Privacy Notice

Who is responsible

Wprestorix is responsible for the personal information described here. Contact us about privacy at hello@wprestorix.online.

The Privacy Act 1988 does not cover every small business; the OAIC explains which businesses are covered regardless of turnover ^[1]. Whether or not it applies to us, we handle personal information in the way the Australian Privacy Principles describe: collecting only what we need, using it for the reason we collected it, keeping it secure and letting you see and correct it.

What we collect

When you browse the site

This site does not use analytics, advertising tags or tracking pixels, and it does not set cookies on ordinary pages. Like any web server, our hosting provider may keep standard server logs, which record details such as the IP address, the page requested, the time and the browser type. These logs are used to keep the site running and secure.

When you use the contact form

The form asks for your name, email address, website address and message. We use this information only to reply to your enquiry and, if we work together, to carry out that work. The form sends your message to our mailbox by email. It is not saved in a database on the website.

To stop automated abuse, the contact page also:

• sets one strictly necessary session cookie when the form is shown or sent, described on our cookies page;
• keeps a short record of form submissions, made of a coded version of your IP address and the times of submissions. The code is created with a secret key, so it cannot practically be turned back into your IP address without that key. Records older than 24 hours are deleted the next time someone submits the form, and the whole record file is removed once it has gone 24 hours without a change. The record is kept in a folder that the public cannot reach.

If the form shows an error, the page displays what you typed so you can fix it. Your message text is not stored in the session or on the server while that happens.

When you use the incident checklist

The incident checklist runs entirely in your browser. Nothing you type is sent to us unless you choose to send us the file.

When you email us

If you email us directly, we receive whatever you include. Please do not send passwords or security keys.

How we use it

• to reply to your enquiry and give you a quote;
• to carry out work you have asked for, including writing reports about your site;
• to keep records needed for tax and accounting;
• to protect the website and the contact form from abuse.

We do not sell personal information, use it for advertising, or add you to a mailing list.

Information on client websites

When we work on your website, we may be able to see personal information stored on it, such as customer accounts or orders. We access it only as far as the work requires, do not copy it beyond the site backups the work needs, and delete working copies when the agreed retention period ends. Our quote states how long the pre-work copy of your site is kept.

Who we share it with

We share personal information only with services we need to run the business, such as our email and hosting providers, and only as far as needed. We would disclose information to a government body if required by law. If you ask us to talk to your host or another provider about an incident, we share what is needed for that.

Where it is stored

Enquiries are held in our email mailbox and our hosting account. Our providers may store data in Australia or overseas. If you would like to know where your information is held, ask us and we will tell you.

How long we keep it

• Enquiries that do not lead to work: deleted within 12 months.
• Client records, quotes and invoices: kept for as long as tax and business record-keeping rules require, generally five years.
• Contact form abuse records: deleted after 24 hours.
• Pre-work copies of client sites: kept for the period stated in the quote, then deleted.

Keeping it secure

We use strong, unique passwords and two-step sign-in on our own accounts, encrypted connections for the website and mail, and we limit access to the people who need it. No system is perfectly secure, and if we became aware of a breach involving your information we would tell you.

Access, correction and complaints

Write to us to find out which details about you we hold, to have them fixed if they are wrong, or to have them removed once we no longer need them. Email hello@wprestorix.online. We reply within 30 days.

If you are unhappy with how we handled a privacy matter, tell us first so we can try to fix it. If that does not resolve it, the Office of the Australian Information Commissioner (oaic.gov.au) handles privacy complaints.

Changes to this notice

If this notice changes, the updated date at the top of the page changes too.