Terms and Conditions
By using our website or engaging our services, you agree to these terms. If you don’t agree, don’t use the site or our services.
1. Definitions
- “We,” “us,” “our” — Website Rescues, operated by David Bennett (Sole Trader) | ABN 32 562 031 256
- “You,” “your” — the person or business using our website or engaging our services
- “Site” — websiterescues.com.au and all subdomains
- “Services” — any service we provide including free scans, Discovery assessments, Hardening & Optimisation, Overwatch monitoring, emergency response, and any other service listed on our website
- “Your Website” — the website(s) you ask us to scan, assess, or manage
- “Credentials” — any login details, passwords, API keys, or access tokens you provide to us
- “Certificate” — our Certificate of Due Diligence, which documents actions taken — not outcomes guaranteed
2. The Nature of Our Services
2.1 What We Do
We provide website security assessment, hardening, monitoring, certification, and incident response services for small and medium businesses. We apply professional skill and industry-standard methodologies to reduce your risk and document your diligence.
2.2 What We Explicitly Do Not Promise
This is important. Read it carefully.
- We do not guarantee your website will never be compromised. No security provider on earth can make that promise. Anyone who does is lying to you.
- We do not guarantee we will detect every vulnerability. Security scanning is inherently limited. New vulnerabilities are discovered daily. Zero-day exploits exist by definition because nobody knows about them yet.
- We do not promise to identify who attacked you or determine their motives. Attribution is an intelligence function beyond the scope of our services.
- We do not provide legal advice. Our references to legislation and legal obligations are informational only.
- We do not guarantee uptime of our monitoring services.
2.3 What We Do Promise
We promise to apply professional care, industry-standard tools, and genuine expertise to every engagement. We document what we assessed, what we found, and what we did about it. That documentation — your Certificate of Due Diligence — is what changes your legal position from “we did nothing” to “we took reasonable steps.”
We get paid for the professional application of our skill, not for guaranteeing outcomes that no one in this industry can guarantee.
3. Service Descriptions
3.1 Free Security Scan (Discovery)
Our free scan performs external reconnaissance on your website — the same type of probing that automated bots perform thousands of times daily. Non-invasive, no credentials required, no modifications to your site.
Price: $0. No credit card. No hidden charges. No automatic upgrades.
3.2 Discovery Assessment
A credentialed internal security assessment requiring access to your hosting account and WordPress admin. Credentials are transmitted via encrypted channels, used exclusively for the agreed assessment, not stored beyond the engagement, and never shared with any third party.
3.3 Hardening & Optimisation
Remediation performed in a staging environment where possible. You acknowledge that security hardening involves modifying files, configurations, and settings, and that we may need to remove, replace, or modify plugins, themes, or code that pose security risks.
3.4 Overwatch (Ongoing Monitoring)
Subscription service billed monthly in advance. Cancel anytime with 30 days written notice. No cancellation fees. Monitoring continues until the end of your paid period.
3.5 Emergency Response
If your website is actively compromised, emergency response services are billed separately at our then-current rates.
3.6 Certificate of Due Diligence
Documents that a professional security assessment was conducted and specific actions were taken at a specific point in time. It is evidence of diligence, not a warranty of invulnerability.
4. Your Responsibilities
- You own or are authorised to manage the website(s) you submit
- You have authority to grant us access to the hosting accounts and credentials you provide
- Credentials you provide are accurate and current
- You’ll notify us of material changes to your hosting, domain, or WordPress configuration
- You understand and accept the limitations of security scanning as described in these terms
- You’ll maintain reasonable security practices between assessments
- You’ll pay invoices within stated terms
- You acknowledge that security scans may generate log entries, consume server resources, and in rare cases cause temporary performance impacts
5. Payment Terms
All prices are in Australian Dollars (AUD) and include GST where applicable. One-off services invoiced upon engagement, payment due within 14 days. Overwatch billed monthly in advance. We accept credit card, debit card, and bank transfer through our secure payment provider. We do not store your card details.
6. Refund Policy
| Service | Refund Available? | Conditions |
|---|---|---|
| Free Scan | N/A | It’s free |
| Discovery Assessment | Full refund | If cancelled before we receive your credentials and commence work |
| Discovery Assessment | No refund | Once assessment has commenced |
| Hardening & Optimisation | Full / Partial | Full before work starts; partial for uncompleted work |
| Overwatch | No refund for current period | Cancel anytime, 30 days notice, no cancellation fees |
See our full Refund & Service Delivery Policy for details.
7. Intellectual Property
Our scanning tools, assessment methodologies, report templates, and website content are our intellectual property. Security reports and Certificates delivered to you are yours to use, share with advisors, and file for compliance. You may not publicly publish our full reports without written consent.
8. Limitation of Liability
To the maximum extent permitted by Australian law:
- Our total aggregate liability is limited to the amount you paid us in the 12 months preceding the claim
- We are not liable for indirect, consequential, incidental, special, or punitive damages including lost revenue, lost data, lost profits, or business interruption
- We are not liable for security incidents arising from zero-day vulnerabilities, hosting failures, third-party defects, or actions by you or your other providers
- We are not liable for the criminal actions of attackers — our services reduce risk and document diligence, they do not eliminate the possibility of attack
- Security scans are inherently limited. No scan can guarantee detection of every vulnerability
Nothing in these terms excludes or limits any rights you have under the Australian Consumer Law (Schedule 2 of the Competition and Consumer Act 2010) that cannot be excluded or limited by agreement.
9. Indemnification
You agree to indemnify and hold harmless Website Rescues, David Bennett, employees, and contractors from claims arising from your breach of these terms, unauthorised use of our services, failure to maintain reasonable security practices, or provision of inaccurate credentials or information.
10. Disputes and Governing Law
Governing Law: These terms are governed by the laws of Western Australia, Australia. Disputes are subject to the exclusive jurisdiction of the courts of Western Australia.
Resolution: Contact us first at info@websiterescues.com.au. We’ll respond within 10 business days. If we can’t agree, either party may pursue resolution through Consumer Protection WA or the courts.
Time Limitation: We encourage claims to be raised promptly. Any applicable limitation periods are governed by Australian law.
11. Website Use
Content on our website is general information about website security. It is not legal, financial, or insurance advice. Our AI chat is informational and may not be perfectly accurate. We may link to external resources we don’t control.
12. Confidentiality
We treat your security assessment details, scan results, and vulnerabilities as confidential. We will not disclose your specific findings without your consent, except where required by law or in aggregate anonymised form.
13. Force Majeure
We are not liable for delays due to events beyond our reasonable control, including natural disasters, internet outages, hosting failures, government actions, pandemics, or cyber attacks on our own infrastructure.
14. Changes to These Terms
We may update these terms. Changes take effect when published. For significant changes, we’ll make reasonable efforts to notify active clients via email.
15. Severability
If any provision is found unenforceable, it will be limited to the minimum extent necessary, and remaining provisions continue in full force.
16. Entire Agreement
These terms, together with our Privacy Policy and Refund Policy, constitute the entire agreement between you and Website Rescues.
Contact
Website Rescues
Operated by David Bennett (Sole Trader) | ABN 32 562 031 256
Email: info@websiterescues.com.au
Phone: 0489 900 851
Address: Perth, Western Australia