Privacy policy
How OZUF — OZ Ute Fitouts handles personal information from website visits, enquiries, quotes, orders and fitment projects.
Last updated: 28 August 2026
This privacy policy explains how Oz Resources Pty Ltd trading as OZ Ute Fitouts (OZUF, we, us or our) collects, holds, uses and discloses personal information through the OZUF website, the My OZUF customer account, the OZUF iOS app, product and fitment enquiries, quotes, orders, delivery or installation, and after-sales and warranty support.
Who we are
Oz Resources Pty Ltd trading as OZ Ute Fitouts
ABN 58 132 797 981
172 Lavarack Avenue, Eagle Farm QLD 4009, Australia
Phone: 1300 OZUTES
Privacy contact: [email protected]
Information we collect
Depending on how you deal with us, we may collect:
• your name, email address, telephone number, delivery and billing address, business or organisation, and communication preferences;
• My OZUF account and authentication information;
• vehicle make, model, year, series, cab or body style, registration or vehicle-identification details where reasonably needed, existing modifications, intended load and fitment requirements;
• product selections, measurements, drawings, photographs, Design Studio configurations, quote and order history, delivery or installation details, and support or warranty information;
• billing details, transaction records and payment status;
• messages, emails, live-chat records and notes of telephone or in-person discussions;
• marketing consent, unsubscribe requests and other preferences; and
• technical information such as IP address, browser or app/web-view type, approximate location derived from an IP address, referring page, pages viewed, cart and session activity, cookie identifiers, and security or diagnostic logs.
Please do not send payment-card details or unnecessary sensitive information through an enquiry, support or account-deletion form.
How we collect information
We collect information:
• directly from you when you create or use a My OZUF account, place an order, submit a form, use live chat, contact us, visit us or provide information for a fitment, delivery, installation or warranty matter;
• automatically when you use the website or website pages shown inside the OZUF app, including through necessary Odoo session, login, security and cart technologies and Cloudflare Web Analytics; and
• from another person or service provider where you have authorised it or where it is reasonably necessary to complete an order, delivery, installation, payment, support or legal process.
The OZUF iOS app displays parts of ozuf.com.au inside a secure web view. Those pages use the same My OZUF account, cart and website session as the website. The app's native warranty checklist prepares photographs selected by you on your device. It does not upload those photographs automatically; they leave your device only when you choose to share or submit them.
Why we use information
We use personal information to:
• create and administer My OZUF accounts, saved carts and Design Studio drafts;
• respond to enquiries and recommend relevant product or fitment options;
• verify vehicle details, payload assumptions, access needs and installation requirements;
• prepare quotes, process and administer orders, reconcile payments, and arrange freight, collection or installation;
• provide customer service, safety notices, product updates, returns, consumer-guarantee remedies and warranty support;
• operate, secure, diagnose and improve our website, app, catalogue and customer journey;
• manage inventory, suppliers, business records, fraud and security controls, and legal or regulatory obligations; and
• send marketing where you have consented or where otherwise permitted, with a way to opt out. If you start but do not complete checkout, Odoo may send an abandoned-cart reminder.
We do not sell or rent personal information to data brokers, and we do not use personal information for third-party behavioural advertising.
Payments
The website does not currently collect card credentials or send card details to an online card processor. An online order is recorded in Odoo using the payment method Pay after freight confirmation. OZUF then confirms freight or pickup and sends payment instructions separately. Banks and payment services used to complete a payment handle information under their own privacy terms.
If we add an online payment provider, we will update this policy and the App Store privacy information before using that provider in the app or website.
Who receives information
We disclose only information reasonably needed for the relevant purpose. Recipients may include:
• Odoo S.A. and its subprocessors, which provide the website, ecommerce, customer account, CRM, live chat, cloud hosting, security, backups and related business systems;
• Microsoft, which provides Microsoft 365/Outlook email used to send and receive customer communications;
• Cloudflare, whose privacy-first Web Analytics beacon measures aggregate website use without using cookies for cross-site tracking;
• banks or payment services used for a payment arranged after OZUF confirms the order;
• couriers, freight companies, installers, fabricators and suppliers involved in a quote, order, delivery, installation or support matter;
• professional advisers, insurers, auditors and debt-recovery providers; and
• regulators, courts, law-enforcement bodies or other parties where disclosure is required or authorised by law, or reasonably necessary to protect safety, rights or property.
