Privacy Policy

Momentum Hosting is an Australian managed hosting business (Third Time Lucky Corp Pty Ltd, ABN 94 612 461 800, trading as Momentum Hosting). We are committed to protecting the personal information of our customers, prospective customers, and website visitors. This Privacy Policy describes what personal information we collect, why we collect it, how we use and store it, and who we share it with. We handle personal information in accordance with the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth).

For any privacy question, contact us at privacy@momentumhosting.com.au.

What “personal information” means

Personal information is any information about you that identifies you, or by which your identity can be reasonably determined.

What we collect

We collect the following categories of personal information.

• Contact and account details. Your name, business name, postal address, email address, and phone number. We collect this when you enquire about our services, sign up for hosting, or manage an existing account.
• Billing information. We use a third-party payment processor to handle payments. We do not store full credit card numbers on our own systems; we retain the transactional records our accounting and support functions need.
• Support conversations. Any information you share with us in support tickets, emails, or phone calls, and our records of those conversations.
• Technical operational data. Server access logs, IP addresses, mail server logs, and similar records that we generate in the course of operating the hosting infrastructure. These are used for service delivery, security, abuse prevention, and incident response.
• Website interaction data. Our website loads Google Analytics 4, which collects standard measurement data (pages visited, referrer, approximate location, device and browser type, and similar) so we can understand how the site is being used. Our contact form additionally uses Google reCAPTCHA v3, which collects browser and interaction data from your device to distinguish humans from automated abuse. Both are covered in the Third Parties and Cookies sections below.

We use Google Analytics 4 for measurement only. We do not run behavioural advertising, remarketing, or ad-personalisation on our website, and we do not share Analytics data with advertising networks.

How we collect it

Directly from you, through our website forms, during signup, in support conversations, and in any contract you sign with us.

Automatically, through the logs generated by the infrastructure you use, and through reCAPTCHA on the contact form.

From other parties only rarely, and only in the specific case where another operator, agency or developer transfers a customer relationship to us with the customer’s knowledge.

How we use it

We use personal information to:

• Provide and support the hosting services you have purchased.
• Contact you about your account, incidents, planned maintenance, or renewals.
• Investigate abuse, security, or performance incidents on our infrastructure.
• Meet our legal, tax, and record-keeping obligations.
• Occasionally send you information about product changes or new services that may be relevant. You can opt out of these communications at any time by replying to the email or contacting us.

We do not sell personal information, and we do not disclose personal information for the purpose of direct marketing by any third party.

Who we share it with

We share personal information only where necessary to operate the service, meet a legal obligation, or with your permission. Categories of recipient include:

• Payment processors, to charge and reconcile subscription and one-off payments.
• Email delivery services, to deliver transactional and support emails from our systems.
• Google (Analytics), for measurement of how the website is used. Google Analytics is a Google service and Google’s own privacy terms apply to information collected through it.
• Google (reCAPTCHA), for spam protection on our website contact form. reCAPTCHA is a Google service and Google’s own privacy terms apply to information collected through it.
• Government agencies or courts, where required or authorised by law (for example, in response to a subpoena or a direction issued under taxation law).
• Legal advisers, where necessary to obtain legal advice or to defend our interests in a dispute.

We do not disclose personal information to any third party for that third party’s own marketing purposes.

Overseas disclosure

Some of the third parties named above (notably Google Analytics and Google reCAPTCHA, and depending on the payment processor used, the payment layer) operate outside Australia. Where personal information is disclosed to an overseas recipient, we take reasonable steps to ensure the recipient handles the information consistently with the Australian Privacy Principles.

How we store and protect it

Personal information we hold is stored on infrastructure we operate and manage directly. Access is limited to staff who need it to do their job, under confidentiality obligations. Our administrative systems use industry-standard access controls and monitoring. Paper records, where they exist, are held in secure storage.

We retain personal information for as long as necessary to provide services, comply with our legal obligations, and resolve disputes. When we no longer need the information, we securely destroy or de-identify it.

Accessing and correcting your information

You may request access to the personal information we hold about you, and correction of any information that is inaccurate, incomplete, or out of date. Requests should be made in writing to privacy@momentumhosting.com.au. For security reasons, we will confirm your identity before releasing personal information. We do not release personal information over the telephone without an identity check.

You cannot request information we hold about other customers or third parties.

Dealing with us via the Internet

Email is not, in itself, a secure channel. Our website uses TLS for information you submit through it. Sensitive information (bank details, identity documents, credentials, passwords) should be sent through a secure channel, such as our secure link tool at vanishly.link, rather than by email.

Cookies

Our website sets three categories of cookie. Google Analytics 4 sets first-party analytics cookies (typically _ga and one or more _ga_<container> variants) that identify a browser across pages so we can distinguish unique visits from returning ones and measure how the site is used. Google reCAPTCHA sets cookies on the contact form page to distinguish humans from automated abuse. A small number of functional cookies are set as needed for the site to function correctly. We do not use tracking cookies for behavioural advertising, and we do not share cookie-derived data with advertising networks.

Complaints

If you believe we have not handled your personal information consistently with this Policy or the Australian Privacy Principles, please contact us at privacy@momentumhosting.com.au. We will acknowledge your complaint and respond within a reasonable time.

If you are not satisfied with our response, you may refer the complaint to the Office of the Australian Information Commissioner (OAIC).

• Website: oaic.gov.au
• Phone: 1300 363 992

Changes to this Policy

We may update this Policy from time to time. The current version is always available at https://www.momentumhosting.com.au/legal/privacy. Substantive changes are recorded in the Revisions section below.

Revisions

• 15 July 2026. Full rewrite. Removed template artefacts from an earlier version of the document that referenced a superannuation-fund context (mailing of member statements, benefit disputes). Updated the regulator name from “Federal Privacy Commissioner” to the current OAIC, with current contact details. Named the specific third-party categories we actually disclose to (payment processors, email delivery services, Google reCAPTCHA). Added a Cookies section, an Overseas disclosure section, and named the legal entity operating the business. Aligned language with the Australian Privacy Principles.
• 15 September 2026. Added Google Analytics 4 disclosure across the Policy: Website interaction data now names GA4 alongside reCAPTCHA; Who we share it with distinguishes Google (Analytics) from Google (reCAPTCHA); Cookies section names the first-party analytics cookies GA4 sets (_ga, _ga_<container>); Overseas disclosure section names GA alongside reCAPTCHA. The previous blanket statement “We do not run behavioural advertising analytics” was replaced with a more precise version distinguishing measurement analytics (GA4, in scope) from behavioural advertising and remarketing (out of scope). No change to what we do with the data or who we share it with beyond adding the GA4 layer.