Privacy Policy

About This Policy

Your privacy matters to us. This Privacy Policy explains what personal information we collect when you visit our website, get in touch with us, or engage us for our services — and what we do with it.

We’ve aligned this policy with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). While we may fall under the small business exemption, we’ve chosen to handle personal information to APP standards as a matter of good practice and respect for our clients and visitors.

By using our website or engaging our services, you agree to the practices described in this policy.

Who We Are

In this policy, “we”, “us” and “our” refer to Limitless Web Co., the trading name of Helder & Sons Pty Ltd (ABN 54 663 574 785), based in Victoria, Australia.

Full business details are in Section 18.

What We Collect

The kinds of personal information we may collect include:

• Contact details — your name, email address, phone number, and any social media handle you use to reach us (for example, Facebook).
• Business information — your business name, ABN, role, industry, and any details you provide about your business so we can quote and deliver services.
• Project content — logos, photos, copy, branding assets and any other materials you provide for us to use in your website build.
• Billing information — the information needed to issue and reconcile invoices. We don’t store credit card details; payments are typically by Australian bank transfer.
• Communications — records of messages, emails and calls between us.
• Technical information — things like IP address, device and browser type, pages visited, and approximate location, collected automatically when you use our website.
• AI Bot conversations — if you chat with the AI assistant on our site, the messages you send (see Section 9).

We don’t deliberately collect sensitive information (such as health, racial, religious or political information). Please don’t share that kind of information with us — we don’t need it to do our job.

How We Collect It

We collect personal information in a few different ways:

• Directly from you — when you message us on Facebook, email us, fill in a contact form, send us files, or talk with us during a project.
• Automatically — through standard server logs and our hosting platform when you visit our website (technical information only).
• From third-party services — for example, when you contact us through Facebook, that platform shares the basic profile information you’ve made available to message us.

Wherever practical, we collect personal information directly from you.

Why We Collect It

We collect and use personal information for the following purposes:

• To respond to your enquiries and provide quotes.
• To deliver the services you’ve engaged us for — design, development, hosting, Care Plans and the AI Bot.
• To communicate with you about your project, send invoices and handle payments.
• To improve our website, services and customer experience.
• To send you occasional updates or marketing — only where you’ve opted in or where the law permits us to (see Section 11).
• To meet our legal, accounting and tax obligations.
• To prevent fraud, abuse or misuse of our services.

We won’t use your personal information for an unrelated purpose without your consent.

How We Store & Protect It

We take the security of your information seriously. Reasonable steps we take include:

• Storing data on reputable, secured cloud platforms with industry-standard encryption in transit (HTTPS/SSL) and at rest where supported.
• Limiting access to personal information to people who genuinely need it to deliver our services.
• Using strong passwords and multi-factor authentication on the accounts where personal information is held.
• Keeping our software and tools up to date.

No method of transmission or storage is 100% secure, however. While we do our best to protect your information, we can’t guarantee absolute security — and you share information with us at your own risk.

Cookies & Analytics

Our website may use small text files (cookies) and similar technologies to help the site work properly — for example, to load fonts and remember basic preferences. We may also use privacy-respecting analytics tools to understand which pages are popular and how visitors find us.

You can disable cookies in your browser settings if you prefer. Most of our site will still work normally, though some features may be limited.

We don’t use cookies to build advertising profiles about you across the wider internet.

Third-Party Services

To run our business and deliver our services, we use trusted third-party providers. They handle limited personal information on our behalf, under their own security and privacy practices. These typically include:

• Hosting and content delivery — Cloudflare and other enterprise CDN providers, which serve our website and protect it from abuse.
• Communication tools — Facebook Messenger and standard email providers, used to communicate with you.
• Web fonts — Google Fonts, which loads typography on our pages.
• AI providers — the third-party AI service that powers our website’s AI Bot (see Section 9).
• Accounting and invoicing tools — used to issue invoices and keep tax-compliant records.

We share only the information these providers need to do their job, and we choose providers we consider reasonably reputable. Their handling of your information is governed by their own privacy policies.

AI Bot Conversations

If you chat with the AI assistant on our website, the messages you send are processed by a third-party AI provider so the assistant can generate a response. Conversations may be temporarily logged so we can monitor quality, fix issues and improve the service.

Overseas Disclosures

Some of the third-party services we use are located overseas — primarily in the United States. This includes our hosting provider, content delivery network, AI provider and font delivery network.

This means that, in the course of using our services, your personal information may be stored or processed outside Australia. We choose providers we consider reasonably reputable, and where applicable they operate under recognised privacy frameworks.

By using our website and services, you consent to the disclosure of your personal information to these overseas recipients for the purposes described in this policy.

Marketing Communications

From time to time, we may send you updates about our services, new features or special offers — but only where you’ve given us permission, or where it’s reasonable to do so under the Spam Act 2003 (Cth) (for example, if you’re an existing client).

Every marketing message will include a clear way to opt out. You can unsubscribe at any time by clicking the link in the message, replying with “unsubscribe”, or contacting us directly — we’ll action it promptly.

Access & Correction

You have the right to:

• Ask us what personal information we hold about you.
• Ask for a copy of that information.
• Ask us to correct anything that’s inaccurate, out of date or incomplete.
• Ask us to delete information we no longer need to keep.

To make a request, just email us at info@limitlesswebco.com.au. We’ll respond within a reasonable time — usually within 30 days. There’s no charge for making a request, and we’ll only refuse if the law allows or requires us to (for example, if releasing the information would compromise someone else’s privacy or breach legal obligations). If we refuse, we’ll explain why in writing.

To protect your information, we may need to verify your identity before acting on a request.

Data Retention

We keep personal information only for as long as we need it for the purposes set out in this policy, or for as long as the law requires us to keep it (for example, tax records must generally be kept for at least 5 years).

When we no longer need information, we’ll take reasonable steps to securely delete or de-identify it.

Children’s Privacy

Our services are designed for businesses and adults. We don’t knowingly collect personal information from children under 18.

If you believe a child has provided us with personal information, please contact us and we’ll take reasonable steps to delete it.

Data Breaches

If we ever experience a data breach that’s likely to result in serious harm to anyone whose personal information we hold, we’ll notify the affected individuals and the Office of the Australian Information Commissioner (OAIC) as soon as practicable, in line with the Notifiable Data Breaches scheme.

Complaints

If you think we’ve mishandled your personal information or breached the Australian Privacy Principles, please tell us first — we’d genuinely like the chance to fix it. Email us at info@limitlesswebco.com.au with the subject line “Privacy Complaint” and we’ll acknowledge it within a reasonable time and aim to investigate and respond within 30 days.

If you’re not satisfied with our response, you can lodge a complaint with the OAIC:

• Website: www.oaic.gov.au
• Phone: 1300 363 992

Changes to This Policy

We may update this Privacy Policy from time to time — for example, when our practices change or when the law changes. The current version is always the one published on this page, and the “Effective from” date at the top will reflect the latest update.

If the changes are material, we’ll do our best to let active clients know directly. Continuing to use our website or services after a change means you accept the updated policy.

Contact Us

For privacy questions, requests or complaints, please get in touch: