Privacy Policy Our Vigil. Your Protection.

Information We Collect

Non-Personal Information

Like most internet-service operators, Webential collects non-personally-identifying information that web browsers, apps, and servers typically make available, such as:

• Browser type and language preference
• Geographical location
• Referring site
• Date and time of each visitor request

We use this information to understand how visitors use our services and improve our offerings. We may release non-personally-identifying information in the aggregate (e.g., usage trend reports).

Personal Information

Webential also collects potentially personally-identifying information including:

• Internet Protocol (IP) addresses for users and visitors
• Name, phone number, address, and email address
• Financial or credit card information (when processing orders)
• Feedback, survey responses, and customer support communications
• Any other information you provide when interacting with us

How We Use Your Information

We may use personal information collected from you to:

• Provide you with information, updates, and our services
• Notify you of new products, services, and opportunities
• Improve our products and services and better understand your needs
• Contact you by telephone, email, SMS, or mail
• Comply with legal obligations
• Protect our copyright, trademarks, legal rights, property, or safety

Third-Party Service Providers

We may disclose your personal information to our employees, officers, insurers, professional advisers, agents, suppliers, or subcontractors where reasonably necessary for the purposes set out in this Policy. Personal information is only supplied to a third party when required for the delivery of our services.

Third-party service providers we may use include:

• Website hosting providers (located in Australia, UK, USA, or India)
• Payment processors (e.g., Stripe, PayPal)
• Email marketing services (e.g., Mailchimp, SendGrid)
• Analytics providers (e.g., Google Analytics)
• Customer relationship management (CRM) systems

We require all third-party providers to:

• Implement appropriate security measures
• Use personal information only for the purposes we specify
• Not disclose personal information to other parties without our consent
• Comply with the Australian Privacy Principles

Overseas Disclosure

Information we collect may from time to time be stored, processed in, or transferred between parties located in countries outside of Australia, including but not limited to the UK, USA, and India.

Before disclosing personal information overseas, we will:

• Ensure the recipient is bound by obligations substantially similar to the APPs
• Take reasonable steps to ensure the recipient does not breach the APPs
• Obtain your consent where required

Where we disclose personal information to overseas recipients, you consent to the disclosure and understand that we may not be able to ensure the same level of protection as under Australian law.

Data Retention Periods

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Our specific retention periods are:

After the retention period expires, we will securely destroy or de-identify personal information in accordance with APP 11.2, unless we are required by law to retain it longer.

Automated Decision-Making (ADM) Transparency

What Is Automated Decision-Making?

Automated decision-making occurs when technology makes decisions about you without human involvement, or with minimal human involvement.

When We Use Automated Decision-Making

Webential may use automated decision-making in the following circumstances:

Your Rights Regarding ADM

• Right to know: You can request information about any automated decision-making we use
• Right to human review: You can request human review of automated decisions that significantly affect you
• Right to opt-out: Where technically feasible, you can opt-out of non-essential ADM
• Right to explanation: You can request a plain-language explanation of how an automated decision was made

To exercise these rights, contact us at privacy@webential.com

Note: Full ADM transparency obligations under the 2024 Amendment Act take effect from 10 December 2026. We are proactively implementing these requirements ahead of the deadline.

Your Rights

You have the following rights regarding your personal information:

Access

You may request details of personal information we hold about you in accordance with the Privacy Act 1988 (Cth). A small administrative fee may be payable for the provision of information.

Correction

If you believe that any information we hold on you is inaccurate, out of date, incomplete, irrelevant, or misleading, please email us at support@webential.com, and we will take reasonable steps to correct it.

Deletion/Destruction

Where personal information is no longer necessary for the purposes for which it was collected, and we are not required by law to retain it, you may request its destruction in accordance with APP 11.2.

Complaints

If you believe we may have breached the Australian Privacy Principles:

1. Submit a complaint by emailing hello@webential.com

2. Include in your complaint:

• Your contact details
• Details of the alleged breach
• Any supporting documentation
• The outcome you seek

3. Our response timeline:

• Acknowledgment: Within 5 business days
• Investigation: Completed within 30 calendar days
• Outcome: Written response with findings and any remedial action

4. If you're not satisfied with our response:

• You may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or 1300 363 992

We are committed to resolving complaints fairly and promptly.

Security

Webential is committed to ensuring that the information you provide to us is secure. In order to prevent unauthorized access or disclosure, we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure information and protect it from misuse, interference, loss, and unauthorized access, modification, and disclosure.

However, please note:

• The transmission and exchange of information is carried out at your own risk
• We cannot guarantee the security of any information that you transmit to us or receive from us
• Although we take measures to safeguard against unauthorized disclosures, we cannot assure you that personal information we collect will not be disclosed in a manner inconsistent with this Policy