Outfita - Privacy Policy

Outfita Pty Ltd ("Outfita", "we", "our", "us") respects your privacy and is committed to protecting the personal information you provide to us.

This Privacy Policy explains how we collect, use, disclose and protect your information when you use our app, our website, and related services (the "Platform").

We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles, and, for New Zealand users, the New Zealand Privacy Act 2020 and the Information Privacy Principles.

1. Information we collect

1.1 Information you give us

Account information: your name, email address, phone number, date of birth, username, profile photo and bio.

Listing information: photos, descriptions, sizes, colours, brands, prices and the suburb where an item can be collected.

Identity verification: before you can hire or lend on the Platform, we require identity verification. This is carried out by Stripe using Stripe Identity. You provide a photograph of a government-issued identity document and a selfie directly to Stripe, which matches them to confirm you are the person shown on the document.

Your identity documents and selfie are collected and held by Stripe, not by us. We do not receive or store those images. We receive only the outcome of the check and limited associated information, which we use to mark your account as verified.

Stripe's handling of that information is governed by its own privacy policy, available at https://stripe.com/privacy.

If you prefer not to complete verification, you can still browse the Platform, but you will not be able to hire or lend items.

Payment information: payments are processed by Stripe. We do not store your full card number. We receive and store limited information such as the last four digits, card type, transaction amounts and payout details.

Communications: messages you send through in-app chat, and any correspondence with our support team. In-app messages may be reviewed (automatically or manually) for trust, safety and policy enforcement purposes.

Address information: delivery and collection addresses, shared between parties after a booking is confirmed.

Content you submit: reviews, ratings, photos and any other content you post.

1.2 Information we collect automatically

Device and usage data: device type, operating system, browser type, IP address, pages viewed, time spent, referring pages, and actions taken on the Platform. We use this to understand how the Platform is used and to improve it.

Location information: with your permission, we collect your approximate or precise location to show you items available near you and to calculate distances. You can decline this, or withdraw permission at any time in your device or browser settings, and the Platform will still work. Where you have not shared your location, we may use the suburb saved on your profile instead.

The location shown publicly on a listing is the suburb only. Exact addresses are shared only between the parties to a confirmed booking.

Cookies and similar technologies: see section 7.

1.3 Information from third parties

If you sign in using Apple or Google, we receive basic profile information from those services in accordance with your settings with them.

2. How we use your information

We use personal information to:

• create and manage your account
• verify your identity and reduce fraud and impersonation
• list, display and search items on the Platform
• enable communication between renters and lenders
• process bookings, payments, refunds, bonds and payouts
• calculate distance and show items near you
• send transactional messages such as booking confirmations, reminders and receipts
• send service and, where you have not opted out, promotional communications
• provide customer support and resolve disputes between users
• monitor for prohibited conduct, enforce our Terms, and keep the Platform safe
• analyse and improve the Platform
• comply with our legal obligations

3. Consent

Where we rely on your consent, for example to access your location, or to send marketing communications, you may withdraw that consent at any time. Withdrawing consent may limit your ability to use some features.

4. Who we share your information with

We do not sell your personal information.

We share information with:

Other users: your public profile, listings, ratings and reviews are visible to other users. After a booking is confirmed, your name, contact number and delivery or collection address are shared with the other party to that booking.

Stripe: for payments, payouts, refunds, bonds and identity verification.

Delivery and courier partners: where an item is shipped.

Technology and infrastructure providers: including cloud hosting, database, authentication, push notification, analytics and email providers who process data on our behalf.

Law enforcement and others: where we reasonably believe disclosure is necessary to comply with the law, enforce our Terms, investigate suspected fraud or unlawful activity, protect the safety of any person, or as otherwise permitted or required by law. This includes sharing relevant transaction details with a lender and/or police where an item has not been returned.

Professional advisers and business transfers: our advisers, and any party involved in a merger, acquisition or sale of assets, subject to appropriate confidentiality.

5. Overseas disclosure

Some of the service providers we use store or process personal information outside Australia and New Zealand, including in the United States and other countries where those providers operate infrastructure.

By using the Platform, you consent to your personal information being disclosed to overseas recipients. We take reasonable steps to ensure those recipients handle your information in a manner consistent with this policy and applicable privacy law, but we may not be able to control how information is handled once it is overseas.

6. Data retention

We keep personal information for as long as your account is active, and after that for as long as we need it to:

• comply with our legal, tax and accounting obligations
• resolve disputes, including those raised after a booking has ended
• enforce our agreements and prevent fraud or repeat abuse

Records relating to completed transactions are retained for at least seven years, as required for Australian tax and financial record-keeping.

Inactive accounts may be deactivated after 6 months of inactivity, as set out in our Terms. Deactivation is not the same as deletion; see section 8.

7. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember your preferences (including whether you have dismissed a banner or shared your location), measure how the Platform is used, and improve it.

You can control cookies through your browser settings. Blocking some cookies may affect how the Platform works.

8. Your rights

You may:

• Access the personal information we hold about you
• Correct information that is inaccurate, out of date or incomplete
• Request deletion of your account and personal information, subject to information we are required to retain for legal, tax or dispute-resolution reasons
• Opt out of promotional communications at any time, using the unsubscribe link or by contacting us. You will still receive transactional messages relating to your bookings.
• Withdraw consent to location access or marketing at any time

To exercise any of these rights, contact us at admin@outfita.app. We will respond within a reasonable period, and in any event within 30 days.

We may need to verify your identity before acting on a request.

9. Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. This includes encryption in transit, access controls, and use of reputable infrastructure and payment providers.

No method of transmission or storage is completely secure. If we become aware of a data breach likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (and, for New Zealand users, the Office of the Privacy Commissioner) as required by law.

10. Children and young people

You must be at least 18 to create an account and transact on the Platform.

People under 18 may only use the Platform under the account and supervision of a parent or guardian, who is responsible for all activity on that account.

We do not knowingly collect personal information directly from a person under 18 who is using the Platform without a parent or guardian's supervision. If you believe we have collected information in these circumstances, contact us at admin@outfita.app and we will take steps to delete it.

11. Third-party links and services

The Platform may link to third-party websites and services. We are not responsible for their content or privacy practices. We encourage you to read their privacy policies.

12. Questions and concerns

If you have a question about this policy, or a concern about how we have handled your personal information, contact us at admin@outfita.app. We will acknowledge your message and aim to resolve any concern within 30 days.

If you are not satisfied with our response, you can contact:

Australia: Office of the Australian Information Commissioner, www.oaic.gov.au, 1300 363 992

New Zealand: Office of the Privacy Commissioner, www.privacy.org.nz, 0800 803 909

13. Changes to this policy

We may update this Privacy Policy from time to time. Changes take effect when posted with a new "Last updated" date. Where changes are significant, we will notify you by email or through the Platform.

14. Contact us

Outfita Pty Ltd

Email: admin@outfita.app