Privacy Policy
Last updated: 13 November 2026
This Privacy Policy explains how Web Chemistry collects, uses, stores and discloses personal information, and how you can access or correct it or make a complaint.
1. Who we are
Web Chemistry is a brand of Brainchild Labs Pty Ltd (ABN 48 634 644 723), based in Sydney, NSW. In this policy, "Web Chemistry", "we", "us" and "our" refer to Brainchild Labs Pty Ltd trading as Web Chemistry.
We are committed to handling personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
2. The personal information we collect
The personal information we collect depends on how you deal with us. It may include:
- Enquiry details: when you use the contact form on our website, your name, email address, phone number, business or company name, the service you are interested in, your existing website address, details of your project, indicative budget and preferred timeframe.
- Client account and billing details: if you become a client, your name, business name, ABN, postal and billing address, email address, phone number, the services you have with us, invoices, payment history and support requests, held in our client portal.
- Payment details: card payments are processed by our payment provider, Stripe. Full card numbers are handled and stored by Stripe, not by us. We may see limited details such as the card type, the last four digits and the expiry date.
- Communications: records of emails, phone calls, messages and support tickets between you and us.
- Technical information: when you visit our website, our servers automatically record information such as your IP address, browser type, device, the pages you visit and the date and time of your visit.
- Information we handle for clients: when we host, build or maintain a website, email or application for a client, we may store or have access to personal information that belongs to that client and their own customers or users (see section 7).
We do not generally collect sensitive information (such as health information). You can deal with us anonymously or using a pseudonym for general enquiries, but we will need your identity to provide services to you or to bill you.
3. How we collect personal information
We collect most personal information directly from you, for example when you complete a form on our website, contact us by phone, email or WhatsApp, request a quote, sign up for a service, log in to our client portal or lodge a support ticket.
We may also collect personal information from third parties, such as a person in your organisation who is the primary contact for an account, domain name registries and registrars, and our payment and service providers.
4. Why we collect and use personal information
We collect, hold and use personal information to:
- respond to enquiries and prepare quotes and proposals;
- provide, manage and support our web design, development, hosting, maintenance, SEO and related services;
- set up and manage client accounts, domain names and hosting services;
- issue invoices, process payments and manage our accounts;
- verify your identity before making changes to an account;
- keep our website, servers and services secure, including detecting and preventing spam, fraud and abuse;
- tell you about service changes, renewals, outages or security issues;
- let you know about services we think may interest you, where permitted by law; and
- comply with our legal, tax and regulatory obligations.
5. Who we disclose personal information to
We do not sell personal information. We may disclose it to:
- service providers who help us run our business, such as hosting and data centre providers, payment processors (including Stripe), email and communications providers, accounting and software providers, and spam and security protection services;
- domain name registries and registrars, where needed to register or manage a domain name for you;
- our professional advisers, such as accountants and lawyers; and
- government bodies or others where required or authorised by law.
Our website contact form is protected by an anti-spam service, which checks form submissions and related technical information (such as your IP address and email address) to block spam. Our website also loads fonts from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google.
6. Overseas disclosure
Some of our service providers, such as cloud, email, payment and software providers, may store or process personal information outside Australia, including in the United States and other countries where those providers or their data centres are located. Where we disclose personal information overseas, we take reasonable steps to make sure it is handled in a way that is consistent with the APPs.
7. Information we handle on behalf of clients
Where we host or maintain a website, email service or application for a client, the personal information in it belongs to that client. We handle it only to provide our services to the client and as the client directs. If you have a question about how a client's website handles your information, please contact that business directly.
8. Cookies and website data
Our website uses cookies and similar technologies that are needed for it to work properly and securely, for example to keep the site secure, protect forms from spam and keep you logged in to our client portal. You can set your browser to refuse cookies, but some parts of the website or client portal may then not work as intended.
If we introduce analytics or advertising tools in future, we will update this policy.
9. Marketing
We may send you information about our services if you are a client or have asked to hear from us. You can opt out at any time by using the unsubscribe link in a marketing email or by contacting us. We will still send you messages that relate to services you have with us, such as invoices, renewal notices and service or security notices.
10. Security of personal information
We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These steps include SSL/TLS encryption on our website and client portal, access controls, secure servers and keeping our systems up to date. No method of transmission or storage is completely secure, so we cannot guarantee the security of information you send to us online.
If we become aware of a data breach that is likely to result in serious harm, we will act in line with the Notifiable Data Breaches scheme under the Privacy Act.
11. How long we keep personal information
We keep personal information only for as long as we need it for the purposes in this policy, or as required by law (for example, financial and tax records are generally kept for at least five years). When we no longer need it, we take reasonable steps to securely destroy or de-identify it.
12. Access and correction
You can ask to access the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date, incomplete or misleading. Clients can also update many of their details in our client portal. To make a request, contact us using the details below. We may need to verify your identity first. We will respond within a reasonable time, usually within 30 days. If we refuse a request, we will tell you why in writing.
13. Complaints
If you have a concern or complaint about how we have handled your personal information, please contact us first using the details below. We will acknowledge your complaint and aim to respond within 30 days.
If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.
14. Contact us
Web Chemistry (Brainchild Labs Pty Ltd)
Email: hello@webchemistry.com.au
Phone: 1300 855 465
Post: PO Box 5420, Greystanes NSW 2145, Australia
You can also reach us through our contact page.
15. Changes to this policy
We may update this Privacy Policy from time to time. The current version will always be available on this page.
Update History
v1.0 - November 2026