================================================================================

OWL WEB — PRIVACY POLICY

owlweb.com.au

Last updated: June 2026

================================================================================


OwlWeb ("we", "us", "our") is committed to protecting your privacy and handling

your personal information responsibly. This Privacy Policy explains what personal

information we collect, how we use and share it, and what rights you have in

relation to it.


It applies to all users of the OwlWeb Website Builder service and any custom

websites we build on your behalf, including individuals and businesses using our

platform to create or manage websites for their clients (collectively, "you" or

"your").


By using our services, you confirm that you have read and understood this Privacy

Policy and agree to our Terms and Conditions. If you have any questions, contact

us at support@owlweb.com.au.


We may update this Privacy Policy from time to time. Updates will be posted at

owlweb.com.au/privacy, and we encourage you to review it periodically.



--------------------------------------------------------------------------------

1. WHO WE ARE

--------------------------------------------------------------------------------


Owl Web is an Australian business providing website building and design services,

operating at owlweb.com.au. We are subject to the Australian Privacy Act 1988

(Cth) and the Australian Privacy Principles (APPs) contained within it.


For the purposes of the Brizy platform, the underlying technology and

infrastructure is provided by ProWebCraft LTD, registered in the United Kingdom

(company number 14303873), trading as Brizy. Where Brizy processes personal data

as part of delivering their platform to us, their own data practices also apply.


For questions about this Privacy Policy, contact us at:


Email: support@owlweb.com.au

Website: owlweb.com.au



--------------------------------------------------------------------------------

2. OUR ROLE IN DATA HANDLING

--------------------------------------------------------------------------------


Depending on the context, OwlWeb acts in different capacities:


AS A CONTROLLER OF YOUR DATA

We collect and handle your personal information when you create an account, make

a purchase, contact our support team, subscribe to communications, or otherwise

interact with us directly. In these cases, we decide how and why your information

is used, and this Privacy Policy governs that use.


AS A PROCESSOR ON YOUR BEHALF

When you use OwlWeb to build and publish websites, your website visitors'

personal information is collected and controlled by you — not by us. OwlWeb only

stores and processes that data to provide you with hosting and platform services,

and only as directed by you.


If you operate a website through OwlWeb (whether built on our Brizy-powered

builder or on WordPress), you are responsible for:


- Having a compliant privacy policy on your own website

- Obtaining appropriate consent from your visitors where required

- Managing cookie notices and data collection disclosures

- Complying with the Australian Privacy Act and any other applicable laws


OwlWeb does not independently collect personal information from visitors to

websites built on our platform and takes no responsibility for how you manage

your own website visitors' data.



--------------------------------------------------------------------------------

3. WHAT PERSONAL INFORMATION WE COLLECT

--------------------------------------------------------------------------------


INFORMATION YOU PROVIDE TO US


Account Details

When you register with OwlWeb, we collect your name, email address, and password.

This information is used to create and manage your account and to communicate

with you about your service.


Payment and Billing Information

When you purchase a subscription or service, payments are handled by trusted

third-party payment processors. We do not store your full credit card details.

We do receive and retain limited billing information from payment processors,

including the last four digits of your card, expiry date, billing address, and

where applicable, business details required for tax and invoicing purposes. This

is retained to fulfil our legal and contractual obligations.


Support and Communications

When you contact us by email, phone, or through our website, we collect your

name, email address, and the details of your enquiry so we can respond to you

effectively.


Marketing Preferences

If you subscribe to our newsletter or marketing communications, we collect your

name and email address. You can unsubscribe at any time.


Project and Service Information

For custom WordPress website projects, we may collect additional information

necessary to deliver your project, including business details, branding assets,

content, and other materials you provide. This information is used solely to

fulfil your project.


INFORMATION WE COLLECT AUTOMATICALLY


When you use our website or platform, we automatically collect certain technical

information, including:


- Your IP address

- Browser type and version

- Device type and operating system

- Pages you visit on our site and how you interact with them

- Referring URLs and search terms

- Timestamps and session data


This information is collected using cookies and analytics tools (such as Google

Analytics) to help us understand how our services are used and to improve them.

Please refer to our Cookie Policy at owlweb.com.au/cookies for more information.



