Last updated: 4 November 2026

Information we collect

We only collect personal information that we need to provide our services or respond to you. Depending on how you deal with us, this may include:

• Enquiries: your name, email address, phone number (optional) and the details of your message when you use our contact form, email or call us.
• Clients: contact details, business or organisation name, ABN, billing address, invoices and payment records, and the login details needed to manage your services.
• Domain names: registrant and contact details that domain registries such as auDA require us to collect when we register or renew a domain for you.
• Support: information you give us when you ask for help, including details of your website, email or systems.
• Website visits: technical information such as your IP address, browser type and the pages requested, which our servers and security services record automatically.

We do not ask for sensitive information (such as health or financial account details) unless it is needed for a specific service and you have agreed to provide it.

How we collect it

Most information comes directly from you: through our website, by email or phone, or when you engage us for a project. We may also receive information from domain registries and registrars, and from our hosting and security systems when you visit our website or use services we host.

Where it is practical, you can make a general enquiry without identifying yourself or by using a pseudonym. We will need your contact details to provide most services.

How we use it

We use personal information to:

• respond to your enquiries and provide quotes
• design, build, host and support your website, email and other services
• register and renew domain names and SSL certificates
• send invoices and manage your account
• keep our systems, websites and your services secure, and prevent spam and abuse
• tell you about important changes to your services
• meet our legal and accounting obligations

We do not sell, rent or trade personal information, and we will not send you marketing emails without your consent.

Information we host for our clients

When we host a website or email service for a client, personal information belonging to that client's customers may be stored on our servers. That information remains under our client's control, and the client is responsible for their own privacy obligations to those people. We only access it when needed to provide, maintain, secure or support the service, and we treat it as confidential.

Who we share it with

We only share personal information when it is needed to deliver our services, for example with:

• domain registries and our domain wholesale provider, to register and manage domain names
• Cloudflare, which provides DNS, security and the anti-spam check on our contact form
• Microsoft, when we set up or manage Microsoft 365 services for you
• Google Fonts, which loads the typefaces used on our website and receives your IP address in the process
• our accountant or other professional advisers
• government agencies or law enforcement, where the law requires or authorises it

Overseas disclosure

Some of the service providers listed above, including Cloudflare, Google and Microsoft, may store or process information outside Australia, including in the United States. Where this happens, we take reasonable steps to make sure those providers protect the information in a way that is consistent with the APPs.

Cookies and website security

Our website does not use advertising or tracking cookies. Our contact form uses Cloudflare Turnstile to check that messages come from people rather than bots. Turnstile looks at technical signals from your browser to make this check; it is not used to show you advertising. Our web servers keep standard access logs for security and troubleshooting.

Keeping your information secure

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss and unauthorised access, including encrypted (SSL) connections, firewalls and intrusion protection, regular software updates, restricted access to systems and regular backups.

We keep personal information only for as long as we need it for the purposes above or as required by law (for example, tax records). When it is no longer needed, we securely delete or de-identify it.

Data breaches

If a data breach is likely to result in serious harm, we will notify the people affected and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

Automated decisions

We do not use computer programs to make decisions about you that could significantly affect your rights or interests. All decisions about our services and your account are made by a person.

Accessing and correcting your information

You can ask to see the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date or incomplete. Contact us using the details below. We will respond within a reasonable time, usually within 30 days. If we cannot give you access, we will explain why.

Complaints

If you have a concern about how we have handled your personal information, please contact us first so we can try to resolve it. We will acknowledge your complaint promptly and aim to respond within 30 days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at www.oaic.gov.au or on 1300 363 992.

Changes to this policy

We may update this policy from time to time. The current version will always be available on this page, with the date it was last updated.

Contact us

North Coast Internet, Scotts Head NSW

Phone: 0481 758 809

Email: info@northcoastinternet.com.au