Privacy Policy

1. About this policy

This Privacy Policy explains how O.M.G. Media Group Pty Ltd (ABN 77 627 196 589), which operates the Dr Web website (referred to as Dr Web, we, us or our) handles personal information collected through the Dr Web website, forms, email, telephone conversations and related service interactions.

Dr Web provides WordPress recovery, repair, security, maintenance, support and related technical services for businesses.

We aim to handle personal information openly, fairly and securely. This policy describes the types of information we may collect, why we collect it, how we use and disclose it, how we protect it, and how a person may contact us about privacy.

2. Application of this policy

This policy applies to personal information collected through:

• www.drweb.com.au and its pages, forms and uploads
• enquiries sent to help@drweb.com.au
• telephone conversations and other direct communications
• proposals, quotes, service agreements and project administration
• technical work carried out for a customer, where personal information is encountered in the customer’s website, systems or instructions

This policy does not replace any privacy notice supplied by a third-party service, hosting provider, payment provider, analytics provider, software vendor or customer system. Those providers may handle information under their own terms and privacy policies.

3. What is personal information?

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or recorded in material form.

The information Dr Web handles depends on the nature of the enquiry or service. We do not ask people to send passwords, administrator credentials, payment card details or other secrets through the public enquiry form or ordinary email.

4. Information we may collect

4.1 Enquiry information

When a person contacts us or completes the Get WordPress Help form, we may collect:

• name
• business email address
• telephone number, if provided
• company or organisation name
• website URL
• selected service or problem category
• urgency selection
• description of the issue
• preferred contact method
• hosting provider, if provided
• screenshots or error messages uploaded by the person
• correspondence and information supplied during follow-up

4.2 Service and project information

If a person or organisation engages Dr Web, we may collect information needed to scope, perform and administer the service, including:

• contact and business details
• quote, scope and service records
• invoices, payment status and transaction records
• information about the website, hosting environment and integrations
• technical findings and service reports
• authorised access details supplied through an agreed secure process
• communications with the customer and relevant service providers

Credentials and secrets should be transferred only through the secure process agreed for the particular engagement. They should not be included in the public form, ordinary email or uploaded screenshots.

4.3 Information collected automatically

When a person visits the website, we or service providers acting on our behalf may collect technical information such as:

• IP address or an approximate location derived from it
• browser and device type
• operating system
• pages viewed and referring page
• date, time and duration of a visit
• interactions with the website
• error and security information
• cookie or similar technology information

We use Google Analytics 4, a web analytics service provided by Google, to understand how the website is used. Google Analytics may collect information such as the pages you view and the page titles, the website that referred you, the date and time of your visit, your approximate location, your device, browser and operating system, screen size, language setting, and how you interact with pages, including scrolling, outbound link clicks, file downloads, site search and form interactions, since these are currently enabled in the analytics service.

We also use Google Ads, an advertising service provided by Google, to measure the performance of our online advertising. If you arrive at the website by clicking one of our Google ads, Google Ads uses a cookie to help us understand that a visit followed an ad click.

We do not send the contents of enquiry forms, such as your name, email address, website address or message, to Google Analytics or Google Ads.

4.4 Information from other sources

We may receive information from:

• an existing customer or their authorised representative
• a referring agency, developer or hosting provider
• a service provider supporting the website
• publicly available business sources
• a person acting on behalf of an organisation

Where practical, we will take reasonable steps to ensure that individuals are informed about the collection and use of their personal information.

5. Why we collect and use personal information

We may collect, hold, use and disclose personal information for purposes including:

• responding to an enquiry
• understanding a website problem and determining whether Dr Web is suitable
• communicating with a person about a request, quote or service
• providing, managing and documenting agreed services
• investigating, repairing, recovering, securing, maintaining or supporting a website
• arranging secure access and coordinating with authorised providers
• sending invoices and processing payments where applicable
• maintaining business, accounting, tax and administrative records
• managing security, fraud, abuse and technical incidents
• improving the website, forms and service processes
• sending service-related information
• sending direct marketing where permitted and where the person has not opted out
• complying with legal obligations and responding to lawful requests
• establishing, exercising or defending legal rights

We will not use information collected through the enquiry form for an unrelated purpose merely because it was supplied to us.

6. Legal basis and consent

Where applicable, we will handle personal information in accordance with the Australian Privacy Principles and other privacy obligations that apply to the operator.

We may rely on the person’s request or consent, the steps needed to provide a requested service, a legitimate business purpose, a legal obligation or another lawful basis recognised by applicable law.

Consent to be contacted about an enquiry is separate from consent to receive marketing communications. A person may withdraw marketing consent at any time using the unsubscribe mechanism or by contacting us.

7. Sensitive information

The public enquiry form is not designed to collect sensitive information. Please do not submit health information, identity documents, passwords, authentication codes, financial account credentials, private customer data or other sensitive information unless Dr Web has specifically requested it through an approved secure process.

If we receive sensitive information unexpectedly, we will assess whether it is necessary to retain it and take reasonable steps to deal with it appropriately.

