Privacy Policy

Australia | New Zealand | United States | Canada

Last Updated: 08 April 2026

1. Introduction

Orikan Group Pty Ltd (ABN 77 620 056 715) and its related entities (“Orikan”, “we”, “us”, “our”) are committed to protecting personal information and maintaining high standards of privacy, data integrity and security. 

This Privacy Policy explains how we collect, use, disclose, store and protect personal information in connection with our products and services across: 

• Australia 
• New Zealand 
• United States 
• Canada 

This Policy is designed to comply with: 

• Privacy Act 1988 (Cth) (Australia) 
• Privacy Act 2020 (New Zealand) 
• California Consumer Privacy Act (as amended by CPRA) and other applicable U.S. state privacy laws 
• Personal Information Protection and Electronic Documents Act (Canada) 

 2. Our Products and Regional Availability

Orikan provides integrated parking and mobility technology solutions. 

Australia & New Zealand 

Orikan provides the full suite of products and services, including: 

• Parking meters 
• Reservation systems 
• Subscription parking systems 
• Permit management systems 
• Infringement management systems 
• Licence Plate Recognition (LPR) systems 
• Access control integrations (including RFID, NFC and QR technologies) 
• Fleet and enterprise parking management systems 
• Central management and analytics platforms 
• Mobile and web-based pay by phone applications  

United States & Canada 

In the United States and Canada, Orikan currently provides: 

• Parking meters 
• Permit management systems 
• Infringement management systems 
• Web-based pay-by-phone  
• Off-street enterprise parking management platforms, including: 
• Reservation systems 
• Subscription parking systems 
• Access control integrations (RFID, NFC, QR, LPR) 
• Enterprise parking management and analytics systems 

Orikan does not currently provide infringement management or permit management systems in Canada.

3. Our Role (Controller or Service Provider)

Depending on the service context, Orikan may act as: 

• Controller / Principal – where we determine the purposes and means of processing personal information); or 
• Service Provider / Processor – where we process personal information on behalf of a municipality, enterprise client, property operator, university, hospital, airport or other customer. 

Where we act as a service provider, the relevant client’s privacy policy may also apply. 

 4. What Personal Information We Collect

“Personal Information” (or “Personal Data”) means information that identifies, relates to, describes, or could reasonably be linked to an identifiable individual. 

We may collect: 

Identity Data 

• Name 
• Date of birth 
• Username and authentication credentials 

Contact Data 

• Email address 
• Phone number 
• Mailing address 

Vehicle Data 

• Vehicle registration number (which may function as a unique identifier)
• Vehicle make, model, year, colour

Payment & Transaction Data 

• Tokenised credit or debit card details 
• Parking session history 
• Reservation records 
• Subscription records 
• Permit records 
• Infringement records 

Access & Credential Data 

• LPR scan records 
• Entry and exit timestamps 
• Gate and access logs 

Enterprise Corporate account information 

• Waitlist data 
• Single sign-on identifiers (where integrated) 

Technical & Usage Data 

• IP address 
• Device information 
• Browser information 
• Application logs  
• Website analytics 

Marketing Preferences 

• Communication preferences 
• Opt-in and opt-out records 

We do not generally collect sensitive personal information unless required by law or in connection with employment processes. 

 5. How We Collect Personal Information

We collect personal information: 

• Directly from you (apps, websites, meters, call centres, portals) as well as when you apply for employment with us 
• Through integrated hardware systems (meters, LPR, access control) 
• Through enterprise identity integrations 
• From government authorities where legally authorised  
• From road authorities where permitted by law 
• From clients where we act as a service provider 
• Through cookies and analytics technologies 

 6. Why We Use Personal Information

We use personal information to: 

• Process parking sessions and payments 
• Manage reservations and subscriptions 
• Administer permits (Australia, New Zealand and USA only) 
• Issue and manage infringements (Australia, Zealand and USA only) 
• Enable facility access and gate control 
• Manage fleet and enterprise accounts 
• Prevent fraud and misuse 
• Provide customer support 
• Improve services and analytics 
• Comply with legal and regulatory obligations 
• Send service-related communications 
• Conduct marketing where permitted by law 
• Consider you for employment or as part of your employment with us 

We do not sell personal information. 

