Last updated:  7 July 2026

1. What are Lexus Connected Services?
2. How does this Privacy Policy apply to Connected Services?
3. What is personal information?
4. What kinds of Connected Services information do we collect and for what purpose?
5. How can you opt out of Connected Services?
6. Why does Lexus collect this information?
7. To which other parties does Lexus usually disclose this information?
8. Disclosing your information overseas
9. Direct marketing
10. Protecting your personal information
11. Data Retention
12. Accessing and correcting your information
13. Your Responsibilities
14. Resolving concerns
15. Contacting us

1. What are Lexus Connected Services?

Connected Services are a suite of services that Lexus Australia offers for certain Lexus vehicles that have a Data Communication Module (DCM). A DCM is a modem with a built-in SIM card in your vehicle. Connected Services use information collected from your vehicle and sent through the DCM to provide services to enhance the safety and security of the vehicle and provide additional convenience and a better driving experience (Connected Services). To check if your vehicle has Connected Services functionality, please refer to your Owner’s Manual or view a list of compatible vehicles at lexus.com.au/connectivity.

If your vehicle has Connected Services (and an owner has not opted out), it will collect and send vehicle data through the DCM. The Connected Services available to you will depend on your vehicle model, and the applicable DCM fitted to your vehicle. Please note that vehicle models with different production periods may be fitted with different DCMs. If you have any questions about the specific DCM fitted to your vehicle and/or the mobile telecommunication network available for your vehicle, please contact a Lexus dealer or call Lexus Customer Assistance Centre on 1800 023 009.

All Connected Services fall within one of the following categories:

A. Safety Services

All connected vehicles come with Safety Services automatically activated. Safety Services include:

(a) SOS Emergency Assistance (SOS); and

(b) Automatic Collision Notification (ACN)

We may collect certain information, including your vehicle's location, to help you get assistance from us and emergency services if:

(a) your vehicle is involved in a serious collision (for example, where an airbag deploys or the vehicle's impact sensors are triggered and we receive an automatic collision notification); or

(b) we are notified of an emergency (for example, a vehicle occupant presses the SOS button inside your vehicle, or your vehicle detects that the driver is unresponsive through the emergency driving stop system (EDSS)).

We only use this information to provide the SOS Emergency Assistance and Automatic Collision Notification services to you, or as the law permits or requires.

You can read more about these services on our website at lexus.com.au/connectivity.

You can ask us to deactivate Safety Services at any time (see section 5 “How can you opt out of Connected Services?” below).

B. Additional Connected Services automatically enabled on delivery

All connected vehicles come with certain additional Connected Services automatically active. Depending on your vehicle model, these services may include:

(a) Routine Vehicle Maintenance (RVM)

Depending on your vehicle model, we may collect limited information to run diagnostics on your vehicle’s DCM and check that it is working properly.

(b) Over-the-Air (OTA) Software Updates

We may collect limited information, such as your Vehicle Identification Number (VIN), vehicle SIM information, and software details, to check that your vehicle and DCM software is up to date.

(c) Two factor authentication

Depending on your vehicle model, we collect limited information, including your vehicle's odometer reading, in connection with the process of verifying your identity to add your vehicle to the Lexus Connected App.

You can ask us to deactivate these additional Connected Services at any time (see section 5 “How can you opt out of Connected Services?” below).

C. Connected Services not tied to subscription

(a) Online Service Booking

If you book a vehicle service with your preferred dealer through the Lexus Connected App, we may collect your VIN and limited contact and vehicle maintenance and vehicle health information to process your booking.

D. Additional Connected Services you can subscribe to via Lexus Connected App

You can also choose to receive additional Connected Services by opting in through the Lexus Connected App, including:

(a) services available in the Lexus Connected App (for example Recent Trips, Vehicle Locator, Remote Connect, odometer & fuel readings, Drive Pulse, Guest Driver Settings, Stolen Vehicle Tracking, and Service Connect);

(b) services available through the multimedia head unit (for example Connected Navigation, Connected Voice Assistant); and

(c) DCM Health Check, which, depending on your vehicle model, is provided automatically when you subscribe to any Connected Services and turn on data sharing. DCM Health Check periodically runs diagnostics on your vehicle’s DCM to check that it is working properly.

These services are only active if the vehicle owner has subscribed to them. You can opt out at any time (see section 5 “How can you opt out of Connected Services?” below).

See section 4 “What kinds of Connected Services information do we collect and for what purpose?” below for more details about the types of information we collect when you use Connected Services and why we collect it.

2. How does this Privacy Policy apply to Connected Services?

We are bound by the Privacy Act 1988 (Cth) (“Privacy Act”) and its Australian Privacy Principles (“APPs”). We understand that your personal information is important to you, and we value your trust. This policy sets out how Lexus handles your personal information which is collected when you use the Connected Services. In this policy “Lexus” (or “we” or “us”) is Lexus Australia, a division of Toyota Motor Corporation Australia Limited ABN 64 009 686 097.

