Privacy policy

Pinecone Agency (ABN 94 724 739 258) operates this website at pinecone.agency. This policy explains what personal information we collect when you visit the site or get in touch, how we use it, and the choices you have. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What this policy covers

This policy covers this website and the enquiries that come through it. When we deliver a project for a client, any data involved in that work is handled under the agreement for that engagement, which sits outside this policy.

Information you give us

We collect the information you choose to share with us when you:

• Send an enquiry through our contact form: your first and last name, email address, phone number, company, and whatever you tell us about your project.
• Request a quote through our quote form: your email address, then any details you add about your project, such as your website, company, project type, budget, timing and notes.
• Book a call through the scheduling tool embedded on the site (Cal.com): your name, email address and chosen time.
• Subscribe to our newsletter through the sign-up form on our articles: your email address. It’s opt-in: we only add an address when you subscribe through that form, and we don’t add the email you give us for a quote to the newsletter. We store it in Cloudflare D1 and add it to our mailing list in Resend. You can unsubscribe at any time by emailing hello@pinecone.agency.
• Email us directly.

We use this to respond to you, scope and discuss your project, and follow up. Form submissions are stored securely in Cloudflare’s database service (Cloudflare D1) and emailed to us so we can reply. When you submit a form we also record technical details, your IP address and browser type, to help protect it from spam.

How you found us

When you request a quote, we also store the campaign tags and ad click identifiers from the link you arrived through, alongside your email address and quote details. These are the src tag (a short label we add to our own ad and campaign links to say which ad or campaign it was), the utm_source, utm_medium, utm_campaign, utm_term and utm_content tags, and the ad click identifiers from Google (gclid, gbraid and wbraid), Meta (fbclid) and LinkedIn (li_fat_id). They are included in the email notification we receive about your enquiry. We use them to understand which marketing brought the enquiry, for example a podcast, a search ad or a social media ad.

We keep only those named values. We don’t store the full address of the page you landed on or the page you came from. While you move through the quote form, your browser holds these values for that tab only (in session storage), and they are cleared when you close it.

Information collected automatically

Like most websites, we use cookies and similar technologies to understand how the site is used and to measure our marketing. Depending on your settings, this can include the pages you visit, how you arrived, your device and browser, your approximate location, and how you interact with pages. The tools we use:

• Cloudflare Zaraz: runs our measurement and advertising tools (Google Analytics, Google Ads and Meta’s tools, below) from Cloudflare’s network, so those tools’ own scripts don’t load in your browser. Zaraz sets first-party cookies on our domain so the tools can recognise a returning browser and, if you arrived from an ad, remember the ad’s click identifier.
• Google Analytics: traffic and usage statistics, so we can see what content is useful.
• Google Ads: measures which of our ads lead to enquiries and bookings. If you arrive from a Google ad, its click identifier is kept in a first-party cookie so a later enquiry can be matched to that ad. We don’t use Google Ads for remarketing.
• Meta Pixel and Conversions API: on every page of our main site, Meta is sent the page address and technical details such as your IP address and browser type, with a browser identifier Meta uses to recognise repeat visits. When you send an enquiry, Meta is told that an enquiry happened, never your name, email address or what you wrote. We use it to measure visits and enquiries and to support audiences for ads on Facebook and Instagram.
• Microsoft Clarity: helps us understand how visitors use the site through behavioural metrics, heatmaps and session recordings, using first- and third-party cookies. We use this to improve the site’s design and performance. Clarity masks what you type into our forms, so recordings don’t show it. Data captured by Clarity is processed by Microsoft. See the Microsoft Privacy Statement.
• Cloudflare: hosts the site and provides security and performance services, including Turnstile, which protects our forms from spam, and Web Analytics, which counts visits without cookies.
• Resend: delivers the email notification when you submit a form, and holds our newsletter mailing list.
• Cal.com: powers call bookings made through the site.

How we use personal information

• To respond to enquiries and bookings, and to discuss work you ask us about.
• To operate, secure and improve the website.
• To understand which content and channels are working, including which marketing brought each enquiry.
• To measure and improve our advertising, including showing ads to people who have visited the site (remarketing) on Meta platforms.
• To protect the site and our systems from spam and abuse.

We do not sell personal information.

Where your information goes

The providers named above store and process data on our behalf, and several of them do so outside Australia, most commonly in the United States. Where that happens, the information is handled under that provider’s privacy terms and safeguards. Beyond those providers, we only disclose personal information where you ask us to or where the law requires it.

Cookies and your choices

The site doesn’t currently show a cookie banner or ask for consent before these tools load. They load as soon as you open a page, before you click or accept anything.

The cookies they set include Zaraz’s first-party cookies, described above, and Microsoft Clarity’s _clck, _clsk, MR and SM. Clarity also syncs with Microsoft Bing, which may set the MUID, CLID, ANONCHK and SRM_B cookies, and Clarity’s settings can also set Microsoft’s _uetmsclkid and _uetvid cookies (Bing click and visitor identifiers). You can still control them:

• You can block or clear cookies in your browser settings. The site will still work, though some embedded features (like call booking) rely on third-party cookies.
• You can control ad personalisation in Google’s ad settings.
• You can manage how Meta uses your data for ads in your Meta ad preferences.

Retention and security

We keep enquiry and attribution data (including the campaign tags and click identifiers described above) only as long as we need it to respond to you and manage our relationship with you, then we delete or de-identify it, unless the law requires us to keep it longer. We keep newsletter subscribers until you unsubscribe or ask us to remove you. We take reasonable steps to protect the information we hold, including serving the site over HTTPS and limiting who can access stored enquiries.

Access, correction and complaints

You can ask us for access to the personal information we hold about you, ask us to correct it, or ask us to delete it. Email hello@pinecone.agency and we’ll respond within a reasonable time. If you have a privacy concern we can’t resolve, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We’ll update this policy as the site and our tools change, and the date at the top will tell you when it last happened.

Contact

Pinecone Agency
The Commons, 1/38 Gipps St, Collingwood VIC 3066
hello@pinecone.agency