Privacy Policy

xweb (ABN 89 299 677 458) • Effective 29 June 2026

xweb collects only the information necessary to provide our services. We do not sell or share personal data with third parties except as required to deliver hosting, email, or support.

By using our services you consent to the collection and use of information in accordance with this policy. Contact us for any data access or deletion requests.

1. Introduction

This Privacy Policy sets out how xweb collects, uses, discloses, stores and protects personal information in accordance with the Privacy Act 1988 (Cth) (the “Privacy Act”) and the Australian Privacy Principles (“APPs”).

This Policy applies to all personal information we handle in connection with our Drupal development, web hosting, cloud hosting, email, domain registration and related services.

2. Collection of Personal Information

We collect personal information that is reasonably necessary for our functions and activities. This may include:

• contact and identification information (name, email, phone, company, ABN, website);
• billing and account information (address, payment details, service history);
• technical and usage data (IP addresses, server logs, domain records, support tickets); and
• information you voluntarily provide through forms, emails or support requests.

3. How and Why We Collect Personal Information

We collect personal information directly from you when you enquire about, order or use our services, register accounts, or contact us. We may also collect limited information from third parties (such as domain registrars or payment processors) where necessary to provide the services.

We use personal information to:

• provide, operate and support our services;
• process orders, payments and renewals;
• communicate with you about your account and services;
• improve our website and service quality; and
• comply with our legal obligations.

4. Disclosure of Personal Information

We do not sell personal information. We may disclose personal information to:

• service providers who help us deliver hosting, email or domain services;
• professional advisers (legal, accounting) on a confidential basis;
• law enforcement or regulatory authorities where required or authorised by Australian law; and
• any person or organisation you have authorised us to disclose information to.

Where we disclose personal information to third parties, we take reasonable steps to ensure they handle it in accordance with the APPs.

5. Security

We take reasonable steps to protect personal information from misuse, interference, loss and from unauthorised access, modification or disclosure. This includes appropriate technical and organisational safeguards.

No method of transmission or storage is completely secure. If you believe your personal information has been compromised, contact us immediately.

6. Cookies and Website Tracking

Our website may use cookies and similar technologies to improve functionality and analyse usage. You may control cookies through your browser settings. We do not use cookies for cross-site targeted advertising without consent.

7. Access, Correction and Complaints

You may request access to, or correction of, the personal information we hold about you. You may also make a complaint about our handling of your personal information.

Requests and complaints should be directed to us via the contact details on our website. We will respond within a reasonable time in accordance with the APPs. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC).

8. Overseas Disclosure

We primarily store and process personal information in Australia. In limited cases, personal information may be disclosed to overseas service providers (for example, certain domain registry operators). Where this occurs, we take reasonable steps to ensure the recipient complies with the APPs or is subject to a comparable privacy regime.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will be published on this page with the effective date. Continued use of our services after changes constitutes acceptance of the updated policy.

10. Contact

For questions about this Privacy Policy or to exercise your rights, please use the contact form on our website.