--------------------------------------------------------------------------------

4. HOW WE USE YOUR INFORMATION

--------------------------------------------------------------------------------


We use your personal information for the following purposes:


TO PROVIDE AND MANAGE OUR SERVICES

We use your account details, billing information, and service history to deliver

the services you have requested, process payments, manage your subscription, and

provide customer support.


TO COMMUNICATE WITH YOU

We use your contact details to send you important account information, billing

notices, security alerts, and responses to your enquiries. These transactional

communications are sent regardless of your marketing preferences, as they are

necessary for the operation of your account.


TO SEND MARKETING COMMUNICATIONS

With your consent (or where we have a legitimate interest as an existing

customer), we may send you information about new features, promotions, and

updates. You can opt out at any time.


TO IMPROVE OUR SERVICES

We use aggregated and anonymised analytics data to understand how our platform

is used and to identify improvements.


TO MEET LEGAL OBLIGATIONS

We retain and may disclose certain information where required by Australian law,

including tax and financial record-keeping obligations.


TO PROTECT SECURITY AND PREVENT FRAUD

We monitor for and investigate suspicious activity, security incidents, and

unauthorised use of our platform.


Legal basis note: We process your information on the bases of contractual

necessity, legitimate interests, legal obligation, and (for marketing) consent.

Where we rely on legitimate interests, we balance these against your rights and

will not use your information in ways that are overly intrusive or unexpected.



--------------------------------------------------------------------------------

5. WORDPRESS SITES AND THIRD-PARTY PLUGINS AND THEMES

--------------------------------------------------------------------------------


Some OwlWeb services involve custom websites built on WordPress, an open-source

content management system. These sites may also use third-party plugins and

themes to deliver design and functionality.


DATA HANDLING ON WORDPRESS SITES

The data practices of a WordPress website depend significantly on the plugins

and themes installed on that site. Some plugins collect, store, or transmit

personal information — for example, contact form plugins may store enquiry

submissions, e-commerce plugins may process customer orders, and analytics

plugins may track visitor behaviour.


Where OwlWeb builds a custom WordPress website for you:


- We will inform you of the key plugins and themes used in your project

- We will endeavour to use reputable, well-maintained plugins and themes with

clear privacy practices

- Each plugin or theme operates under its own privacy policy and terms, which

are separate from this policy


WHERE THIRD-PARTY PLUGINS ARE INVOLVED

Third-party plugin and theme developers may collect or access data from your

website independently, in accordance with their own privacy policies. OwlWeb is

not responsible for the data practices of third-party plugin or theme developers.


You are responsible for reviewing the privacy practices of any plugins or themes

used on your website, and for ensuring your own website's privacy policy

accurately reflects how your visitors' data is collected and used.


A list of key third-party plugins and themes used on your WordPress site can be

provided upon request — email support@owlweb.com.au.


PLATFORM-LEVEL DATA (BRIZY)

For websites built using our Brizy-powered website builder, ProWebCraft LTD

(Brizy) acts as a subprocessor of data on our behalf. Brizy's infrastructure

is hosted on Amazon Web Services (AWS). Brizy's own platform-level privacy

practices are described at brizy.io/privacy-policy.



--------------------------------------------------------------------------------

6. COOKIES AND TRACKING TECHNOLOGIES

--------------------------------------------------------------------------------


OwlWeb uses cookies and similar tracking technologies on our website to:


- Keep you logged in to your account

- Remember your preferences

- Analyse how visitors use our site (via tools such as Google Analytics)

- Support the security and performance of our platform


You can control cookie settings through your browser. Disabling certain cookies

may affect the functionality of our website and platform. For full details,

please refer to our Cookie Policy at owlweb.com.au/cookies.


Where your website (whether built on our builder or WordPress) uses cookies, you

are responsible for providing appropriate cookie notices and obtaining consent

from your visitors where required under Australian law.



