What you're agreeing to.

Last updated: 2026-05-19

The basics

These terms apply when you engage SDG Services for an audit, managed care, or project work. By paying an invoice or commissioning a service in writing (email is fine), you agree to these terms for that engagement.

What we'll do

We'll deliver the service you commissioned, to a professional standard, in the timeframe agreed. For audits, that's 48 hours from confirmed payment unless we tell you otherwise upfront. For managed care, that's the included activities listed on our pricing page for the tier you're on.

What you'll do

Pay the invoice within 14 days of receipt. For managed-care clients, pay monthly in advance. Tell us promptly if anything we need to know changes (your domain, your hosting account, key staff, your privacy/security obligations).

For audits we don't need credentials. For managed care we do — typically a hosting account login or a CMS admin account. We treat those as highly sensitive (encrypted at rest, accessed by Scott only, revoked immediately when the engagement ends).

The audit credit

When you commission an audit and subsequently engage us for managed care within 90 days, the audit fee is 100% credited against your first managed-care invoice. The credit doesn't expire within those 90 days and doesn't apply to anything other than managed-care fees.

Cancellation

Audits: we issue an invoice when you commission the audit. If you change your mind before we start work, we'll refund 100%. If you change your mind after we've started, we'll refund the unused proportion of our time. Audits are typically delivered within 48 hours so the window is small.

Managed care: month-to-month after the first 12 months. Compliance-tier sectors have a 12-month minimum term — if you cancel within the first 12 months you forfeit any unused portion of the audit credit but no other penalty applies.

Projects: per the project quote.

Intellectual property

You own everything we deliver to you (audit PDFs, code, content, configurations). We retain the right to refer to having worked with you (as a logo on this site, in case studies, etc.) unless you ask us not to. Any case study mentioning specific findings gets your written approval first.

Confidentiality

We treat anything that's not publicly available about your business as confidential. The audit findings themselves are provided to you only — we won't share them with anyone else without your written permission.

Limitation of liability

Nothing in these terms excludes liability under the Australian Consumer Law. Subject to that, our total liability for any claim arising from work done for you is limited to the fees paid in the preceding 12 months.

We don't guarantee that fixing things we find will produce any specific business outcome (more bookings, higher search rank, etc.). We do guarantee that the audit itself is delivered as described and that managed-care activities are performed each month.

What we're not

We're not a regulator, a law firm, a registered tax agent, or a qualified penetration tester under the OSCE/OSCP framework. The audit is independent professional advice on observable website issues; it isn't a legal opinion on compliance. Where compliance questions arise we recommend you take the audit findings to your own legal advisers.

Disputes

If something goes wrong, email [email protected] first. We'll respond within five business days and try to resolve it directly. If we can't, the dispute is governed by NSW law and the NSW courts have jurisdiction.

Changes to these terms

For active engagements, the terms in force at the time of commission apply for the duration. For new engagements, the current published version applies. We don't retroactively change terms on existing customers.