Last Updated: 12 March 2026
Effective Date: 12 March 2026
Moto4x is a registered brand of GIGGLEPLUM PTY LTD (ACN 627 232 473) (“we”, “us”, “our”). This Privacy Policy describes how we collect, use, store and protect personal information when you use our websites (including www.moto4x.com), our QR tag service, the Moto4x mobile application and any related services (collectively, the “Services”).
By accessing or using any of our Services you acknowledge that you have read, understood and agree to be bound by this Privacy Policy. If you do not agree, please do not use our Services.
1. Services We Operate
1.1 Moto4x QR Tag Service
The Moto4x QR Tag service is a QR-code-based contact system. Owners purchase physical QR tag stickers, activate them online and attach them to vehicles or personal property. When a third party (“Scanner”) scans a QR tag, they can send the tag owner a message without either party revealing unnecessary personal information. Owners receive notifications via email and, optionally, SMS.
1.2 Moto4x Mobile Application
The Moto4x mobile app provides motocross and motorsport-related features including event information, community content and notifications. The app may be downloaded from the Apple App Store or Google Play Store.
1.3 Moto4x Website & Tag Shop
Our website at www.moto4x.com hosts informational content, the Moto4x Tag Shop (where physical QR tags are available for purchase) and supporting pages for all our Services.
2. Information We Collect
2.1 Information You Provide Directly
| Data Type | Who Provides It | When Collected | Purpose |
|---|---|---|---|
| Email address | Tag Owners | During tag activation and login | Account identification, authentication (magic link emails), tag notification delivery |
| Email address | Scanners | When sending a message to a tag owner | Enables the tag owner to reply to the Scanner’s message |
| Phone number | Tag Owners (optional) | When enabling SMS notifications in tag settings | Sending SMS alerts when someone contacts the owner via their tag |
| Phone number | Scanners (optional) | When contacting a tag owner | Sending an SMS notification when the tag owner replies |
| Message content | Scanners & Owners | When sending or replying to messages | Facilitating communication between Scanner and Owner |
| Vehicle information | Tag Owners | When configuring tag settings (e.g. vehicle model, listing details) | Identifying the vehicle associated with a tag |
| Custom display message | Tag Owners | When editing tag settings | Shown on the public tag page when scanned |
2.2 Information Collected Automatically
| Data Type | How Collected | Purpose |
|---|---|---|
| IP address (anonymised) | Recorded when a QR tag is scanned | Rate limiting, fraud prevention and anonymous scan analytics. We anonymise your IP address before storage — the raw IP is never persisted and cannot be reversed to identify you. |
| Approximate location (city level) | Determined when a QR tag is scanned (with your permission or based on general network information) | Showing tag owners the approximate area where their tags have been scanned (city and country only). |
| Device and browser information | User-agent string sent by your browser | Scan analytics, compatibility and debugging |
| Cookies | Set when you log in to the owner dashboard or admin panel | Maintaining your authenticated session. We use only strictly necessary session cookies — no advertising or third-party tracking cookies are set by our QR tag service. |
2.3 Information from Third Parties
If you purchase Moto4x QR tags through a third-party retailer (such as Amazon), we do not receive your payment or billing information from that retailer. Any purchase data is governed by the retailer’s own privacy policy.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Service delivery: Operating QR tag activation, message routing, owner notifications and the owner dashboard.
- Authentication: Verifying your identity through secure authentication methods.
- Communication: Sending you transactional emails (activation links, message notifications, owner replies) and, where you have opted in, SMS notifications.
- Analytics and improvement: Aggregated, anonymised scan data helps us understand usage patterns and improve the service.
- Security and fraud prevention: Automated abuse prevention measures protect against misuse.
- Legal compliance: Where necessary to comply with applicable laws, regulations or legal processes.
We do not sell your personal information to third parties. We do not use your information for advertising profiling.
4. SMS and Email Communications
4.1 Email
By providing your email address to use our QR tag service, you consent to receiving transactional emails that are essential to the service, including:
- Magic link authentication emails
- Notification emails when a Scanner contacts you via your tag
- Reply notifications when a tag owner responds to your message
These are transactional messages required for the service to function — they are not marketing emails. Emails are sent from [email protected]. Every email includes an unsubscribe link in the footer.
4.2 SMS (Text Messages)
SMS notifications are entirely optional and opt-in only.
For Tag Owners
When you enable “SMS Notifications” in your tag settings and provide your mobile phone number, you consent to receiving SMS text message alerts when someone contacts you through your QR tag. Messages are brief, notification-only alerts (for example: “Moto4x: Someone left a message about your vehicle. Check your email for details.”). They do not contain the Scanner’s message content or personal details.
For Scanners
If you optionally provide your phone number when contacting a tag owner, you consent to receiving a single SMS notification if and when the tag owner replies to your message.
SMS Frequency and Costs
- Message frequency: SMS messages are sent only in response to specific actions (a Scanner sending a message or an Owner replying). Frequency varies based on your usage. Rate limits are applied to prevent excessive messaging.
