Privacy Policy

Last updated: Sep 30, 2026

Bubblehost respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we collect it, how we use and protect it, who we may share it with, and the choices and rights you have in relation to it.

This Privacy Policy applies to all services provided by Bubblehost, including our website at bubblehost.com.au, our client area, our hosting, domain, email and related services, and any communication you have with us by email, phone, live chat or support ticket.

Bubblehost is based in Western Australia and handles personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where we provide services to customers in other countries, we also aim to meet the privacy requirements that apply to them, as described in Section 9.

By using our website or services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use our website or services.

1. Definitions

To keep this Privacy Policy clear, the following terms have these meanings:

• “Bubblehost”, “we”, “us” and “our” refer to Bubblehost, Unit 1, 32 Roberts Street, Moora WA 6510, Australia.
• “You” and “your” refer to the person using our website or services, or the business or organisation that person represents.
• “Services” means our website, client area, web hosting, reseller hosting, VPS hosting, WordPress hosting, domain registration, email and any related services we provide.
• “Website” means bubblehost.com.au and any of its subdomains.
• “Client Area” means the secure customer portal at bubblehost.com.au/client, where you manage your account, services, billing and support tickets.
• “Personal Information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable, as defined in the Privacy Act 1988 (Cth).
• “Technical Information” means information collected automatically when you use our Website or Services, such as IP addresses, browser type, device information and log data.
• “Service Provider” means a third-party company that helps us operate our business or deliver our Services, such as a payment processor or data centre.
• “Cookies” means small text files placed on your device by a website to store information about your visit.

2. Information We Collect

We collect various types of information to provide, maintain and improve our website hosting services. We only collect information that is reasonably necessary for our business activities and the Services you use.

2.1 Personal Information

When you sign up for our Services, place an order, contact us or use our Client Area, we may collect:

• Your full name and, if applicable, your business or organisation name
• Your email address and phone number
• Your postal or billing address, including suburb or city, state, postcode and country
• Your Australian Business Number (ABN), Australian Company Number (ACN) or other registration details, where required to register certain domains such as .com.au
• Account login details, such as your username and an encrypted version of your password
• Records of the Services you order, your invoices and your payment history
• The content of any messages, support tickets, live chats or emails you send us

2.2 Payment Information

Payments are processed securely by our third-party payment provider, Stripe. When you pay online, your full card details are entered directly into Stripe’s secure systems and are not stored on our servers. We may receive limited payment information from Stripe, such as the card type, the last four digits of your card, its expiry date and whether a payment was successful.

2.3 Technical Information

When you visit our Website or use our Services, we automatically collect technical information to keep our systems secure, improve your experience and troubleshoot issues. This may include:

• Your IP address
• Your browser type and version
• Your device type and operating system
• The pages you visit, and the date and time of your visit
• Server and error logs related to your hosting account

2.4 Domain Registration Information

When you register a domain name through us, the relevant domain registry requires us to collect and provide certain registrant details, such as your name, organisation, address, email and phone number. Some of these details may be published in public WHOIS or registry lookup services, depending on the rules of the domain extension. Where available, we offer WHOIS privacy to help keep your details private.

2.5 Information You Store on Our Servers

Any websites, files, databases or emails you store on your hosting account belong to you. We do not access, review or use this content except where it is necessary to provide the Services, perform backups or migrations you have requested, respond to a support request you have made, investigate a security issue or breach of our Terms of Service, or comply with the law.

If your website collects personal information from your own visitors or customers, you are responsible for handling that information in line with the privacy laws that apply to you.

3. How We Collect Information

We collect information in the following ways:

• Directly from you, when you create an account, place an order, fill out a form, contact our support team or otherwise communicate with us.
• Automatically, through essential cookies, server logs and similar technologies when you use our Website, Client Area or Services.
• From third parties, such as Stripe (to confirm payments) and domain registries (to manage your domain registrations).

Wherever it is reasonable and practical, we collect personal information directly from you. You may choose to deal with us anonymously or under a pseudonym when making a general enquiry. However, we cannot provide hosting or domain services without collecting your personal information, as we need it to set up your account, process payments and meet our legal obligations.

