Skip to main content

WordPress website development services in Melbourne

For Victorian businesses that need a com.au licence held correctly, a Privacy Act ready contact flow, and a site whose scheduling and reporting survive the October and April daylight saving changeovers.

Market context

Victoria's digital market by the numbers

Everything below is traceable to a public source. Nothing here is our own claim.

Victoria's business base

Sources: ABS Counts of Australian Businesses, including Entries and Exits, July 2021 to June 2025; ABS Australian National Accounts: State Accounts 2024-25; Australia Post eCommerce Report 2026.

Net new Victorian businesses in 2024-25 (ABS)0%

Victoria recorded a net increase of 16,486 actively trading businesses in 2024-25. Nationally there were 2,729,648 actively trading businesses at 30 June 2025.

Australian businesses turning over under $2 million (ABS)0%

91.5% of Australian businesses reported turnover below $2 million. The typical Melbourne WordPress buyer is an owner-run firm, not an enterprise IT department.

Australian households that shopped online in 2025 (Australia Post)0%

9.8 million households shopped online in 2025, about 82% of all households, spending a record $82.6 billion, up 14% year on year, with online reaching 24% of total retail spend.

Victoria's gross state product growth, 2024-25 (ABS)0%

Victoria's GSP grew 1.1% in 2024-25 while GSP per capita fell 0.8%. Growth is coming from more people, not more output per person.

The Australian rules that shape the build

Sources: .au Domain Administration Rules: Licensing; business.gov.au GST guidance; OAIC Notifiable Data Breaches statistics, January to June 2025; Privacy Act 1988 as amended.

Term of a com.au licence (.au Domain Administration Rules: Licensing)0%

A com.au licence runs for one to five years and is granted, not bought. The registrant must hold an Australian presence, for example an ABN or a company registered under the Corporations Act 2001, and must be a commercial entity.

GST charged on most goods and services sold in Australia (business.gov.au)0%

Registration is required once GST turnover reaches $75,000, or $150,000 for a non-profit, within 21 days of becoming aware the threshold will be crossed. A Victorian store therefore has to be able to switch tax display on without a template rebuild.

Australian notified data breaches caused by human error (OAIC)0%

The OAIC received 532 breach notifications between January and June 2025. 193 of them, 37%, came from human error, up from 29% in the previous six months. Most of that surface sits in forms and admin access, both of which are build decisions.

Date automated decision making must be disclosed in a privacy policy0%

A statutory tort for serious invasions of privacy commenced on 10 June 2025. From 10 December 2026, entities using personal information in automated decision making that could affect rights or interests must describe that use in their privacy policy.

The Victorian digital economy

Melbourne is the growth engine of the state, and Victoria's technology sector now competes for the same talent as software firms.

$36B
Victorian tech sector contribution (ACS Australia's Digital Pulse 2025)
300,400
Victorian tech workers (ACS Australia's Digital Pulse 2025)
5,435,590
Greater Melbourne residents at 30 June 2025 (ABS Regional Population)
7,121,900
Victorian residents at 31 December 2025 (ABS)
$99,142
Average advertised ICT salary in Australia (SEEK, August 2026)

Greater Melbourne grew by 105,030 people in 2024-25, a 2.0% rise and the largest absolute growth of any Australian capital, ahead of Sydney at 75,230 and Brisbane at 58,223 (ABS Regional Population 2024-25).

Melbourne and Brisbane do not share a clockOperational difference

Time zone rules per Tourism Australia's official time zones page and the Victorian daylight saving rule. Offsets against India Standard Time, UTC+5:30, are computed from those published offsets.