- Message and data rates may apply. Standard carrier messaging rates apply to all SMS messages sent to your phone. We do not charge separately for SMS notifications.
Opting Out of SMS
You can stop receiving SMS messages at any time:
- Tag Owners: Disable the “SMS Notifications” toggle in your tag settings at moto4x.com/my-tags. You may also remove your phone number from your tag settings entirely.
- Scanners: Simply do not provide a phone number when contacting a tag owner. If you previously provided a number, it is stored only for that specific conversation and is not reused.
- Reply STOP: You may reply STOP to any SMS message you receive from us to opt out of future messages.
Opting out of SMS does not affect email notifications or your ability to use the Moto4x QR tag service.
SMS Consent
By enabling SMS notifications and providing your phone number, you expressly consent to receive text messages from Moto4x at the phone number provided. Consent is not a condition of purchasing any goods or services. You may revoke your consent at any time by disabling SMS notifications in your settings or by replying STOP to any message.
5. How We Share Your Information
We do not sell, rent or trade your personal information. We may share limited information with the following categories of recipients:
5.1 Between Scanners and Tag Owners
When a Scanner contacts a tag owner, the Scanner’s email address and message content are shared with the tag owner so the owner can reply. The tag owner’s email address and phone number are never revealed to the Scanner. Replies are routed through our system to maintain privacy.
5.2 Service Providers
We use the following third-party service providers to operate our Services:
- Amazon Web Services (AWS): Email delivery, data processing and infrastructure hosting. Data may be processed in the US or Australia.
- Twilio: SMS message delivery. When you opt in to SMS notifications, your phone number is transmitted to Twilio to deliver text messages. Twilio’s privacy policy is available at twilio.com/legal/privacy.
Each service provider processes data only as necessary to perform its function and is bound by its own privacy policy and applicable data protection obligations.
5.3 Legal Requirements
We may disclose personal information where required by law, regulation, legal process or governmental request, or where we believe disclosure is necessary to protect our rights, your safety or the safety of others.
6. Data Storage and Security
6.1 Where We Store Data
Our primary services are hosted on servers located in the United States and Australia. By using our Services, you consent to the transfer and storage of your information in these locations.
6.2 How We Protect Data
We implement industry-standard security measures to protect your personal information, including:
- Encryption in transit (HTTPS/TLS for all web traffic)
- Cryptographic hashing and anonymisation of sensitive data before storage
- Secure, time-limited session management
- Protection against common web application threats (injection, cross-site attacks, automated abuse)
- Single-use, time-limited authentication tokens
While we take reasonable precautions to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
6.3 Data Retention
We retain your personal information for as long as your account is active or as needed to provide you the Services. Specifically:
- Owner accounts and tag data: Retained for as long as the account exists and for a reasonable period after deactivation to allow reactivation.
- Conversation and message data: Retained for as long as the associated tag is active.
- Scan log data: Retained for analytical purposes. IP hashes and location data may be periodically purged.
- Authentication tokens: Expire after a short period and are single-use; expired tokens are periodically cleaned up.
If you wish to have your data deleted, please contact us (see Section 11).
7. Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information:
- Access: You may request a copy of the personal data we hold about you.
- Correction: You may request correction of inaccurate personal data.
- Deletion: You may request deletion of your personal data, subject to our legal obligations and legitimate interests.
- Opt-out of SMS: You may disable SMS notifications at any time via your tag settings or by replying STOP to any message.
- Withdraw consent: Where we rely on consent to process your data, you may withdraw that consent at any time.
To exercise any of these rights, please contact us at the details provided in Section 11. We will respond within 30 days of receiving your request.
7.1 California Residents (CCPA)
If you are a California resident, you have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, to request deletion of your personal information and to opt out of the sale of your personal information. We do not sell personal information.
7.2 Australian Residents (Privacy Act 1988)
If you are an Australian resident, your personal information is handled in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). You may access and correct your personal information and make complaints to the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the APPs.
8. Children’s Privacy
Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe a child under 16 has provided us with personal information, please contact us.
9. Cookies and Tracking
Our QR tag service uses only strictly necessary cookies to maintain authenticated sessions (owner dashboard login and admin panel login). These cookies:
- Do not track you across websites
- Are not used for advertising
- Are not shared with third parties
- Expire when your session ends or after the configured session duration (up to 30 days for owner sessions)
The Moto4x website may use additional analytics cookies (such as Google Analytics or Facebook Pixel) on other pages. Where applicable, we will request your consent before setting non-essential cookies in accordance with applicable laws.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the “Last Updated” date at the top of this page. We encourage you to review this page periodically. Your continued use of our Services after changes are posted constitutes your acceptance of the updated policy.
11. Contact Us
If you have questions, concerns or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: [email protected]
- Website: www.moto4x.com
- Entity: GIGGLEPLUM PTY LTD (ACN 627 232 473) trading as Moto4x
This Privacy Policy applies to all Services operated by GIGGLEPLUM PTY LTD under the Moto4x brand.
