Collect less. Access only what the work needs.
Our preferred operating model reduces the sensitive customer information WebAgencyOn needs to receive in the first place.
Information you submit
Project forms may contain company/agency details, work email, project context and information you deliberately provide. Do not submit primary passwords, registrar credentials, recovery codes, private keys or full payment-card information through ordinary forms.
Domains, hosting and third-party purchases
Where practical, we recommend that the final client or agency contracts domains, hosting and other paid third-party services directly with the relevant provider. We may recommend the route and send the provider link, while you enter billing, identity and account information directly with that provider.
This reduces unnecessary handling of sensitive purchasing data by WebAgencyOn. The external provider processes the purchase under its own terms and privacy notice. Any affiliate/referral relationship should be disclosed if one applies.
Remote assistance
For attended remote work, you may open the required hosting, registrar, DNS or administration panel on your own device and remain present while the agreed task is performed. You can type sensitive credentials yourself and keep unrelated folders, email, applications and documents closed.
Remote access is not permission to inspect, retain or use unrelated information. Unattended access is not required by default.
Confidentiality and client data
Project and operational information accessed for delivery should be used only for the agreed work and handled with appropriate confidentiality. If WebAgencyOn processes personal data on behalf of a client, the applicable roles and obligations should be documented where required, including instructions, purpose, confidentiality, security and return/deletion responsibilities.
Technical data and anti-abuse
Hosting, network and security providers may process technical request data required to operate and protect the site. The WebAgencyOn application does not intentionally create an advertising profile from that information. Secure session cookies and short-lived anti-abuse controls may be used for form security.
Retention
Initial enquiry information is intended to be removed from active working records within 7 days when no relationship proceeds, unless retention is needed for an ongoing project, contract, accounting/legal obligation or claim. Project records are retained only as reasonably necessary for the engagement and applicable obligations.