Skip to main content

Privacy Policy

Privacy Policy

Last updated: 5 November 2026

Core List Pty Ltd (ABN 76 164 573 040) ("Core List", "we", "us" or "our") respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how we collect, hold, use and disclose personal information when you visit corelist.com.au, purchase our products, contact us, or where information is included in business databases supplied by Core List.

Where applicable, we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information we collect

The types of personal information we may collect and hold include:

Customers and website users

We may collect:

  • name

  • business or organisation name

  • billing and postal address

  • email address

  • telephone number

  • order and purchase history

  • communications with us

  • information provided through forms or enquiries

  • IP address

  • browser and device information

  • website usage information

  • referral source and marketing campaign information

  • payment transaction information.

Payment card information is generally processed directly by our payment service providers. Core List does not ordinarily receive or store complete credit or debit card numbers.

Information contained in our business databases

Core List compiles business information for use in business-to-business sales, marketing, research and related commercial purposes.

Depending on the database, information may include:

  • business or trading name

  • business address

  • telephone number

  • business email address

  • website

  • business category or industry

  • licence or registration information

  • Australian Business Number (ABN)

  • publicly identified business owners, directors or employees

  • publicly available professional or business contact information

  • other information relevant to the particular business database.

Some business information may also constitute personal information under Australian privacy law where it identifies or can reasonably identify an individual, including a sole trader or a named person associated with a business.

Core List does not intentionally compile sensitive personal information, such as health information, political opinions, religious beliefs, racial or ethnic origin, sexual orientation or similar sensitive information, for inclusion in its commercial business databases.

2. How we collect information

We may collect personal information directly from you when you:

  • purchase a product

  • create an account

  • contact us

  • send us an email

  • download or request a sample

  • subscribe to communications

  • interact with our website.

We may also collect business information from publicly available and commercial sources, including:

  • government registers

  • licensing and regulatory registers

  • Australian Business Register information

  • business websites

  • professional and industry websites

  • publicly available business directories

  • business social media pages

  • business group or franchise websites

  • other publicly accessible sources

  • third-party data or research services.

We may combine, verify, standardise, de-duplicate or supplement information obtained from multiple sources.

3. Why we collect and use information

We may collect, hold, use and disclose personal information for purposes including:

  • processing and fulfilling orders

  • supplying purchased databases and digital products

  • managing customer accounts

  • providing customer support

  • responding to enquiries

  • issuing invoices and maintaining accounting records

  • preventing fraud and protecting our website

  • measuring website usage and performance

  • understanding how customers find and use our website

  • improving our products, databases and website

  • marketing Core List products and services where permitted by law

  • compiling, maintaining, updating and supplying business databases

  • conducting business research and data verification

  • complying with legal and regulatory obligations

  • managing disputes, complaints and security incidents.

Where business contact information forms part of a Core List database, that information may be supplied to customers who purchase or license the relevant database.

Customers are responsible for ensuring their use of Core List data complies with applicable privacy, spam, telemarketing and other laws.

4. Business databases and publicly available information

The fact that information is publicly available does not necessarily mean that it falls outside Australian privacy law.

Core List takes reasonable steps to limit its databases to information relevant to legitimate business and professional activities.

Where appropriate, we may correct, update, suppress or remove information following a request from an individual or business.

If you believe information about you contained in a Core List database is inaccurate, inappropriate or should be reviewed, please contact us at support@corelist.com.au.

5. Google Analytics and website analytics

We use Google Analytics 4 and related Google services to understand how visitors use our website and how they arrive at Core List.

Google Analytics may collect information such as:

  • pages viewed

  • time and date of visits

  • approximate geographic location

  • browser type

  • device type

  • operating system

  • referring website

  • advertising or campaign information

  • interactions with our website

  • purchase and ecommerce activity

  • IP address and related technical information.

Google may process this information on our behalf in accordance with Google's terms and privacy practices.

We use this information to measure website performance, understand customer behaviour, attribute sales and conversions, improve our website and assess marketing effectiveness.

6. Cookies and similar technologies

Core List and our service providers may use cookies, tags, pixels and similar technologies.

These technologies may be used to:

  • operate the website

  • maintain shopping cart and checkout functionality

  • remember preferences

  • measure website traffic

  • analyse website performance

  • measure advertising and marketing campaigns

  • detect fraud and security threats

  • attribute purchases and conversions.

You may be able to restrict or delete cookies through your browser settings. Disabling some cookies may affect website functionality.

Where required by applicable law, we will seek consent before using non-essential cookies or tracking technologies.

