1. About this Privacy Policy

This Privacy Policy explains how LNS Web Hosting, ABN 57 679 004 824 ("LNS Web Hosting", "we", "us" or "our") collects, holds, uses, discloses and protects personal information.

We respect the privacy of our customers, prospective customers, website visitors and other individuals who deal with us. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) where they apply to us, and use those principles as the framework for our privacy practices.

In this policy, "personal information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable, as defined by applicable Australian privacy law.

2. Personal Information We May Collect

We may collect and hold personal information reasonably necessary for our business and the services we provide, including:

• name, business name, postal and street address, email address and telephone number;
• account usernames, customer identifiers and authentication-related information;
• billing, transaction, invoice and payment-related information (payment card details may be processed by payment providers rather than stored directly by us);
• domain registration and contact information where required to register, transfer or manage a domain name;
• support requests, correspondence, call notes, complaint information and records of communications with us;
• technical information such as IP addresses, login records, device or browser information, server and security logs, and information generated when our services are used;
• information required to investigate security incidents, abuse, fraud, spam or breaches of our policies; and
• any other information you choose to provide to us.

We do not generally seek to collect sensitive information unless it is reasonably necessary for a particular purpose and collection is permitted by law.

3. How We Collect Personal Information

We generally collect personal information directly from you when you create or use an account, purchase or renew a service, register or transfer a domain, contact support, submit a form, communicate with us, make a payment, or otherwise deal with us.

We may also collect information automatically when you use our websites, client portal, hosting platforms or other systems, including through logs, cookies and similar technologies.

We may receive personal information from authorised representatives, resellers, domain registrars or registries, payment providers, service suppliers, security providers, fraud-prevention services and other third parties where this is reasonably necessary for our business or the provision of services.

If you provide personal information about another person, you should ensure that you are authorised to provide it and, where appropriate, make them aware of this Privacy Policy.

4. Why We Collect, Hold, Use and Disclose Personal Information

We may collect, hold, use and disclose personal information for purposes including:

• providing, administering, supporting, maintaining and improving our products and services;
• creating and managing customer accounts, orders, renewals, billing and payments;
• registering, transferring and administering domain names and related services;
• communicating with customers about services, support requests, incidents, maintenance, renewals and account matters;
• verifying identity or authority where reasonably necessary;
• protecting our customers, systems and services against fraud, abuse, spam, malware, unauthorised access and other security threats;
• investigating complaints, disputes, suspected policy breaches and security incidents;
• meeting legal, regulatory, accounting, taxation, contractual and compliance obligations;
• managing suppliers, professional advisers and business operations;
• improving our websites, systems, customer service and service offerings; and
• sending marketing communications where permitted by law.

If you do not provide information that we reasonably require, we may be unable to provide or administer some services.

5. Direct Marketing and Electronic Communications

We may use contact information to tell existing or prospective customers about products, services or offers where permitted by law.

Commercial electronic messages sent by us will be managed in accordance with applicable Australian spam laws. Where required, messages will provide a way to unsubscribe. You may also ask us to stop sending marketing communications at any time.

Service, security, billing, renewal and other operational communications may still be sent where they are reasonably necessary to administer an account or service.

6. Disclosure to Third Parties

We may disclose personal information where reasonably necessary to:

• hosting, infrastructure, software, communications, security and other technology suppliers;
• domain registrars, registries and related domain service providers;
• payment processors, banks and financial service providers;
• professional advisers, insurers, auditors and contractors;
• fraud, abuse, security and identity-verification service providers;
• government agencies, regulators, courts, tribunals or law-enforcement bodies where required or authorised by law; and
• a purchaser, successor or adviser in connection with a proposed or completed sale, restructure or transfer of all or part of our business, subject to applicable law.

We do not sell personal information as a business activity.

7. Hosting Content and Customer Data

Our hosting and related services may store or process information that a Customer uploads, transmits or controls. In many cases, the Customer - rather than LNS Web Hosting - determines what personal information is contained in that content and why it is processed.

Customers are responsible for ensuring that their own collection and use of personal information through websites, applications, email accounts or other services complies with applicable privacy and data-protection laws.

We access Customer content only where reasonably necessary to provide requested support, maintain or secure a service, investigate abuse or a security incident, comply with law, or where otherwise authorised.

