How we look after your information.

This policy explains how Ziply collects, uses and protects your personal information when you visit our website, buy a website from us, or use your customer portal. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).

What we collect

We only collect what we need to build and look after your website.

• Contact details: your name, email address, phone number and business name, when you pay, create an account, fill in your brief or send us a message.
• Your brief: the details you give us about your business, services, customers, opening hours, address, social links and domain, plus any logo and photos you upload.
• Order and billing details: what you bought, what you paid and your hosting status. Card payments are handled by Stripe. We never see or store your full card number.
• Your account: your login email and a securely hashed password. We can't see your password.
• Change requests and messages you send us through the portal or contact form.
• Technical information: basic server logs such as IP address, browser type and pages requested, kept by our hosting provider to run and secure the site.

If you give us information about other people, such as staff names or customer reviews for your site, please make sure they're happy for it to appear on your website.

How we use it

• To take payment and send your tax invoice.
• To design, write, build, launch and host your website.
• To run your customer portal, including your brief, hosting, invoices and change requests.
• To contact you about your build, for example to book your build day or send your preview link.
• To reply to enquiries and give support.
• To meet our legal, tax and accounting obligations.

We use AI tools to help draft page structure and copy from your brief. A person reviews everything before it goes live, and we don't use your information to train AI models.

Who we share it with

We don't sell your personal information. We share it only with the service providers who help us run Ziply, and only as much as they need:

• Stripe, for payments, invoices and hosting subscriptions.
• Supabase, for our database, customer logins and the files you upload with your brief.
• Vercel, which hosts this website and our customer portal.
• Resend, which sends our emails.
• Cloudflare Turnstile, which checks that our contact and login forms are used by people, not bots. It looks at basic browser signals and doesn't use advertising cookies.
• AI providers we use to draft copy from your brief.
• Domain registrars and hosting partners, when we register or connect your domain or host your site.

We may also disclose information if the law requires it, or to our professional advisers, such as our accountant.

Overseas storage

Some of our providers store or process information outside Australia. Our database and brief uploads are stored with Supabase in Japan, and Vercel, Stripe, Resend and AI providers may process information in the United States and other countries. We choose established providers with strong security practices and take reasonable steps to make sure they handle your information in line with the Australian Privacy Principles.

Emails from us

We'll email you about your order, build and hosting. These are service messages, not marketing. We'll only send marketing emails, such as offers, if you've agreed to receive them, and every one will have an unsubscribe link, as required by the Spam Act 2003 (Cth).

Cookies

We don't use advertising or tracking cookies. When you log in, your browser stores a secure session so you stay signed in, and the brief may save a draft of your answers on your device. If we add analytics in future, we'll update this policy first.

Security and retention

Your information is stored with providers that encrypt data in transit and at rest. Brief uploads are kept in private storage and are only shared through short-lived links. Access is limited to the people who work on your website.

We keep your information while you're a customer, and afterwards for as long as we need it for tax and legal records, usually seven years for billing records. You can ask us to delete your brief and uploads once your website is live or after you leave.

Access and correction

You can see and update most of your details in your customer portal. To ask for a copy of the information we hold about you, or to have it corrected or deleted, email us. We'll reply within 30 days.

Complaints

If you're worried about how we've handled your information, email us first and we'll do our best to fix it. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Contact us

Ziply, Melbourne, Victoria
Email: hello@ziply.com.au

We may update this policy from time to time. The latest version will always be on this page.