8. Disclosure of personal information

We may disclose personal information where reasonably necessary for the purposes described in this policy, including to:

• staff and contractors who need the information to perform their role
• hosting providers, domain providers and technical suppliers
• email, form, CRM, analytics, security and communications providers
• payment providers and accounting or bookkeeping providers, where applicable
• professional advisers such as lawyers, accountants and insurers
• a referring agency or authorised representative, where the customer has authorised the relationship
• regulators, courts, law enforcement or other authorities where required or permitted by law
• a purchaser, successor or professional adviser in connection with a proposed business sale or restructuring

We do not sell personal information.

We disclose limited technical information to Google through Google Analytics 4 and Google Ads, as described in section 10. The website is hosted on Australian-based hosting. Enquiry notifications are delivered by email to a business mailbox hosted by Google (see section 9).

9. Overseas disclosure

Our website, and the enquiry form entries stored by it, are hosted on Australian-based hosting.

Google Analytics and Google Ads are provided by Google. Information collected through these services is processed by Google and may be stored or processed in countries outside Australia, including the United States and other countries where Google or its service providers operate. Google Analytics retains event data for 2 months and user data for 14 months from the date of collection (Google Analytics account settings, verified 20 September 2026).

Enquiry notifications from the website are delivered by email to a business mailbox hosted by Google, and Google may store or process email data outside Australia.

If the providers we use change, we will update this policy.

10. Cookies and analytics

The website uses Google Analytics 4 and Google Ads. Google Analytics sets two first-party cookies in your browser, called _ga and _ga_TCL4XW9WT1, which hold a random identifier so that Google Analytics can recognise a returning browser and group activity into visits; Google documents a default lifetime of up to two years for these cookies. Google Ads sets a third first-party cookie, called _gcl_au, which helps us understand whether a visit followed one of our Google ads; Google documents a default lifetime of 90 days for this cookie.

We use Google Analytics to measure traffic and page performance, to understand how visitors find and use the website, and to improve the website and our services. We use Google Ads to measure whether our advertising is bringing genuine enquiries. We do not use either service to identify individual visitors, and we do not send the contents of enquiry forms to either service.

At the date of this policy, the website does not provide a cookie consent banner. You can block or delete cookies in your browser settings, and you can prevent Google Analytics from collecting data about your use of the website using Google’s Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout). You can review or adjust Google’s advertising settings at myadcenter.google.com. Blocking these cookies does not stop you using the website. The website does not currently respond to ‘Do Not Track’ or ‘Global Privacy Control’ browser signals.

Other than the cookies described above, the website does not currently load third-party advertising or tracking scripts. If we add further analytics or advertising tools, or introduce a consent banner, we will update this policy.

11. Security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These steps may include access controls, secure systems, restricted permissions, backups, staff or contractor instructions and secure transfer methods.

No method of transmission or storage is completely secure. We cannot guarantee that information will never be accessed or disclosed without authorisation.

People must not send passwords, administrator credentials, payment card details or authentication codes through the public form or ordinary email. If access is required for an agreed service, we will explain the appropriate secure method.

12. Data breaches

If we become aware of an actual or suspected data breach, we will assess and respond to it in accordance with applicable law and our incident response procedures. Where notification is required, we will notify affected individuals and regulators in the manner and timeframe required by law.

13. Retention and destruction

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, to provide services, manage disputes, satisfy legal, accounting, tax or insurance requirements, and protect our legitimate interests.

When information is no longer required, we will take reasonable steps to securely delete it, destroy it or de-identify it, subject to any legal or operational need to retain it.

14. Access and correction

Subject to applicable law, an individual may ask for access to personal information we hold about them and may ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

Requests should be sent to:

Email: info@vibesdesign.com.au

We may need to verify the requester’s identity before responding. We will handle requests in accordance with applicable law and may explain any permitted refusal or limitation.

15. Privacy complaints

If a person has a concern about how we have handled their personal information, they should contact us first:

Privacy contact: Privacy enquiries
Email: info@vibesdesign.com.au

We will acknowledge and investigate the complaint and respond within a reasonable period, subject to applicable law and the complexity of the matter.

If the person is not satisfied with our response, or if the complaint is not resolved, they may be able to contact the Office of the Australian Information Commissioner (www.oaic.gov.au, 1300 363 992).

16. Direct marketing

We may send service-related communications where necessary to administer an enquiry or service. We will send marketing communications only where permitted by applicable law.

Every marketing email will include a clear unsubscribe method. A person may also contact us at help@drweb.com.au to opt out. We may retain a record of the opt-out request so that it can be respected.

17. Children

The website and services are directed at businesses and are not intended for children. We do not knowingly collect personal information from children through the website.

18. Third-party websites

The website may contain links to third-party websites or services. We are not responsible for the privacy practices, content or security of those third parties. Individuals should review the relevant third-party privacy policies before supplying information.

19. Changes to this policy

We may update this Privacy Policy when our information-handling practices, service providers, technology or legal obligations change. The updated policy will be published on this page with a revised last-updated date.

20. Contact

Questions about this policy or personal information handled by Dr Web can be sent to:

O.M.G. Media Group Pty Ltd (ABN 77 627 196 589) operates the Dr Web website.
Privacy enquiries: info@vibesdesign.com.au
General enquiries: help@drweb.com.au
Phone: 03 8771 5557