The currently configured delivery choices are pickup from OZUF or freight quoted after the order. No third-party delivery integration currently receives customer data automatically from website checkout.
Our service providers are expected to protect personal information and use it only for the services they provide or as permitted by law.
Overseas processing
OZUF is based in Australia, but some providers may store, back up or access information overseas. Odoo states that its Oceania hosting region uses production infrastructure in Australia and backup locations in France, the Netherlands and Canada. Odoo or its subprocessors may also provide support from other countries. Microsoft 365 processing locations depend on OZUF's tenant configuration and Microsoft's service and support arrangements.
Provider locations can change. Contact us if you would like current information about likely overseas processing relevant to your dealings with OZUF.
Cookies and analytics
The website uses necessary cookies or similar technologies for security, language, login, customer-account, cart and session functions. Blocking those technologies may stop parts of the shop or My OZUF from working.
Cloudflare Web Analytics is active on public website pages. Cloudflare describes this service as privacy-first and states that it does not collect or use visitors' personal data. Google Analytics and Plausible Analytics are not currently enabled on the OZUF website.
Odoo may create browser, server and security logs for service operation, performance and security. Odoo states that these logs may be retained for up to 12 months unless a longer period is needed for a legitimate security or performance concern or is required by law.
Security
We use reasonable administrative, technical and physical safeguards designed to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These include access controls, encrypted connections, service-provider security controls and staff procedures. No online or storage method is completely secure.
Retention
We keep personal information only for as long as reasonably needed for the purpose for which it was collected and for legal, tax, accounting, warranty, safety, fraud-prevention and dispute requirements. Our working retention periods are:
• My OZUF account, profile, saved carts and Design Studio drafts: while the account is active; information not otherwise required is deleted or de-identified within 30 calendar days after we verify and accept an account-deletion request;
• unconverted enquiries and quotes: generally two years after the last meaningful contact;
• orders, invoices, payment and tax records: at least five years after the relevant transaction or record, and longer where reasonably required by law, an active warranty, a safety matter or a dispute;
• routine support and live-chat records: generally two years after the matter is closed;
• warranty, safety, complaint and dispute records: for the longer of the applicable warranty or claim period and up to seven years after final resolution where reasonably needed;
• website, server and security logs: up to 12 months under Odoo's stated service retention, unless required for an active security investigation or by law; and
• account-deletion request records: a minimal record of the request, identity check, outcome and completion date for two years after completion.
When information is no longer required, we take reasonable steps to delete, destroy or de-identify it. Information removed from active systems may remain temporarily in restricted backups until it is overwritten under the provider's backup cycle. Backup copies are not used for ordinary business purposes and, if restored for disaster recovery, deletion controls are reapplied.
Access, correction and marketing choices
You may ask to access or correct personal information we hold about you. You can update some account information in My OZUF, use an unsubscribe link in marketing email, or contact our Privacy Officer at [email protected] or 1300 OZUTES.
We may need to verify your identity. We may refuse or limit access where permitted by law and will explain the reason where required.
Delete your My OZUF account
You can request permanent deletion at ozuf.com.au/delete-account (https://www.ozuf.com.au/delete-account). We will acknowledge the request, verify that it came from the account holder and complete it within 30 calendar days after verification, unless a legal issue or active dispute requires more time. We will tell you if that happens and confirm when the deletion is complete.
Deleting a My OZUF account removes the login and personal information that OZUF no longer needs, including saved carts, saved Design Studio drafts, marketing preferences and customer content that is not required for an order, warranty, safety, fraud-prevention, tax, accounting or legal purpose. It does not erase records OZUF must or reasonably needs to keep, such as invoices, transaction records and records of an active consumer, warranty, safety or legal matter. Retained information is restricted to those purposes and is not used for marketing.
Privacy complaints
If you believe we have mishandled personal information, contact our Privacy Officer at [email protected], call 1300 OZUTES or write to the address above. Please describe the issue and the outcome you seek. We will acknowledge the complaint, investigate it and aim to respond within 30 calendar days.
If you are not satisfied and the Privacy Act 1988 (Cth) applies, you may contact the Office of the Australian Information Commissioner (https://www.oaic.gov.au/privacy/privacy-complaints).
Children
The website and app are not directed to children under 16. A person under 18 should use the service only with a parent or guardian where consent or a binding transaction is required. If you believe a child has provided personal information without appropriate consent, contact us so we can assess and remove it where appropriate.
