Our privacy policy

This Policy applies to information collected through:

• our website https://www.sandstonecompany.com.au ("Site"), which is designed and hosted on Webflow;
• any ordering portal, quotation form or contact form embedded on the Site;
• analytics and advertising services we use, including Webflow Analyze, Google Analytics and Google Ads.

It does not cover third‑party websites linked from our Site. We encourage you to review the privacy policies of any external sites you visit.

We may collect:

• Contact & Identity Data – name, company name, email address, phone number, postal address (collected via quote request forms, “Talk to us” chat, email and phone).
• Project & Transaction Data – job location, block quantities, engineering drawings, invoices and payment status (collected during quotes, invoices and on‑site consultations).
• Device & Usage Data – IP address, browser type, device identifiers, pages visited, time on page (collected through cookies and tracking pixels via Webflow Analyze, Google Analytics and Google Ads).

We do not knowingly collect sensitive information (e.g. health data). If it becomes necessary, we will obtain your consent or comply with APP 3 exceptions.

We process your information to:

1. Provide quotes, supply materials and deliver services you request;
2. Process payments and maintain accounting records;
3. Respond to enquiries or complaints;
4. Improve our Site through analytics, heat‑mapping and user‑journey insights;
5. Run marketing and remarketing campaigns in Google Ads.
6. Comply with legal obligations and resolve disputes.

We rely on the following legal bases (per APP 6): performance of a contract, legitimate business interests, and your consent where required.

We share your information only when necessary:

• Webflow, Inc. (USA) – website hosting, form handling and Webflow Analyze (protected by standard contractual clauses and ISO 27001 data centres).
• Google LLC (USA) – analytics and advertising cookies (Google complies with APRA CPS 234 mapping and SCCs).
• Government agencies – QBCC compliance and taxation, when required by law.

We do not sell or rent personal data to third‑party marketers.

Our service providers (Webflow and Google) may store data on servers located in the United States, EU or other jurisdictions. We take reasonable steps to ensure overseas recipients comply with APP 8, including contractual obligations and due‑diligence reviews.

We implement technical and organisational measures such as TLS encryption, role‑based access, MFA for staff accounts and regular security reviews. We keep personal information only as long as necessary for the purpose collected or as required by taxation and building‑industry laws (usually 7 years).

Under the APPs you may:

• Access the personal information we hold about you;
• Request correction of inaccurate or incomplete data;
• Withdraw consent for marketing at any time;
• Complain if you believe we have breached your privacy

We will respond within 30 days.

• 8.1 Webflow Analyze - Our Site uses Webflow Analyze to monitor page performance, heat-maps and form conversion rates. Data is pseudonymised and aggregated.
• 8.2 Google Analytics - We employ Google Analytics 4 with IP anonymisation. GA4 sets first-party cookies to understand user interactions. At this time, there is no user-facing opt-out for these analytics.
• 8.3 Google Ads & Remarketing - We utilise Google Ads conversion tracking and remarketing tags to display relevant ads on Google Search and Display Network. While Google may use cookies to serve ads based on your past visits to our Site, we do not currently provide a direct opt-out from this tracking.
• 8.4 Cookie Controls - While you may disable cookies via your browser settings, doing so may affect website functionality including form submissions and quote requests.

Our Site and services are intended for individuals aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us information, please contact us and we will delete it.

If you have questions or believe we have breached your privacy, contact our receptionist:

Sandstone Company Civil Pty Ltd
ABN 40 642 550 21
Email: info@sandstonecompany.com.au
Phone: 0407 727 116

We will investigate and respond within 30 days. If you are not satisfied, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC): https://www.oaic.gov.au.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “Last updated” date. Continued use of the Site after changes indicates acceptance of the updated Policy.

By using our Site or engaging our services, you acknowledge you have read and understood this Privacy Policy and consent to our collection and handling of your information as described above.