⚙ Build in progress — some links may break, some copy may shift. We'd appreciate the heads-up: [email protected]
— Legal

Privacy policy.

Plain English. APP compliant. No third-party tracking, no sold data, no surprises.

How we handle your information.

Plain English. Australian Privacy Principles compliant. Last updated May 2026.

If you fill in a form on this site, you’re sharing your name, email, and message with us. We use it to reply, and only to reply. We don’t sell, share, or repurpose your information. Stop reading here if that covers your concern.

1. Who we are

whedo.it Pty Ltd ATF whedo trust (ABN 32 457 075 010), trading as whedo.it, is a managed IT services business operated by Warren Ephron (the “Director”). Registered office: Alkimos WA 6038, Western Australia. We can remote-in to support clients anywhere in Australia. We are bound by the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. What we collect

When you contact us through this website, we collect only what you provide:

  • Your name
  • Your email address
  • Optionally, your phone number and company name
  • The content of your message

When you become a client, we additionally collect information necessary to deliver IT services: business name and ABN, contact details for your team, network and licensing inventory, and as relevant, technical configuration data we need to manage your environment.

We do not knowingly collect information about anyone under 18.

3. How we use it

We use your information to:

  • Respond to enquiries and questions
  • Deliver the services you’ve engaged us for
  • Send service updates (incident notifications, maintenance windows, security advisories)
  • Send occasional editorial newsletters — only if you’ve opted in
  • Invoice for services and meet our legal record-keeping obligations

4. Who we share it with

We do not sell or rent your information to anyone, ever. We share information only with:

  • Microsoft — for Microsoft Cloud Partner billing and licence provisioning under your CSP agreement
  • Acronis — for backup and Cyber Protect licensing where you use Acronis services
  • Atera, Nerdio — our RMM and AVD orchestration platforms, which need to identify your tenant to operate
  • Australian government authorities — only where we are legally compelled to disclose (e.g. court order, ATO audit)

All these third parties are bound by their own privacy obligations and use information only to deliver their services to us.

5. Where it’s stored

All client data is stored on Australian-hosted Microsoft Azure infrastructure. Backups are held within Australia per Acronis’ AU region. Email correspondence is hosted on Microsoft 365 in Australian data centres. We do not transfer your information overseas without your explicit consent.

6. How long we keep it

Enquiry information is kept for 24 months from your last contact. Client account information is kept for the duration of the engagement plus 7 years (to meet ATO record-keeping requirements). After that, we securely delete it.

7. Your rights

Under the APPs, you have the right to:

  • Ask what information we hold about you
  • Ask us to correct anything that’s wrong
  • Ask us to delete your information (subject to our legal retention requirements)
  • Opt out of marketing communications at any time
  • Complain to the Office of the Australian Information Commissioner if you believe we’ve mishandled your data

To exercise any of these rights, email [email protected] with the subject “Privacy request”. We respond within 30 days.

8. Cookies and tracking

This website uses minimal cookies: one to remember your light/dark theme preference, one to remember dismissed modal interactions. We do not use third-party advertising or analytics cookies. We do not load Facebook Pixel, Google Analytics, or any other behavioural tracking.

9. Security incidents

If a data breach occurs that creates a risk of serious harm to you, we will notify you and the Office of the Australian Information Commissioner within the timeframes mandated by the Notifiable Data Breaches scheme. As an MSP, this is a baseline we hold ourselves to before we hold clients to it.

10. Changes to this policy

If we update this policy, the “last updated” date at the top changes. For material changes, we’ll notify clients directly by email. Continued use of the site after a change constitutes acceptance.

11. Contact

Privacy questions or concerns: [email protected] · +61 421 346 887.

This policy is provided for transparency and is not legal advice. If you require formal guidance about the Australian Privacy Principles as they apply to your own business, consult a qualified lawyer.

5.0
★★★★★ on Google · loading…
Read all on Google →