Privacy Policy

Last Updated: 25 January 2026

iWebHost Pty Ltd (trading as iWebHost Australia and iWebHost.com.au) (“iWebHost”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using our website, client area, or any of our services, including web hosting, domains, email, migration, SEO, Google Ads, and website design, you consent to the practices described in this policy.

1. Personal Information We Collect

We may collect the following kinds of personal information:

Contact and account details, including your name, email address, phone number, postal address, business name, and ABN where applicable
Billing and payment information, including invoices, payment history, and payment method details processed through secure third-party payment providers
Account credentials, including usernames and securely stored passwords
Technical and usage data, including IP address, browser type, device information, server logs, access times, referring websites, and usage activity within our website or client area
Domain registration data required by registries and registrars, including auDA requirements for .au domain names
Hosting and service data, including cPanel or control panel information, WHMCS account data, support history, service settings, backups, server logs, and configuration information
Website content, databases, emails, files, and other materials you upload, store, transmit, or host with us, to the extent they contain personal information
Any other information you voluntarily provide to us, including support tickets, survey responses, phone calls, emails, or live chat communications

We do not knowingly collect personal information from children without appropriate consent. If you believe a child has provided us with personal information without parental or guardian consent, please contact us so we can take reasonable steps to remove it.

2. How We Collect and Hold Your Personal Information

We may collect personal information:

Directly from you when you place an order, create an account, submit a support request, request a quote, contact us, or otherwise use our services
Automatically through cookies, website analytics, server logs, fraud prevention systems, and security monitoring tools
From third parties, such as payment gateways, domain registrars, registry operators, email providers, migration providers, and from transfer or migration requests you authorise

We hold personal information on secure systems and with service providers that may be located in Australia and, in some cases, overseas depending on the services used and the infrastructure or third-party providers involved. We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. [oai_citation:1‡OAIC](https://www.oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-1-app-1-open-and-transparent-management-of-personal-information?utm_source=chatgpt.com)

3. Why We Collect, Use, and Disclose Your Information

We collect, use, and disclose personal information for purposes including:

Providing, managing, supporting, and improving our services, including hosting, domains, email, migrations, SEO, Google Ads, and website design
Setting up and administering accounts, services, renewals, and cancellations
Processing payments, sending invoices, and managing account balances
Communicating with you about support requests, technical issues, billing matters, renewals, service notices, security notices, and important updates
Detecting, preventing, and responding to fraud, abuse, cyber threats, security incidents, and breaches of our Terms of Service
Complying with legal obligations, industry standards, registry rules, and law enforcement or regulatory requests
Sending service-related notices and, where permitted by law, marketing or promotional communications
Conducting internal research, analytics, product development, and service improvement
Enforcing our rights and protecting our systems, staff, customers, suppliers, and business

4. Disclosure of Your Personal Information

We may disclose your personal information to:

Payment processors and gateways used to process transactions
Domain registrars, registry operators, and domain compliance bodies such as auDA where required
Email and software service providers, including Microsoft 365, Google Workspace, or other third-party providers used to deliver services you request
Hosting, infrastructure, security, backup, analytics, ticketing, support, and cloud service providers
Contractors, developers, migration technicians, or support personnel assisting us to deliver services
Professional advisers such as accountants, lawyers, insurers, debt collectors, and auditors where reasonably necessary
Government agencies, law enforcement bodies, courts, regulators, or dispute resolution bodies where required or authorised by law

Some of these providers may be located outside Australia. Where practicable, we take reasonable steps to ensure overseas recipients handle personal information in a manner consistent with Australian privacy standards. [oai_citation:2‡OAIC](https://www.oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-1-app-1-open-and-transparent-management-of-personal-information?utm_source=chatgpt.com)

We do not sell or rent your personal information to third parties for their own marketing purposes.

5. Cookies and Tracking Technologies

Our website and client area may use cookies and similar technologies to remember your preferences, improve your experience, maintain sessions, analyse traffic, and support security functions. You can usually control cookies through your browser settings, although disabling cookies may affect the functionality of some parts of our website or services.

6. Security of Personal Information

We take reasonable steps to protect personal information, including the use of secure servers, access controls, authentication measures, firewalls, monitoring systems, and other appropriate technical and organisational safeguards.

Payment information is handled through secure third-party payment gateways. We do not claim that any method of transmission over the Internet or electronic storage is 100% secure. While we take reasonable steps to protect your personal information, we cannot guarantee absolute security.

If we become aware of an eligible data breach that is likely to result in serious harm, we will comply with our obligations under the Notifiable Data Breaches scheme, including notifying affected individuals and the OAIC where required by law. [oai_citation:3‡OAIC](https://www.oaic.gov.au/privacy/notifiable-data-breaches/about-the-notifiable-data-breaches-scheme?utm_source=chatgpt.com)

7. Retention and Deletion of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, to provide services, to comply with legal, accounting, taxation, and regulatory obligations, and to resolve disputes or enforce our agreements.

If your services are suspended, cancelled, or terminated, we may retain or delete personal information and service data in accordance with our Terms of Service and operational requirements. Website content, emails, databases, backups, and hosted data may be deleted following suspension or termination. You remain responsible for maintaining your own backups at all times.

When personal information is no longer required, we take reasonable steps to destroy or de-identify it unless we are required or authorised by law to retain it.

8. Access and Correction

You may request access to the personal information we hold about you and request corrections if you believe that information is inaccurate, out of date, incomplete, irrelevant, or misleading. In many cases, you can update account information directly through your client area.

To request access or correction, please contact us using the details below. We will respond within a reasonable period and may require identity verification before processing your request. APP privacy policies are expected to explain how individuals can access and correct their personal information. [oai_citation:4‡OAIC](https://www.oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-1-app-1-open-and-transparent-management-of-personal-information?utm_source=chatgpt.com)

9. Complaints

If you have a complaint about how we handle your personal information, please contact us first using the details below. We will acknowledge your complaint within a reasonable timeframe and aim to respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC). APP privacy policies are expected to explain how an individual may complain about a breach of the APPs and how the complaint will be handled. [oai_citation:5‡OAIC](https://www.oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-1-app-1-open-and-transparent-management-of-personal-information?utm_source=chatgpt.com)

10. Marketing and Opting Out

We may send you service-related communications that are necessary for the operation of your account and services.

We may also send marketing or promotional communications in accordance with the Spam Act 2003 (Cth) and other applicable laws. You can opt out of marketing messages at any time by using the unsubscribe link in the message or by contacting us directly. We will process unsubscribe requests in accordance with applicable law. Australian spam rules require a clear unsubscribe option and generally require unsubscribe requests to be honoured within 5 working days. [oai_citation:6‡ACMA](https://www.acma.gov.au/avoid-sending-spam?utm_source=chatgpt.com)

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, legal obligations, or privacy practices. The updated version will be posted on our website with a revised date. Your continued use of our website or services after changes are published constitutes acceptance of the updated Privacy Policy.