INFORMATION SECURITY POLICY MANUAL.
As a Licensed Vehicle Tester operating under the Department of Transport and Planning (DTP), Casey Brake and Clutch handles customer personal information and vehicle records every day. Protecting that information is part of how we do business.
Our Commitment to Customers & DTP
Casey Brake and Clutch operates as a certified Licensed Vehicle Tester (LVT) in Victoria. In the execution of roadworthy examinations, vehicle servicing, and part installations, we capture essential vehicle telemetry and owner data.
This document outlines the rigorous administrative, technical, and physical safeguards we maintain. Our full Information Security Policy Manual is maintained internally, reviewed annually, and made available to the Department of Transport and Planning for audit upon request.
What Information We Handle
We adhere strictly to data minimisation principles. We only collect information strictly required to perform authorized mechanical diagnostics, safety checks, and statutory roadworthy inspections.
Name, phone number, email address, and billing particulars collected for service bookings, job authorizations, and tax invoicing.
VIN numbers, registration details, odometer readings, and technical test measurements required to issue Victorian Roadworthy Certificates.
Inspection logs, tester signatory records, and safety passes/failures mandated under Licensed Vehicle Tester regulatory obligations.
Strict Non-Disclosure Guarantee: We only collect what we need to do the job, and we do not sell, rent, or share customer information with any external marketing parties or entities outside of our strict legal and licensing obligations.
How We Protect Your Information
Five core operational layers ensure full digital and physical defence of all collected records.
Secure Access
Every staff member uses their own individual login. Passwords are never shared, and multi-factor authentication is enforced on key business systems. Access to the DTP vehicle testing system is restricted strictly to authorised testers and solely for genuine roadworthy inspection work.
Protection Against Malware
All business computers run a current, paid, commercial anti-virus product with real-time protection. Automatic scans run daily, virus definitions update continuously, and operating systems receive automatic security patches.
Physical Security
Our premises are locked and secured outside business hours. Customer paperwork and inspection records are stored in locked cabinets, workstations auto-lock when unattended, and our office area is strictly restricted to staff.
Role-Based Access
Staff can only access the systems and records their specific role requires. Access privileges are approved directly by the Director, reviewed on a regular cadence, and revoked the same day a staff member leaves the business.
Secure Storage & Destruction
Records are kept securely for as long as our licensing and legal obligations mandate. When no longer needed, paper records are cross-cut shredded and digital media is sanitised or physically destroyed before equipment disposal.
If Something Goes Wrong
We maintain a formally documented Data Breach Response Procedure.
If a security incident or suspected breach ever occurs, our team acts immediately to:
- Contain the breach and isolate affected endpoints instantly.
- Promptly notify the Department of Transport and Planning where departmental systems or testing records are involved.
- Notify affected customers in accordance with obligations under the Privacy Act 1988 (Cth).
- Conduct a root-cause review and record remediation steps to prevent recurrence.
Our People & Security Training
Every member of our team completes security awareness training during induction and mandatory refresher training annually. Training covers safe customer data handling, scam and phishing identification, and system access hygiene. All staff execute signed Acceptable Use Agreements prior to access provision.
Third Party Providers
Any external service provider, IT vendor, or software partner with access to our systems or data must be approved by the Director and bound by a comprehensive written agreement defining precise access scopes and confidentiality obligations.
Questions Regarding Your Information?
If you have questions about how we handle your personal or vehicle information, or wish to request access or correction of your records, please contact our workshop directly.
Casey Brake & Clutch
24 Morialta Road, Cranbourne West VIC 3977
Licensed Vehicle Tester (LVT) • DTP Operating Standards
Policy version 1.0 – reviewed annually. Last reviewed: August 2026.
STOP WITH CONFIDENCE. SERVICE WITH PEACE OF MIND.
Experience certified automotive workmanship paired with strict data integrity standards.