Premium hosting, support and maintenance for Australian businesses

Website Management ServicesWMSWEBSITE MANAGEMENT SERVICES
Log in

Legal

Australian Privacy Policy

Committed to protecting your personal information and commercial customer data in strict accordance with the Australian Privacy Principles (APPs) and the Privacy Act 1988 (Cth).

Contents

1. Australian Privacy Principles (APPs) Commitment

Website Management Services (“WMS”, “we”, “our”, “us”) respects your privacy and is dedicated to protecting the personal information of our clients, website visitors, and downstream customers. We are bound by the Privacy Act 1988 (Cth) and the thirteen (13) Australian Privacy Principles (APPs), which govern standards, rights, and obligations around handling, collecting, using, disclosing, and securing personal data.

This policy outlines our transparent data handling practices across our cloud hosting infrastructure, WHMCS customer billing portal, managed WordPress maintenance operations, and technical support pipelines.

2. Information We Collect & Purpose of Collection

We only collect personal information that is reasonably necessary to provision hosting infrastructure, register domain names, manage billing, and ensure cybersecurity compliance:

  • Identity & Contact Information: Full legal name, business trading name, Australian Business Number (ABN/ACN), billing address, email address, and verified telephone numbers.
  • Domain Registrant Verification Data: Under auDA rules, domain registrations require collecting verified administrative contact identities, eligibility types, and associated business identifiers.
  • Technical & Telemetry Data: IP addresses, browser user-agent strings, SSH public keys, server access logs, and firewall security trigger telemetry necessary for DDoS and intrusion mitigation.

Personal data is strictly used to deliver contracted services, verify commercial identity, process billing transactions via Stripe, and protect network infrastructure integrity under Australian federal cybersecurity standards.

3. Data Sovereignty & NextDC Australian Storage

We believe firmly in Australian Data Sovereignty. All customer website files, relational MySQL databases, mailboxes, and automated snapshots are physically stored and processed within high-security NextDC Data Centres located in Brisbane (B2) and Sydney (S1/S2).

Unlike global hosting providers that route customer data to offshore multi-tenant cloud regions, your data remains within Australian legal jurisdiction under the protection of Commonwealth and Queensland privacy legislation. We never sell, lease, or monetize your personal or commercial data to third-party data brokers or marketing syndicates.

Physical security at NextDC facilities includes multi-factor biometric authentication, 24/7 on-site security patrols, CCTV surveillance, and strict visitor access controls complying with ISO/IEC 27001 information security management standards.

4. WHMCS Billing & Stripe Payment Security

Financial transactions are handled with strict enterprise security protocols:

  • PCI-DSS Compliance via Stripe: All debit and credit card payments are tokenized and processed directly by Stripe, Inc., a certified PCI-DSS Level 1 Service Provider. WMS never stores, transmits, or possesses unencrypted credit card primary account numbers (PAN) or security codes (CVC/CVV) on our servers.
  • WHMCS Billing Portal: Client invoices, accounting logs, and support ticket communications are protected by cryptographic TLS 1.3 encryption, enforced Two-Factor Authentication (2FA) capabilities, and role-based access control.
  • Direct Debit (BECS) Security: Australian bank account details submitted for direct debit arrangements are encrypted using enterprise AES-256 protocols and handled via regulated Australian financial gateway partners.

5. Cookies, Tracking Pixels & Analytics

Our website uses modern session cookies and privacy-respecting analytics tools to optimise user navigation and performance:

  • Essential Cookies: Required to maintain user login sessions, shopping cart states, and security CSRF token verification across our WordPress and WHMCS client portals.
  • Performance & Analytics Cookies: Aggregated, anonymized website telemetry used to evaluate server response times, page load speeds, and popular navigation routes. These cookies do not identify individuals or link browsing sessions to personal identities.
  • Security & Anti-Bot Cookies: Lightweight cookies deployed by our Cloudflare edge WAF to mitigate distributed denial of service attacks and credential stuffing bots.
  • You may disable cookies at any time via your browser preferences; however, disabling cookies may impair client portal authentication and shopping cart functionality.

6. Data Security, Encryption & Breach Notification Protocols

We maintain comprehensive administrative, technical, and physical safeguards designed to prevent unauthorized access, loss, misuse, or alteration of personal information under our control:

  • End-to-End Encryption: All data in transit across our networks is encrypted using TLS 1.3 with forward secrecy. Storage volumes for off-site backups are encrypted using AES-256.
  • Notifiable Data Breaches (NDB) Scheme: In compliance with Part IIIC of the Privacy Act 1988 (Cth), WMS maintains an established Data Breach Response Protocol. In the unlikely event of an eligible data breach likely to result in serious harm, we will promptly notify affected individuals and the Office of the Australian Information Commissioner (OAIC).

7. Data Retention, Access Requests & Privacy Officer Contact

Under APPs 12 and 13, you have the legal right to request access to the personal information we hold about you and request corrections if any information is inaccurate, out-of-date, or incomplete.

We retain client records for the duration of your active service subscription, plus standard statutory periods required by the Australian Taxation Office (ATO) for financial audit compliance (typically seven years for financial transaction records). Account data from terminated services is securely wiped after the 14-day grace window.

Privacy Officer Contact Details:

Privacy Compliance Officer

Website Management Services (Next Level Creative)

Gaven, Gold Coast, Queensland, Australia

Email: privacy@websitemanagementservices.com.au

Questions regarding your personal information or data storage?

Contact our Australian data protection officer for immediate inquiries, privacy access requests, or regulatory queries.

Questions about our privacy policy?

Call us on 1300 662 492 or send us a message and we’ll help.

Contact us