Privacy Policy

How Ace Web Development collects, uses, stores and protects personal information when you use our website, forms and client tools.

Last updated: 8 July 2026

Ace Web Development (we, us, our) delivers web development and digital marketing services to businesses in Australia, Canada, New Zealand, the United Kingdom, the United States and other markets. This Privacy Policy describes how we handle personal information when you visit acewebdevelopment.com (Website), submit enquiries, use our tools or engage us for services, regardless of where you are located.

For service engagements, we may also handle information on your behalf as part of project delivery. That processing is described in your statement of work or contract and, for your end-customers, in your privacy policy on sites we build for you.

1. Who we are

Controller: Ace Web Development

Contact: [[email protected]](mailto:[email protected])

If you have questions or wish to exercise your privacy rights, contact us at the email above.

2. Scope

This policy applies to personal information we collect through:

  • the Website and CMS-hosted pages
  • contact and pricing request forms
  • email and other correspondence with us
  • free website audit and Search Console audit tools on the Website
  • analytics and similar technologies on the Website

It does not apply to third-party websites, ad platforms or services you use independently, even if we linked to them or integrated them in a client project.

3. Information we collect

3.1 Information you provide

Depending on how you interact with us, we may collect:

SourceExamples
Contact formName, email, phone, company, subject, message
Pricing / quote formName, email, phone, company, project requirements, notes
Email or callsCorrespondence content and contact details
Client projectsLogins, brand assets, content and data you choose to share for delivery

You may choose not to provide some fields, but we may be unable to respond or deliver services without sufficient information.

3.2 Information collected automatically

When you use the Website we may collect:

  • IP address and approximate location derived from IP
  • Browser type, device type and operating system (user agent)
  • Pages viewed, referrers, timestamps and similar usage data
  • Cookie and analytics identifiers (see Section 8)

Our free website audit tool processes the URL you submit and technical signals from that URL. We may use your IP address to enforce daily rate limits.

Our Search Console audit tool uses OAuth connections to Google Search Console and/or Bing Webmaster Tools. When you connect an account, we receive OAuth tokens and account identifiers stored in your browser session to run the audit you requested. We do not use those tokens for purposes unrelated to operating that tool session unless you separately engage us for services requiring ongoing access.

3.3 Information from third parties

We may receive information from:

  • analytics providers (aggregated usage reports)
  • advertising or social platforms if you interact with our ads or profiles
  • payment processors if you pay invoices through a linked service
  • your colleagues or service providers who contact us on your behalf

4. Why we use personal information

We use personal information to:

  • respond to enquiries and provide quotes
  • deliver web development, digital marketing and related services
  • operate, secure and improve the Website and tools
  • send service-related communications (not unsolicited spam)
  • invoice, collect payment and maintain accounts
  • comply with law and defend legal claims
  • maintain internal records, including stored form submissions

We do not sell your personal information.

5. Legal bases and regional laws

We serve clients internationally. The law that applies to you depends on where you live and how you interact with us. We aim to meet or exceed the requirements of the privacy regimes that apply to our processing.

Where GDPR, UK GDPR or similar laws apply, we rely on contract (to perform services or pre-contract steps), legitimate interests (to operate and secure the Website, prevent abuse and improve services), consent (where required for non-essential cookies or marketing) or legal obligation.

UK and EEA (GDPR / UK GDPR): you may have rights of access, rectification, erasure, restriction, portability and objection, and may complain to your supervisory authority.

United States: we do not sell personal information. Residents of states with privacy laws (including California, Colorado, Virginia and others as they apply) may have rights to know, access, delete and correct personal information, and to opt out of certain processing where applicable. Submit requests to the contact email below.

Canada (PIPEDA and applicable provincial laws): you may request access to and correction of personal information we hold about you, subject to legal exceptions.

Australia (Privacy Act and APPs): we handle personal information in line with the Australian Privacy Principles where they apply to us.

New Zealand (Privacy Act 2020): you may request access to and correction of personal information we hold about you, and may complain to the Office of the Privacy Commissioner if unresolved.

If you are unsure which regime applies, contact us and we will respond in line with your location and applicable law.

