Privacy policy.

This site is operated by Downunder Web Services (ABN 71 643 943 086), a web design and hosting business based in Australia (“we”, “us”, “our”). We are the data controller for the information described in this policy.

We handle personal information in line with the Australian Privacy Principles set out in the Privacy Act 1988 (Cth).

We only collect what we need to answer you, quote work, and run projects and hosting:

• Contact and quote details you submit through our forms: name, email, phone, company, country, and anything you tell us about your project.
• Billing details when you become a client. Card payments are handled by Stripe; we never see or store full card numbers.
• Account data if you use the client portal: login email and the records tied to your projects, invoices and hosting.
• Technical data from normal web traffic: IP address, browser type and pages requested, kept in server logs for security and troubleshooting.

• Replying to enquiries and preparing quotes.
• Designing, building, launching and supporting your site or web app.
• Hosting, monitoring, backups and security.
• Issuing invoices and processing payments.
• Sending service messages such as quote confirmations, renewal reminders and incident notices.

We do not send marketing email unless you ask us to, and we do not use your data for advertising.

Data at rest sits in encrypted databases and storage on our own NVMe servers and in the ap-southeast-2 (Sydney) region, with hosting points across Sydney, Melbourne, Brisbane, Perth, Adelaide. Access is limited to the people who need it, over encrypted connections, and backups are encrypted too.

No method of storage or transmission is ever completely secure, but we take reasonable steps to protect your information and to keep our systems patched and monitored.

We do not sell or rent your personal information. We share it only with the service providers we rely on to run the business, and only as far as each one needs:

• Stripe for payment processing.
• Postmark for transactional email delivery.
• Amazon Web Services for storage and infrastructure in Australia.
• Domain registrars when we register or manage a domain on your behalf.

We may also disclose information where the law requires it, or to protect our rights, users or systems.

We keep data in Australia wherever we can. Some providers listed above may process limited data overseas (for example, payment or email metadata). Where that happens, we use providers that offer appropriate protections for your information.

We keep tracking light. We use only the cookies needed to keep the site working and to keep sessions secure. If we add privacy-respecting analytics, it is aggregate and not used to build advertising profiles. You can block cookies in your browser, though some features may stop working.

We keep personal information only as long as we need it for the purposes above, or as long as the law requires (for example, financial records). When we no longer need it, we delete or anonymise it.

You can ask us to:

• Access the personal information we hold about you.
• Correct anything that is wrong or out of date.
• Delete data we are not required to keep.

Email support@duws.au and we will respond within a reasonable time. We may need to verify your identity first.

If you think we have mishandled your information, contact us first at support@duws.au and we will work to put it right. If you are not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We may update this policy as the business changes. The date at the top shows when it was last revised. Material changes will be reflected here before they take effect.

Downunder Web Services · ABN 71 643 943 086
support@duws.au
duws.au