4. How We Use Collected Information

We use the information we collect to deliver, maintain and improve our hosting services. Specifically, we use it to:

• Create and manage your account and Client Area access
• Set up, provide, maintain and support the Services you order
• Register, renew, transfer and manage your domain names
• Process payments, issue invoices and manage billing, renewals and refunds
• Communicate with you about your account, Services, invoices, support requests, maintenance and security updates
• Respond to your enquiries and provide technical support
• Monitor the performance, security and stability of our servers and network
• Detect, prevent and investigate fraud, abuse, spam, security incidents and breaches of our Terms of Service or Acceptable Use Policy
• Perform backups and restore data when needed
• Meet our legal, tax, accounting and regulatory obligations

We may also use aggregated and anonymised data, which does not identify you, to analyse how our Services are used and to improve them.

We will not use your personal information for a purpose that is unrelated to the reason we collected it, unless you have consented or we are required or permitted to do so by law.

5. Sharing and Disclosure of Information

We do not sell, rent or trade your personal information. We do not share your personal information with third parties for their own marketing purposes without your explicit consent.

We only share your information in the limited situations below.

5.1 Service Providers

We work with trusted Service Providers who help us run our business and deliver our Services. These may include:

• Payment processors, such as Stripe, to securely process payments and prevent fraud
• Domain registries and registrars, to register and manage your domain names
• Data centre and infrastructure providers, which host the servers your Services run on
• Software providers, such as our billing, control panel and support systems
• Email delivery providers, to send account and service emails

These Service Providers only receive the information they need to perform their role, and are required to protect it and use it only for that purpose.

5.2 Legal Requirements

We may disclose your personal information where we are required or authorised to do so by law, such as in response to a court order, subpoena or valid request from a government or law enforcement agency. We may also disclose information where we reasonably believe it is necessary to:

• Comply with a legal obligation
• Protect and defend the rights, property or safety of Bubblehost, our customers or the public
• Prevent or investigate fraud, abuse, security incidents or other unlawful activity
• Enforce our Terms of Service or Acceptable Use Policy

5.3 Business Transfers

If Bubblehost is involved in a merger, acquisition, restructure or sale of some or all of its business, your personal information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information for any other purpose where you have given us your consent.

6. Cookies and Tracking Technologies

We use cookies to make our Website and Client Area work properly and securely. We keep our use of cookies to a minimum, and we never use tracking or analytics cookies without your consent.

6.1 Types of Cookies We Use

6.2 Essential Cookies

Essential cookies are necessary for core features such as user login sessions, account management and secure payment processing. Without them, parts of our Website and Client Area would not work. Stripe may set essential third-party cookies to enable secure transactions and prevent fraud during checkout.

6.3 Analytics and Tracking Cookies

On our main site, we may use analytics or tracking cookies, but only after you have given your explicit consent through our cookie banner or prompt. You can change or withdraw your consent at any time through the cookie settings on our Website.

We do not use any tracking or analytics cookies in the Client Area under any circumstances. Only essential cookies are active there to support login and account-related features.

We do not use advertising or targeting cookies, and we do not allow third parties to place advertising cookies on our Website.

6.4 Managing Cookies

You can manage or disable cookies through your browser settings. However, disabling essential cookies may stop certain features from working, including logging in to the Client Area and completing payments. By continuing to use our Services, you agree to the use of essential cookies as outlined in this Privacy Policy.

7. Data Storage, Transfers and Retention

7.1 Where Your Information Is Stored

Your information is stored on secure servers operated by Bubblehost and our Service Providers. Some of our Service Providers, such as Stripe, may store or process information outside Australia, including in the United States. Where information is sent overseas, we take reasonable steps to make sure the recipient handles it in a way that is consistent with the Australian Privacy Principles.

7.2 How Long We Keep Your Information

We keep your personal information only for as long as we need it for the purposes described in this Privacy Policy, or as required by law. In general:

• Account and billing records are kept while your account is active, and afterwards for as long as required by Australian tax and accounting laws (generally up to 7 years).
• Support tickets and communications are kept for as long as they are reasonably needed to support your account and resolve disputes.
• Technical logs are generally kept for a shorter period, unless they are needed to investigate a security incident or abuse.
• Website content, files and backups stored on your hosting account are deleted within a reasonable period after your Service is cancelled or terminated.

