zealand;

• the United States;

• Austria

• the United Kingdom and the European Union; and

When we disclose personal information overseas, we take reasonable steps to ensure the recipient does not breach the APPs in relation to that information, unless an exception in APP 8.2 applies.

7. Consent

We may ask for your consent to use or disclose your personal information for a purpose that is not related to the purpose for which it was collected. Consent must be voluntary, informed, current and specific, and you can withdraw it at any time by contacting us. If you do not consent, this may affect our ability to deliver and improve our products and services.

8. Marketing

We send marketing materials about our own products, services and events, and those of our affiliates and partners, to people who have agreed to receive them or would reasonably expect to receive them.

You can opt out at any time by:

• clicking the “unsubscribe” link in any marketing email;

• replying STOP to any marketing SMS; or

• contacting us using the details in section 18.

We will process your request within [5] business days and free of charge. We will also tell you, on request, where we got your information if we did not collect it from you.

9. Cookies, analytics and tracking technologies

We use cookies, tags, pixels and similar technologies and collect IP addresses on our websites to:

• make our websites work and keep them secure;

• see which pages are visited and how often, and make our websites more user-friendly;

• give you a better experience when you return; and

• measure our marketing and show you advertising that we think may interest you, on our website and on other websites and social media platforms.

External providers may collect information about your use of our website and combine it with other information they hold, under their own privacy policies. We do not use tracking technologies to send sensitive information, or the content of forms you submit, to advertising platforms.

How to control tracking: You can disable or delete cookies in your browser settings. You can also opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on, and manage ad preferences in your Google and Meta account settings. We cannot guarantee our websites will work properly if you disable cookies.

10. Automated decision-making

We do not use computer programs to make, or to do things that substantially and directly relate to making, decisions that could reasonably be expected to significantly affect your rights or interests.

11. Children and young people

Our website and services are intended for a general audience. We do not knowingly collect personal information from children under 15 without the consent of a parent or guardian. Competitions, memberships and events open to people under 18 require a parent or guardian to enter or consent on their behalf. If you think we hold information about a child without appropriate consent, please contact us and we will delete it.

12. Protecting and keeping personal information

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification and disclosure. These steps include technical and organisational measures such as access controls, encryption, multi-factor authentication, security monitoring, staff training and requirements for our service providers.

Only properly authorised people who need access to personal information to do their job can see or use it.

We keep personal information for as long as we need it for the purpose for which it was collected or as required by law (for example, tax and employment records). When we no longer need it, we take reasonable steps to destroy it or de-identify it.

Nothing in this Privacy Policy restricts, excludes or modifies any statutory rights under any applicable law, including the Privacy Act or the Competition and Consumer Act 2010 (Cth).

13. Data breaches

If a data breach is likely to result in serious harm to any individual, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act. We have a data breach response plan to contain, assess and respond to suspected breaches.

Please notify us immediately if you become aware of any actual or suspected breach of security involving information we hold.

14. Accessing and correcting your personal information

You can ask to see the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. To make a request, contact our Privacy Officer using the details in section 18. We may need to verify your identity first.

We will acknowledge your request in writing within seven days and, in most cases, give you access within 30 days.

We do not charge for making a request, and any charge for giving access will not be excessive. If we refuse access or correction, we will tell you the reasons in writing and how to complain, and if you ask, we will note your request on our records.

15. Complaints

If you have a concern about how we have handled your personal information, please email or write to our HR and Compliance Officer (section 18). We will acknowledge your complaint in writing within seven days, investigate it, and tell you the outcome and the steps we have taken within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner:

• Website: www.oaic.gov.au

• Phone: 1300 363 992 

Post: GPO Box 5288, Sydney NSW 2001

16. Privacy and Triple Eight employees

Under the employee records exemption in the Privacy Act, this policy generally does not apply to our handling of employee records for current or former employees, where the handling directly relates to the employment relationship. We nevertheless handle employee records carefully. Current and former employees can contact our HR & Compliance Officer compliance@tripleeight.com.au with any request.

This policy does apply to independent contractors, secondees, work experience students and job applicants, and to health information about any individual, including employees (for example, information about an injury on our premises).

17. Changes to this policy

We may update this Privacy Policy from time to time. We review it at least once a year. The current version will always be on our website, with the date it was last updated at the top.

18. Contact us

• HR and Compliance Officer, Triple Eight Race Engineering Pty Ltd

• Post: PO Box 888 Virginia QLD 4014

• Email: complaince@tripleeight.com.au

• Phone: 07 3635 7000

Want to see more Red Bull Ampol Racing?