Privacy Policy

This Privacy Policy explains how Scientific Digital Growth Pty Ltd (ABN 92 466 274 648), with its registered office at 1 Redwood Dr, Notting Hill VIC 3168, Australia (“we”, “us”, “our”), collects, uses, stores, and discloses personal information about you in connection with our website services.

We are committed to protecting your privacy and complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using our services or providing your personal information to us, you consent to the collection, use and disclosure of your personal information as described in this Privacy Policy.

1. What is Personal Information

“Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not and whether recorded in a material form or not.

2. Information We Collect

2.1 Information you provide directly to us

When you purchase or use our services, we collect:

Account and contact information:

• Full name and business name
• Email address
• Phone number
• Business address and physical address
• Australian Business Number (ABN), if applicable

Business and content information for your website build:

• Business tagline or slogan
• Logo files and other images you upload
• Brand colours and selected highlight colour
• About us text and other written content
• List of services and pricing
• Business operating hours
• Social media links
• Customer reviews you wish to display
• Photos and other materials you upload

Domain and email setup information (collected on the Onboarding Form):

• Whether you currently own a domain name
• Your domain name (if applicable)
• Your domain registrar (e.g., GoDaddy, Namecheap, Crazy Domains)
• Whether you use email at your domain
• Your email provider (e.g., Google Workspace, Microsoft 365, registrar-hosted, free email)

This information is used to determine the appropriate DNS instructions to send you and to plan future automation around email continuity. It does not include passwords or login credentials.

Payment information:

• We do not store your full credit card details. Payment information is collected and processed by our authorised third-party payment processors.
• We retain transaction records, including the last four digits of the card used, billing address, and payment history.

Domain registrar credentials (only if applicable):

• If you separately engage us to perform DNS configuration on your existing domain registrar account (a paid add-on service), we collect your registrar login details solely for the purpose of completing that configuration. These are handled with special security measures (see clause 6).
• We do not collect registrar credentials as part of the standard $99 setup. Most customers either receive written DNS instructions to apply themselves, or have us register a new domain for them where no third-party credentials are required.

Communications with us:

• Email correspondence
• Support requests
• Feedback and survey responses

2.2 Information we collect automatically

When you visit our website, we may collect:

• IP address
• Browser type and version
• Device type and operating system
• Pages viewed and time spent
• Referring website
• Cookies and similar tracking technologies (see clause 9)

2.3 Information from third parties

We may receive information about you from:

• Our payment processor (transaction details, payment status)
• Our hosting and platform providers (deployment status, error logs)
• Marketing platforms if you respond to our advertising

3. How We Use Your Personal Information

We use your personal information to:

(a) provide the website service you have purchased, including building, deploying and hosting your website;

(b) determine the appropriate DNS or domain setup instructions for your specific situation;

(c) register and manage a domain name on your behalf, where you have engaged us to do so;

(d) configure DNS on your existing domain registrar account, where you have purchased that add-on service;

(e) process your payments and manage your subscription;

(f) communicate with you about your service, including support, updates, and notifications;

(g) respond to your enquiries and provide customer support;

(h) send you marketing communications about our services (where you have consented or where permitted by law), which you can opt out of at any time;

(i) improve our services, processes and customer experience;

(j) comply with our legal and regulatory obligations, including tax record-keeping;

(k) protect our rights, property and the safety of our customers and others;

(l) detect, prevent and respond to fraud, abuse, security threats, or illegal activity.

4. Disclosure of Personal Information

We disclose your personal information only as necessary to provide our services or as required by law. We do not sell your personal information to third parties.

4.1 Service providers

We share personal information with various third-party service providers who help us deliver the Service. These providers are bound to use your information only for the purposes for which we engage them. The categories of service providers we use include:

• Hosting and deployment providers — to host and serve your website, and to register domains where you have engaged us to do so
• Code repository providers — to store your website’s code
• Payment processors — to process payments and manage subscriptions
• CRM and marketing platforms — to manage customer records, communications and marketing
• Form providers — to collect onboarding information
• Workflow automation providers — to coordinate the website build process
• AI image generation providers — to generate images for your website. Only image prompts are sent, not your personal information.
• Email service providers — to send transactional and marketing emails
• Analytics providers — to understand website usage

4.2 Other disclosures

We may disclose your personal information:

(a) to our professional advisers (lawyers, accountants, auditors) under confidentiality;

(b) to law enforcement, regulators, or other government bodies where required by law;

(c) to a successor entity in the event of a merger, acquisition, or sale of business;

(d) where you have provided your consent.