6. Disclosure to third parties

We may share personal information with:

Recipient typePurpose
Hosting and infrastructure providersOperate the Website, store submissions, send email
Email delivery servicesDeliver enquiry notifications
Analytics providers (e.g. Google Analytics)Understand Website usage
OAuth providers (Google, Microsoft/Bing)Search Console audit tool authentication
Professional advisersLegal, accounting or insurance where necessary
AuthoritiesWhere required by law or to protect rights and safety

We require service providers to handle information only for our instructions or their own compliant policies, as applicable.

Some providers may process data outside Australia (for example United States or European data centres). Where required, we take reasonable steps to ensure overseas recipients handle information in a manner consistent with applicable law.

7. Storage and security

7.1. Form submissions may be stored as JSON files on our server in protected storage areas, in addition to email delivery to our team.

7.2. We use reasonable technical and organisational measures appropriate to the information we hold, including access controls, HTTPS and hosting security features. No method of transmission or storage is completely secure.

7.3. OAuth tokens for the Search Console audit tool are held in server-side session storage for the duration of your session and cleared when you disconnect or the session expires.

7.4. You are responsible for securing credentials we issue to you and for access control on environments we hand over after project completion.

8. Cookies and analytics

8.1 Cookies

Cookies are small text files placed on your device. We use:

  • Essential cookies required for site operation and security (including session cookies for tools)
  • Analytics cookies to measure traffic and usage patterns

8.2 Google Analytics

We use Google Analytics 4 via Google tag. Google may collect information about your use of the Website according to Google's privacy policy. You can opt out of Google Analytics using Google's add-on or your browser settings where available.

8.3 Other third-party content

The Website may load resources from third parties, such as Google Fonts and Font Awesome (CDN), which may receive technical data (including IP address) when your browser requests those files. Those providers process data under their own policies.

8.4 Your choices

You can block or delete cookies through browser settings. Blocking essential cookies may break forms or tools.

9. Marketing communications

We may send service updates or marketing emails where permitted by law. You may opt out of marketing emails using the unsubscribe link or by contacting us. We may still send transactional messages related to an active enquiry or contract.

10. Retention

We retain personal information only as long as needed for the purposes above, including:

  • Enquiries: typically up to 24 months after last contact, unless a longer period is needed for disputes or law
  • Client project records: for the engagement period and thereafter as required for tax, legal and warranty purposes
  • Form submission files: aligned with enquiry retention unless deleted earlier on request where we are not legally required to retain them
  • Analytics: according to our analytics configuration and provider settings

When information is no longer required, we take reasonable steps to delete or de-identify it.

11. Access, correction and deletion

Depending on your location and applicable law, you may have rights to:

  • request access to personal information we hold about you
  • request correction of inaccurate information
  • request deletion in certain circumstances
  • object to or restrict certain processing
  • withdraw consent where processing is consent-based
  • lodge a complaint with a supervisory authority

To exercise these rights, email [email protected]. We may need to verify your identity before responding. We will respond within a reasonable period and as required by law.

12. Complaints and regulators

Contact us first at [[email protected]](mailto:[email protected]). We will investigate and respond within a reasonable period.

If you are not satisfied, you may contact the privacy regulator in your country or region, including:

RegionRegulator
AustraliaOffice of the Australian Information Commissioner (OAIC)
New ZealandOffice of the Privacy Commissioner
United KingdomInformation Commissioner's Office (ICO)
European Union / EEAYour national data protection authority (see edpb.europa.eu)
CanadaOffice of the Privacy Commissioner of Canada
United StatesYour state attorney general or the Federal Trade Commission (FTC) where applicable

We cooperate with regulators as required by law.

13. Children

The Website and our services are directed at businesses and adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided information to us, contact us and we will take reasonable steps to delete it.

14. Links to other sites

Our Website may link to third-party sites. We are not responsible for their privacy practices. Review their policies before providing personal information.

15. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Material changes will be posted on this page. Continued use of the Website after an update constitutes acceptance of the revised policy for Website use, to the extent permitted by law.

16. Contact

Ace Web Development

Email: [email protected]

For terms governing use of our services, see our Terms of Service.