Privacy Policy

Last updated 1 October 2026

HostHat (“we”, “us”) respects your privacy. This policy explains what personal information we collect, why, who we share it with and how you can access or correct it. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. Information we collect

  • Account and contact details — your name, company, email address, phone number and postal address.
  • Domain registrant details — the contact details the registry requires for each domain and, for .au domains, eligibility information such as an ABN, ACN or trademark number.
  • Billing records — invoices, payments and the payment method used. Card and PayPal account details are handled by PayPal; we never see or store your card number.
  • Technical information — IP addresses, login times and server logs generated when you use our website, client area and hosting services.
  • Correspondence — emails you send us and the emails we send you.

We do not knowingly access the content of your website, databases or mailboxes, except where you ask us to (for example, to migrate or troubleshoot your site), or where we need to investigate abuse, a security incident or a legal requirement.

2. How we use it

  • to set up, run and renew your hosting and domain services;
  • to send invoices, payment receipts, renewal reminders and service notices;
  • to provide support and answer your enquiries;
  • to keep our systems secure and prevent fraud and abuse;
  • to meet our legal, tax and registry obligations.

We do not sell your personal information, and we do not send marketing email without your consent.

3. Who we share it with

We share personal information only as needed to provide our services:

  • Domain registrars and registries — we register domains through enom and ResellerClub, who pass registrant details to the registry for each extension (such as Verisign for .com and auDA for .au). Registries may publish some details in public WHOIS / RDAP lookups, subject to their own privacy rules.
  • Payment providers — PayPal processes online payments, and your bank processes transfers.
  • Infrastructure providers — the datacentres and email delivery services that host our servers and send our emails.
  • Professional advisers and authorities — our accountants and legal advisers, and law enforcement, courts or regulators where the law requires it.

4. Overseas disclosure

Our hosting servers are located in Australia. Some of our suppliers are based overseas, so your information may be disclosed outside Australia — in particular to the United States (enom, PayPal and registries for generic domains) and India (ResellerClub). We choose providers that protect personal information to a standard similar to the Australian Privacy Principles.

5. Cookies

We use cookies only to keep you signed in to the client area and to protect your session. We do not use advertising or third-party tracking cookies. If you block cookies you will not be able to sign in.

6. Security and retention

We protect your information with encrypted connections (HTTPS), hashed passwords, access controls and two-factor authentication for our staff. No system is completely secure, so please use a strong, unique password for your account.

We keep account and billing records for as long as you are a customer and afterwards for as long as tax and other laws require (generally seven years). Hosting data is removed after a service is cancelled. If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

7. Accessing and correcting your information

You can view and update most of your details in the client area. You may also ask us for a copy of the personal information we hold about you, or ask us to correct or delete it, by emailing [email protected]. We'll respond within 30 days. We may need to keep some records where the law requires it.

8. Complaints

If you have a concern about how we handle your personal information, email us at [email protected] and we'll respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner.

9. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, and we'll let you know by email about significant changes.

See also our Terms of Service and Privacy Policy. Questions? [email protected]