8. Overseas Disclosure and Service Providers

Some third-party providers used in connection with our services may store, process or access personal information outside Australia. The locations involved can vary depending on the particular service, supplier and infrastructure used.

Where the Australian Privacy Principles apply to an overseas disclosure, we will take reasonable steps required by applicable law in relation to the overseas recipient, subject to any lawful exception.

Where it is practicable to identify the countries relevant to a particular disclosure, information can be requested from us using the contact details below. Customers should also review any service-specific information provided when purchasing products that rely on overseas suppliers.

9. Security of Personal Information

We take reasonable technical, physical and organisational measures appropriate to the circumstances to protect personal information we hold from misuse, interference, loss, and unauthorised access, modification or disclosure.

Measures may include access controls, authentication, system monitoring, security logging, network and server protections, backups, staff or contractor controls and incident-response processes, depending on the information and service involved.

No method of electronic transmission or storage is completely secure. We therefore cannot guarantee absolute security, but we will take reasonable steps appropriate to the circumstances to protect information in our control.

10. Data Retention and Disposal

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, to provide and administer services, resolve disputes, maintain appropriate business records, protect against fraud or abuse, and comply with legal, accounting, taxation and regulatory requirements.

Where the Australian Privacy Principles require it and we no longer need personal information for a permitted purpose, we will take reasonable steps to destroy it or ensure that it is de-identified, unless we are required or authorised by law to retain it.

Information may remain in backups or archives for a period until it is overwritten, securely deleted or otherwise dealt with in accordance with our retention and backup processes.

11. Data Breaches

We maintain processes for responding to suspected or actual data breaches. If a breach involving personal information occurs, we will investigate and take reasonable steps to contain and address it.

Where the Notifiable Data Breaches scheme or another applicable law requires notification, we will notify affected individuals and the relevant regulator as required.

12. Access and Correction

You may request access to personal information that we hold about you, or ask us to correct information that you believe is inaccurate, out of date, incomplete, irrelevant or misleading.

We may need to verify your identity or authority before providing access or making a correction. Access may be refused or limited where permitted or required by law, in which case we will provide any explanation required by applicable law.

Requests can be made using the contact details in section 18.

13. Anonymity and Pseudonyms

Where practicable and where permitted by law, you may deal with us anonymously or using a pseudonym for general enquiries.

For many hosting, domain, billing, account, security and support functions, it will be impracticable for us to provide the service without identifying or verifying the relevant customer or authorised user.

14. Website, Cookies and Analytics

When you use our websites or client portal, we may collect technical information such as IP address, browser and device information, pages viewed, referral information, timestamps and other usage data.

We may use cookies and similar technologies for functions such as authentication, account sessions, preferences, security, website operation, analytics and improving user experience. You can usually control cookies through your browser settings, although disabling some cookies may affect website or client-portal functionality.

Where third-party analytics, advertising or embedded services are used, those providers may collect information in accordance with their own privacy practices. We will use such services subject to applicable law.

15. Third-Party Websites and Services

Our websites or services may contain links to, integrate with or rely on third-party websites and services. Their privacy practices are governed by their own policies and are not controlled by LNS Web Hosting.

We encourage you to review the privacy information of third-party services before providing personal information to them.

16. Overseas Privacy Laws

Australian privacy law is the primary framework addressed by this policy. Privacy or data-protection laws in another jurisdiction may also apply to particular individuals, services or processing activities.

Where another privacy law, including the European Union or United Kingdom General Data Protection Regulation, applies to our handling of personal information, we will comply with the obligations that apply to us in those circumstances. This policy does not represent that every foreign privacy law applies to every LNS Web Hosting customer or service.

17. Privacy Complaints

If you have a concern or complaint about how we have handled personal information, please contact us using the details below and provide enough information for us to investigate.

We will review privacy complaints and respond within a reasonable period. We may contact you for further information where necessary.

If you are not satisfied with our response and the Privacy Act applies to the matter, you may be able to make a complaint to the Office of the Australian Information Commissioner (OAIC).

18. Contact

Privacy enquiries, access or correction requests, and complaints may be directed to:

19. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our services, information-handling practices, technology, suppliers or legal and regulatory requirements.

The current version will be published on our website or client portal with a version or last-updated date. Where required by law or reasonably appropriate, we will provide additional notice of material changes.