Privacy Policy for Paigefy

Paigefy (ABN 25 545 382 512) (“we,” “our,” or “us”) is committed to protecting the privacy of individuals in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (“APPs”). This Privacy Policy explains how we collect, use, disclose, and store personal information when you visit paigefy.com.au or use our services.

1. Who We Are

Paigefy is an Australian business that creates and hosts professional websites for local businesses. We operate online at paigefy.com.au and our registered ABN is 25 545 382 512.

2. What Information We Collect

3. How We Collect Information

We collect personal information:

• Directly from you when you use our services, make a payment, fill out a form, or contact us.
• From publicly available sources (such as Google Business Profile) to pre-populate business information on your behalf.
• Automatically through cookies, web analytics, and server logs when you interact with our website.
• From our clients’ end-users when they submit contact forms or booking requests on websites Paigefy hosts.

4. Why We Collect Information

We collect and use personal information to:

• Build, deliver, and maintain your professional website and related services.
• Communicate with you about your project, account, and any support requests.
• Process payments and manage your subscription via Stripe.
• Deliver booking confirmations and lead notifications to our clients via Mailjet.
• Analyse and improve our website performance and user experience.
• Comply with legal obligations under Australian law.

We will not use your personal information for purposes other than those described above without your consent, unless required by law.

5. Who We Share Information With

We do not sell your personal information. We only share data with trusted third-party service providers necessary to run our business:

• Stripe, Inc. — payment processing (PCI-DSS certified)
• Vercel, Inc. — web hosting infrastructure
• Neon (database hosting) — PostgreSQL database provider
• Clerk — authentication and account management
• PostHog — analytics (anonymised/aggregated data)
• Mailjet (Mailgun Technologies) — transactional email delivery
• DNSimple — domain registration (if applicable)
• Our clients — lead and booking data submitted through a client’s website is made available to that client through their Paigefy dashboard

Data Processing for Third-Party Orders: When customers place orders or submit contact forms through websites we host, Paigefy acts as a data processor on behalf of our client (the business). The client is the data controller and is responsible for obtaining customer consent and providing privacy notices. We only process this data according to the client’s instructions.

Some of our service providers are located outside Australia (e.g., the United States). When we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it in a manner consistent with the APPs.

6. Data Storage and Security

Personal information is stored in a PostgreSQL database hosted via a reputable cloud provider. Sensitive personal information (including lead contact details and booking reservation data) is encrypted at rest using AES-256 encryption before storage.

We implement reasonable technical and organisational measures to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. However, no method of transmission over the internet is 100% secure.

Data Breach Notification: In the event of a data breach involving personal information, we will notify affected individuals and relevant authorities as required by the Privacy Act 1988 (Cth). Notification will occur without unreasonable delay and contain information about the breach, its likely impact, and steps being taken to remedy the situation.

Data Retention: We retain personal information for as long as your account is active or as necessary to provide the Services. When your subscription ends, we retain your data for a further period of up to 12 months for accounting and legal compliance purposes, after which it will be deleted or anonymised. You may request earlier deletion — see Section 7.

7. Your Rights Under the Privacy Act

Under the Privacy Act 1988 (Cth) and the APPs, you have the right to:

• Access the personal information we hold about you.
• Correct personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading.
• Request deletion of your personal information, subject to any legal or contractual obligations to retain certain records (e.g., active subscriptions, accounting records).
• Make a complaint about our privacy practices.

To exercise these rights, contact us at support@paigefy.com.au. We will respond within 30 days.

8. Cookies and Tracking

Our website uses cookies and similar tracking technologies to improve your experience, analyse site usage, and personalise content. Cookies are small text files stored on your device.

You can control cookie settings through your browser. Disabling cookies may affect the functionality of certain parts of our website. We may use PostHog and Vercel Analytics to collect anonymised or aggregated usage data.

9. Email Communications

We send transactional emails related to your service (e.g., order confirmations, booking notifications, payment receipts). These are necessary to deliver the Services and are not marketing communications.

If we send you any marketing or promotional communications, we will only do so with your consent and in compliance with the Spam Act 2003 (Cth). Each marketing email will include a functioning unsubscribe mechanism.

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such information, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email at least 14 days before the changes take effect, and the updated policy will be posted on this page with a revised “Last Updated” date.