Privacy Policy

Last updated: 26/05/2026

This Privacy Policy applies to Drive Off Shield, a product of CodeNinja Pty Ltd (ABN 60 160 205 863, ACN 160 205 863). In this policy "Drive Off Shield", "we", "us", and "our" refer to CodeNinja Pty Ltd trading as Drive Off Shield.

We respect your privacy. This policy explains what personal information we collect, how we use it, who we share it with, and the choices you have.

This policy applies to our website driveoffshield.com, our dashboard application, and any related services (together, the "Service").

1. Who this policy is for

The Service is sold to operators of petrol stations, service stations, and other commercial fuel retailers in Australia. Personal information we collect generally relates to:

• Customers — the staff at our customer sites who sign in to use the Service.
• Prospects — people who contact us via the website.
• Vehicle keepers — individuals associated with number plates that pass through our customers' sites or that our customers upload.

If you fall into the third category and want to know what information we hold about you, see Section 9.

2. What we collect

From customers and prospects

• Name, email, phone number, business name and address
• Authentication identifiers (via Auth0)
• Billing information (handled by Stripe — we do not store card numbers)
• Records of your use of the Service, including IP address, browser type, pages visited, and timestamps
• Anything you choose to send us via the contact form or email

From our customers' sites (uploaded or captured)

• Number plate images and OCR-extracted plate text
• Vehicle make, model, colour (where available)
• Date, time, and site of each capture
• Drive-off receipt images and the data extracted from them (plate, date, amount)
• NEVDIS lookup results, including registration status

Automatically

• Cookies and similar technologies (see Section 7)
• Aggregate analytics data via Google Analytics 4

We do not knowingly collect information from anyone under 18.

3. How we use information

We use personal information to:

• Provide and operate the Service for our customers
• Maintain the shared drive-off database that is the core network-effect benefit of the Service
• Process payments and manage credits
• Communicate with you about the Service, including support, updates, and security notices
• Comply with our legal obligations under Australian law
• Improve and develop the Service
• Send marketing emails to people who have signed up (you can unsubscribe at any time)

4. The shared drive-off database — important

Drive Off Shield operates a shared database of drive-off records. When one of our customers uploads a confirmed drive-off (including a number plate), that record is visible to other Drive Off Shield customers when the same plate is checked at their site.

This network-effect data sharing is fundamental to how the Service works. By using the Service, our customers agree to contribute their confirmed drive-off records to this shared database, and to be able to see drive-off records contributed by other customers.

We do not share the identity of the customer site that originally recorded a drive-off — only the count and the fact that prior drive-offs exist.

5. NEVDIS lookups

NEVDIS (the National Exchange of Vehicle and Driver Information System) is administered by Austroads. We access NEVDIS data via an authorised broker, MotorWeb (owned by Equifax), on a per-query basis.

When you (as a customer) perform a NEVDIS lookup:

• We send the plate number to MotorWeb, who forwards the request to NEVDIS.
• We receive vehicle details (make, model, colour, registration status) and store them.
• We cache the result for up to 30 days and may share it with other customers who look up the same plate during that window, to reduce duplicate paid queries.

We do not retrieve, store, or share registered owner names or addresses through NEVDIS lookups.

6. Who we share information with

We share personal information with:

• Service providers that help us run the business — including Auth0 (authentication), Stripe (payments), Microsoft Azure (cloud hosting, in Australia East / Sydney), MotorWeb / Equifax (NEVDIS lookups), Google Analytics (analytics), and our email provider.
• Other Drive Off Shield customers, in the limited form described in Section 4.
• Law enforcement and government agencies where we are required to by law, by court order, or where we reasonably believe disclosure is necessary to investigate fraud or unlawful activity affecting our customers.
• Professional advisers such as our lawyers and accountants, under confidentiality obligations.
• An acquirer if CodeNinja Pty Ltd or the Drive Off Shield business is sold or merged with another business — in which case this policy will continue to apply or you will be notified.

We do not sell personal information to third parties for marketing.

7. Cookies and analytics

We use cookies to keep you signed in, remember your preferences, and understand how the Service is used. We use Google Analytics 4 to measure traffic. Our website is protected by reCAPTCHA, which is subject to the Google Privacy Policy and Terms of Service.

You can disable cookies in your browser settings, but parts of the Service may not work properly without them.

8. Where data is stored

Customer data is stored in Microsoft Azure data centres in Australia East (Sydney). Data remains within Australian jurisdiction.

Some service providers (Stripe, Google Analytics, Auth0) may process limited data outside Australia, including in the United States. We rely on contractual protections and the providers' own compliance frameworks to keep that data safe.

9. Your rights

You can ask us to:

• Tell you what personal information we hold about you
• Correct information that is inaccurate or out of date
• Delete information, subject to our legal record-keeping obligations
• Stop using your information for direct marketing

Send requests to privacy@driveoffshield.com. We will respond within 30 days.

If you are a vehicle keeper and your plate appears in our shared drive-off database, you can ask us to investigate. We will require evidence that you are the registered keeper of the vehicle. We are not the original source of the data — it was uploaded by one of our customers, and we may need to refer you back to that site to resolve the dispute.

10. Security

We use industry-standard measures to protect personal information, including encryption in transit (TLS) and at rest, role-based access controls, and regular security reviews. No system is perfectly secure; if we become aware of a data breach that is likely to cause serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner in line with the Notifiable Data Breaches scheme.

11. Retention

We retain personal information for as long as we need to provide the Service, comply with our legal obligations, and resolve disputes. When a customer closes their account, we will delete or de-identify their personal information within 90 days, except where law requires us to keep it longer (e.g. tax records — 7 years).

Drive-off records contributed to the shared database may be retained indefinitely as part of the database's ongoing operation, though we will de-identify them from your specific account if you ask.

12. Complaints

If you believe we have not handled your personal information properly, please contact us first at hello@driveoffshield.com. We will investigate and respond.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.

13. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will reflect the most recent change. If the change is material, we will notify customers by email.

14. Contact us

Drive Off Shield — a product of CodeNinja Pty Ltd 

ABN 60 160 205 863 · ACN 160 205 863 

Berwick VIC, Australia 

hello@driveoffshield.com 

+61 438 319 793