Privacy Policy
Effective date: 23 October 2026
This policy explains how WebControl collects, uses, stores and shares personal information, and how you can see it, correct it or make a complaint. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth) and, for clients in New Zealand, the Information Privacy Principles in the Privacy Act 2020 (NZ).
1. Who we are
WebControl is run by Alan Lee, a sole trader based in Sydney, NSW, under the registered business name Web Control (ABN 26 025 362 186). “WebControl”, “we”, “us” and “our” in this policy mean that business.
You can reach us at [email protected] or on +61 2 8363 3348.
2. What we collect
- Contact and support forms: your name, email address, phone number, business name, the domain or Cloudflare zone you need help with, and whatever you write in your message (for example a Cloudflare Ray ID or when a problem started).
- Emails and calls: what you send or tell us, and your contact details.
- Client work: when you engage us, the details we need to do the work and bill for it, such as contact and billing details, and the settings, logs and security events in the Cloudflare accounts or systems you give us access to.
- Technical information: when you visit this site, our web server and Cloudflare (which protects and delivers the site) process your IP address, browser and device details, the pages you ask for and when. We use this to keep the site running and secure.
We never ask for passwords or API tokens by email or through our forms. If we need access to one of your accounts, we’ll arrange it a safer way, such as an invitation to your Cloudflare account.
You can ask a general question without telling us who you are, but we need some way to contact you to reply.
3. How we use it
- To answer your enquiry or support request and to prepare quotes.
- To deliver and support the services you engage us for.
- To send service notices and invoices, and to keep business records.
- To protect this site and its forms from spam, bots and abuse.
- To meet our legal obligations, such as tax record-keeping.
We don’t sell personal information, and we don’t use it for advertising. If we ever send you news or marketing emails, it will only be with your consent, and you can unsubscribe at any time.
4. Who we share it with
- Service providers that help us run the business, such as our website host, Cloudflare (security, DNS, site delivery, Turnstile and Web Analytics), Google (Google Analytics), our email provider and our accounting software. They may only use it to provide their service to us.
- Anthropic, the maker of the Claude AI assistant, when we use it to help with client work such as reading logs or drafting reports. We share only what the task needs and never passwords or keys, and you can ask us not to use AI tools with your information.
- Professional advisers, such as our accountant or lawyer.
- Government agencies or law enforcement, where the law requires or allows it.
- Anyone else, only with your consent.
5. Cookies, Turnstile and analytics
- Security cookies: Cloudflare may set a cookie (such as
__cf_bm, orcf_clearanceafter a security check) to tell people from bots. These are needed for the site to work securely and aren’t used to identify you. - Cloudflare Turnstile: our forms use Turnstile to check that a person, not a bot, is sending them. It looks at information about your browser and device to do this. Cloudflare says it doesn’t use this information to track you across sites or for advertising.
- Reading preference: if you use the Dark / Light switch on a blog post, a cookie called
wc_readingremembers your choice for a year. It stores nothing else. - Cloudflare Web Analytics: counts visits and page views so we can see which pages are useful. It doesn’t use cookies and doesn’t follow you to other sites.
- Google Analytics: shows us how people find and use the site, such as which pages they view and which site or search brought them here. It sets first-party cookies (such as
_ga) and sends details of your visit, including your browser, device and approximate location, to Google, which turns them into reports for us. You can opt out with Google’s opt-out browser add-on, or by blocking cookies.
We don’t use advertising, social media or cross-site tracking cookies. You can block or delete cookies in your browser; the site still works, but your reading preference won’t be remembered.
6. Where it’s stored
Messages sent through our forms are stored in our website’s database and sent to our email inbox. Some of our providers are based overseas or store data outside Australia. Cloudflare, for example, is a United States company with a global network, so your information may be processed in the United States and other countries. Anthropic and Google are also based in the United States. We choose providers with strong security and privacy commitments.
7. How we protect it
We take reasonable steps to protect personal information from misuse, loss and unauthorised access. These include encrypted (HTTPS) connections, limiting access to the people who need it, strong authentication on the accounts that hold it, and keeping our systems up to date. No system is perfectly secure, so if something does go wrong we’ll act quickly to contain it and tell you if it affects you.
8. How long we keep it
We keep enquiries and client records only for as long as we need them for the purposes above and to meet record-keeping rules (tax records, for example, generally have to be kept for five years). After that, we delete or de-identify them.
9. Seeing or correcting your information
You can ask for a copy of the personal information we hold about you, or ask us to correct it. Email [email protected]. We may need to confirm who you are first, we’ll respond within 30 days, and we won’t charge you for making a request.
10. Complaints
If you think we’ve mishandled your personal information, please email us with the details. We’ll acknowledge your complaint and aim to resolve it within 30 days.
If you’re not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or, in New Zealand, the Office of the Privacy Commissioner at privacy.org.nz.
11. Changes to this policy
We may update this policy from time to time. The current version is always on this page, with its effective date at the top.
12. Contact us
Questions about this policy or your information: [email protected] or +61 2 8363 3348.