5. Overseas Disclosures

Some of our service providers are based outside Australia. By using our services, you acknowledge and consent to the transfer of your personal information to overseas locations including the United States, the European Union, and other countries where our service providers operate.

Where we disclose personal information to overseas recipients, we take reasonable steps to ensure they handle that information in a manner consistent with the Australian Privacy Principles. However, you acknowledge that overseas recipients may not be subject to privacy laws equivalent to those in Australia, and we may not be accountable for their handling of your information under the Privacy Act 1988 (Cth) where you have consented to the overseas disclosure.

6. Security of Your Personal Information

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification or disclosure. These steps include:

• Encryption of data in transit (HTTPS / SSL)
• Access controls limiting who can view personal information
• Storage of payment information only by certified payment processors
• Regular review of our systems and processes

6.1 Special handling of domain registrar credentials

Where you engage us to perform DNS configuration on your existing domain registrar account, we collect your registrar login credentials solely for that purpose. We handle these with the following special protections:

• Credentials are stored in our CRM under access controls and used only by authorised personnel
• Credentials are used only for the agreed DNS configuration work
• Credentials are deleted from our systems within 30 days of completing the DNS configuration
• Credentials are not shared with any third party except as strictly necessary to complete the work or where compelled by law

We strongly recommend that you change your registrar password as soon as the DNS configuration is confirmed complete. This is the most reliable way to ensure no future risk from prior credential sharing.

If your registrar supports temporary or single-purpose credentials, we encourage you to use those rather than your main password.

6.2 General security limitations

Despite our efforts, no method of internet transmission or electronic storage is completely secure. We cannot guarantee absolute security of your information.

7. Data Retention

We retain personal information only for as long as necessary for the purposes for which it was collected and to comply with our legal obligations.

• Active customer information: retained while you are an active customer plus a reasonable period after cancellation
• Transaction and tax records: retained for at least 7 years as required by Australian tax law
• Marketing communications data: retained until you unsubscribe or withdraw consent
• Domain registrar credentials (where collected for paid DNS work): deleted within 30 days of DNS configuration completion
• Domain and email provider information from Onboarding Form: retained while you are an active customer; used to plan future improvements to our DNS automation
• Website preview URLs: retained while you are an active customer; the public preview URL itself remains accessible until subscription cancellation
• Website code repositories: retained for 30 days after subscription cancellation, then deleted (see Terms and Conditions)
• Domain registrations made on your behalf: maintained for 30 days after subscription cancellation to allow time for transfer to your own registrar account, after which the domain may lapse if not transferred
• Support and communication records: retained for at least 2 years for quality and dispute purposes

8. Your Rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

(a) access the personal information we hold about you;

(b) correct any personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading;

(c) request deletion of your personal information, subject to our legal obligations to retain certain records;

(d) withdraw consent for marketing communications at any time by clicking the unsubscribe link in any marketing email or contacting us directly;

(e) make a privacy complaint if you believe we have breached the Australian Privacy Principles.

To exercise any of these rights, please contact us at support@digitalgrowthgenius.com. We will respond within a reasonable time, generally within 30 days.

We may need to verify your identity before processing your request. There is no fee for accessing your personal information, but we may charge a reasonable fee for providing copies of records where the request is large or complex.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to:

• Remember your preferences and settings
• Analyse website traffic and user behaviour
• Improve the performance and functionality of our services
• Deliver targeted advertising (where you have consented)

You can control cookies through your browser settings. Disabling cookies may affect the functionality of our website.

We may use the following types of cookies:

• Essential cookies — necessary for the website to function
• Analytics cookies — help us understand how visitors use our site
• Marketing cookies — used to track visitors across websites for advertising

10. Third-Party Links

Our website and the websites we build for customers may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party websites you visit.

11. Children’s Privacy

Our services are not directed to children under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided personal information to us, please contact us and we will take steps to delete it.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version will always be available at https://websites.digitalgrowthgenius.com/privacy. We will indicate the date of the most recent update at the top of this policy.

For material changes, we will provide reasonable notice by email or through our services. Your continued use of our services after the notice period constitutes acceptance of the updated Privacy Policy.

13. How to Make a Complaint

If you believe we have not complied with this Privacy Policy or the Australian Privacy Principles, please contact us first:

We will investigate your complaint and respond within a reasonable time, generally within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Mail: GPO Box 5288, Sydney NSW 2001

14. Contact Us

For questions about this Privacy Policy or how we handle your personal information:

By using our services, you acknowledge that you have read, understood and agree to this Privacy Policy.