When we no longer need your personal information, we take reasonable steps to securely destroy it or permanently de-identify it.

8. Data Security

We take data security seriously. We use industry-standard security measures to protect your information from unauthorised access, alteration, disclosure, loss or destruction. These measures include:

• SSL/TLS encryption for our Website, Client Area and checkout
• Encrypted storage of passwords
• Firewalls and server monitoring
• Access controls, so only authorised people can access personal information, and only when they need to
• Regular software updates and security patches
• Regular backups

However, no online service is completely secure, and you acknowledge the inherent risks of transmitting information over the internet. You are responsible for keeping your account password secure and for any activity that occurs under your account. If you believe your account has been compromised, please contact us immediately.

8.1 Data Breaches

In case of a data breach, we will act promptly to contain it and assess the risk. If a breach is likely to result in serious harm to the people affected, we will notify them and, where required, the Office of the Australian Information Commissioner (OAIC), in line with the Notifiable Data Breaches scheme. We will also take appropriate steps to prevent it from happening again.

9. Your Rights

You have the right to access, correct, update or delete your personal information. You can manage most of your account details, settings and preferences yourself through the Client Area.

9.1 Accessing and Correcting Your Information

You can ask us for a copy of the personal information we hold about you, or ask us to correct information that is inaccurate, out of date or incomplete. We will respond within a reasonable timeframe, usually within 30 days. We do not charge for making a request, but we may need to verify your identity before we respond.

In limited situations, we may be unable to give you access to certain information, such as where the law allows or requires us to refuse. If this happens, we will explain why in writing.

9.2 Deleting Your Information

You can ask us to delete your personal information. We will do so unless we need to keep it to provide a Service you are still using, to meet our legal or tax obligations, to resolve a dispute, or to prevent fraud or abuse.

9.3 Customers in the European Union and United Kingdom

If the General Data Protection Regulation (GDPR) or UK GDPR applies to you, you also have the right to:

• Object to or restrict how we use your personal information
• Receive your personal information in a structured, commonly used and machine-readable format
• Withdraw your consent at any time, where we rely on consent
• Lodge a complaint with your local data protection authority

We process personal information on the basis that it is necessary to perform our contract with you, to meet our legal obligations, for our legitimate interests in running a secure and reliable business, or with your consent (for example, for analytics cookies).

9.4 Customers in California

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, to request its deletion or correction, and not to be discriminated against for exercising these rights. We do not sell or share your personal information as those terms are defined under California law.

9.5 How to Make a Request or Complaint

If you would like to make a request, or you have any concerns about your privacy or how we handle your data, please email support@bubblehost.com.au. We will respond within a reasonable timeframe.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

10. Marketing Communications

We will always send you important emails about your account, Services, invoices, renewals, maintenance and security. These are part of providing our Services, so you cannot opt out of them while you have an active account.

We may also send you occasional news, offers or updates about our own Services, but only where you have agreed to receive them or where the law allows. Every marketing email includes an easy way to unsubscribe, and you can opt out at any time by clicking the unsubscribe link or contacting us.

11. Children’s Privacy

Our Services are not directed at children under the age of 13, and we do not knowingly collect personal information from them. If you are under 18, you must have permission from a parent or guardian to use our Services. If you believe a child has provided us with personal information without that permission, please contact us and we will delete it.

12. Third-Party Links

Our Website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these third parties. We encourage you to review the privacy policies of any third-party websites you visit. This Privacy Policy only applies to information collected by Bubblehost.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, or for legal, operational or regulatory reasons. Updates will be posted on this page, and the “Last updated” date at the top will be changed. We may not always give prior notice of changes, so we encourage you to review this Privacy Policy periodically to stay informed about how we collect, use and protect your information. Your continued use of our Services after an update means you accept the revised Privacy Policy.

14. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

• Email: support@bubblehost.com.au
• Phone: +61 474 384 572
• Contact form: bubblehost.com.au/contact
• Mail: Unit 1, 32 Roberts Street, Moora WA 6510, Australia