Stoneglow Digital
Privacy policy
Who we are
Stoneglow Digital (ABN 98 279 841 620) is a web design and development studio based in Brisbane, Queensland, Australia. We build websites and digital systems for clinics, small businesses and ecommerce brands across Australia. You can reach us at hello@stoneglowdigital.com.au.
This policy explains what personal information we collect through this website, why we collect it, who else handles it and what you can ask us to do with it. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
What we collect
Apart from the analytics described under Cookies and analytics, we collect personal information only when you choose to give it to us. The main way we collect it is through the forms on this site, which ask for:
- Your name
- Your email address
- Your phone number, where you choose to provide it
- Your business or clinic name
- A description of your project, including timing and budget context so we can respond usefully
We do not collect payment card details, government identifiers, or sensitive information as that term is defined in the Privacy Act 1988 (Cth). If your enquiry describes clinical services, please keep it at the level of the business rather than any individual patient.
The free website audit
The website audit tool takes a website address, reads the public page at that address and produces a written review on screen. It does not sign in to anything, and it only reads pages that are already public.
If you ask us to email the report, we collect your email address for that purpose. The address you submit and the text of the page are sent to an AI model through our hosting provider's AI gateway so the review can be written. We do not use audit submissions to train any model.
Please only run the tool on a website you own or are authorised to review.
How we use it
We use the information you submit to:
- Respond to your enquiry
- Understand the scope of potential work and prepare a proposal
- Deliver the services we have agreed and keep proper project records
- Follow up if you have asked us to
We do not use your information for marketing without your explicit consent, and we do not sell it or share it with third parties for advertising.
Who else handles it
Running a website means using service providers, and some of them necessarily handle what you send us:
- Vercel, which hosts this website and processes standard technical logs such as IP address, browser type and the pages requested
- Resend, which delivers form submissions and any report you ask us to email
- The AI model provider used by the website audit tool, reached through our hosting provider's gateway
- Google, which provides Google Analytics 4 and receives the usage information described under Cookies and analytics
- Microsoft, which provides Microsoft Clarity and receives the usage information and session replays described under Cookies and analytics
Each provider handles your information under its own privacy terms, and only for the purpose we have engaged it for. Form submissions arrive in our studio email. This website does not keep a separate customer database of enquiry data.
Overseas disclosure
Our hosting, email delivery, AI and analytics providers are based in the United States and operate infrastructure in several countries, so information you submit is likely to be stored or processed outside Australia. By submitting a form on this site you consent to that disclosure.
We choose established providers, we send them only what is needed to do the job, and we do not disclose your information to anyone else overseas.
How long we keep it
We keep email correspondence and project records for as long as we reasonably need them to manage our relationship with you and to meet our tax and record-keeping obligations, which is generally seven years for anything with a financial dimension.
You can ask us to delete information we hold about you at any time, and we will do so unless we are required to keep it.
Cookies and analytics
We use two analytics tools, Google Analytics 4 from Google and Microsoft Clarity from Microsoft, to understand how visitors use this website so we can improve it. When you visit, they collect:
- The pages you view, the page that referred you and how long you stay
- Your device type, browser, operating system and screen size
- Your approximate location, such as your city or country, worked out from your IP address
- What you do on the site, such as the buttons and links you click, whether you send a form, and the website address you enter in the audit tool
Clarity also records clicks, scrolls and mouse movement. It uses them to produce session replays, which let us see how a visit moved through the site, and heatmaps, which show where visitors click and scroll on each page. Clarity masks anything you type into a form field and anything you choose from a drop-down menu, so that content is never sent to Microsoft.
We do not send your name, email address or phone number to either tool. Google Analytics uses your IP address to estimate your location and does not store it.
Both tools use cookies to recognise a returning browser and to connect the pages viewed in one visit:
- Google Analytics sets _ga, which tells one browser from another, and _ga_NHZRG49CM4, which keeps track of the current visit. Both last up to two years.
- Clarity sets _clck, which keeps a Clarity ID for your browser for up to a year, and _clsk, which links the pages you view in one visit into a single session replay.
Clarity can also set cookies on Microsoft's own domains, named CLID, MUID, MR, SM and ANONCHK. Microsoft uses them to recognise the same browser across its own sites and other sites that use Clarity, and describes MUID as supporting its advertising, analytics and other operations. Microsoft handles these under the Microsoft Privacy Statement.
Google and Microsoft are United States companies, and what these tools collect is processed and stored on their systems outside Australia. Microsoft keeps Clarity session replays for 30 days, apart from a random sample and any we mark to keep, which it holds for up to nine months.
You can block or delete these cookies in your browser settings at any time. To stop Google Analytics measuring your visits to any website, install the Google Analytics Opt-out Browser Add-on. Microsoft's guidance for Clarity is to opt out through the Digital Advertising Alliance opt-out page by selecting Microsoft, and Clarity also supports the Global Privacy Control signal in browsers that offer it.
Keeping it secure
The site is served over HTTPS, form submissions are transmitted over encrypted connections, and access to our studio email and project files is restricted to the people who need it and protected by multi-factor authentication.
No system is perfectly secure. If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.
Your rights
Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles you can:
- Ask what personal information we hold about you
- Request access to that information
- Ask us to correct anything that is inaccurate or out of date
- Ask us to delete it, where we have no legal obligation to keep it
- Withdraw consent you have previously given
Email hello@stoneglowdigital.com.au to exercise any of these. We will acknowledge your request within five business days and respond in full within 30 days. There is no charge for making a request.
Complaints
If you think we have mishandled your personal information, email hello@stoneglowdigital.com.au with the details. We will acknowledge your complaint within five business days, investigate it, and write to you with the outcome within 30 days.
If you are not satisfied with how we have handled it, you can take the complaint to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
Third-party links
This site links to external websites, including client sites, tools we recommend and social platforms. We are not responsible for the privacy practices of those sites, and we would encourage you to read their own policies.
Changes to this policy
We may update this policy from time to time. Material changes will be noted by updating the date at the top of this page. If a change materially affects how we handle information you have already given us, we will tell you directly.
Contact
Questions about this policy, or about anything we hold, go to hello@stoneglowdigital.com.au.