This policy applies in addition to the general Lexus Group Privacy Policy available at lexus.com.au/privacy. We recommend you review and consider the specific scenarios outlined in the Lexus Group Privacy Policy to consider whether they apply to you.

When you create an account on the Lexus Connected App (e.g. to activate additional Connected Services) we will collect certain personal information about you, such as your name and email address. Please see our general Lexus Group Privacy Policy and the Lexus Connected Services Terms of Use for further information on how we collect, use and disclose your information when you use the Lexus Connected App.

Please contact our privacy team using the contact details at the end of this policy if you, or a person you assist, would like:

• further information about our handling of personal information; or
• the information in this Privacy Policy explained to you or in a different format.

This Connected Services Privacy Policy is current as of the date noted above. We may make changes to this Privacy Policy from time to time, in which case we will notify you of the change by displaying an updated version on our website and on the Lexus Connected App.

3. What is personal information?

In this policy, “personal information” has the same meaning as in the Privacy Act. Under the Privacy Act, personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable:

(a) whether the information or opinion is true or not; and

(b) whether the information or opinion is recorded in a material form or not.

4. What kinds of Connected Services information do we collect and for what purpose?

When you use Connected Services the kinds of information (including in some cases personal information) which we collect either from you or your vehicle include the following:

Collection of sensitive information

We only collect sensitive information about you as described above and with your consent, unless the law permits, requires or authorises us to collect it. Sensitive information has the meaning given in the Privacy Act and includes information about your health, race, ethnic origin and religious beliefs.

Providing someone else’s personal information

If you give us personal information about another person (such as a joint vehicle owner, authorised driver (Guest Driver) or contact person), you must tell them about this policy so they know you have shared their information with us and can read this policy to understand how we will handle it. You must get all necessary consents from the other person before giving us their personal information (including a parent's or legal guardian’s permission for minors).

5. How can you opt out of Connected Services?

If you want to stop using any or all Connected Services, you can opt out in the following ways:

• For additional Connected Services you subscribe to via the Lexus Connected App: go to “MyGarage” or tap your vehicle’s nickname, then “Subscriptions”, then select the relevant package and cancel your subscription. Some additional Connected Services depend on each other (because they rely on the same vehicle data). If you unsubscribe from one, it may affect others. The Lexus Connected App will tell you about any other services that will be affected before you confirm your opt-out.
• For Safety Services (SOS Emergency Assistance (SOS) and Automatic Collision Notification (ACN)) and additional Connected Services automatically enabled on delivery: contact your Lexus dealer or call Lexus Customer Assistance Centre on 1800 023 009

6. Why does Lexus collect this information?

We collect, hold, use and share information about your use of Connected Services (which may include personal information) for the purposes set out in the table in section 4 above.

We only use personal information collected through Connected Services to provide those services to you, or as the law otherwise permits, requires or authorises.

If you want to use Connected Services but do not give us your personal information, we may not be able to provide you with all Connected Services, or we may only be able to offer them with limited features.

We may also use and share information collected from your vehicle through Connected Services to help us develop our products and services. We only use de-identified information for this purpose.

7. To which other parties does Lexus usually share this information?

When you use Connected Services, we may disclose information about your use of Connected Services (which may in some cases include personal information) to other parties for the purposes described in sections 4 and 6 above, including to:

• Lexus Dealers, but only where you ask a Dealer to provide you with products or services (e.g. where you ask a Dealer to service your vehicle, the Dealer may access vehicle maintenance information about your vehicle);
• emergency service providers, but only as part of the Safety and Security Services as described in section 4;
• the police, where you have requested Stolen Vehicle Tracking (SVT) services from us and the police request the location of your vehicle from us.
• our related companies and service providers who help us to provide and support Connected Services, including:
  • our related bodies corporate overseas including our parent company Toyota Motor Corporation in Japan, Toyota Motors North America and Toyota Connected North America;
  • customer support providers (e.g. Lexus Emergency Call Centre operators);
  • information technology service providers (e.g. KDDI, Aisin and TomTom); and
  • lawyers and other professional advisors.

In certain circumstances, we may share information about you or your vehicle (which may include personal information) collected while providing Connected Services with other parties (which may include government or law enforcement agencies, bodies or regulators):

• where an Australian law or a court or tribunal order requires or authorises us to do so; or
• as otherwise permitted under the Privacy Act.

We will handle any such disclosures in accordance with applicable laws.

Other than as described above, we do not share information about your use of Connected Services with anyone else unless you ask us to.

