Privacy Policy

In brief

• We collect what you give us on our forms: your name, email, phone number, and what you tell us about your goals. Nothing more is collected about you behind the scenes.
• We use it to give you the Stonehhart Score, to respond to you, and to contact you about your property goals. We do not sell it, and we do not use it for advertising.
• There is no analytics or advertising tracking on this site. None.
• It is held in our own systems, run on Cloudflare and Google, and if you book a call, on Cal.com. Some of those servers are outside Australia.
• You can ask to see it, fix it or delete it at any time by emailing admin@stonehhart.com.au.

The rest of this page says the same things in full.

Who we are

In this policy, we, us and Stonehhart mean Mexes Advisory Pty Limited (ABN 87 669 781 159), trading as Stonehhart. You can reach us at admin@stonehhart.com.au, or by post at Suite 205 / 7 Maitland Place, Norwest NSW 2153.

We handle personal information in accordance with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

As a small business, we are not currently required by that Act to do so. We have chosen to anyway. You should not have to work out which rules apply to which of the businesses holding your information, and we would rather hold one standard than two.

What we collect

We only collect what we need for the thing you asked us to do.

• When you request access to the Stonehhart Score: your name, email address and phone number, and a record that you agreed to our disclaimer. That record includes which version of the disclaimer, terms and this policy you saw, the time you agreed, and the IP address and country your request came from. We keep those last two so we can show, if it is ever questioned, that the agreement was real and where it was made.
• When you download our guide: your name and email address.
• When you contact us or book a call: your name, contact details, where you are in your property journey, and whatever you choose to tell us about your circumstances and goals.
• If you become a client: the further information we need to advise you, which we will explain at the time we ask for it.
• When you look up suburbs on the Score: which suburbs you looked at, up to the last five, with the score you were shown and when. This goes on your enquiry record so that the person who calls you knows what you were looking at, rather than asking you to repeat it. It is recorded only after you have agreed to the notice that says so, on the form or when you sign in.
• If you arrived through a link one of our team shared: which team member's link it was. We keep that so the person whose article, video or post you found can be the one who gets in touch, rather than a stranger to it. It tells us nothing else about you.

We do not collect sensitive information (such as health or biometric information) and ask you not to send it to us. We do not collect government identifiers such as a driver licence, passport or tax file number through this site. If we ever need to verify your identity as a client, we will tell you what we need and why at the time.

If you send us information we did not ask for and would not have been allowed to collect, we will destroy or de-identify it, unless the law requires us to keep it.

What we do not collect

There is no analytics on this site, no advertising tracking, and no third-party pixel or tag. We do not build a profile of the pages you visit, and we do not buy information about you from anyone. The one thing we do record about your use of the site is the suburbs you look up on the Score, as described above, and only after you have agreed to it. If we ever add analytics we will say so here first, and it will be the kind that counts visits without identifying visitors.

How we collect it

Directly from you, through the forms on this site and the booking page, or when you email or call us. We do not collect personal information about you from third parties or from lists.

The one exception is technical: like every website, ours receives your IP address and browser type when a page is requested. We use that to serve the page and to protect the site. We do not use it to identify you, except that the IP address is kept with your consent record if you request access to the Score, as described above.

Dealing with us anonymously

You can read this site, use the calculators and search for a suburb without telling us who you are. The Stonehhart Score itself needs your name, email and phone number, because the exchange is the point: you get the assessment, and we get the chance to talk to you about it. You are welcome to enquire under a name you prefer, but we cannot advise you on a property purchase without knowing who you are.

Why we collect it, and what we do with it

• To give you access to the Stonehhart Score, and to remember that you already have it.
• To respond to you, and to contact you about your property goals.
• To route your enquiry to the right person on our team.
• To provide our services if you engage us.
• To keep a record that you agreed to our terms and disclaimer.
• To meet our legal obligations.

We will not sell your personal information. We will not use it for a purpose you would not reasonably expect without asking you first.

We do not make automated decisions about you. The Stonehhart Score is calculated automatically, but it is an assessment of a suburb, not of you, and it is the same number for everyone who asks. Which team member your enquiry goes to is decided by the link you arrived through, or by whoever on our team picks it up first, and a person can change it.

Recognising you when you come back

If you have already given us your details, you can get to the Score again from another device by entering just your name and phone number. To make that work without keeping a second copy of your details on the website, we store a scrambled fingerprint of your phone number and surname, made with a secret key. It cannot be turned back into your number or your name, and it is only useful for checking whether a name and number you type match someone we already know. Repeated failed attempts from one address are limited to eight in fifteen minutes.