--------------------------------------------------------------------------------

7. HOW WE SHARE YOUR INFORMATION

--------------------------------------------------------------------------------


We do not sell your personal information. We may share your information in the

following circumstances:


SERVICE PROVIDERS

We share information with trusted third-party service providers who assist us in

operating our business. These include:


- Payment processors (to handle billing and transactions)

- Hosting and infrastructure providers (to store and deliver our services)

- Email and communication platforms (to send transactional and marketing

communications)

- Analytics providers (to help us understand platform usage)

- Customer support tools


All service providers are engaged under contractual obligations that require

them to protect your information and use it only for the purposes we direct.


THIRD-PARTY PLATFORMS (BRIZY)

As a white-label reseller of Brizy Cloud, certain account and usage information

is shared with ProWebCraft LTD (Brizy) as part of delivering the platform. This

is governed by our reseller agreement with Brizy and Brizy's own privacy policy.


THIRD-PARTY PLUGINS AND THEMES (WORDPRESS)

Where your custom WordPress site uses third-party plugins or themes that connect

to external services (for example, payment gateways, CRM systems, or email

marketing tools), data may flow between your website and those third parties.

OwlWeb is not responsible for those data flows. You should review the privacy

policies of any third-party integrations used on your site.


LEGAL REQUIREMENTS

We may disclose your information where required to do so by law, including in

response to a valid request from a government authority, regulator, or court, or

to protect the rights, property, or safety of OwlWeb, our customers, or others.


BUSINESS TRANSFERS

In the event that OwlWeb undergoes a business restructure, merger, or change of

ownership, your information may be transferred to a successor entity, subject to

appropriate confidentiality and privacy protections.


PROFESSIONAL ADVISORS

We may share information with our legal, financial, or other professional

advisors on a confidential basis where necessary.



--------------------------------------------------------------------------------

8. INTERNATIONAL DATA TRANSFERS

--------------------------------------------------------------------------------


OwlWeb is an Australian business. Some of our service providers, including the

Brizy platform infrastructure (hosted on AWS), may process data in locations

outside of Australia, including the United States and Europe.


Where personal information is transferred outside Australia, we take reasonable

steps to ensure that the overseas recipient handles that information in a way

that is consistent with the Australian Privacy Principles (APPs). This may

include entering into data processing agreements or relying on recognised

international data protection frameworks.


By using our services, you acknowledge that your information may be transferred

to and processed in countries outside Australia.



--------------------------------------------------------------------------------

9. HOW LONG WE KEEP YOUR INFORMATION

--------------------------------------------------------------------------------


We retain your personal information only for as long as necessary to fulfil the

purposes described in this policy, or as required by law.


Account and User Data While your account is active, plus up to 3 years

after account closure, unless a longer period is

required by law.


Payment and Financial Data As required by Australian taxation and financial

laws, generally 5 to 7 years.


Marketing Communications Until you unsubscribe or request deletion.


Support Communications Up to 3 years from the date of the interaction.


Analytics Data Up to 2 years, typically in aggregated or

anonymised form.


WordPress Project Files For the duration of the engagement and a

reasonable period thereafter, unless you request

earlier deletion or we agree otherwise in writing.


After the applicable retention period, we securely delete or de-identify your

personal information.



--------------------------------------------------------------------------------

10. PROTECTING YOUR INFORMATION

--------------------------------------------------------------------------------


We take the security of your personal information seriously and have implemented

reasonable technical and organisational measures to protect it from unauthorised

access, loss, misuse, or disclosure. These include:


- Secure (SSL/TLS) encrypted data transmission

- Password-protected and access-controlled systems

- Role-based access for staff and contractors

- Trusted cloud hosting infrastructure (via Brizy/AWS)

- Regular security updates and monitoring


No online system is completely secure. If you have concerns about the security

of your information, contact us at support@owlweb.com.au.


In the event of a data breach that is likely to result in serious harm, we will

notify affected individuals and the Office of the Australian Information

Commissioner (OAIC) in accordance with our obligations under the Notifiable

Data Breaches (NDB) scheme under the Privacy Act 1988 (Cth).



--------------------------------------------------------------------------------

11. YOUR PRIVACY RIGHTS (AUSTRALIAN PRIVACY ACT)

--------------------------------------------------------------------------------


Under the Australian Privacy Act 1988 (Cth) and the Australian Privacy

Principles (APPs), you have the following rights in relation to your personal

information:


RIGHT OF ACCESS

You may request access to the personal information we hold about you. We will

respond to access requests within a reasonable timeframe and will not charge a

fee for making the request, though we may charge a reasonable fee for providing

access in certain circumstances.


