Comprehensive breakdown of how onrenderr processes, secures, and protects customer data under Australian Privacy Principles (APPs).
Entity: onrenderr Cloud Technologies Pty Ltd (ABN 84 629 104 382)
Jurisdiction: New South Wales, Australia
Effective Date: August 11, 2026 (Version 4.2)
Primary Region: Sydney Datacenter Cluster (ap-southeast-2)
onrenderr Cloud Technologies Pty Ltd ("onrenderr", "we", "us", or "our") is strictly committed to safeguarding the privacy of our customers, developers, enterprise clients, and website visitors. This Privacy Policy details our obligations under the Privacy Act 1988 (Cth), including the 13 Australian Privacy Principles (APPs), as well as the Privacy Amendment (Notifiable Data Breaches) Act 2017.
Where our services process data of individuals residing in the European Union, United Kingdom, or California, we adhere to the provisions of the General Data Protection Regulation (GDPR), UK GDPR, and California Consumer Privacy Act (CCPA).
We collect personal information necessary to deliver, bill, secure, and optimize our cloud infrastructure platform. Information collected includes:
Customer Application Data refers to source code, environment variables, PostgreSQL database records, Redis key-value stores, object storage assets, and application logs deployed onto onrenderr servers. Customer Application Data remains the exclusive property of the customer and is encrypted at rest and in transit.
We process personal data solely for explicit, legitimate engineering and business purposes:
| Processing Purpose | Data Categories Used | APPs Legal Basis |
|---|---|---|
| Provisioning web services, DBs & builds | Account, Billing, Source Repositories | Performance of Contract (APP 3) |
| DDoS mitigation & firewall security | IP Logs, Routing Telemetry | Legitimate Business Security (APP 3.2) |
| Billing, invoicing & GST compliance | ABN, Payment Tokens, Billing Address | Legal & Financial Obligation (Corporations Act) |
| Incident notification & SLA alerts | Work Email, Phone, Webhook URLs | Contractual Operational Alerts (APP 6) |
Under APP 8 (Cross-border disclosure of personal information), we inform customers that all primary workloads hosted in the ap-southeast-2 region are stored physically within Tier 3+ Equinix and NEXTDC facilities located in Sydney, New South Wales, Australia.
Where secondary edge caching or global DNS routing is enabled, traffic telemetry may pass through edge nodes in Tokyo, Singapore, London, Frankfurt, or Oregon. All cross-border data transfers are governed by standard contractual clauses (SCCs) and binding corporate agreements that enforce security standards equivalent to Australian Privacy Principles.
Under APP 11 (Security of personal information), onrenderr maintains robust physical, technical, and administrative controls to protect personal data from misuse, interference, loss, unauthorized access, modification, or disclosure:
Personal data is retained only for as long as required to fulfill contractual obligations or legal compliance standards:
Under APP 12 (Access) and APP 13 (Correction), Australian residents have the right to request access to personal information held by onrenderr and request corrections if inaccurate.
To submit a Data Subject Access Request (DSAR) or Request for Erasure, email our Privacy Officer at privacy@onrenderr.com. Requests will be acknowledged within 48 business hours and fulfilled within 30 calendar days without charge.
If you have questions, concerns, or complaints regarding our privacy compliance, please contact our Sydney Office:
Privacy & Compliance Officer
onrenderr Cloud Technologies Pty Ltd
Level 24, 20 Bond Street, Sydney NSW 2000, Australia
Email: privacy@onrenderr.com
Support Hotline: +61 2 8000 9100
If you are unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.