Privacy Policy

NXDH Next Day Heroes is an Australian hosting company, ABN registered, based in Perth, Western Australia. Our infrastructure is hosted in Sydney, Australia. We operate this website at nxdh.com.au and provide game servers, web hosting, web design, developer VPS, and IT solutions to Australian clients.

For privacy enquiries, contact us at [email protected].

We collect only what is necessary to provide our services and comply with Australian legal obligations.

• Identity data: your name and business name, collected when you contact us or become a client.
• Contact data: your email address and, if provided, your phone number and physical address.
• Discord username: used for support ticketing and community management.
• Payment details: processed exclusively by Stripe and PayPal. NXDH never stores raw card numbers, bank account details, or PayPal credentials. We receive only transaction confirmation and payout summaries.
• Server log data: IP addresses appear in server access logs as part of normal web server and game server operation.
• Account credentials: Pterodactyl panel logins and similar service credentials are stored in our secure password manager (1Password) and never shared except via secure delivery to the client they belong to.

• Service delivery: to provision, configure, and maintain the services you have paid for.
• Billing: to generate invoices via Invoice Ninja and reconcile payments via Stripe and PayPal.
• Support: to respond to support tickets, Discord enquiries, and email requests.
• Legal compliance: to meet our obligations under Australian tax law (ATO, GST) and the Australian Privacy Act 1988.

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use your data for advertising. NXDH products and services are ad-free.

• Active client data is retained for the duration of your subscription plus 12 months after cancellation.
• Server access logs are rotated every 90 days.
• Billing records are retained for 7 years in accordance with Australian tax law.
• When you request deletion of your data, we will delete all non-legally-required records within 30 days and confirm this by email.

All data is stored on infrastructure physically located in Australia (Sydney, Contabo VPS). We do not transfer personal data overseas. Our security practices include SSH key-only authentication, UFW firewall, fail2ban brute-force protection, encrypted storage of credentials in 1Password, and SSL encryption on all data in transit.

Under the Australian Privacy Act 1988, you have the right to:

• Request a copy of all personal data we hold about you.
• Request correction of any inaccurate data.
• Request deletion of your data (subject to legal retention requirements).
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you believe your privacy has been breached.

To exercise any of these rights, email [email protected] with the subject line "Privacy Request". We will respond within 30 days.

The NXDH website (nxdh.com.au) does not use tracking cookies or third-party analytics cookies. Cloudflare, our DNS and CDN provider, may set a minimal technical cookie (_cf_bm) for bot detection purposes. This cookie does not contain personal information and expires at the end of your browser session.

We may update this privacy policy from time to time. The current version will always be published at nxdh.com.au/privacy.html. For material changes, we will notify active clients by email.