Privacy Policy

Last updated: 22 August 2026

Who we are

This policy explains how Vic Offroad Pty Ltd (ABN 52 167 602 780) collects, uses, stores and discloses your personal information. In this policy, "we", "us" and "our" mean Vic Offroad Pty Ltd, trading as Vicoffroad.

We operate the website at vicoffroad.com.au and a warehouse at 25-29 Drake Boulevard, Altona, Victoria.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. If you're in New Zealand, we also handle your information in line with the Privacy Act 2020 (NZ).

What we collect

When you buy from us: your name, email address, phone number, delivery address and billing address, your order history, and any notes you send us about an order.

When you create an account: the same details, plus your login credentials and anything you save such as a wishlist.

When you subscribe to our emails: your email address, and your name if you give it.

When you contact us: whatever you tell us in an email, a contact form, a phone call or a live chat, including the content of the conversation.

When you leave a review or join our loyalty program: your name, review content, ratings, photos you upload, and your points balance.

Automatically, when you browse: your IP address, device and browser type, the pages you view, how long you spend on them, what you click, how far you scroll, where you arrived from, and your approximate location based on your IP address.

We do not collect your full payment card details. Card numbers go directly to our payment providers and never reach our systems.

How we collect it

Most of it you give us directly, by ordering, signing up, or getting in touch.

Some of it is collected automatically by cookies and similar technologies when you use the site. That's covered in the Cookies and tracking section below.

Some of it comes from third parties, for example our payment providers confirming a payment succeeded, or an affiliate partner telling us a purchase came through their referral.

Why we collect it

  • To take, process and deliver your order
  • To handle returns, warranty claims and refunds
  • To answer your questions and provide customer support
  • To manage your account and your loyalty points
  • To send you marketing, if you've asked us to
  • To understand how people use our site so we can improve it
  • To show you relevant ads on other websites and social platforms
  • To detect and prevent fraud, and to keep the site secure
  • To meet our legal and tax obligations

Who we share it with

We don't sell your personal information.

We do share it with the service providers we need to run the business. Each one only receives what it needs, and only to do a job for us.

  • Store platform and hosting: Shopify
  • Payments and payment plans: Shopify Payments, Shop Pay, PayPal, Afterpay, Zip. If you pay by direct deposit, your bank details are handled by our bank.
  • Delivery: Australia Post, and the courier and freight carriers who deliver your order
  • Email and SMS marketing: Klaviyo
  • Reviews and loyalty: Yotpo
  • Live chat: Tidio
  • Analytics and site measurement: Google Analytics, Google Tag Manager, Amplitude, Snowplow
  • Session recording: Microsoft Clarity, which records how visitors move around the site, including mouse movement, clicks and scrolling, so we can find and fix problems.
  • Advertising: Google Ads, Meta (Facebook and Instagram), TikTok
  • Affiliate tracking: Commission Factory, which tells us when a purchase came from one of our affiliate partners so we can pay them
  • Site features and personalisation: Rebuy, Boost Commerce, Hextom, Covet.pics
  • Testing: Convert.com, which we use to trial different versions of pages
  • Security: DataDome, which helps us block bots and fraudulent traffic

We may also disclose your information where the law requires it, for example to a court, a regulator or a law enforcement agency, or where we need to protect someone's safety or enforce our terms.

Sending information overseas

Many of the providers above store or process information outside Australia, including in the United States, the European Union and Israel.

Before we disclose your information to an overseas recipient, we take reasonable steps to make sure they handle it consistently with the Australian Privacy Principles.

If you'd like the current list of which providers hold information in which countries, email us and we'll send it to you.

Cookies and tracking

Cookies are small files stored on your device. We and our providers use cookies and similar technologies for four things:

Strictly necessary. Keeping you logged in, remembering your cart, processing checkout, and protecting the site from fraud. The site doesn't work without these.

Analytics. Understanding how people use the site, which pages work and which don't.

Session recording. Recording how visitors interact with pages so we can find usability problems.

Advertising. Showing you relevant ads on other sites, and measuring whether those ads worked.

You can set your browser to refuse cookies or to warn you when one is being set. If you block strictly necessary cookies, parts of the site will stop working.

You can opt out of Google Analytics using Google's opt-out browser add-on.

Marketing, and how to stop it

If you've subscribed, or you've bought from us, we may send you email or SMS about new products, sales and offers.

Every marketing email has an unsubscribe link at the bottom. Every marketing SMS tells you how to opt out. You can also email us and ask us to stop, and we will.

Unsubscribing from marketing doesn't stop transactional messages such as order confirmations, dispatch notifications and warranty correspondence, because those are part of fulfilling your order.

Keeping your information secure

We take reasonable steps to protect your information from misuse, loss, and unauthorised access or disclosure. That includes using reputable providers, restricting internal access to the people who need it, and relying on our platform's security controls.

No system is completely secure, and we can't guarantee absolute security of information sent over the internet.

If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

How long we keep it

We keep your information for as long as we need it for the purposes above, and for as long as the law requires.

We keep order and transaction records for at least five years, because Australian tax law requires us to.

We keep marketing contacts until you unsubscribe, and for a reasonable period afterwards so we can honour your opt-out.

We delete or de-identify information once we no longer need it.

Getting access to your information, and correcting it

You can ask us for a copy of the personal information we hold about you, and you can ask us to correct anything that's wrong or out of date.

Email sales@vicoffroad.com.au or call (03) 9360 0501. We may need to verify your identity first.

We'll respond within a reasonable time, usually within 30 days. If we can't give you access, we'll explain why in writing.

Some details you can update yourself by logging into your account.

If you want to complain

If you think we've mishandled your personal information, tell us first. Email sales@vicoffroad.com.au with the details.

We'll acknowledge your complaint and aim to respond within 30 days.

If you aren't satisfied with our response, you can complain to the Office of the Australian Information Commissioner:

If you're in New Zealand, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Changes to this policy

We may update this policy from time to time. The current version is always on this page, and the date at the top tells you when it last changed.

Contact us

Vic Offroad Pty Ltd (ABN 52 167 602 780)
25-29 Drake Boulevard, Altona, Victoria, Australia
sales@vicoffroad.com.au
(03) 9360 0501