We do not sell mobile opt-in data or share SMS consent data for marketing purposes. 

 7. Legal Bases for Processing

Depending on jurisdiction, we rely on: 

• Performance of a contract 
• Legal obligations 
• Consent 
• Legitimate business interests 
• Public authority functions (Australia & New Zealand enforcement services) 

 8. Disclosure of Personal Information

We may disclose personal information to: 

• Related Orikan entities 
• Government authorities and municipalities 
• Enterprise and commercial clients 
• Road authorities (Australia & New Zealand only) 
• Payment processors 
• Cloud and IT service providers 
• Hardware and integration partners 
• Debt recovery agencies (where applicable) 
• Our professional advisers 
• Law enforcement where legally required 

All third parties who deal with us are contractually required to protect personal information. 

 9. Cross-Border Transfers

Personal information may be transferred between Australia, New Zealand, the United States and Canada.  We may transfer information to approved secure cloud hosting jurisdictions. 

We take reasonable steps to ensure overseas recipients handle personal information consistently with applicable privacy laws. 

 10. Data Retention

We retain personal information only for as long as necessary for: 

• Service delivery 
• Legal compliance 
• Dispute resolution 
• Regulatory obligations 

Information will usually be retained for up to seven (7) years but may be retained for longer – for example where contractually required to do so. 

When no longer required, information is securely destroyed or de-identified. 

 11. Data Security

We maintain: 

• ISO 27001 certified information security management systems? In AU and NZ 
• PCI DSS compliant payment processing 
• 24/7 Security Operations Centre monitoring 
• Role-based access controls 
• Encryption of sensitive data 
• Secure cloud hosting 
• Regular audits and risk assessments 

 12. Data Breach Notification

If a notifiable data breach occurs, we will comply with: 

• Australian Notifiable Data Breaches scheme 
• New Zealand Privacy Act requirements 
• Applicable U.S. state breach notification laws 
• Canadian breach notification requirements 

 13. Automated Decision-Making and Profiling

We do not use fully automated decision-making that produces legal or similarly significant effects without human oversight. 

Where required under applicable U.S. state laws, individuals may request to opt out of profiling that produces legal or similarly significant effects. 

14. Your Privacy Rights

Australia 

You may access or request correction of the personal information that we hold about you by contacting us by email at privacy@orikan.com. We may require you to meet our reasonable costs in providing you with access in the event that we incur such costs (e.g. photocopying costs or costs for time spent on collating large amounts of material). There are some circumstances in which we it may not be possible for us to provide you access to your personal information or an exemption under the Privacy Act may apply. For instance, we may not provide access to information if disclosing that information would impact on the privacy of another individual. Where we will not provide access to personal information held about you, we will tell you why.

New Zealand 

Access and correction rights. Complaints may be made to the Privacy Commissioner. 

California 

Right to Know, Delete, Correct, Data Portability, Opt-Out of Sale/Sharing, Limit Sensitive Information, Non-Discrimination. 

We do not sell personal information. 

Other U.S. States 

Access, Delete, Correct, Portability, and Opt-Out of Targeted Advertising or Profiling. 

Canada 

Access, correction, withdrawal of consent (subject to legal limits), and complaint to the Office of the Privacy Commissioner of Canada. 

Requests: privacy@orikan.com 

 15. Cookies

We use cookies for analytics and service functionality. Users may manage preferences through browser settings. 

 16. Children’s Privacy

Our services are not directed to children under 16. 

 17. Complaints

If you have a complaint about the way in which we have handled any privacy issue, we will consider your complaint and determine whether it requires further investigation. We will endeavour to notify you of the outcome of this investigation within a reasonable period of time.

Contact privacy@orikan.com if you would like to make a complaint.

If you are unsatisfied with the way we have handled a privacy issue, you may contact the Office of the Australian Information Commissioner or to the privacy regulator in your location.

 18. Contact Details

Privacy Officer
Orikan Group Pty Ltd
Level 5, 850 Collins Street
Docklands VIC 3008
Australia

Email: privacy@orikan.com
Website: https://orikan.com