Privacy Policy | Word On The Street

Last updated: 29 October 2026

1. Who we are and how to contact us

Word On The Street (WOTS), ABN 14 120 349 568, provides website design, SEO, ecommerce support, custom development, integrations and marketing automation services. We are based in Dee Why, NSW, on Sydney’s Northern Beaches. This policy explains how we handle personal information received through this website and in enquiries and business dealings.

For privacy questions, access requests or complaints, contact Darren Coles at info@wots.com.au or 0420 908 356.

2. Information we collect

Enquiry details you provide: your name, business name, email, phone number, website, service of interest and project description.
Business correspondence, proposals, instructions, approvals and information needed to provide an agreed service.
Technical information generated by website requests, such as IP addresses, request times, browser details, requested pages and security events, where recorded by our hosting systems.

We collect information directly from you when you contact us or work with us. During an agreed project, we may also receive information from your authorised representatives or the platforms you authorise us to access. We seek only information reasonably needed for the relevant task.

Please do not send passwords, payment-card details, identity documents or sensitive personal information through the enquiry form. If a project requires access credentials or customer data, we will arrange an appropriate way to share it. If you provide someone else’s details, you must be authorised to do so and give them appropriate information about the disclosure.

3. Why we use information

We use relevant information to respond to enquiries, assess requirements, prepare proposals, deliver agreed work, communicate about projects, maintain business records, protect our systems, resolve disputes and meet legal obligations. We do not sell personal information or use enquiry details as a public testimonial without permission.

You can contact us without completing the website form. If you withhold information needed to understand a project or contact you, we may be unable to provide a useful response or service.

4. Enquiries and marketing

The enquiry form sends a message to our business email. It does not automatically subscribe you to marketing or add you to a CRM. We may contact you about your enquiry and the work you request.

If we introduce promotional email or SMS, we will obtain the consent required by law, identify the sender and provide a straightforward way to unsubscribe. We will honour marketing unsubscribe requests within five working days. Necessary project and administrative communications may continue.

5. Website technology and external links

The website uses Google Analytics to measure visits and how people use its pages. Google Analytics uses cookies and processes information about your browser, device and interactions with the website. Our enquiry form does not require a tracking cookie. Our hosting provider may process ordinary request and security logs to deliver and protect the website. Anti-spam controls use a hashed network address and submission time to limit repeated enquiries.

Google processes Analytics information under its privacy policy. You can manage cookies through your browser settings. Links to client sites and other external websites take you to services with their own privacy practices.

6. Providers and disclosures

GoDaddy provides our website hosting and business email. Information submitted through the form is processed through those services. Relevant information may also be disclosed to a contractor or technology provider needed for an agreed project, professional advisers, or a person or authority where disclosure is required or permitted by law. Access should be limited to the information needed for that purpose and subject to appropriate confidentiality arrangements.

We do not give an external provider unrestricted permission to use enquiry information for its own marketing. Where WOTS handles personal information on behalf of a client, the project agreement should define permitted access, processing, security, return and deletion arrangements. The client remains responsible for its own customer notices and lawful instructions.

7. Overseas processing

This section concerns WOTS’s own website and email, including enquiries you send us. Hosting for a client’s website is selected separately for that project and should be covered by the client’s own privacy notice and agreed service arrangements.

Our hosting and email provider operates internationally. Information may be stored or accessed outside Australia, including in the United States, depending on the services and support arrangements used. This does not mean your information is stored only in Australia or only in the United States. GoDaddy describes its international handling in its privacy notice.

Contact us for information about the providers and overseas locations relevant to your enquiry or project. We will provide the information reasonably available to us and consider applicable privacy requirements before arranging a new overseas disclosure. This policy does not ask you to waive privacy protections by using the website.

8. Security and retention

We take reasonable steps to protect information against misuse, loss and unauthorised access, alteration or disclosure. No website, email service or storage system can promise absolute security. Please tell us promptly if you suspect information shared with WOTS has been compromised.

We retain information for as long as reasonably needed for the enquiry, agreed services, business records, legal requirements or the establishment or defence of legal claims. When information is no longer reasonably needed, we securely delete or de-identify it, subject to lawful retention requirements. Copies in routine backups may remain until the normal backup cycle replaces them; they are not retained for ordinary business use. You can ask us about the information we retain or request deletion; we will explain any reason we need to retain it. If an incident occurs, we will assess it and make notifications required by applicable law.

9. Access, correction and complaints

Email us to request access to, correction of, or deletion of personal information, or to raise a privacy concern. We may need to verify your identity. We aim to respond within 30 days. If we cannot fulfil a request, we will explain why and describe any available next step.

For a complaint, please describe what happened and the outcome you seek. We will investigate and respond. If you remain dissatisfied, you can contact the Office of the Australian Information Commissioner, which can advise whether the matter falls within its jurisdiction. Nothing in this policy limits a right or remedy available under applicable law.

10. Changes

We will update this policy when our practices change and show the updated date here. If a change requires a separate notice or consent, publishing a revised policy alone will not replace that requirement.