What I need from you to fix your website

Why you are reading this

You asked me to fix the problems the free website check found, through Fix it all (from $300, no GST charged). Fix it all covers the standard fixes the check finds on WordPress, Wix, Squarespace, Shopify and Webflow. Anything bigger gets a written scope of work and a fixed quote first.

Anything bigger, like a leaked key, a hacked site or a rebuild, is quoted first. I need your OK before I start it.

What I need from you

1. Invite me. Do not share your login.

   Most platforms let you add me as my own user. I set my own password and my own two step sign in, which is a code from an app on my phone. This is always my first ask.

2. Never send me a password.

   Not by email, text or chat. Not even once. If a platform really has only one login, see the section on single logins below.

3. Give me the smallest access that does the job.

   The list below starts with the lowest level. I will tell you if a fix needs more.

4. You stay the owner.

   Never make me the owner of your site, domain or accounts, and never add my card for billing.

Access by platform

You only need the ones on your quote. If you are not sure where your website lives, tell me and I will help you find out.

1. WordPress

   Make a new user in my name (Users, then Add New) with the Administrator role. WordPress needs this level to update plugins and settings. I only ask for hosting access if a fix needs files or server settings.

2. Wix

   Invite me as a collaborator (Settings, then Roles and Permissions) with the Website Manager role. I only ask for the Admin role if a fix needs domain or billing settings, and I ask first.

3. Squarespace

   Invite me as a contributor (Settings, then Permissions and Ownership). Website Editor is enough if the fixes are only content. Most Fix it all jobs need Administrator, because of site settings and code injection.

4. Shopify

   Add me as a staff member with only Themes, Online Store preferences and Apps turned on. Or approve my collaborator request with the same limits. I only ask for the Domains permission if a fix is about your domain.

5. Webflow

   Invite me to the site as a Designer with Can publish turned on. I only ask for Site manager if I need site backups or settings.

6. Hosting (cPanel, SiteGround, VentraIP and similar)

   Add me as a user or collaborator if your host offers it. If it does not, see the section on single logins below.

7. Domain and DNS

   Use your registrar's delegate or team access. Or invite me to Cloudflare with the DNS role for this one domain. If neither is possible, we make the change together on a short call while you stay signed in.

8. Google Search Console

   Add me as a user with Full permission. Never as Owner.

9. Google Analytics

   Add me with the Editor role on this one property. Viewer is enough if I only need to look.

10. Code repository (GitHub and similar)

    Invite me as a collaborator on this one repository with Write access. Or I send changes for you to approve. Never admin of your whole organisation.

What I do not need

• Your own email password, or any login you use for yourself.

• Your two step sign in codes. I will never ask for one. If anyone asks you for a code and says it is me, it is not. Tell me straight away.

• Banking, card or payment details, or access to payouts or billing.

• Ownership of your site, domain, hosting or any account.

• Your customer list, orders or form entries, unless a fix truly needs them and you agree first.

• Passwords for anything that is not on your quote.

When a platform has only one login

A few small hosts and tools allow one login and nothing else. If that is true, and only then:

1. Tell me in writing

   Confirm that a second user is not possible.

2. Share it safely

   Use your password manager's secure share or a one time link. Never email or chat.

3. I change it

   I change the password when I first sign in, so the old one stops working. I turn on two step sign in with a method you control.

4. I give it back

   When I finish, I hand the login back and ask you to change the password again.

If you send a password by mistake, I will not reply with it quoted. I will ask you to change it within one business day, delete my copy, and show you the safe way for next time. No telling off.

Who gives the OK

It must be someone who owns the website and domain, or who has the owner's authority to let me in. That is usually the business owner, a director or a manager the owner has named.

If a web developer or IT contact does the clicking, the owner still gives the OK. I will not act on a verbal yes.

What I do with your access

1. Only the fixes on your quote

   Nothing else. If I spot something new, I tell you and quote it. I never fix it without your OK.

2. A backup first

   Before I change anything, I take a backup or restore point. If there is no way back, the change does not start. Please keep your own backup too.

3. A change log

   I write down every change I make, when, and why. You get a copy when I finish.

4. Ask before anything risky

   If a fix could take your site offline, change how it looks, or affect your email or domain, I tell you first and agree a time with you.

5. Check the result

   When I finish, I run the website check again so you can see what changed.

How long I keep access

I ask for access for the days I am doing the work, and I set an end date the day you give it. For a Fix it all job that is usually no more than 14 days. You can remove my access at any time, for any reason, without telling me first.

When I finish

1. I remove my access

   I remove my own users and sign out of every system the same business day I finish. If you ask because of a security worry, I do it within four hours.

2. I cancel what I made

   I cancel any keys or app passwords I created for the job.

3. I delete my copies

   I delete any working copies of your files or data within 30 days, or hand them back to you if you prefer.

4. You check your end

   I ask you to change any password that was shared with me and to check my user is gone from your side.

5. I confirm in writing

   I name each system and the date my access ended.

I keep a small business record of the job: the quote, the invoice, your confirmation and the change log. Australian law requires me to keep these, usually for seven years. They never include your passwords.

How I protect your access

1. One safe place

   Any login I hold lives in my encrypted business password manager. Never in email, chat, text messages, shared documents, screenshots or code.

2. Only me

   I am a sole trader. Only I, Jacob Roberts, can see or use your access. If anyone else ever needs to help, I will ask you first, in writing.

3. No sharing

   I do not give your logins or data to anyone else. I only use the tools needed to do the work, like your own website platform. I never put a password into an AI tool.

4. Two step sign in

   I turn it on for every account I hold, wherever the platform allows it.

5. Privacy

   I follow the Australian Privacy Principles as my standard, as set out in the Bots & Pieces Privacy Policy.

If something goes wrong

• A security problem

  If I find or suspect that your access or data has been exposed, I tell you without delay. I tell you what I know, what I have done to stop it, and when you will hear from me next. If personal information could be involved, I help you work out whether you need to tell anyone.

• My change breaks something

  I roll it back to the restore point straight away at no cost, and tell you what happened.

• Something else breaks it

  A problem caused by your host, a platform update, a plugin, or a change someone else made is not covered by Fix it all. I will help you find the cause and quote any repair.

• Faults that were already there

  I fix the items on your quote. I cannot promise your site is free of every other fault, or that a fix will stay fixed if the site is changed later.

If something breaks after my work, email or call me. I aim to reply the same business day, Adelaide time. That is a target, not a guarantee. Nothing on this page takes away your rights under the Australian Consumer Law.

Your OK

When you ask for Fix it all, you tick one box. The box is your permission for me to start once the quote and invoice are done. For bigger quotes, you reply I agree to my email instead.

By ticking the box, or by replying I agree, you confirm that:

• You own the website, or you have the authority to let Bots & Pieces access it for the owner.

• You authorise Bots & Pieces (Jacob Roberts, ABN 18 813 409 919) to access and change that website and the systems on your quote, only to do the fixes on the quote.

• You have the right to give this access, and giving it does not break any agreement you have with someone else.

• Your website platforms have their own terms, and you will keep to them. Inviting me as my own user is the way most platforms ask you to do this.

• You have read this page.

I keep a note of your name, your email, the site, the wording you agreed to, and the date and time. I do not keep your IP address. Nothing is changed on your website until I have confirmed what is included and the invoice is paid.

Questions

Email Jacob.Roberts@botsandpieces.com.au or call 0416 591 313. Bots & Pieces, Adelaide, South Australia. Australian clients only.