Comparison for Melbourne, Victoria
FeatureMelbourne, Victoria
Standard time
Daylight saving
Gap to our Delhi office (IST, UTC+5:30)
Standing weekly call
WordPress scheduled posts and cron
Backups and staged updates
Analytics day boundaries

Time zone discipline

Delivered from Delhi on Melbourne time

Dcrayon has no office in Victoria and no local sales rep, so every engagement runs remotely with one named lead who joins your calls and answers when something breaks. The overlap is real rather than nominal: Melbourne afternoons of roughly 1:30pm to 5:30pm under AEST, and 2:30pm to 6:30pm under AEDT, sit inside our Delhi morning of 9am to 1pm, because India Standard Time is UTC+5:30 against your UTC+10 or UTC+11. That gap moves, and that is the part which catches Melbourne sites out. Calendar invitations, WordPress cron, scheduled posts, backup windows and analytics properties are all pinned to the Australia/Melbourne city entry rather than a hardcoded offset, so the 2am changeover on the first Sunday in October and the 3am reversal on the first Sunday in April pass without a missed publish, a duplicated overnight job or a phantom dip in the daily numbers. If you need someone physically in Victoria for on-site workshops or photography, hire locally for that part and we will work alongside them.

What a Victorian WordPress build actually covers

The parts that separate a site that works in Australia from a template that merely looks Australian.

auDA compliant domain setup

com.au is a licence, not a purchase Under the .au Domain Administration Rules: Licensing, a com.au registrant must hold an Australian presence, for example an ABN or a company registered under the Corporations Act 2001, and must be a commercial entity. The domain has to be a Match or Acronym of your company, business or statutory name, or a Match or Synonym of what you provide. Where the only basis for Australian presence is an Australian trade mark, paragraph 2.4.5 requires an Exact Match to the words in that mark. Licences run for one to five years, so the renewal date, the registrant contact and the eligibility basis all belong in your handover documentation rather than in an agency inbox.

Plugin discipline and hardening

Fewer moving parts, deliberately Almost all disclosed WordPress vulnerabilities sit in third party plugins rather than core. We keep the plugin list short and justified, prefer core block editor patterns over page-builder sprawl, put admin behind two factor authentication, and document why each plugin exists. Anything that touches an enquiry form or a checkout is reviewed for what personal information it collects and where that record is stored, because that is the surface a Victorian owner has to answer for.

A Core Web Vitals budget

Numbers agreed before design starts Google's published thresholds are a Largest Contentful Paint within 2.5 seconds, an Interaction to Next Paint of 200 milliseconds or less, and a Cumulative Layout Shift of 0.1 or less, at the 75th percentile of real page loads. We agree those as a build constraint before a template is designed. Field data is then read on Melbourne day boundaries, so a changeover weekend does not distort the week you are judging the site by.

Privacy Act readiness

Built for where the law is heading Under the Privacy Act 1988 a business turning over $3 million or less is generally not covered, though health service providers, businesses that trade in personal information, Commonwealth contractors and credit reporting bodies are covered regardless of size. Two changes matter anyway: a statutory tort for serious invasions of privacy commenced on 10 June 2025, and from 10 December 2026 entities using personal information in automated decision making that could affect rights or interests must describe it in their privacy policy. We build the contact and consent flow so that a small Victorian firm which later crosses the threshold, or adds automated scoring to its enquiries, can meet those obligations without a rebuild.

WooCommerce set up for Australian tax

GST handled at the template level We configure tax display, tax invoices, shipping zones and rounding so the 10% GST shown on a product page, the invoice the customer keeps and your reporting all agree from the first order. Store time is set to Australia/Melbourne, so order timestamps, scheduled sales and daily revenue totals hold their place across both changeovers.

WCAG 2.2 Level AA as the baseline

The current Australian benchmark In April 2025 the Australian Human Rights Commission published updated guidelines on equal access to digital goods and services, naming WCAG 2.2 Level AA as the recommended benchmark under the Disability Discrimination Act 1992. They are guidance rather than legislation, but the Commission uses them when handling complaints, which makes AA the sensible line to build to from the first template rather than the one to argue about later.

Engagement

How a WordPress project runs with Dcrayon

No fixed timeline promises. What we commit to is a sequence, a named owner at each stage and a written record you keep.

  1. 1
    Audit against the rules that apply in Victoria

    We review your site or brief against your com.au licence basis under the .au Domain Administration Rules, your Core Web Vitals field data read on Melbourne day boundaries, the plugin inventory, and how enquiry forms collect and hold personal information. You get the findings in writing whether or not you engage us.

