How It WorksFor BusinessesAboutFAQContact

Privacy Policy

Last updated: June 2026

At Ourfit, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose and protect your personal information when you use our platform. We comply with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). This Policy forms part of, and should be read with, our Renter and Lender Terms and Conditions.

We collect personal information only where it is reasonably necessary for our functions and activities as a clothing-hire marketplace - for example, to set up accounts, run bookings, take payments, verify identity and prevent fraud.

Where it is lawful and practicable, you may deal with us anonymously or by using a pseudonym. In practice, most of Ourfit's core functions - creating an account, taking payments, verifying identity and arranging hires between users - require us to identify you, so anonymous use is limited.

1. Information we collect

Information you provide:

  • Account information (name, email, phone number, password)
  • Profile information (photo, bio, location)
  • Identity verification documents (driver's licence, passport)
  • Payment information (processed securely by Stripe)
  • Listing details (item descriptions, photos, pricing)
  • Messages and communications with other users
  • Support requests and feedback

Information collected automatically:

  • Device information (browser type, operating system, device ID)
  • Usage data (pages visited, features used, search queries)
  • Location data (approximate location based on IP address)
  • Cookies and similar tracking technologies

Identity documents (sensitive information). Where identity verification is required, the verification is carried out by our provider (Stripe Identity). Identity documents are submitted to and held by that provider under its own security and retention controls; we receive only the verification result and limited details, not full copies of your documents. We retain identity-verification records only for as long as needed for the purpose collected and to meet legal, fraud-prevention and dispute-resolution obligations, after which they are deleted or de-identified. We collect this sensitive information with your consent and only where reasonably necessary. We do not adopt government identifiers (such as a driver's licence or passport number) as our own identifier for you.

2. How we use your information

We use your information to: create and manage your account; facilitate rentals between users; process payments and payouts; verify identity and prevent fraud; provide customer support; send transactional messages (booking confirmations, reminders); send marketing communications (with your consent); improve and personalise our services; analyse usage and platform performance; and comply with legal obligations.

3. How we share your information

We do not sell your personal information. We may share it:

  • With other users: when you make or receive a booking, we share necessary information (name, photo, contact details) to facilitate the transaction.
  • With service providers: trusted third parties for payment processing (Stripe), email/SMS delivery, analytics and hosting - accessing only what they need.
  • For legal reasons: when required by law, to respond to legal process, or to protect the rights, property or safety of Ourfit, our users or others.
  • Business transfers: if Ourfit is involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction.

4. Cookies and tracking

We use cookies and similar technologies for:

  • Essential cookies: keeping you logged in and remembering preferences.
  • Analytics cookies: Google Analytics 4 to measure how visitors find and use the platform. You can opt out via the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout).
  • Payment cookies: set by Stripe on checkout pages to process payments and prevent fraud.

You can control cookies through your browser settings; disabling essential cookies will affect core functionality (login, checkout). Where the law requires consent for non-essential (for example, analytics) cookies, we will seek it - for example, through a consent prompt - before those cookies are set.

5. Data security

We take reasonable steps to protect your personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure, and to destroy or de-identify it when it is no longer needed. These steps include: encryption in transit and at rest; secure payment processing through Stripe (PCI-DSS compliant); regular security assessments; and access controls and authentication. No method of transmission over the internet is 100% secure, so we cannot guarantee absolute security.

Notifiable data breaches. If we have reasonable grounds to believe an eligible data breach has occurred involving your personal information, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth).

6. Data retention

We retain your personal information for as long as your account is active or as needed to provide services. We may retain certain information after account closure for legal and regulatory compliance, dispute resolution, fraud prevention, and enforcing our terms and policies. We take reasonable steps to keep the personal information we hold accurate, complete and up to date; you can help by keeping your account details current.

7. Your rights

Under the Privacy Act 1988, you have the right to: access the personal information we hold about you; request correction of inaccurate information; request deletion (subject to legal requirements); opt out of marketing communications; and lodge a complaint with the OAIC. To exercise these rights, contact us at the email below. We may first need to confirm your identity, and some information may be subject to legal retention requirements. We will respond within a reasonable period (usually within 30 days); if we decline a request (for example, to correct or delete), we will explain why and how you can complain.

8. Third-party services

We share personal information with trusted service providers only so we can run Ourfit. Each is bound by its own privacy policy and, where applicable, a data processing agreement with us. They fall into these categories:

  • Payment and identity: our payment processor (currently Stripe) handles payments, lender payouts and identity verification, including card and bank details and, for lenders, identity documents.
  • Communications: providers that deliver our SMS (such as phone verification and booking notifications) and our transactional email.
  • Analytics: analytics providers (such as Google Analytics) that give us aggregated, largely de-identified usage insights.
  • Hosting, infrastructure and storage: cloud hosting, infrastructure, error-monitoring and object-storage providers that run our website, app and API and store uploaded media (such as listing photos).

Some of these providers are located overseas (see International transfers below). We may add or change providers from time to time; material changes will be reflected in an updated version of this Policy.

9. International transfers

Ourfit is an Australian business, based in Sydney, NSW, and we manage your personal information from Australia. Some of our service providers are located overseas (including in the United States). Before disclosing your personal information overseas, we take reasonable steps to ensure the recipient does not breach the Australian Privacy Principles, except where an exception under APP 8.1 applies - for example, where you have consented to the disclosure or it is required or authorised by law. We remain accountable for overseas disclosures as required by the Privacy Act 1988 (Cth).

10. Children's privacy

Ourfit is not intended for users under 18. We do not knowingly collect personal information from children. If you believe we have, contact us immediately.

11. Changes to this Policy

We may update this Policy from time to time. Where changes are material, we will take reasonable steps to notify you (for example, by email or an in-platform notice) before they take effect. Continued use after changes take effect constitutes acceptance of the updated Policy.

12. Contact us

If you have questions, want to access or correct your information, or wish to make a privacy complaint:

Ourfit Pty Ltd (ABN 68 674 899 917) Sydney, NSW, Australia Email: legal@ourfit.app

We will acknowledge your complaint and respond within a reasonable period (usually within 30 days). If you are not satisfied with how we handle it, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.