1. About these terms

These terms govern your use of the Website Rescues website and the security services we provide under the Website Rescues brand. By engaging our services you agree to these terms, read together with our: – Privacy Policy – Refund and Service Delivery Policy – For any engagement involving site access: the signed Security-Testing Authorisation and Data Processing Agreement (DPA)

We provide our services to businesses in Australia.

2. What we do — and what we explicitly do NOT promise

We provide WordPress and website security services: assessment (Free Scan, Deep Audit), remediation (Optimisation / Hardening), ongoing monitoring (Overwatch), and emergency recovery (Rescue).

We do not guarantee your website will never be compromised. No security provider on earth can make that promise. Specifically, we do not guarantee: – that we will detect every vulnerability – that we can attribute or prevent any particular attack – that monitoring will have uninterrupted uptime – that your site will be “secure”, “unhackable”, or invulnerable after our work

Who does the work. Our services are performed by David Bennett using automated and AI tools that work under his direction. Anything those tools do on your site is done on our behalf, is covered by these terms and your Security-Testing Authorisation, and passes the same checks and approvals.

What we DO promise is to perform the services with due care and skill, using our documented security process. Where you complete the full process and every issuance condition is met, you can generate an AI-Era Diligence Certificate from your dashboard.

The Certificate is evidence of diligence, not a warranty of invulnerability. It records a process (continuous change-control, independent baselines, forensic logging, a tested recovery path), never an outcome. It is Website Rescues’ own private assessment. It is not issued, approved or endorsed by any government body, industry scheme, standards body or insurer. We make no promises about third-party outcomes — courts, insurers or regulators. What we provide is documented evidence of the work done and what we measured.

A Certificate can only be generated from your own client dashboard, and only while Overwatch is connected and running on your site.

3. The disclosed purpose of our services

You acknowledge that the purpose of our services is to reduce risk and document due diligence — not to guarantee that a site is or will remain secure. Any description of our services on this website is to be read consistently with §2 above.

4. Your responsibilities

• Provide accurate information and confirm that you have lawful authority over the systems you ask us to work on (see §5)
• Maintain your own current, independent backups before any engagement begins
• Sign the Security-Testing Authorisation and DPA before we access your site — no signature, no access
• Keep your account credentials secure and follow reasonable security practices
• Notify us promptly if you become aware of any change to your systems or if your authority to authorise our work changes

5. Authority — who can authorise our work

Accessing a computer system without the authority of the person entitled to control it can be a criminal offence. So before we access anything:

• You confirm that you are the person entitled to control the website and systems named in the Security-Testing Authorisation, or that you are authorised in writing to act for that person.
• We confirm that we will access only the systems, in the manner and for the period, set out in the signed Authorisation. Anything outside it needs a new written authorisation first.

6. Payments, pricing and GST

• Prices are in Australian Dollars (AUD) and include GST
• One-off services (Free Scan, Deep Audit, Optimisation, Rescue): payment due within 14 days of invoice (or as stated on the quote / engagement letter)
• Overwatch subscriptions are billed monthly in advance
• Free Scan: no credit card required, no hidden charges, no automatic upgrade
• Card payments are processed by Airwallex (not Stripe)
• Refund mechanics: see the Refund and Service Delivery Policy

7. Cancellation

• Overwatch: cancel anytime by email to info@websiterescues.com.au. Cancellation takes effect at the end of the month you have already paid for; nothing further is charged. No cancellation fees.
• Cancelling Overwatch ends the live AI-Era Diligence Certificate on the day Overwatch ends — we can no longer attest to maintained state.
• For one-off services, see the Refund and Service Delivery Policy for cancellation and refund positions.

8. Consumer guarantees — Australian Consumer Law

Nothing in these terms excludes, restricts or modifies any guarantee, right or remedy you have under the Australian Consumer Law that cannot lawfully be excluded, restricted or modified.

Our services come with guarantees that cannot be excluded under the Australian Consumer Law. They must be provided with due care and skill, be reasonably fit for any purpose you made known to us, and be supplied within a reasonable time.

If a service fails to meet a guarantee: – where the failure can be fixed and is not major, you can ask us to fix it within a reasonable time; if we don’t, you can have someone else fix it and recover the reasonable cost from us, or cancel the service; – where the failure is major or can’t be fixed, you can cancel the service, or recover compensation for the drop in its value below the price you paid; – you may also be able to recover compensation for other reasonably foreseeable loss or damage caused by the failure.

9. Limitation of liability

Subject always to §8:

(a) No security outcome guarantee. We warrant that we will perform the services with due care and skill. We do not warrant any security outcome (“unhackable”, “secure”, “will not be breached”) — consistent with the disclosed purpose in §2 and §3.

(b) Limits. 1. Failure to meet a consumer guarantee. Because our services are business services, not of a kind ordinarily acquired for personal, domestic or household use, our liability for a failure to meet a consumer guarantee is limited, where the law allows, to supplying the services again or paying the cost of having them supplied again. This limit does not apply if it would not be fair or reasonable for us to rely on it. 2. All other liability. Our total liability for all other claims arising from an engagement is limited to the fees you paid for that engagement, or for Overwatch, the fees you paid in the 12 months before the claim arose.

(c) Indirect loss. To the extent the law allows, and except for liability for failure to meet a consumer guarantee, we are not liable for indirect or consequential loss, such as lost profits or lost revenue.

(d) Compromise that was already there, or caused by someone else. If your site was compromised before our engagement began, we are not responsible for that earlier compromise or its consequences. We are not responsible for loss caused only by the act of someone other than us (for example an attacker, your host, or a plugin vendor), except where it happened because we failed to take due care and skill. Our obligations remain to do our own work with due care and skill, handle data as the DPA says, and cooperate with any breach-notification requirements.

(e) What is never limited. Nothing in this §9 limits liability for fraud, for death or personal injury caused by our negligence, or any liability that cannot lawfully be excluded or limited.

10. Intellectual property

Reports, the AI-Era Diligence Certificate, and our security methodologies remain the intellectual property of David Bennett t/a Website Rescues. You receive a licence to use the deliverables for your own business purposes. You may not resell our deliverables or represent them as your own work product.

11. Confidentiality

We treat your site credentials, technical findings, and business information as confidential. We will not disclose them to third parties other than as stated in these terms, the Privacy Policy, and the DPA.

You agree to keep confidential any non-public information about our methodologies, tooling, or pricing that we share with you during an engagement.

12. Governing law and jurisdiction

These terms are governed by the laws of Western Australia and the Commonwealth of Australia. You and we submit to the non-exclusive jurisdiction of the courts of Western Australia. This does not take away any right you have under the Australian Consumer Law, which applies wherever in Australia you are.

13. Re-establishing a Certificate

Your AI-Era Diligence Certificate ends if Overwatch is cancelled, or if your site is changed outside the Website Rescues pipeline. To re-establish it, a full re-assessment and re-hardening pass is needed. We will quote the fee in writing first. Nothing is charged unless you accept the quote.

14. Changes to these terms

We may update these terms. The version in force when you start an engagement applies to that engagement. For a running Overwatch subscription, we will email you at least 30 days before a material change takes effect. If you don’t want the change, you can cancel before it takes effect: no cancellation fee, and a pro-rata refund of any period you have prepaid beyond that date. A change never reduces what you get for a period you have already paid for.

15. Contact

Phone: 0489 900 851