Privacy Policy

1. Commitment to Privacy

iWeb Consultants (“Company”, “we”, “us”, “our”) is dedicated to safeguarding the privacy and confidentiality of personal information collected through our website (https://iwebconsultants.com.au/), client portals, communication channels, and consulting engagements.

We handle all personal information strictly in compliance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), the Spam Act 2003 (Cth), and applicable Australian state and federal legislation.

2. Personal Information We Collect

Depending on how you engage with our services, we may collect and hold the following categories of personal and business information:

• Contact & Identification Data: Full name, professional title, company or trading name, Australian Business Number (ABN), business address, email address, and direct phone numbers.
• Consultation & Project Scoping Data: Operational workflows, technical requirements, systems architecture details, API endpoints, and project specifications submitted via our audit forms, discovery questionnaires, or scoping workshops.
• Account & Commercial Records: Client portal login credentials, billing contact details, transaction history, and records of services provisioned. Credit card transactions are processed through secure, PCI-DSS compliant third-party gateways; we never store raw credit card numbers on our infrastructure.
• Technical Telemetry & Server Logs: IP address, browser type and version, operating system, device identifiers, referral URLs, time stamps, and navigation paths recorded during site visits.
• Communications Data: Transcripts of email communications, support tickets, telephone call logs, and WhatsApp business inquiries.

3. How We Collect Personal Information

We collect information through transparent and lawful means, including:

• Direct Interactions: When you complete our Free 30-Minute AI & Workflow Audit form, request a quote, submit a contact form, open a support ticket, or communicate with our engineers via phone, email, or WhatsApp.
• Automated Data Collection: Through server logs, secure cookies, and analytics scripts (such as Google Analytics 4) as you browse and interact with our web platform.
• Third-Party Business Registries: Publicly accessible commercial records (such as ASIC registries and ABN Lookup) to verify company registration and trading legitimacy during client onboarding.

4. Purposes of Collection, Use & Disclosure

We collect, hold, and use your personal information solely for legitimate commercial and technical purposes, including to:

• Deliver and manage our core consulting services, including custom software development, systems integration, workflow automation, AI lead engines, and cloud infrastructure management.
• Conduct initial workflow audits, assess technical bottlenecks, and prepare tailored commercial proposals.
• Process invoicing, collect service fees, and manage client hosting accounts via our WHMCS billing portal.
• Provide ongoing technical support, system monitoring, security updates, and SLA-backed maintenance.
• Communicate critical operational advisories, including scheduled infrastructure maintenance or critical software security patches.
• Comply with Australian legal, tax, accounting, and regulatory compliance requirements.

5. Australian Data Sovereignty & Infrastructure Security

Data security and sovereignty are central to our operational architecture:

• Australian Data Sovereignty: Client hosting environments, databases, and operational backups are provisioned in enterprise Australian data centers (Equinix Sydney SY4/SY5) with ultra-low latency sub-4ms domestic routing.
• Enterprise Encryption: All web traffic is protected by SSL/TLS 1.3 encryption in transit. Sensitive client databases, configurations, and automated snapshots are encrypted at rest using AES-256 standards.
• Access Governance: Production server access is governed by strict Role-Based Access Controls (RBAC), multi-factor authentication (MFA), and SSH key authentication restricted exclusively to vetted senior engineering staff.
• Zero Data Monetization Pledge: We do not sell, rent, license, or monetize your personal information or commercial data to third-party data brokers, marketers, or advertisers under any circumstances.

6. Disclosure to Third-Party Service Providers

To operate our business and deliver cloud infrastructure, we may share limited data with trusted third-party service providers acting on our behalf under strict confidentiality agreements:

• Billing & Merchant Gateways: WHMCS client management software and PCI-DSS certified payment processors (e.g., Stripe, PayPal, direct bank debit).
• Enterprise Cloud & Telecommunications: Upstream Australian data center facilities, DNS registry providers, and telecommunication carriers necessary to maintain network connectivity.
• Enterprise AI APIs (Client-Approved Only): When developing custom AI integrations or automations, data sent to foundational model providers (e.g., OpenAI, Anthropic, Google Cloud Vertex AI) is governed by enterprise API terms ensuring inputs are not used to train public machine learning models.
• Legal & Regulatory Authorities: Where disclosure is required by law, subpoena, court order, or official Australian regulatory enforcement bodies.

7. Cookies & Tracking Technologies

Our website utilizes cookies and similar tracking technologies to enhance user experience and analyze traffic patterns:

• Essential Cookies: Required for security, authentication, and core functionality (such as keeping you logged into the billing portal or remembering cart sessions).
• Analytical Cookies: Google Analytics 4 (GA4) with IP anonymization enabled, allowing us to aggregate visitor trends, popular service pages, and conversion events without identifying individuals.
• Managing Preferences: You can configure your browser to reject cookies or notify you when cookies are set. Please note that disabling essential cookies may affect client portal functionality.

8. Your Rights: Access, Correction & Deletion

Under the Australian Privacy Principles, you have clear statutory rights regarding your personal information:

• Right to Access: You may request access to any personal information we hold about you by contacting our Privacy Officer.
• Right to Correction: If you believe any information we hold is inaccurate, incomplete, or out of date, we will promptly update our records upon verification.
• Right to Deletion: You may request the deletion or de-identification of your personal records, subject to any mandatory retention requirements under Australian taxation and corporations law.
• Marketing Opt-Out: You may opt out of receiving promotional communications at any time by clicking the unsubscribe link in our emails or emailing us directly.

9. Cross-Border Disclosures

We prioritize domestic data storage within Australia. However, where cloud SaaS tools or third-party APIs operate global infrastructure, we take reasonable steps to ensure foreign recipients handle personal information with protections comparable to the Australian Privacy Principles.

10. Inquiries, Complaints & Privacy Officer

If you have any questions, feedback, or wish to lodge a complaint regarding our handling of your personal information, please contact our designated Privacy Officer:

• Contact: Privacy Officer, iWeb Consultants
• Email: privacy@iwebconsultants.com.au (or info@iwebconsultants.com.au)
• Phone: 1300 087 212
• Office: Sydney NSW 2000, Australia

We investigate all privacy complaints thoroughly and will provide a formal written response within thirty (30) business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.

11. Amendments to this Privacy Policy

We may update this Privacy Policy periodically to reflect enhancements in our service architecture, new regulatory mandates, or changes in statutory standards. Any modifications will be posted directly to this page with an updated “Last Updated” timestamp.