Privacy policy
This is the Privacy Policy of Stone & Pillar Pty Ltd (ACN 698 040 854 · ABN 11 698 040 854) trading as Stone & Pillar Legal (“we”, “us” and when relating to us, “our”).
This policy explains how Stone & Pillar Legal handles personal information provided by enquirers, prospective clients, clients, referrers, service providers and website users.
Last updated: 2 October 2026
Collection notice
This collection notice applies when you make an enquiry through this website, including through the Matter Navigator, the Government Authority Matter Navigator, the land acquisition triage tool, the contact page enquiry form and our booking links. It explains how information submitted through those services is handled and should be read with the rest of this policy.
Who collects it. Stone & Pillar Pty Ltd (ACN 698 040 854 · ABN 11 698 040 854) trading as Stone & Pillar Legal collects the personal information you provide. You can contact us using the details in section 10.
What we collect, and how. The details you enter, such as your name and contact details, the other parties you identify and the description of your matter (see sections 1 and 2). This website does not presently accept document uploads. If upload functionality is introduced, this policy, the Disclaimer and the Client Intake Terms will be updated before it is made available. Where practicable we collect information directly from you.
Before you send anything. The Navigator saves an in-progress draft in your browser’s local storage only, so that you can resume later on the same device and browser. This draft is not transmitted to us or to any third party while you are completing it, does not include any files you have selected, and is cleared from your browser automatically after 14 days, or sooner if you submit, restart or clear the form.
What happens when you send an enquiry. When you submit the Matter Navigator, the Government Authority Matter Navigator, the land acquisition triage tool or the contact form, the information is sent to our enquiry-handling service, which our website host, Netlify, runs in Sydney, and stored as a record in the firm’s own Microsoft 365 (Australia) environment. We are notified of the enquiry by email through that same environment. See sections 4 and 5.
Spam protection. When you send a website enquiry, Cloudflare Turnstile checks browser and connection signals to help distinguish people from automated spam. Our verification request sends a security token, not your enquiry answers or contact details. You can contact us by phone or email if you cannot complete the check. See sections 4 and 5.
Booking a call. If you book a call, this is arranged through Microsoft Bookings. The name, contact details and any notes you provide when booking are collected by Microsoft Bookings for the purpose of scheduling and conducting the call. See section 4.
Analytics. This website uses Google Analytics, run through Google Tag Manager, to measure general, aggregated website usage such as the pages visited and how visitors reach the site. It does not use advertising or personalisation cookies. See section 1 for the technical information collected and section 5 for where that information is processed.
Why we collect it. To respond to your enquiry, run a conflict check, assess whether we are able to act, and arrange a preliminary call or consultation (see section 3). Making an enquiry does not create a solicitor–client relationship.
If you do not provide it. Giving us this information is voluntary, but if key details are left out we may be unable to identify your matter, run a conflict check or respond (see sections 2.4 and 2.5).
Who we may share it with. The service providers described in sections 4 and 5.
Access, correction and complaints. You can ask to access or correct your information, or make a privacy complaint, as set out in sections 8 and 10.
Please do not send privileged, confidential or highly sensitive material through this website until we have confirmed in writing that we are able to act for you.
1. The kinds of personal information we collect
1.1 The kinds of personal information that we collect include:
1.1.1 contact details such as name, role or position, address, email address, mobile number and landline number;
1.1.2 information relating to your circumstances and affairs relevant to the matter/s in which we are instructed;
1.1.3 information about your legal interests and requirements and the legal services that you may wish to purchase; and
1.1.4 technical information about your use of our website, such as your IP address, browser and device type, and general usage and analytics data.
2. How we collect personal information
2.1 We collect personal information by various means including when:
2.1.1 you contact us with a question or inquiry;
2.1.2 you instruct us to act for you and we open a file and conduct a conflict check;
2.1.3 our clients provide information relating to related and adverse parties relevant to the advice or services we are providing;
2.1.4 we undertake a search or investigation; or
2.1.5 you visit our website.
2.2 Where practicable we collect personal information about you directly from you. However, we may have collected information about you from a third party such as a client, a third party information provider, the courts or a person responding to our questions or inquiries.
2.3 We are required to collect accurate name and address information about our clients in order to meet our professional obligations under the Legal Profession Uniform Law (NSW), including the trust account record-keeping requirements in the Legal Profession Uniform General Rules 2015, and to comply with our duty to the courts.
2.4 If you are a client and do not provide us with name and address information we cannot act for you.
2.5 If you do not provide us with accurate personal information we may not be able to carry out our instructions or achieve the purpose for which the information has been sought.
3. The purposes for which we collect, hold, use and disclose personal information
3.1 We collect, hold, use and disclose personal information in order to:
3.1.1 respond to your enquiries;
3.1.2 provide legal services;
3.1.3 employ competent and diligent personnel;
3.1.4 monitor or improve the use of and satisfaction with our legal services; and
3.1.5 let you know about legal developments, our expertise and legal services that may be of interest to you.
