Legal

Privacy policy

Last updated 2026-10-01 · about 4 min read · Print

Who we are#

websitebuilder.net.au is operated by Kazmaros Pty Ltd (ACN 695 478 721, ABN 71 695 478 721) of PO Box 1163, Milton QLD 4064, Australia (“we”, “us”). It is an Australian service that lets you build and host a website. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

What we collect#

From account holders

• Account details: name, email address and a securely hashed password.
• Business details you enter: business name, ABN, phone, email, address and other content you choose to publish. This is published on your website by design.
• Billing: if you subscribe to Pro, payments are processed by Stripe. We store your Stripe customer reference and plan; we never see or store card numbers.
• Usage and security data: IP address, browser type, timestamps and error logs, used to keep the service secure and working. For each device you’re logged in on we keep its type (for example “Chrome on Windows”), the city and country it last connected from, and when, so you can see and log out of them under Account.
• Two-step sign-in: if you turn it on, the secret your authenticator app shares with us, and one-way hashes of your recovery codes.
• Security activity: a log of logins and changes to your account (password, email, two-step sign-in, domains, transfers, deleted sites, and anything our support team changes), each with the device type and rough location, not the IP address. You can see it under Account.
• Error reports: if a script breaks in the editor or dashboard, your browser sends us the error message, the file and line it happened on, and your browser type, so we can fix it. Never what you were typing or your page’s content.

From visitors to websites built with us

• If you submit a contact form on a site built with us, the details you enter are stored so the site owner can read and reply. The site owner is responsible for how they use your information.
• We keep a hashed (non-reversible) form of your IP address briefly to prevent spam.
• We count visits for the site owner without cookies. To count each person once a day we keep a one-way hash of your IP address and browser, made with a key that changes daily, for two days. The owner only sees totals: pages viewed, the website you came from, and whether you used a phone or a computer.
• If you report a website to us, we keep what you tell us, your email address if you give it (only to reply to you, and never shared with the site’s owner), and a one-way hash of your IP address so one person’s repeat reports count once.
• A site owner can add Google Analytics or the Meta Pixel to their site. If they do, those services set their own cookies under their own privacy policies.

Why we collect it#

• To provide, secure and improve the service.
• To publish the website you build, on the address you choose.
• To deliver enquiries from your website to you.
• To process payments and issue tax invoices.
• To contact you about your account.

Where it is stored#

The service runs on Cloudflare. Your account database has its primary location in Australia; published pages are cached at edge locations worldwide, including Australia, so they load quickly for visitors. Images are stored in Cloudflare R2. Some data therefore transits or is held outside Australia by providers that apply strong security and contractual safeguards.

Who we share it with#

We do not sell personal information. We share it only with providers needed to run the service — hosting (Cloudflare), payments (Stripe) and transactional email (Resend) — and where the law requires. Content you publish on your website is public.

Security#

Passwords are stored with strong one-way hashing (PBKDF2). All traffic is encrypted with HTTPS. Access to production systems is restricted and logged.

Retention#

We keep your account data while your account is open. If you delete a site, its pages, images and enquiries are removed. If you close your account, we delete your personal information within 30 days, except records we must keep (for example, tax invoices) for the period required by Australian law.

Some things are cleared out on their own, every night: enquiries marked as spam after 30 days, error reports 30 days after they were last seen, your security activity after 12 months, reports about websites 12 months after they were dealt with, and expired logins and email links. We keep the 50 most recent versions of each page, plus the published one.

Your rights#

Access and correct your information from your dashboard at any time, or email us. You can ask us to delete your account. If you have a concern about how we have handled your information, contact us first; if you are not satisfied, you can complain to the Office of the Australian Information Commissioner.

Cookies#

We use one essential cookie to keep you logged in, and your browser’s local storage to remember small preferences such as a dismissed banner. We do not use advertising or cross-site tracking cookies. Websites you build with us set no tracking cookies unless you add third-party embeds yourself.

Contact#

Email privacy@websitebuilder.net.au, or write to the Privacy Officer, Kazmaros Pty Ltd, PO Box 1163, Milton QLD 4064, Australia.

Changes#

We will post changes here and update the date above. Material changes will be emailed to account holders.