8. Sharing your information overseas

We may share your information (which may include personal information) with organisations located overseas to support the purposes described in this policy. These may include:

• our parent company Toyota Motor Corporation in Japan and other Toyota entities overseas including in the USA; and
• our service providers that are located in, or hold data overseas including in the USA, Japan, Singapore, India, the UK, Ireland, the Philippines and Sweden.

9. Direct marketing

We do not use personal information we have collected from the Safety and Security Services for direct marketing purposes.

With your consent, we may use the contact information we collect via the Lexus Connected App to enable the OneLexus Network (or any of the entities which make up the OneLexus Network including their agents and contractors if any acting on their behalf) to send you direct marketing to inform you about products or services, special offers, programs, promotions and events that may be of interest to you. These marketing communications may include joint promotions with Lexus dealers or other promotion partners and may be sent to you using any contact details provided by you, such as post, telephone, email or SMS.

The OneLexus Network is comprised of authorised Lexus dealers in Australia, Lexus Australia, Lexus Financial Services (a division of Toyota Finance Australia Limited ABN 48 002 435 181) and Aioi Nissay Dowa Insurance Company Australia Pty Ltd trading as Lexus Insurance. The organisations comprising the OneLexus Network are separate organisations. If you do not wish to receive marketing communications and surveys from a member of the Network, you can let that organisation know at any time using the contact details in their respective privacy policies or utilising the “unsubscribe” or other opt-out function offered by the organisation in each marketing communication.

If you do not wish to receive any marketing communications from us, you can let us know using the contact details provided in section 15 "Contacting us” below, or by utilising the “unsubscribe” function in electronic communications from us. In some circumstances we may need to contact you to obtain additional information, verify your identity or to clarify your request, to action it.

If the law requires us to provide you with information about our products or services (for example, product recalls), we will do so even if you have opted out of marketing.

10. Protecting your personal information

We may hold your personal information in digital and paper form. We take reasonable steps to protect it from misuse, loss, interference, unauthorised access, modification and disclosure. Some of the ways we protect your personal information include:

• physical security for our external and internal premises;
• using secure servers;
• limiting access to your information to staff who need it for their role;
• using security tools to prevent unauthorised access to or damage to electronically stored information, such as identifiers and passwords, firewalls, encryption and anti-virus software; and
• limiting Connected Services to only the features you have chosen to receive.

11. Data Retention

We store, process and keep your personal information for the purposes described in this Privacy Policy. When we no longer need it, we take reasonable steps to destroy or de-identify it, unless the law requires or authorises us to keep it for longer.

12. Accessing and correcting your information

You can see what information Lexus collects as part of Connected Services at any time by visiting the “Data Consents and Terms” section of the Lexus Connected App.

You can ask us to give you access to, or correct, personal information we hold about you by contacting us using the details at the end of this policy.

If you request access to your personal information, we may charge a reasonable fee to cover the costs of providing that access. This fee only covers the cost of providing access, not the cost of making the request. Before acting on your request, we will give you an estimate of any fee and ask you to agree to it.

The Privacy Act allows us to refuse access in certain circumstances. If we refuse or restrict your access, we will write to you to explain why. You can complain about a refusal to the Office of the Australian Information Commissioner (website: www.oaic.gov.au/, telephone: 1300 363 992).

We rely on the personal information we hold about you to provide our products and services and to run our business. It is important that this information is accurate, complete, up to date and relevant. From time to time, we may ask you to confirm that your information is still correct. If you find that any personal information we hold about you is wrong, please contact us straight away and we will take reasonable steps to correct it.

13. Your Responsibilities

To help us keep your personal information accurate, complete, up to date and relevant, you must:

• tell us if you sell or transfer your Lexus vehicle; and
• tell us if you bought or received your Lexus vehicle outside of the Lexus Dealer network.

If you do not tell us about a sale, purchase, acquisition or transfer of a vehicle, we may continue to send communications about that vehicle to the last known registered owner in our records. To protect your privacy and the privacy of others, we recommend that you:

• never share your Lexus Connected App password;
• remove your vehicle from myGarage on the Lexus Connected App if you sell the vehicle or return a rented vehicle;
• tell passengers and drivers of your connected vehicle that we collect and use vehicle data to provide Connected Services; and
• if you share a Digital Key with someone else, let them know that their contact name, as it appears in your phone contact list, will be shared with us.

14. Resolving concerns

If you believe we have breached the Privacy Act, you can make a complaint. You can complain by contacting the person or department you were dealing with, or by using the contact details at the end of this policy.

We aim to respond to your complaint in writing within 30 calendar days. If we cannot do so, we will contact you to let you know how long it will take.

If you are not satisfied with our response, you can contact us to discuss your concerns, or lodge a complaint with the Office of the Australian Information Commissioner by visiting oaic.gov.au, calling 1800 023 009 or emailing [email protected].