3.2 We disclose personal information:
3.2.1 in order to carry out the instructions of our clients; and
3.2.2 subject to our confidentiality obligations, when using services in support of our legal practice.
4. The parties to whom your personal information is disclosed
4.1 Subject to our confidentiality obligations, we may share some relevant personal information with:
4.1.1 parties related to a matter you have with us, government authorities and service providers as reasonably required to carry out your instructions;
4.1.2 the providers that operate the website and handle enquiries: Netlify (website hosting, including the website functions that process enquiries, which run in Sydney), Microsoft 365 (enquiry storage, notification email and call bookings, within the firm’s own Microsoft 365 environment, with stored records held in Australia) and Google Analytics, run through Google Tag Manager (website analytics), and Cloudflare Turnstile (spam protection — see section 5); and
4.1.3 third party service providers who assist us with archival, auditing, accounting, legal, business consulting, website or technology services.
4.2 We also will disclose your information if required by law to do so or in circumstances permitted by the Privacy Act, for example, where we have reasonable grounds to suspect that unlawful activity, or misconduct of a serious nature, that relates to our functions or activities has been, is being or may be engaged in, in response to a subpoena, discovery request or a court order.
5. Disclosure of information outside the jurisdiction of collection
5.1 Enquiry records — including what you submit through the Matter Navigator, the Government Authority Matter Navigator, the land acquisition triage tool and the contact form — and the details you give when booking a call through Microsoft Bookings (which keeps them in Exchange Online) are stored in the firm’s own Microsoft 365 environment, which holds that information at rest in Australia.
5.2 Some of the service providers we use operate global infrastructure:
5.2.1 our website is hosted by Netlify. Enquiries you submit through this website are processed by website functions that Netlify runs in Sydney, Australia, before the records are stored in Microsoft 365. Bookings made through Microsoft Bookings go to Microsoft directly. Netlify also processes technical information about visits to the site. Because Netlify operates global infrastructure, some of its processing, such as carrying website requests across its network, logging and support, may take place outside Australia, including in the United States;
5.2.2 our website analytics are provided by Google Analytics, run through Google Tag Manager. Google processes technical information such as your IP address, browser and device details and the pages you visit, and may do so outside Australia, including in the United States;
5.2.3 Microsoft may process information outside Australia in the course of providing its services, although the stored records described in 5.1 are held in Australia; and
5.2.4 Cloudflare Turnstile processes browser and connection signals, including an IP address, browser information and the website origin, for spam protection. Cloudflare operates globally and may process this information outside Australia. Our server sends Cloudflare only the verification token and the site's verification key, not the enquiry answers or contact details. See Cloudflare's Turnstile Privacy Addendum.
5.3 Apart from the service providers described in 5.2, we do not disclose personal information to recipients outside Australia. If a client’s matter requires disclosure to an overseas recipient (for example, an overseas correspondent), we take reasonable steps before the disclosure to ensure that the recipient handles the information consistently with the Australian Privacy Principles.
6. Opting out of marketing communications
6.1 Stone & Pillar Legal does not presently use website enquiry information for newsletter or promotional marketing. If that changes, this policy and the relevant collection notice will be updated before the activity begins.
7. Security
7.1 We take reasonable physical, technical and administrative safeguards to protect your personal information from misuse, interference, loss, and unauthorised access, modification and disclosure. For example, we maintain our files in secure offices and limit access to personal information to individuals with a need to know.
8. Access, correction and updating personal information
8.1 You can contact us to access, correct or update your personal information. Unless we are subject to a confidentiality obligation or some other restriction on giving access to the information and we are permitted to refuse you access under the Privacy Act, we will respond within the period required by applicable privacy law and will advise you if further information or time is reasonably required. Examples of circumstances where we may refuse to give you access to your personal information include where:
8.1.1 giving access would be unlawful;
8.1.2 we reasonably believe that giving you access would pose a serious threat to the life, health or safety of any individual or to public health or public safety;
8.1.3 giving access would have an unreasonable impact on the privacy of others;
8.1.4 the information could reveal the intentions of a party in negotiations;
8.1.5 giving access could prejudice the taking of appropriate action in relation to unlawful activity; or
8.1.6 giving access could reveal evaluative information in a commercially sensitive decision-making process.
8.2 If you request to correct your personal information, we will correct, or, if we consider more appropriate, note your request for amendment of the information on your record.
8.3 We will not charge you to make a request to access your record but we may charge you to actually provide access depending on the costs associated with obtaining and providing the material.
8.4 These actions can be requested using the contact information in section 10.
9. Notification of changes
9.1 If we decide to change our Privacy Policy, we will send you a copy of our revised policy or post a copy on our website.
10. Complaints / Contact us
10.1 If a breach of this Privacy Policy occurs, a complaint may be made to us by sending it to privacy@stonepillar.com.au.
10.2 We will respond within the period required by applicable privacy law and will advise you if further information or time is reasonably required. If you are not satisfied with our response to your complaint you may seek a review by contacting the Office of the Australian Information Commissioner using the information available at oaic.gov.au/privacy/privacy-complaints.