Privacy policy

1. About this policy

This policy explains how Prestige Technology Solutions Pty Ltd (ABN 58 696 082 096), trading as Prestige Hosting, handles personal information. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) in it, and this policy is written to follow the structure of those principles. It applies to the website at prestigehosting.com.au, the customer dashboard and the hosting services.

It does not apply to the content of websites you host with us. You are the one collecting personal information from your visitors, and you are responsible for your own privacy obligations to them. We act as a host for that content, and section 7 explains how we treat it.

2. What we collect

2.1 Information you give us

• Account details: your name, email address, password (stored only as a hash) and, optionally, a company name.
• Billing details: your billing name and address, ABN if you give one, and the last four digits and expiry of your card. Full card numbers go directly to Stripe and never touch our systems.
• Domain names you add to your account and the DNS records you set for them.
• Messages you send us by email or through the contact form.

2.2 Information collected automatically

• Server and access logs for the dashboard and for hosted sites, including IP address, browser type, pages requested and time of request. Logs are kept for operational and security purposes.
• Usage of the Services, such as storage and transfer used, jobs run and backups taken, so we can show it to you and enforce plan limits.
• Diagnostic information when something fails, so we can fix it.

We do not use advertising trackers or third-party analytics cookies on the marketing site. The dashboard uses strictly necessary cookies to keep you signed in and to remember your theme preference.

3. Why we collect it

We collect and use personal information to:

• create and manage your account and provide the Services you have bought;
• take payment, issue tax invoices and meet our accounting and tax obligations;
• send service emails: invoices, payment failures, security notices, maintenance notices and replies to your enquiries;
• keep the Services secure, detect abuse and investigate breaches of our terms;
• improve the Services based on how they are used; and
• comply with the law.

We will only send you marketing email if you have opted in, and every such email will have a working unsubscribe link. Service emails about your account are not marketing and are sent for as long as you hold an account.

4. Who we share it with

We share personal information only with service providers we need in order to run the Services:

• Stripe, for payment processing, GST calculation and invoicing.
• Supabase, which hosts our customer database and authentication in its Sydney region.
• Vercel, which hosts the website and dashboard application.
• Resend, which delivers our service emails.

Each of these providers handles data on our behalf under its own contractual and security obligations. We may also disclose personal information where the law requires it, for example in response to a valid court order, or where necessary to protect the safety of a person or the security of the Services.

We do not sell personal information, and we do not share it with advertisers.

5. Overseas disclosure

Your hosted site files, databases and backups are stored on servers in Australia. Our customer database is stored in Australia. Some of the providers listed in section 4 are based in the United States and may process limited personal information there (for example, Stripe processes payments and Resend delivers email). Before disclosing personal information overseas we take reasonable steps to ensure the recipient handles it in a way consistent with the APPs.

6. How we keep it secure

• All traffic to the website, the dashboard and hosted sites is encrypted with TLS.
• Passwords are stored as salted hashes. Card numbers are never stored by us.
• Access to customer data is limited to staff who need it to provide support, and to the automated systems that run the Services. Administrative access is protected with strong authentication.
• Backups are encrypted at rest and kept for 14 days.
• Servers are kept patched and monitored.

No system is perfectly secure. If we become aware of a data breach that is likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

7. Content you host with us

The websites, files and databases you upload may contain personal information about your customers or visitors. For that information, you are the collector and we are a processor acting on your instructions. We do not access your content except to provide support you have asked for, to investigate a suspected breach of our terms, to respond to a lawful request, or through automated processes such as backups and malware scanning. We do not use your content for any other purpose.

8. How long we keep it

• Account and billing records are kept while you hold an account and for seven years after, as required by Australian tax law.
• Site files, databases and backups are deleted 30 days after your subscription ends.
• Server logs are kept for 90 days unless needed longer for a security investigation.
• Contact form messages and support emails are kept for as long as they are useful for helping you, and deleted on request.

9. Access, correction and deletion

You can see and update most of your personal information from the account page in your dashboard. For anything else, email hello@prestigehosting.com.au and we will respond within 30 days. You may ask us to correct information that is wrong, or to delete your account and the personal information we hold, subject to the retention periods above that the law requires.

10. Complaints

If you think we have mishandled your personal information, please email hello@prestigehosting.com.au with the details. We will acknowledge your complaint within seven days and aim to resolve it within 30. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

11. Changes and contact

We may update this policy from time to time. The date at the top shows when it last changed, and we will email account holders about any change that affects how their information is handled. Questions about this policy go to hello@prestigehosting.com.au, or by post to Prestige Technology Solutions Pty Ltd, Gold Coast, Queensland.