Privacy Policy

Last updated: 29 July 2026

This policy explains how Website Rescuers, ABN 44 186 284 514, of Belmont, Perth WA 6104 (“we”, “us”, “our”) handles personal information. It covers this website, our client portal, and the services we deliver.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

The short version: we collect the minimum we need to quote for, deliver and support your services. We don’t sell your information, we don’t trade in mailing lists, and we don’t share it with anyone except the suppliers we need to deliver what you’ve asked for.

1. What we collect

When you contact us. Our enquiry form asks for your name, email address and message, and optionally your business name, phone number and the service you’re interested in. Only name, email and message are required.

When you become a client. Billing and contact details, your ABN, the correspondence we exchange, and support tickets you raise through our client portal.

Payment information. Card and bank details are entered directly with our payment provider and are not stored on our systems. We see the transaction record, not your full card number.

Technical information. Our web servers and our hosting provider keep standard logs — IP address, browser and device type, pages requested, timestamps and referring URL. This is generated automatically by visiting any website, ours included.

Credentials you give us. To do our work we’re often given access to your website, hosting, domain registrar, ad accounts or email. We treat those as confidential, use them only for the agreed work, and return or destroy them on request.

We don’t collect sensitive information (health, biometric, racial or ethnic origin, political or religious affiliation, sexual orientation, criminal record) and ask that you don’t send it to us.

2. How we collect it

Wherever we can, we collect personal information directly from you — through our enquiry form, by phone or email, through the client portal, or in the course of doing the work.

Occasionally we’ll collect information about you from a third party, such as a referrer who passes on your details or a public source like ASIC or a domain WHOIS record. If we do, we’ll tell you.

You can deal with us anonymously or under a pseudonym when you’re just asking a general question. We can’t deliver a service or issue an invoice without knowing who you are.

3. Why we use it

We use personal information to:

• respond to your enquiry and prepare a quote;
• deliver, support and maintain the services you’ve engaged us for;
• set up and administer your hosting, domains, ad accounts and portal login;
• invoice you and collect payment;
• contact you about your services — renewals, outages, security issues and maintenance;
• meet our legal, tax and record-keeping obligations;
• improve our website and understand which services people are looking for.

We don’t use your information for anything unrelated to those purposes without asking you first.

4. Who we share it with

We disclose personal information only to the suppliers and authorities needed to deliver your services or meet the law:

• Web3Forms — our enquiry form posts through this service, which relays the submission to us by email. What you type into the form passes through their systems.
• Netlify — hosts this website and generates the server logs described above.
• Google — Tag Manager on this site, and Google Ads or Analytics where you’ve engaged us to manage them.
• Our hosting and infrastructure providers — for client sites we host.
• Domain registrars and auDA — registrant details are required to register or renew a domain, and some are published in WHOIS.
• Payment and accounting providers — to process payments and keep our books.
• WHMCS — the platform behind our client portal, billing and support tickets.
• Professional advisers, or a law enforcement agency, court or regulator — where we’re legally required or permitted to disclose.

We do not sell, rent or trade personal information, and we don’t disclose it for anyone else’s marketing.

5. Overseas disclosure

Some of the providers above store data outside Australia — most commonly in the United States and the European Union. Where we disclose personal information to an overseas recipient we take reasonable steps to ensure it’s handled consistently with the APPs, but you should be aware that overseas providers are subject to the laws of the country they operate in.

If you’d prefer your data stay onshore, tell us — for hosting in particular we can usually accommodate an Australian-only arrangement.

6. Cookies and analytics

This site loads Google Tag Manager, a container we use to manage measurement tags. At the time of writing that container is empty — no analytics or advertising tags are firing, and the site sets no tracking cookies of its own.

If we enable analytics or conversion tracking in future, those tags will set cookies that record how you found the site and which pages you viewed. That data is aggregated and used to understand site performance, not to identify you personally. We’ll update this section when that changes.

Our client portal sets a session cookie so you stay logged in. That one is essential and can’t be turned off without breaking the login.

You can block or delete cookies in your browser settings. Blocking them won’t stop you using this website.

7. Your customers’ data

When we build, host or maintain your website, we may be able to access personal information your business has collected from your customers — enquiry submissions, order records, mailing lists, user accounts.

That information remains yours. We access it only as needed to do the work you’ve engaged us for, we don’t use it for our own purposes, and we don’t disclose it to anyone else. Complying with privacy law in how you collect and use it — including having your own privacy policy and collection notices — is your responsibility, and we’re happy to help you set up the mechanics.

8. Marketing and opting out

We may email you about your own services, and occasionally about something we think is relevant to your business. Every such email has an unsubscribe link, and we honour it. We comply with the Spam Act 2003 (Cth).

Unsubscribing from marketing doesn’t stop service messages — invoices, renewal notices, outage alerts and security warnings. Those are part of the service you’re paying for.

9. How we keep it secure

We take reasonable steps to protect personal information from misuse, loss, and unauthorised access or disclosure: encrypted connections (HTTPS) across our sites and portal, access limited to the people who need it, multi-factor authentication on the accounts that support it, credentials held in a password manager rather than in email or spreadsheets, and regular patching of the systems we run.

No system is completely secure, and we can’t guarantee the security of information transmitted over the internet. We tell you promptly if something goes wrong — see Data breaches.

10. How long we keep it

We keep personal information only as long as we need it:

• Enquiries that don’t proceed — up to 2 years, then deleted.
• Client records, invoices and correspondence — at least 7 years after the engagement ends, as required by Australian tax law.
• Server and access logs — typically 30 to 90 days.
• Client credentials — deleted or handed back at the end of the engagement, or earlier on request.

When we no longer need information and aren’t required to keep it, we destroy it or de-identify it.

11. Accessing and correcting your information

You can ask us for a copy of the personal information we hold about you, and ask us to correct anything that’s wrong. Email sos@websiterescuers.com.au and we’ll respond within 30 days.

There’s no charge for making a request. We may need to verify your identity first. If we refuse access or a correction, we’ll tell you why in writing and explain how to complain.

You can also ask us to delete information we hold about you. We’ll do that where we’re not legally required to keep it.

12. Data breaches

If a data breach occurs that’s likely to result in serious harm, we’ll notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme, and we’ll tell you what happened, what’s affected and what to do about it.

Where a breach affects a client site we host or maintain, we’ll notify you promptly so you can meet your own notification obligations.

13. Complaints

If you think we’ve mishandled your personal information, contact us first — email sos@websiterescuers.com.au or call 1300 932 767. We’ll acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner:

• Website: oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

14. Changes to this policy

We may update this policy from time to time. The current version is always the one published on this page, and the date at the top tells you when it last changed. Material changes affecting existing clients will be notified by email.

15. Contact us

Privacy questions, access requests and complaints:

• Phone: 1300 932 767
• Email: sos@websiterescuers.com.au
• Post: Website Rescuers, Belmont, Perth WA 6104

See also our Terms & Conditions.