Who We Are
This website is operated by Colourstone International Group Holdings Pty Ltd (“Colourstone,” “we,” “our,” or “us”).
Website URL꞉ https꞉//www.colourstone.com.au
Registered Business Address꞉ P.O. Box 1123, Blackburn North, VIC 3130, Australia
Phone꞉ +61 3 9890 4699
ABN/Company Number꞉ 83 606 098 471

What Personal Data We Collect and Why We Collect It
We collect the following categories of personal data꞉

• Contact information꞉: name, email address, phone number, mailing address
• Account data:꞉ username, password, purchase history, preferences
• Transaction data:꞉ order details, payment methods (processed securely via third-party gateways)
• Technical data꞉: IP address, browser type, operating system, cookies, analytics
• Media uploads꞉: if applicable, images you upload to the website
• Form data꞉: content submitted via contact or quote forms
• Marketing preferences꞉: if you’ve opted in to newsletters or special offers

We collect this data to꞉

• Provide and improve our products and services
• Process transactions and manage orders
•  Respond to inquiries and provide customer support
• Comply with legal obligations
• Analyse website usage and enhance user experience
• Send promotional and marketing content (if consent is given)

Comments
When visitors leave comments on the site, we collect the data shown in the comments form, the visitor’s IP address, and browser user agent string to help with spam detection.
An anonymised string (hash) from your email address may be provided to the Gravatar service. Their privacy policy is available at https꞉//automattic.com/privacy/.

Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS). Visitors can download and extract any location data from images on the website.

Contact Forms
If you use our contact or quote request forms, we collect your name, email, and any message submitted. This data is retained for customer service purposes for up to 12 months and is not used for marketing unless
you explicitly opt-in.

Cookies
We use cookies to꞉

• Keep users logged in
• Track site performance and visitor usage via analytics
• Remember preferences and session data
• Enable marketing and retargeting (e.g. via Facebook Pixel or Google Ads)You can control cookie settings through your browser preferences.

Analytics
We use Google Analytics and/or other analytics tools to understand visitor behaviour and improve our website.

Google’s privacy policy꞉ https꞉//policies.google.com/privacy
Users can opt out of tracking using Google’s opt-out browser add-on꞉ https꞉//tools.google.com/dlpage/gaoptout

Who We Share Your Data With
We may share your data with trusted third parties, including꞉

• Payment processors (e.g. Stripe, PayPal)
• Email marketing platforms (e.g. Mailchimp)
• Web hosting and cloud service providers
• CRM and analytics tools
• Contracted IT or marketing support servicesAll providers are required to comply with data protection laws. We do not sell or rent your personal information.

How Long We Retain Your Data

• Contact form entries꞉ 12 months
• Analytics data꞉ 12 months
• Customer purchase records꞉ 7 years (for tax and accounting compliance)
• Registered user accounts꞉ indefinitely, until manually deleted or requested

What Rights You Have Over Your Data
You may request to꞉

• Access your data
• Correct or update inaccurate information
• Delete your personal data
• Withdraw consent for marketingTo do so, please email us or call +61 3 9890 4699.

Where Your Data Is Sent
Data may be stored or processed outside of Australia, including by cloud hosting providers. We ensure appropriate safeguards such as data encryption, access controls, and secure processing agreements with
providers.

For visitors from the EU, we ensure compliance with GDPR through standard contractual clauses and other lawful mechanisms.

Contact Information
For any privacy-specific concerns or data access requests, please contact꞉
Privacy Officer
Colourstone International Group Holdings Pty Ltd
Address꞉ PO Box 1123, Blackburn North, Victoria, Australia. 3130.

How We Protect Your Data
We use꞉

• SSL encryption
• Firewall and malware protection
• Secure hosting
• Role-based access control
• Internal privacy and security training

Data Breach Procedures
In the event of a data breach, we have internal reporting and notification procedures aligned with the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988. Affected users will be notified without undue delay.

Third-Party Data
If we receive personal data from third-party sources (e.g. business directories, advertisers, or integrations), we ensure it is lawfully collected and used only for its intended purpose.

Automated Decision-Making and Profiling
We do not use personal data for automated decision-making or profiling related to credit scoring or marketing segmentation.

Industry Regulatory Disclosure Requirements
As a branded packaging and marketing service provider, we comply with the Australian Privacy Principles and, where applicable, international privacy frameworks.