YOUR INFORMATION, HANDLED PLAINLY.

This policy explains what personal information Corestake Lab collects, why, where it is kept, and what you can ask us to do with it. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).

Last updated: 15 October 2026

Who we are

Corestake Lab is a growth consultancy based in Sydney, Australia, operated by Cristian Fernando Grajales Gamboa as a sole trader (ABN 42 283 845 149). In this policy, “we” and “us” means Corestake Lab. This policy covers corestake.com.au, the Growth Readiness diagnostic at diagnostic.corestake.com.au, and the reports we send from it. Apps we build, such as Spanish4Kids, may have their own privacy policies.

What we collect

When you take the diagnostic: your name, email and phone number, your answers to the diagnostic questions, and the business details you choose to share (industry, revenue range, team size, years in business, business stage, main goal and whether you have a website). We use these to calculate your scores and create your report.
When you use the contact form or email us: your name, email, phone number and whatever you write in your message.
When you book a call: the details you enter in our booking tool, Calendly, such as your name, email and the time you choose.
When we work together: information about your business that you share during the engagement, plus the contact details of the people we work with.
When you browse our websites: usage information collected by Google Analytics through cookies, such as the pages you visit, how you arrived, your general location (city level), your device and browser, and actions like starting the diagnostic or clicking to book a call. We don’t send your name, email or phone number to Google Analytics.
Business contact information from other sources: to find businesses we might be able to help, we use business databases such as Apollo, as well as public sources like company websites and LinkedIn. From these we collect work contact details, such as your name, role, business email and company. If we contact you this way, we tell you how we got your details, and you can ask us to stop at any time.

You don’t have to give us your details. You can browse the site without doing so, but without them we can’t send you a report or reply to you.

How we use it

To create and email your Growth Readiness report, and to keep a copy so we can resend it if you ask.
To reply to your enquiry, follow up about your report, and prepare for and run calls and engagements with you.
To understand which pages and features are useful, so we can improve the website and the diagnostic.
To keep records we’re required to keep, and to protect the site against misuse.

If we send you marketing emails, every one will have a working unsubscribe link, as the Spam Act 2003 requires. We never sell your personal information.

AI tools

We use AI tools, including Claude by Anthropic, to help with research, analysis and drafting. Information you share with us may be processed by these tools as part of that work. A person reviews everything before it is used, and AI tools never make decisions about you on their own.

Where it’s stored and who else handles it

We use trusted service providers to run the business. They handle your information only to provide their service to us:

Google (Google Workspace and Sheets for storing diagnostic leads and contact messages, and Google Analytics for website usage)
Hostinger (website hosting and email)
Vercel (hosting the diagnostic and your report pages)
GoHighLevel (our CRM for client and prospect records)
Apollo (the business contact database we use for prospecting)
Calendly (call bookings)
Anthropic (AI tools, as described above)

Several of these providers store data outside Australia, mainly in the United States and Europe. We choose established providers with strong security practices, but overseas laws may not protect your information in the same way Australian law does. By giving us your information, you consent to it being handled this way.

Your report is available at a private link that only someone with the full link can open. Search engines are told not to index it. Treat the link as you would the email it arrived in.

Cookies and analytics

Our websites use cookies from Google Analytics to measure visits, and a small number of cookies the website needs in order to work. Our pages also load fonts from Google, which means your browser connects to Google’s servers. You can block or delete cookies in your browser settings. You can also opt out of Google Analytics on every site using Google’s opt-out browser add-on.

How long we keep it

We keep your information only for as long as we need it for the purposes above, or for as long as the law requires us to keep it. When we no longer need it, we delete it or remove anything that identifies you. In practice, diagnostic results and enquiries from people who don’t go on to become clients are deleted after 24 months. Client records are kept for 7 years after our work together ends, to meet tax and business record-keeping obligations. You can ask us to delete your information sooner at any time.

Keeping it secure

We take reasonable steps to protect your information from misuse, loss and unauthorised access. These include encrypted connections (HTTPS), private report links, restricted access to our lead records, and secure, password-protected accounts with our providers. No system is perfectly secure, so if we ever have a data breach that is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner as the law requires.

Accessing, correcting or deleting your information

You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete it. Email cristian@corestake.com.au and we’ll respond within 30 days. We may need to confirm your identity first. If we can’t do what you ask, we’ll explain why.

Complaints

If you’re unhappy with how we’ve handled your information, email cristian@corestake.com.au and we’ll try to resolve it within 30 days. If you’re still not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Changes to this policy

We’ll update this page when the way we handle personal information changes, and the date at the top will always show the latest version.

Contact

Corestake Lab · Cristian Fernando Grajales Gamboa, sole trader · ABN 42 283 845 149
Sydney, NSW, Australia
cristian@corestake.com.au