Privacy Policy
We collect as little as possible, we don't sell it, and you can have it deleted by asking. This page sets out the detail.
Last updated 27 August 2026
Who is responsible for your information
Joshua Trevor Noeth, trading as Web Coding (ABN 38 891 005 321), of New South Wales, Australia. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
What we collect
When you use the contact form: your name, email address, the message you write, and optionally the project type and budget you select.
When you register interest in a dedicated server: your name, email address, optional phone number, whatever you tell us about what you're hosting, the plan and region you were looking at, and your IP address. The IP address is kept to rate-limit the form so automated submissions can't flood it.
When you buy hosting: your name, email address, the site name you enter at checkout, your chosen region, and identifiers from Stripe that link your subscription to your account.
When your WordPress site is created: a password is generated, emailed to you once, and deliberately never written to our database. That email is the only copy — change it after your first login.
Our web server also keeps standard technical logs (IP address, page requested, timestamp, browser user-agent) as part of running and securing the service.
What we don't do
- We don't sell or rent your personal information. Ever.
- We don't run advertising trackers, analytics cookies or third-party marketing pixels on this site.
- We don't add you to a marketing list because you contacted us. If we ever start a newsletter, you'll have to opt in.
Why we collect it
- To answer your enquiry and quote on work.
- To set up, run, support and bill for the hosting you've bought.
- To send you service messages — login details, billing notices, planned maintenance, security issues affecting your site.
- To stop spam and abuse of our forms and servers.
- To meet our legal and tax record-keeping obligations.
Who else handles it
We use a small number of third-party services to run the business. Each one only receives what it needs to do its job.
| Service | What it does | Where |
|---|---|---|
| Supabase | Database — stores enquiries, hosting orders and provisioning jobs | Sydney, Australia (ap-southeast-2) |
| Stripe | Payment processing and subscription billing | United States / global |
| SMTP2GO | Sends transactional email (enquiry notifications, login details) | Global |
| Cloudflare | DNS, CDN and the Turnstile anti-spam check on our forms | Global edge network |
| Mobile Message | Sends us an SMS alert when you submit a server enquiry | Australia |
| Akamai (Linode) | Cloud infrastructure for dedicated servers | The region you choose at signup |
Some of these providers are based overseas or operate global networks, which means your information may be stored or processed outside Australia. We only use providers that offer appropriate protections, and our own database — where enquiries and orders live — is hosted in Sydney.
We may also disclose information where the law requires it, or where it's necessary to investigate abuse of our servers.
How long we keep it
- Enquiries that don't become customers: kept while they're commercially useful, then deleted on request at any time.
- Customer and billing records: kept for at least five years after your last invoice, because Australian tax law requires it.
- Website files and databases: see our refunds and cancellation policy for what happens when you leave.
- Server logs: rotated automatically as part of normal server operation.
Keeping it secure
The site runs over HTTPS. Each hosting account is isolated with its own system user, database and process pool, so one site can't read another's files. Access to our database and servers is restricted to the operator of the business. Generated passwords are emailed once and never stored.
No system is perfectly secure. If a data breach occurs that's likely to cause you serious harm, we'll notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
Cookies
This site sets no advertising or analytics cookies. Your light/dark theme preference is stored locally in your own browser and never sent to us. Cloudflare Turnstile may set a short-lived token to confirm you're not a bot when you submit a form. Stripe sets its own cookies on its checkout pages, governed by Stripe's privacy policy.
Your rights
You can ask us to show you what personal information we hold about you, correct anything that's wrong, or delete it — subject to records we have to keep for tax purposes. Email [email protected] and we'll respond within 30 days, usually much sooner. There's no charge.
If you're not happy with how we've handled your information, tell us first and we'll try to sort it out. If that doesn't resolve it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes to this policy
If we change how we handle personal information, this page is updated and the date at the top changes with it. Material changes affecting existing customers are emailed.
Questions about any of this?
Email [email protected] or call 0493 521 261. You'll get a person, not a ticket queue.
Joshua Trevor Noeth, trading as Web Coding · ABN 38 891 005 321 · New South Wales, Australia