Privacy Policy

1. Introduction

This Privacy Policy explains how Stronghold Web Design ("we," "us," "our") collects, holds, uses and discloses personal information in connection with our website design, domain and email services for Australian small businesses. We are committed to handling personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth), and we comply with this standard as a matter of good practice regardless of whether we meet the turnover threshold for mandatory coverage.

2. What we collect

We may collect your name, business name, email address, phone number, social media links, Google Business page details, and any other information you choose to provide through our enquiry form. We do not seek to collect sensitive information (such as health information) as defined under the Privacy Act 1988 (Cth), and ask that you not include it in any enquiry or communication with us.

Where practicable, you may deal with us anonymously or using a pseudonym — for example, for a general enquiry that does not require us to identify you.

3. How we use your information

We use the information you provide to respond to enquiries, deliver our services, communicate about your project, and improve our offerings. We do not use your information for direct marketing unless you have separately consented, and any marketing communications will comply with the Spam Act 2003 (Cth), including providing a clear way to unsubscribe.

4. Storage and security

Personal information is stored securely using reputable cloud infrastructure. We take reasonable steps to protect information from misuse, interference, loss and unauthorised access. We retain personal information only for as long as reasonably necessary for the purposes described in this policy, or as required by law, and take reasonable steps to destroy or de-identify it once it is no longer needed.

5. Cookies and analytics

Our site may use basic analytics (such as Google Analytics) and cookies to understand visitor behaviour. You can disable cookies in your browser settings. Some analytics providers may process data outside Australia — see clause 7 below.

6. Third parties

We do not sell personal information. We may share information with service providers who help us deliver our services (for example, domain registrars, email hosting providers, and analytics providers), only to the extent required.

7. Overseas disclosure

Our website is hosted using Lovable, which runs on cloud infrastructure provided by Amazon Web Services (AWS) and Supabase. This means personal information may be stored or processed outside Australia, including in the United States. If we engage an analytics provider (such as Google Analytics), that provider may also process information outside Australia, including in the United States. By providing your information, you consent to this handling as described in this policy.

8. Data breaches

If we experience a data breach involving personal information that is likely to result in serious harm, we will take steps consistent with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth), including notifying affected individuals and the Office of the Australian Information Commissioner where required.

9. Your rights — access and correction

You may request access to, or correction of, the personal information we hold about you by contacting us using the details in clause 11. We will respond within a reasonable time and may need to verify your identity before providing access.

10. Complaints

If you believe we have breached your privacy, please contact us using the details in clause 11 with details of your concern. We will investigate and respond within a reasonable time. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new "last updated" date.

12. Contact us

For privacy questions, access or correction requests, or complaints, please reach out through the enquiry form on our contact page.