  2. 2
    Build with the Melbourne clock set first

    The site time zone is set to the Australia/Melbourne city entry before any content goes in, never a fixed offset, so scheduled posts, cron and backup windows survive both changeovers. Templates are then designed against the agreed LCP, INP and CLS targets, mobile first, with every plugin justified, and with copy, images and pricing in the CMS so your team can edit without a developer.

  3. 3
    Compliance, tracking and handover

    Privacy policy scaffolding and consent behaviour aligned to the 2025 and 2026 changes, accessibility checks against WCAG 2.2 AA per the Commission's guidelines, analytics reporting on Melbourne day boundaries, and for WooCommerce, GST configuration and test transactions. You receive admin ownership, documentation, the plugin register and your domain licence details.

  4. 4
    Maintenance with a named owner

    Ongoing patching, monitored uptime, staged updates tested before production, and a monthly written report. A large share of disclosed WordPress issues have no fix available on the day they become public, so maintenance is as much watching and mitigating as updating. Your standing review call is pinned to Australia/Melbourne, so it does not slide an hour twice a year.

Questions

WordPress questions Melbourne owners ask

The licence must be held by an entity with an Australian presence, so it goes in your name, not ours. Under the .au Domain Administration Rules: Licensing that presence can be an ABN or a company registered under the Corporations Act 2001, among other categories, and a com.au registrant must also be a commercial entity whose domain Matches or is an Acronym of the business name, or Matches or is a Synonym of what it provides. Where the only basis is an Australian trade mark, paragraph 2.4.5 requires an Exact Match to the words in that mark. We handle configuration and advise on eligibility, but the licence, and its one to five year renewal, stay yours.

Melbourne runs on AEST, UTC+10, for roughly half the year and switches to AEDT, UTC+11, from 2am on the first Sunday in October to 3am on the first Sunday in April. Delhi is on India Standard Time, UTC+5:30, all year. So the gap is 4 hours 30 minutes for part of the year and 5 hours 30 minutes during your daylight saving period. Brisbane, which never observes daylight saving, is a constant 4 hours 30 minutes away. We pin recurring meetings and scheduled tasks to the Australia/Melbourne zone rather than a fixed offset.

Generally a business turning over $3 million or less is not covered by the Privacy Act 1988, but exceptions include health service providers, businesses that trade in personal information, Commonwealth contractors and credit reporting bodies. Two developments narrow that comfort: the statutory tort for serious invasions of privacy commenced on 10 June 2025, and automated decision making transparency obligations apply from 10 December 2026. Take legal advice on your own position.

Ownership. The com.au licence, the hosting account and the database all sit in your name, and the content exports in a standard form, so a Victorian owner can change developer without rebuilding from scratch. The honest trade-off is that the same open plugin ecosystem is where nearly all WordPress security problems originate, which is why the plugin list is kept short, documented and maintained rather than left to accumulate.

We quote per scope after the audit, because the real cost driver is the number of templates, integrations and content types, not the page count. As a reference point for the alternative, SEEK put the average advertised Australian ICT salary at $99,142 in August 2026, before on-costs.

Yes, on WooCommerce. For a Victorian store we set GST at 10% with correct tax display and tax invoicing, configure shipping zones, and set store time to Australia/Melbourne so order timestamps, scheduled sales and daily revenue reports hold across the October and April changeovers. Checkout is measured against the same performance budget as the rest of the site, and the tax setup is built so crossing the $75,000 registration threshold is a settings change rather than a template rewrite.

Ask about your Melbourne project

Tell us the URL and what is not working. You will get a written response from a named person, not an automated sequence.

Get a free WordPress audit from Dcrayon

Send us your current site and we will return a written review covering your com.au licence basis, plugin risk, accessibility against WCAG 2.2 AA, Core Web Vitals field data, and whether your site time zone and scheduling are safe across the Victorian changeovers. You keep the findings.