Rewaver

Legal

Privacy Policy

Last updated 18 September 2026. How we collect, use and protect your personal information, in line with the Australian Privacy Principles.

1. Who we are

Rewaver is a digital agency that builds websites and runs local SEO, Google Business Profile, AI search visibility and Google Ads services for trade and service businesses across regional Australia. Our engineering team is based in Chattogram, Bangladesh.

You can contact us at [email protected] with any question about this policy or your personal information.

2. The personal information we collect

We only collect personal information that is reasonably necessary to run our business and provide our services. Depending on how you interact with us, this may include:

  • Contact details — name, business name, trade or industry, town or suburb, phone number and email address, when you submit our contact form, book a strategy call, or call or email us directly.
  • Enquiry details — the content of any message, brief or job details you send us.
  • Free Website Audit data — when you submit a website address through our Free Website Audit tool, we collect and store that URL, and information our tool extracts from the public pages of that website (business name, logo, and any email addresses published on the site) so we can prepare your audit report.
  • Client and billing information — if you become a client, we collect the information needed to deliver services and invoice you, such as billing name, address, ABN and payment details (payment details are processed by our payment provider and are not stored by us in full).
  • Technical and usage information — standard data such as IP address, browser type, device information, pages visited and referring pages, collected automatically when you use our website, and a locally stored preference for light or dark mode (this stays on your device and is not sent to us).

We do not knowingly collect sensitive information (such as health, racial or religious information) unless you volunteer it to us, and we do not collect more than we need.

3. How we collect personal information

Wherever practical, we collect personal information directly from you — through our website forms, the Free Website Audit tool, phone calls, email, and in-person or video meetings.

For the Free Website Audit tool specifically, we use a third-party website-crawling service to automatically read the public pages of the URL you submit and extract business details. Only submit a website you are authorised to have analysed.

We may also collect information from publicly available sources (such as a business’s own public website or Google Business Profile) where reasonably necessary to prepare a quote or audit.

4. Why we collect, hold, use and disclose your information

We collect, hold, use and disclose personal information to:

  • respond to your enquiry and provide the free audit, quote or strategy call you requested;
  • deliver, manage and support the services you engage us for (website design, local SEO, Google Business Profile management, AI search visibility, Google Ads management and website care plans);
  • send you invoices and manage payment;
  • send you service-related communications (for example, updates about work in progress);
  • with your consent, send you marketing communications about our services, which you can opt out of at any time;
  • improve our website and services, including through aggregated, de-identified analytics; and
  • meet our legal, accounting and regulatory obligations.

We do not sell your personal information to third parties.

5. Who we disclose your information to

We disclose personal information only where necessary to run our business, including to:

  • our staff and contractors who need it to deliver services to you;
  • our hosting and infrastructure providers, including our database provider (MongoDB Atlas) and our website-crawling service (Firecrawl), which store or process data on our behalf;
  • analytics, advertising and communications platforms (such as Google) that we or our clients use, where relevant;
  • our professional advisers (for example, our accountant or lawyer), where reasonably necessary; and
  • a regulator, law enforcement body or other party where required or authorised by law.

Overseas disclosure

Some of the providers listed above host or process data on servers located outside Australia, which may include the United States and other countries where our infrastructure and service providers operate. Where practicable, we take reasonable steps to ensure overseas recipients handle personal information consistently with the Australian Privacy Principles. By providing us with your information, you consent to it being disclosed to these overseas recipients for the purposes described in this policy.

6. Direct marketing

If you opt in to receive marketing communications from us, we will only send them in accordance with the Spam Act 2003 (Cth) — meaning we will identify ourselves, seek your consent, and include a functioning unsubscribe facility in every message. You can opt out at any time by using the unsubscribe link or by emailing [email protected].

7. Cookies and similar technology

Our website uses a small amount of local browser storage to remember your light/dark theme preference; this data stays on your device and is never transmitted to us. If we add analytics, advertising or other cookies in future, we will update this policy to describe what they do and how you can control them (for example, through your browser settings).

8. Data storage and security

We store personal information using reputable third-party infrastructure providers (including MongoDB Atlas) and take reasonable technical and organisational steps to protect it against misuse, interference, loss, unauthorised access, modification or disclosure. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

We keep personal information only for as long as it is needed for the purposes described in this policy, or as required by law (for example, tax and accounting records), after which we take reasonable steps to destroy or de-identify it.

9. Access, correction and complaints

You have the right to ask us what personal information we hold about you, to request access to it, and to ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. To do this, email [email protected]. We will respond within a reasonable time and will not charge you for making a request, though we may charge a reasonable fee for giving access where permitted by law.

If you believe we have breached the Australian Privacy Principles, please contact us first so we can investigate and try to resolve the issue. If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.

10. Children's privacy

Our website and services are directed at businesses and are not intended for children. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. The current version will always be available on this page, with the “last updated” date shown above.

12. Contact us

Email: [email protected]

This policy is also available as a plain markdown document in our repository, and references the OAIC’s Australian Privacy Principles guidance, the Privacy Act 1988 (Cth) and the Spam Act 2003 (Cth). See also our Terms of Service.