Marketing, and how to stop it

If you give us your details we may contact you about our services, research and events. Every marketing message carries an unsubscribe link, and unsubscribing takes effect promptly. You can also email us and ask us to stop. Stopping marketing does not stop us contacting you about something you have specifically asked for.

Who we share it with

Inside Stonehhart, your enquiry is seen by the team member it is routed to and by the people who manage our enquiries. An enquiry that did not come through a team member's link is shown to our strategists so that one of them can pick it up promptly.

Outside Stonehhart, we disclose personal information only to the providers who run our systems, so they can run them for us, and to our professional advisers, and where the law requires it. Those providers are:

• Cloudflare, which hosts this site, our customer records system and our client portal, and stores the records. Cloudflare operates globally, including in the United States.
• Google, which holds a copy of each enquiry in a spreadsheet, sends our internal alert when one arrives, and serves the fonts on this site. Loading a font means your browser sends your IP address to Google. Google operates globally, including in the United States.
• Cal.com, which runs the booking page. When you book a call, your name, phone number and the time you chose are held by Cal.com in the United States.
• Resend, which delivers our transactional email, including the alert to our team when you enquire and account emails for the client portal. Resend is in the United States.

We do not give your information to anyone else, and none of these providers may use it for their own purposes.

Overseas disclosure

As the list above shows, some of your information is stored or processed outside Australia, in the United States and on global networks. Where that happens we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles, but you should be aware that overseas recipients may be subject to different laws, and that we may not be able to control or prevent access under those laws.

How we keep it

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, including access controls, encryption in transit, and limiting who inside Stonehhart can see what. Our customer records system is behind a login tied to each team member's work account. No system is perfectly secure, and we cannot guarantee the security of information sent to us over the internet.

If we have a data breach that is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner as soon as we practicably can.

How long we keep it

• Enquiry and client records, including the record of what you agreed to, for as long as we are in contact with you and for seven years after our last dealing with you, which matches how long we keep our business records. Then we destroy or de-identify them.
• The fingerprint used to recognise you when you return, for as long as we hold your record.
• The suburbs you looked up, with your enquiry record and capped at the last five; older ones drop off as you look at new ones.
• The cookie that remembers you have access to the Score, 90 days.
• The note of which team member's link you arrived through, 30 days, in your browser only.
• The count of failed sign-in attempts from an address, 15 minutes.

If you ask us to delete your information, we will, unless we are required to keep it, in which case we will tell you what we are keeping and why.

Cookies and similar storage

This site sets exactly the following, and nothing for advertising or analytics.

• Access to the Score. After you give us your details or sign in, a cookie records that you have access, so you are not asked again for 90 days. It holds a signed timestamp and a reference to your enquiry record, which is how the suburbs you look up are added to it. It carries no name, number or email, and it cannot be read by scripts in the page.
• Team member's link. If you arrive through a link one of our team shared, the link's short code is kept in your browser's storage for 30 days so it can travel with your enquiry. It is never sent anywhere until you submit a form.
• Page loader. A flag that stops our opening animation replaying as you move around the site. It lasts for the browser session and holds nothing about you.
• Client portal login, if you are a client with a portal account: a cookie that keeps you signed in.
• Booking page. Cal.com sets its own cookies within the booking widget; those are governed by Cal.com's privacy policy.

You can block or delete cookies and site storage in your browser. If you do, you will be asked for your details each time you want the Score, and a team member's link will not follow you.

Links to other sites

Where we link to another site, such as the Office of the Australian Information Commissioner or Cal.com, that site's own privacy policy applies once you are there.

Under 18s

Our services are for adults making property decisions. This site is not directed at anyone under 18 and we do not knowingly collect their information. If you believe a minor has given us their details, email us and we will delete them.

Getting access, and correcting things

You can ask us for a copy of the personal information we hold about you, including the suburbs we have recorded against your enquiry, and ask us to correct it if it is wrong. Email admin@stonehhart.com.au. We will respond within a reasonable time, and normally within 30 days. If we refuse, we will tell you why in writing.

You can also ask us to delete your information, and we will unless we are required to keep it.

If you are unhappy

Tell us first. Email admin@stonehhart.com.au and we will acknowledge your complaint and respond within a reasonable time. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Changes

We review this policy at least once a year, and whenever we change how the site handles information. The current version is always on this page with the date it was last updated. If we make a change that materially affects how we handle information we already hold, we will tell the people affected.

This policy is free to read here. If you need it in another format, email admin@stonehhart.com.au and we will provide it.

Version 2026-09-20.1 · Last updated 20 September 2026