Legal

Privacy Policy

Last updated: 10 August 2026

1. Introduction

This Privacy Policy explains how Sumoant (ABN 72 940 534 192), trading as Sumoant ("we", "us", "our"), collects, uses, discloses and protects personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By accessing our website at sumoant.com.au or using our services, you consent to the collection and use of your personal information as described in this policy. If you do not agree with any part of this policy, please do not use our website or services.

We are based in Victoria, Australia and our services are primarily directed at Australian businesses and individuals.

2. Information We Collect

We may collect the following types of personal information:

2.1 Information You Provide Directly

  • Name and contact details (email address, phone number, business address)
  • Business name and ABN/ACN
  • Information submitted through our contact forms, get-started forms and enquiry forms
  • Account login credentials (email address and one-time verification PINs)
  • Communications you send to us (emails, messages, support requests)
  • Content and materials you provide for your website (text, images, logos, business information)

2.2 Payment Information

We do not directly collect, store or process credit card numbers or full payment card details. All payment processing is handled by our third-party payment processor, Stripe (Stripe, Inc.). When you provide payment details, they are transmitted directly to and stored by Stripe in accordance with the Payment Card Industry Data Security Standard (PCI DSS). We receive and store only limited card information from Stripe, including the card brand, last four digits, and expiry month/year, for identification and billing administration purposes.

2.3 Information Collected Automatically

  • IP address, browser type, device type and operating system
  • Pages visited, time spent on pages, referring URLs and navigation paths
  • Cookies and similar tracking technologies (see Section 7)
  • We use Google Analytics to collect aggregated website usage data. You may opt out of Google Analytics tracking by visiting your site with the query parameter ?notrack=Y.

2.4 Information from Third Parties

We may receive information about you from third-party services we use, including Stripe (payment status, card details summary) and domain registrars (domain registration details).

3. How We Use Your Information

We use your personal information for the following purposes:

  • To provide, maintain and improve our web design and hosting services
  • To create and manage your account and subscription
  • To process payments and send invoices and receipts
  • To communicate with you about your account, services, billing and support requests
  • To build and host your website based on the content and materials you provide
  • To send you service-related notifications (e.g. payment confirmations, card expiry reminders, service updates)
  • To respond to your enquiries and provide customer support
  • To detect, prevent and address fraud, security issues and technical problems
  • To comply with legal obligations and enforce our terms of service
  • To analyse website usage and improve our marketing and services

We will not use your personal information for purposes materially different from those described above without your prior consent, unless required or permitted by law.

4. How We Share Your Information

We do not sell, rent or trade your personal information to third parties. We may share your information with:

  • Stripe, Inc. — our payment processor, for processing subscription payments and managing card-on-file details. Stripe's privacy policy is available at stripe.com/au/privacy.
  • Resend — our email delivery service, for sending transactional emails (invoices, login PINs, notifications). Resend's privacy policy is available at resend.com/legal/privacy-policy.
  • Hosting and infrastructure providers — for hosting our platform and your websites.
  • Domain registrars — for registering and managing domain names on your behalf.
  • Google — via Google Analytics for aggregated website analytics.
  • Professional advisors — including accountants and legal advisors, where necessary.
  • Law enforcement or regulatory bodies — where required by law, court order, or to protect our legal rights.

5. Data Storage and Security

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification and disclosure. Our security measures include:

  • Encryption of data in transit using TLS/SSL
  • Secure hashing of authentication credentials (login PINs are bcrypt-hashed)
  • Limiting access to personal information to authorised personnel only
  • Regular review of our data handling and security practices

Your data may be stored on servers located in Australia or overseas (including the United States) through our hosting and service providers. Where data is transferred overseas, we take reasonable steps to ensure the recipient handles personal information in a manner consistent with the APPs.

No method of electronic transmission or storage is 100% secure. While we strive to use commercially reasonable means to protect your information, we cannot guarantee absolute security. You acknowledge and accept this inherent risk.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services to you. After cancellation of your subscription:

  • Your website content and hosting data may be deleted after a reasonable wind-down period
  • Billing records and invoices are retained for a minimum of seven (7) years as required by Australian taxation law
  • Contact form submissions and enquiry data are retained for our legitimate business purposes

You may request deletion of your personal information at any time (see Section 9), subject to our legal obligations to retain certain records.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies for the following purposes:

  • Essential cookies — required for the operation of our website (e.g. session cookies, CSRF protection, CAPTCHA verification)
  • Analytics cookies — Google Analytics cookies to understand how visitors interact with our website

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of our website. You may opt out of Google Analytics by appending ?notrack=Y to any page URL or by using the Google Analytics Opt-out Browser Add-on.

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

  • Access — request access to the personal information we hold about you
  • Correction — request that we correct any inaccurate or out-of-date personal information
  • Complaint — lodge a complaint if you believe we have breached the APPs

To exercise any of these rights, please contact us using the details in Section 11. We will respond to your request within a reasonable timeframe and in accordance with our obligations under the Privacy Act.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

9. Customer-Hosted Websites

We host websites on behalf of our customers. Each customer-hosted website may collect personal information from visitors through contact forms and other interactive elements. The collection and handling of such information is governed by the relevant customer's own privacy practices, not this policy.

We act as a data processor for customer-hosted websites. We process visitor enquiries submitted through customer website contact forms on behalf of the customer and deliver them to the customer's designated email address. We do not use visitor data from customer websites for our own marketing purposes.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Your continued use of our website or services after any changes constitutes acceptance of the updated policy.

For material changes that significantly affect how we handle your personal information, we will make reasonable efforts to notify you via email or through a notice on our website.

11. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have a privacy-related complaint, please contact us:

Sumoant