RIGHT TO CORRECTION

If you believe that personal information we hold about you is inaccurate,

incomplete, or out of date, you may request that we correct it. We will take

reasonable steps to correct the information or, if we disagree, note your

request on the record.


RIGHT TO COMPLAIN

You have the right to make a complaint about how we have handled your personal

information. We will investigate complaints promptly and respond within a

reasonable time.


If you are not satisfied with our response, you may escalate your complaint to

the Office of the Australian Information Commissioner (OAIC):


Website: oaic.gov.au

Phone: 1300 363 992

Post: GPO Box 5218, Sydney NSW 2001


HOW TO EXERCISE YOUR RIGHTS

To make an access or correction request, or to lodge a complaint, contact us at:


Email: support@owlweb.com.au

Website: owlweb.com.au


We will respond to requests within 30 days. If additional time is required, we

will let you know.



--------------------------------------------------------------------------------

12. MARKETING COMMUNICATIONS

--------------------------------------------------------------------------------


We may send you promotional emails about our services, new features, and

special offers. We do this on the basis of your consent or, for existing

customers, our legitimate interest in keeping you informed about relevant updates.


You can unsubscribe from marketing emails at any time by:


- Clicking the unsubscribe link in any marketing email, or

- Contacting us at support@owlweb.com.au


Unsubscribing from marketing emails will not affect transactional communications

such as billing receipts, security notices, or account updates, which we may

send regardless of your marketing preferences.



--------------------------------------------------------------------------------

13. LINKS TO OTHER WEBSITES

--------------------------------------------------------------------------------


Our website and platform may contain links to third-party websites. OwlWeb is

not responsible for the privacy practices or content of those websites. We

encourage you to review the privacy policies of any third-party sites you visit.


For WordPress-based sites, third-party plugins may also create links or

integrations with external services. The privacy practices of those services are

governed by their own policies and are outside our control.



--------------------------------------------------------------------------------

14. CHILDREN'S PRIVACY

--------------------------------------------------------------------------------


Our services are not directed at children under the age of 16. We do not

knowingly collect personal information from children. If you believe we have

inadvertently collected information from a child, please contact us at

support@owlweb.com.au and we will promptly delete it.



--------------------------------------------------------------------------------

15. CHANGES TO THIS PRIVACY POLICY

--------------------------------------------------------------------------------


We may update this Privacy Policy from time to time to reflect changes in our

practices, the services we offer, or legal requirements. When we do, we will

update the "Last updated" date at the top of this page and post the revised

policy at owlweb.com.au/privacy.


For significant changes, we will notify you by email where possible.


Your continued use of our services after any update constitutes acceptance of

the revised policy.



--------------------------------------------------------------------------------

16. CONTACT US

--------------------------------------------------------------------------------


If you have any questions, concerns, or requests relating to this Privacy Policy

or how we handle your personal information, please get in touch:


OwlWeb

Email: support@owlweb.com.au

Website: owlweb.com.au


We are committed to resolving any privacy concerns promptly and professionally.



================================================================================

NOTES FOR WEBSITE ADMINISTRATORS

================================================================================


If you operate a website built by or through OwlWeb, you are independently

responsible for your own privacy obligations under the Australian Privacy Act

1988 (Cth). This includes:


- Publishing a privacy policy on your website that accurately describes how

you collect, use, and store your visitors' personal information

- Obtaining appropriate consent for any cookies or tracking tools used on

your site (including those introduced by WordPress plugins or themes)

- Complying with spam laws under the Spam Act 2003 (Cth) if you send

commercial electronic messages

- Notifying affected individuals and the OAIC in the event of a data breach

affecting your website visitors, if applicable


OwlWeb can provide guidance on these obligations upon request, but we are not

able to provide legal advice. We recommend consulting a qualified Australian

privacy or legal professional if you are unsure of your obligations.


================================================================================

END OF PRIVACY POLICY — owlweb.com.au/privacy

================================================================================