Changes to this policy
We may update this policy when our services, providers or legal obligations change. The current version and last-updated date will be published on this page. We will make material changes reasonably prominent.
This privacy policy explains how Oz Resources Pty Ltd trading as OZ Ute Fitouts (OZUF, we, us or our) collects, holds, uses and discloses personal information through the OZUF website, the My OZUF customer account, the OZUF iOS app, product and fitment enquiries, quotes, orders, delivery or installation, and after-sales and warranty support.
Who we are
Oz Resources Pty Ltd trading as OZ Ute Fitouts
ABN 58 132 797 981
172 Lavarack Avenue, Eagle Farm QLD 4009, Australia
Phone: 1300 OZUTES
Privacy contact: [email protected]
Information we collect
Depending on how you deal with us, we may collect:
• your name, email address, telephone number, delivery and billing address, business or organisation, and communication preferences;
• My OZUF account and authentication information;
• vehicle make, model, year, series, cab or body style, registration or vehicle-identification details where reasonably needed, existing modifications, intended load and fitment requirements;
• product selections, measurements, drawings, photographs, Design Studio configurations, quote and order history, delivery or installation details, and support or warranty information;
• billing details, transaction records and payment status;
• messages, emails, live-chat records and notes of telephone or in-person discussions;
• marketing consent, unsubscribe requests and other preferences; and
• technical information such as IP address, browser or app/web-view type, approximate location derived from an IP address, referring page, pages viewed, cart and session activity, cookie identifiers, and security or diagnostic logs.
Please do not send payment-card details or unnecessary sensitive information through an enquiry, support or account-deletion form.
How we collect information
We collect information:
• directly from you when you create or use a My OZUF account, place an order, submit a form, use live chat, contact us, visit us or provide information for a fitment, delivery, installation or warranty matter;
• automatically when you use the website or website pages shown inside the OZUF app, including through necessary Odoo session, login, security and cart technologies and Cloudflare Web Analytics; and
• from another person or service provider where you have authorised it or where it is reasonably necessary to complete an order, delivery, installation, payment, support or legal process.
The OZUF iOS app displays parts of ozuf.com.au inside a secure web view. Those pages use the same My OZUF account, cart and website session as the website. The app's native warranty checklist prepares photographs selected by you on your device. It does not upload those photographs automatically; they leave your device only when you choose to share or submit them.
Why we use information
We use personal information to:
• create and administer My OZUF accounts, saved carts and Design Studio drafts;
• respond to enquiries and recommend relevant product or fitment options;
• verify vehicle details, payload assumptions, access needs and installation requirements;
• prepare quotes, process and administer orders, reconcile payments, and arrange freight, collection or installation;
• provide customer service, safety notices, product updates, returns, consumer-guarantee remedies and warranty support;
• operate, secure, diagnose and improve our website, app, catalogue and customer journey;
• manage inventory, suppliers, business records, fraud and security controls, and legal or regulatory obligations; and
• send marketing where you have consented or where otherwise permitted, with a way to opt out. If you start but do not complete checkout, Odoo may send an abandoned-cart reminder.
We do not sell or rent personal information to data brokers, and we do not use personal information for third-party behavioural advertising.
Payments
The website does not currently collect card credentials or send card details to an online card processor. An online order is recorded in Odoo using the payment method Pay after freight confirmation. OZUF then confirms freight or pickup and sends payment instructions separately. Banks and payment services used to complete a payment handle information under their own privacy terms.
If we add an online payment provider, we will update this policy and the App Store privacy information before using that provider in the app or website.
Who receives information
We disclose only information reasonably needed for the relevant purpose. Recipients may include:
• Odoo S.A. and its subprocessors, which provide the website, ecommerce, customer account, CRM, live chat, cloud hosting, security, backups and related business systems;
• Microsoft, which provides Microsoft 365/Outlook email used to send and receive customer communications;
• Cloudflare, whose privacy-first Web Analytics beacon measures aggregate website use without using cookies for cross-site tracking;
• banks or payment services used for a payment arranged after OZUF confirms the order;
• couriers, freight companies, installers, fabricators and suppliers involved in a quote, order, delivery, installation or support matter;
• professional advisers, insurers, auditors and debt-recovery providers; and
• regulators, courts, law-enforcement bodies or other parties where disclosure is required or authorised by law, or reasonably necessary to protect safety, rights or property.
The currently configured delivery choices are pickup from OZUF or freight quoted after the order. No third-party delivery integration currently receives customer data automatically from website checkout.
