Privacy Policy.

UPO respects your privacy. This policy explains what information we collect, why we collect it, and how we use and protect it. The policy is written with a focus on New Zealand users.

We collect information you provide directly when you create an account or communicate with us, and information collected automatically when you use the site. Typical information we collect includes:

• Name and contact details (email, phone number)
• Account/login information and authentication tokens
• Approximate location and address details for quotes/orders
• Device and usage data (pages visited, IP address, user agent)

We also use cookies and similar technologies (including Google Analytics) to understand site usage and improve the service.

We use personal information to provide and improve our services (for example to process orders, provide quotes, communicate with you, and maintain accounts). We may also use data for analytics and security purposes.

You can sign in using Google Sign-In. When you use a third party sign-in we receive only the information required to create and manage your account (for example name and email).

We host the site on Google Cloud Run. We use Cloudflare Turnstile for bot protection. Payment processing is handled securely by Stripe, which complies with PCI-DSS standards. These services process request, security, and payment data on our behalf.

We use Google Analytics to collect aggregated usage metrics. Analytics data helps us improve the site but does not contain your raw account credentials.

We do not sell personal data. We share personal information only with trusted service providers who process data on our behalf (for example hosting, analytics, payment processors), or when required by law. Providers we use include Google, Cloudflare, and Stripe.

We retain personal data for as long as necessary to provide services and to meet legal obligations. We use reasonable administrative and technical safeguards to protect data, but no system is completely secure.

You can access, update or request deletion of your account information by contacting us. You can also opt out of marketing communications. For assistance, please contact us.

This site is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13 and will delete any such data if discovered.

UPO complies with New Zealand’s Digital Communications Code of Practice. We will not send unsolicited commercial messages to your contact details without your prior consent or an established business relationship. If you wish to withdraw consent or opt out of marketing communications, you can do so at any time by contacting us or using any unsubscribe mechanism in our messages.

This Privacy Policy is intended to reflect the laws and practices of New Zealand. It does not attempt to comply with privacy regimes outside New Zealand.

We may update this policy. We will post the revised policy with a new effective date. Continued use after changes indicates acceptance.