Privacy Policy: Foundational Operations Support

1. Introduction and Contact Details

Cornerstone Operations Co (referred to as "we," "us," or "our"), operated by Jake Spence (Sole Trader T/A Cornerstone Operations Co), is committed to protecting the privacy of your personal information.

We manage your personal information in an open and transparent way, in accordance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth).

This Policy sets out how we collect, hold, use, and disclose your personal information.

Our Contact Information:

• Business Name: Cornerstone Operations Co

• Primary Contact: Jake Spence

• ABN (if applicable): 77559791231

• Email Address: admin@cornerstoneoperations.com.au

• Postal Address: 2/290 Boundary Street, Spring Hill, QLD 4000

• Policy Effective Date: October 19, 2025

2. The Personal Information We Collect

We only collect personal information that is reasonably necessary for us to provide our Foundational Operations Support services and related functions.

The types of personal information we may collect include:

• Identity Data: Your full name, job title, and company name.

• Contact Data: Email address, phone number, and mailing address.

• Business Needs Data: Information regarding your business operations, specific administrative pain points, and requirements (e.g., your answer to the qualifying question in our Facebook Lead Form).

• Technical Data: Your IP address, browser type, operating system, and data collected via cookies when you use our website or interact with our online services.

• Usage Data: Information about how you use our website and interact with our Meta advertisements (e.g., which ad clicked on).

3. How We Collect Your Information

We collect personal information directly from you when you:

• Complete a Lead Form on the Meta (Facebook/Instagram) or LinkedIn platforms.

• Engage with us directly via our website (e.g., submitting a contact, quote, or booking form).

• Communicate with us via phone or email.

We also collect information indirectly from third parties, including:

• Meta Platforms (Facebook/Instagram): When you complete an Instant Form, Meta provides us with the contact details you provided and the answer to your custom qualification question.

• Website Analytics Providers (e.g., Google Analytics): Technical and Usage Data about your visit to our website.

4. Purposes of Collection and Use

We collect, hold, use, and disclose your personal information for the following primary purposes:

• To Provide Services: To assess your eligibility for our Foundational Operations Support tiers, prepare a tailored proposal, and deliver the specific administrative and operational support services you engage us for.

• To Follow Up on Leads: To send you the requested Retainer Guide and to contact you directly via phone or email to discuss the specific administrative burden you highlighted in your form submission.

• Direct Marketing: To send you updates about our services, new retainer packages, or industry insights. We only market to you if we have your consent and we provide a clear way to unsubscribe.

• To Improve Our Services: For internal administrative, marketing, planning, and research purposes, including analysing which of our advertising campaigns are most effective.

• Legal Compliance: To comply with our legal and regulatory obligations under Australian law.

5. Disclosure to Third Parties

We may disclose your personal information to the following third parties:

• Social Media & Lead Generation Platforms: Your interaction with our Lead Ads on Meta Platforms (Facebook/Instagram) and LinkedIn means those platforms collect and process information according to their own Privacy Policies.

• Business Clients: Where we are acting on behalf of a client to deliver our Foundational Operations Support services (e.g., coordinating communication between a client and their supplier), we may disclose necessary personal information to that client as part of fulfilling our obligations.

• Transport/Freight Providers: Where necessary to perform your requested Foundational Operations Support services, such as coordinating shipments, bookings, or providing necessary documentation to freight carriers, transport companies, or shipping agents.

• Service Providers: External contractors who assist us with our business operations, such as cloud storage providers, data processing platforms, or IT services. These providers are strictly limited in their ability to use your data only for the functions we instruct them to perform.

• Overseas Disclosure: We use external services for data storage and processing which may be located outside of Australia (e.g., in the USA, Singapore, or other regions). By providing us with your personal information, you consent to this disclosure.

We do not sell your personal information to any third parties for their independent marketing use.

6. Access, Correction, and Complaints

Anonymity and Pseudonymity

Where lawful and practicable, individuals have the option of dealing with us anonymously or by using a pseudonym. However, due to the nature of providing Foundational Operations Support services, we will generally need to collect personal information from you to deliver our services.

Access and Correction

You have a right to:

• Request access to the personal information we hold about you.

• Request that we correct or update that information.

To request access or correction, please contact us using the email address provided in Section 1.

Complaints

If you believe we have breached the Australian Privacy Principles, please submit a written complaint to the email address in Section 1.

• We will acknowledge your complaint and respond to you within 30 days.

• If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

7. Data Security and Retention

We take reasonable steps to protect the personal information we hold from misuse, loss, and from unauthorised access, modification, or disclosure.

We will only retain your personal information for as long as we need it for the purposes listed above, or as required by law (e.g., financial and client records are typically held for 7 years for Australian tax compliance).

Data Breach Management: In the event of an eligible data breach that is likely to result in serious harm, we will comply with the mandatory Notifiable Data Breach (NDB) scheme obligations under the Privacy Act.

8. Cookies and Website Tracking

Our website uses 'cookies' and other similar technologies (like the Facebook Pixel) to analyse site traffic and assist with our marketing efforts. You can choose to accept or decline cookies by modifying your browser settings. Declining cookies may affect website functionality.