Cornerstone Stores (“we”, “us”, “our”) operates the website at cornerstonestores.com and manages a small portfolio of marketing tools that support the boutique retail precinct at 570 Gold Coast Highway, Tugun QLD 4224, Australia. This policy explains what information we collect, why we collect it, and how we look after it.
We comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles.
1. What we collect
When you visit our website
- Standard server / analytics data (IP address, browser type, device, pages viewed, referrer, timestamps) collected via Google Analytics 4 and Cloudflare.
- Anonymous performance and content-engagement metrics.
When you use our contact form
- Your name, email address, subject and message.
- Submissions are sent securely via Cloudflare Email Sending to [email protected] and stored only in our regular email inbox.
When you interact with our tenants’ social channels
- If you follow, comment on, or message one of our tenants on Instagram or Facebook, that interaction is governed by Meta’s privacy policy and the tenant’s own practices.
- We do not collect or store information about individual followers or engagers.
2. Tenant marketing automation
We operate a small internal tool that, with each tenant’s explicit consent, republishes a tenant’s own public Instagram posts to that tenant’s own Google Business Profile listing. This helps our tenants maintain a consistent, up-to-date presence on Google Maps and Search.
This tool:
- Reads only public posts from tenant Instagram accounts that have explicitly added our designated administrator email to their Meta Business assets.
- Reposts only the tenant’s own original content to the same tenant’s own Google Business Profile.
- Does not collect, store, or process data about individual Instagram followers, commenters, or any other end users.
- Does not share tenant content with third parties beyond the tenant’s own Google Business Profile.
- Stores only operational metadata (post IDs already published, timestamps, error logs) for the purpose of avoiding duplicate posts and diagnosing failures.
A tenant may withdraw consent at any time by removing our administrator email from their Meta Business and Google Business Profile assets, after which the tool will automatically lose access.
3. How we use information
- To respond to enquiries you send via the contact form.
- To understand how our website is used and to improve its content and performance.
- To operate the tenant marketing automation described above.
- To comply with our legal obligations.
We do not sell or rent personal information. We do not use your information for profiling or automated decision-making.
4. Third-party services
We rely on a small number of reputable providers, each of which has its own privacy policy:
- Cloudflare — hosts our website and processes contact-form submissions.
- Google Analytics 4 & Google Business Profile — website analytics and business listings.
- Microsoft 365 — hosts the [email protected] mailbox.
- Meta (Facebook & Instagram) — tenant social channels and our shared platform listings.
5. Cookies
We use a minimal set of cookies, primarily for analytics. You can disable cookies in your browser at any time without losing access to the public parts of the website.
6. Data retention
- Contact-form emails are retained in our inbox until manually archived or deleted.
- Analytics data is retained per Google Analytics 4 defaults (currently 14 months).
- Tenant automation logs are retained for 90 days, then deleted.
7. Security
We use industry-standard measures — HTTPS across the site, encrypted email transit, scoped API tokens, and limited admin access — to protect the information we hold. No system is perfectly secure; we will notify affected individuals if we become aware of a notifiable data breach.
8. Your rights
You may at any time:
- Request access to the personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion of your information (subject to any overriding legal obligation).
- Complain to the Office of the Australian Information Commissioner (oaic.gov.au) if you believe we have mishandled your information.
To exercise any of these rights, email [email protected].
9. Children
Our website and services are not directed at children under 16. We do not knowingly collect personal information from children.
10. Changes to this policy
We may update this policy from time to time. Material changes will be reflected in the “last updated” date at the top of this page.
11. Contact
Privacy questions or requests:
Cornerstone Stores
570 Gold Coast Highway, Tugun QLD 4224, Australia
[email protected]
