How we handle your information
Who we are
This website is operated by Lodestoneplus Consumer Goods Trading, the personal information controller for information submitted here.
Data Protection Officer: Jun Rosacia, [email protected]
What we collect
- Quote requests and messages: your name, company, work email, phone (optional), project details, delivery location, target date, budget range (optional), any files or share links you provide.
- Production Kit sign-ups: first name, work email, company (optional) and whether you opted in to marketing emails.
- Consent records: the choice you made, the wording version shown, the time, and a one-way scrambled (hashed) form of your IP address — never the IP address itself.
- Optional analytics and advertising measurement: only if you allow them in Cookie settings.
Why we use it
- To review your request, prepare a quotation and contact you about it.
- To deliver the Production Kit you asked for. You receive the kit whether or not you opt in to marketing.
- To send occasional production tips and updates — only if you ticked the optional box. Every such email has an unsubscribe link.
- To keep the site secure and prevent spam (Cloudflare Turnstile bot check).
Submitting a quote request does not sign you up for marketing emails.
Who processes it for us
We use service providers that process data on our instructions: Cloudflare (website hosting, database, file storage, bot protection, email routing) and Brevo (sending email). If you allow them, Google (Analytics, Ads) and Meta (advertising measurement) receive limited usage data. We do not sell personal information.
How long we keep it
Spam and abandoned requests are deleted after 30 days. Uploaded files are kept until 90 days after the related project is closed or completed, then removed from live storage. Database recovery copies kept by our hosting provider expire automatically after 30 days.
How we protect it
Information is sent over encrypted connections. Uploaded files are stored privately and are not publicly accessible; download links we send are single-purpose, expire, and can be revoked. Our hosting provider keeps point-in-time recovery copies of our database for up to 30 days, after which they expire automatically. Access to our administration system is restricted to authorised people.
Cookies and similar storage
Essential storage keeps forms and security working and is always on. Analytics and advertising measurement are off until you choose them, and you can change your choice any time with “Cookie settings” at the bottom of every page.
Your rights
Under the Data Privacy Act you may ask to be informed, access, correct, object to processing, have your data erased or blocked, and receive a copy of your data in a portable format. You may also withdraw marketing consent at any time. To exercise these rights, contact our Data Protection Officer at [email protected]. You may also lodge a complaint with the National Privacy Commission.
Changes
We will update this notice if our practices change and show the date of the latest version here.
Last updated: 11 November 2026.