Our service providers are expected to protect personal information and use it only for the services they provide or as permitted by law.
Overseas processing
OZUF is based in Australia, but some providers may store, back up or access information overseas. Odoo states that its Oceania hosting region uses production infrastructure in Australia and backup locations in France, the Netherlands and Canada. Odoo or its subprocessors may also provide support from other countries. Microsoft 365 processing locations depend on OZUF's tenant configuration and Microsoft's service and support arrangements.
Provider locations can change. Contact us if you would like current information about likely overseas processing relevant to your dealings with OZUF.
Cookies and analytics
The website uses necessary cookies or similar technologies for security, language, login, customer-account, cart and session functions. Blocking those technologies may stop parts of the shop or My OZUF from working.
Cloudflare Web Analytics is active on public website pages. Cloudflare describes this service as privacy-first and states that it does not collect or use visitors' personal data. Google Analytics and Plausible Analytics are not currently enabled on the OZUF website.
Odoo may create browser, server and security logs for service operation, performance and security. Odoo states that these logs may be retained for up to 12 months unless a longer period is needed for a legitimate security or performance concern or is required by law.
Security
We use reasonable administrative, technical and physical safeguards designed to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These include access controls, encrypted connections, service-provider security controls and staff procedures. No online or storage method is completely secure.
Retention
We keep personal information only for as long as reasonably needed for the purpose for which it was collected and for legal, tax, accounting, warranty, safety, fraud-prevention and dispute requirements. Our working retention periods are:
• My OZUF account, profile, saved carts and Design Studio drafts: while the account is active; information not otherwise required is deleted or de-identified within 30 calendar days after we verify and accept an account-deletion request;
• unconverted enquiries and quotes: generally two years after the last meaningful contact;
• orders, invoices, payment and tax records: at least five years after the relevant transaction or record, and longer where reasonably required by law, an active warranty, a safety matter or a dispute;
• routine support and live-chat records: generally two years after the matter is closed;
• warranty, safety, complaint and dispute records: for the longer of the applicable warranty or claim period and up to seven years after final resolution where reasonably needed;
• website, server and security logs: up to 12 months under Odoo's stated service retention, unless required for an active security investigation or by law; and
• account-deletion request records: a minimal record of the request, identity check, outcome and completion date for two years after completion.
When information is no longer required, we take reasonable steps to delete, destroy or de-identify it. Information removed from active systems may remain temporarily in restricted backups until it is overwritten under the provider's backup cycle. Backup copies are not used for ordinary business purposes and, if restored for disaster recovery, deletion controls are reapplied.
Access, correction and marketing choices
You may ask to access or correct personal information we hold about you. You can update some account information in My OZUF, use an unsubscribe link in marketing email, or contact our Privacy Officer at [email protected] or 1300 OZUTES.
We may need to verify your identity. We may refuse or limit access where permitted by law and will explain the reason where required.
Delete your My OZUF account
You can request permanent deletion at ozuf.com.au/delete-account (https://www.ozuf.com.au/delete-account). We will acknowledge the request, verify that it came from the account holder and complete it within 30 calendar days after verification, unless a legal issue or active dispute requires more time. We will tell you if that happens and confirm when the deletion is complete.
Deleting a My OZUF account removes the login and personal information that OZUF no longer needs, including saved carts, saved Design Studio drafts, marketing preferences and customer content that is not required for an order, warranty, safety, fraud-prevention, tax, accounting or legal purpose. It does not erase records OZUF must or reasonably needs to keep, such as invoices, transaction records and records of an active consumer, warranty, safety or legal matter. Retained information is restricted to those purposes and is not used for marketing.
Privacy complaints
If you believe we have mishandled personal information, contact our Privacy Officer at [email protected], call 1300 OZUTES or write to the address above. Please describe the issue and the outcome you seek. We will acknowledge the complaint, investigate it and aim to respond within 30 calendar days.
If you are not satisfied and the Privacy Act 1988 (Cth) applies, you may contact the Office of the Australian Information Commissioner (https://www.oaic.gov.au/privacy/privacy-complaints).
Children
The website and app are not directed to children under 16. A person under 18 should use the service only with a parent or guardian where consent or a binding transaction is required. If you believe a child has provided personal information without appropriate consent, contact us so we can assess and remove it where appropriate.
Changes to this policy
We may update this policy when our services, providers or legal obligations change. The current version and last-updated date will be published on this page. We will make material changes reasonably prominent.