Privacy

Web & Roll PTY LTD (ACN 657 374 859, ABN 98 657 374 859) is committed to protecting your personal information. This policy explains what we collect, why, who we share it with and what you can do about it. We do not sell your personal information to anyone.

Last reviewed: September 2026

We handle personal information in accordance with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). Marketing and commercial electronic messages are also governed by the Spam Act 2003 (Cth), and telephone marketing by the Do Not Call Register Act 2006 (Cth).

Who we are

The entity responsible for your information.

Web & Roll PTY LTD (ACN 657 374 859, ABN 98 657 374 859), 41 Fairway Close, Mount Coolum QLD 4573.

For any privacy question, correction request or complaint, contact us at info@webandroll.com.au or call (07) 5405 2525. We do not have a dedicated privacy officer; privacy enquiries go to the directors.

What we collect

The information we hold.

Information you give us

• Name, email address, phone number and website address, usually via a contact or enquiry form
• Business name and any details you include about a project
• Anything else you choose to put in a form message, an email or a phone conversation we note down

Information collected automatically

• IP address and approximate location derived from it
• Browser type and version, device type and operating system
• Pages visited, time spent on them and the site or search that referred you
• Your cookie choices, so we do not have to ask again on every visit

We do not collect sensitive information as defined by the Privacy Act, such as health, racial or ethnic origin, political or religious beliefs, or criminal record. Please do not send us any.

You can deal with us anonymously or under a pseudonym if you would rather, though we will not be able to quote for work or deliver a project without knowing who you are.

Why we collect it

What we use it for.

We collect personal information so that we can:

• Respond to enquiries and provide quotes and proposals
• Deliver the services you have engaged us for, and correspond about them
• Send invoices and keep the financial records the law requires us to keep
• Understand how the website is used so we can improve it
• Protect the site and our forms against spam and abuse
• Meet our obligations under Australian law

If we ever want to use your information for something other than the purpose it was collected for, we will either ask you first or make sure the new purpose is one you would reasonably expect.

Marketing

Marketing, and how to stop it.

If you have enquired or worked with us, we may occasionally email you about our services. Every marketing email includes a working unsubscribe link, as the Spam Act 2003 (Cth) requires, and we action unsubscribes promptly.

You can opt out at any time by using that link or by emailing info@webandroll.com.au. Opting out of marketing does not stop necessary messages about a project you have engaged us for.

We do not supply your details to other organisations for their marketing.

Cookies

Cookies and how to control them.

The site uses cookies to work properly and to understand how visitors use it. On your first visit you will see a consent banner where you choose what to allow.

Necessary cookies keep the site working - session handling, security and remembering your cookie choice. These cannot be turned off.

Analytics cookies tell us which pages get read and where people give up. We use Google Analytics and Google Tag Manager. Nothing analytics-related loads until you accept.

You can change your mind at any time through the cookie settings on the site, and you can clear or block cookies in your browser. Parts of the site may work less well if you block everything.

Third parties

Who else touches your data.

We use a small number of service providers to run the site and the business. Each only receives what it needs to do its job:

• Vercel - website hosting and delivery. Processes IP addresses and request logs.
• DigitalOcean - database hosting. Stores the content and enquiry records behind the site.
• Cloudflare R2 - image and file storage for the media on this site.
• Google Analytics and Google Tag Manager - website analytics, loaded only with your consent.
• Google Workspace - our email. Any correspondence with us is stored there.
• Google Ads and Meta - only where we are running advertising for our own business.

None of these providers is permitted to use your information for their own marketing or to sell it on. If we add or change a provider in a way that materially affects your information, we will update this page.

Overseas disclosure

Where your information goes.

Some of the providers above store or process data outside Australia, typically in the United States, Singapore or the European Union. This is an overseas disclosure under APP 8.

Before disclosing personal information overseas we take reasonable steps to satisfy ourselves that the recipient handles it in a way consistent with the Australian Privacy Principles, including through the contractual terms and published privacy commitments of the provider.

Retention

How long we keep it.

We keep personal information only as long as we need it, or as long as the law requires:

• Enquiry and contact form submissions - 2 years from the last contact
• Client project records - 5 years from the end of the engagement, in line with Australian Taxation Office record keeping requirements
• Financial records - 5 years, as required by the Corporations Act and ATO
• Cookie consent records - 12 months, after which we ask again
• Analytics data - as per the Google Analytics retention setting, currently 14 months
• Server and access logs - 30 days

When information is no longer needed and we are not required to keep it, we destroy it or de-identify it.

Your rights

Access, correction and complaints.

Under the Privacy Act you can:

• Ask for access to the personal information we hold about you (APP 12)
• Ask us to correct anything that is wrong, out of date or incomplete (APP 13)

Email info@webandroll.com.au and we will respond within 30 days. There is no charge for making a request. If we refuse access or correction we will tell you why in writing and explain how to complain.

Beyond those two, and as a matter of practice rather than legal obligation, we will delete personal information on request where we are not required to keep it. Australian privacy law does not give a general right to erasure, data portability or objection in the way European law does, and we would rather say that plainly than imply rights you do not have.

Security

How we look after it.

Everything sent to and from this site is encrypted in transit using HTTPS. Access to the systems holding personal information is limited to the people who need it, protected by strong authentication, and reviewed periodically.

No system is perfectly secure, and we will not pretend otherwise. What we can say is that we keep the software patched, we do not keep information we do not need, and we do not store payment card details at all.

Data breaches

If something goes wrong.

If we become aware of unauthorised access to, disclosure of, or loss of personal information, we will investigate promptly and take steps to contain it.

Where a breach is likely to result in serious harm, the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act requires us to notify the affected individuals and the Office of the Australian Information Commissioner. We will do so as soon as practicable, and we will tell you what happened and what you can do about it.

Children

Children's information.

This site and our services are aimed at businesses, not children. We do not knowingly collect personal information from anyone under 15. If you believe a child has given us their details, contact us and we will delete them.

Complaints

If you are not happy.

If you think we have mishandled your personal information, tell us first at info@webandroll.com.au or on (07) 5405 2525. We will acknowledge your complaint within five business days and give you a written response within 30 days.

If you are not satisfied with our response, you can take it to the Office of the Australian Information Commissioner:

Office of the Australian Information Commissioner, GPO Box 5218, Sydney NSW 2001. Telephone 1300 363 992. Website oaic.gov.au.

Changes

Changes to this policy.

We update this policy from time to time. The current version is always the one published here, with the review date at the top. If a change materially affects how we handle your information we will make that clear rather than quietly editing the page.