7. Payments

Online payments may be processed by Stripe or another payment service provider made available through our ecommerce platform.

Payment providers may collect and process information necessary to:

  • authorise transactions

  • prevent fraud

  • process refunds

  • manage disputes

  • comply with financial and regulatory obligations.

We generally do not store complete credit or debit card details on Core List systems.

Payment providers handle payment information according to their own privacy policies and legal obligations.

8. BigCommerce

Our online store is operated using BigCommerce.

BigCommerce and its service providers may process customer, order, technical and website information as necessary to provide ecommerce, hosting, checkout, security and related services to us.

9. Automated fraud and security screening

Our ecommerce and payment providers may use automated systems to assess transactions for fraud, security or payment risk.

These systems may affect whether a transaction is approved, declined, delayed or subjected to additional verification.

Where required by applicable privacy law, individuals may contact us regarding decisions involving their personal information.

10. Marketing communications

We may use customer contact information to communicate about Core List products or services where permitted by law.

Electronic marketing communications will be sent in accordance with applicable Australian laws, including the Spam Act 2003 (Cth).

Where required, marketing communications will provide a method to unsubscribe.

You may also ask us to stop sending marketing communications by contacting support@corelist.com.au.

11. Disclosure to service providers

We may disclose information to third parties that assist us in operating our business, including:

  • ecommerce and website hosting providers

  • payment processors

  • analytics providers

  • email and communication providers

  • cloud storage and IT providers

  • accountants and professional advisers

  • fraud prevention and security providers

  • contractors assisting with data processing, verification or maintenance

  • government agencies or regulators where required or authorised by law.

We do not disclose customer information to unrelated parties merely so they can market their own products to our customers.

12. Overseas processing and disclosure

Some of the service providers used by Core List operate internationally.

As a result, personal information may be processed, stored or accessible outside Australia, including in the United States and other jurisdictions in which our technology, payment, analytics, hosting or service providers operate.

Our international service providers may include companies such as BigCommerce, Stripe and Google.

Where the Australian Privacy Principles apply to an overseas disclosure, we take reasonable steps as required by law in relation to the handling of that information.

The countries in which information is processed may change from time to time as service providers change their infrastructure.

13. Security

We take reasonable steps to protect personal information from:

  • misuse

  • interference

  • loss

  • unauthorised access

  • unauthorised modification

  • unauthorised disclosure.

Security measures may include access controls, secure service providers, authentication controls, backups, encryption and other technical and organisational safeguards where appropriate.

No internet transmission or storage system can be guaranteed to be completely secure.

14. Data breaches

Where Core List is subject to the Notifiable Data Breaches scheme under the Privacy Act, we will assess suspected eligible data breaches and notify affected individuals and the Office of the Australian Information Commissioner where required by law.

15. Retention of information

We retain personal information for as long as reasonably required for the purposes for which it was collected, including business, accounting, taxation, legal, fraud prevention and regulatory purposes.

Where personal information is no longer required and we are not legally required to retain it, we may take reasonable steps to destroy or de-identify it.

Business database information may be retained and updated where it continues to be relevant to our business database products.

16. Accessing or correcting your information

You may request access to personal information that Core List holds about you or ask us to correct information that you believe is inaccurate, out of date, incomplete, irrelevant or misleading.

Requests can be sent to:

Privacy Officer
Core List Pty Ltd
Email: support@corelist.com.au

We may need to verify your identity before providing access to personal information.

There may be circumstances permitted by law where access cannot be provided. If this occurs, we will explain the reason where required.

17. Requests concerning business database information

If you are an individual whose contact information appears in a Core List business database, you may contact us to:

  • ask what information we hold about you

  • request correction of inaccurate information

  • request that particular information be reviewed

  • raise a privacy concern

  • request suppression or removal where appropriate.

Please provide sufficient information for us to identify the relevant record.

Requests should be sent to support@corelist.com.au.

18. Privacy complaints

If you believe Core List has breached your privacy rights or the Australian Privacy Principles, please contact us first:

Privacy Officer
Core List Pty Ltd
Australia

Email: support@corelist.com.au

Please provide details of your concern so that we can investigate it.

We will endeavour to acknowledge and investigate privacy complaints promptly and normally respond within 30 days.

If you are not satisfied with our response, you may be entitled to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

19. Third-party websites

Our website may contain links to websites operated by other organisations.

Core List is not responsible for the privacy practices of third-party websites. You should review the privacy policy of any external website you visit.

20. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, technology, service providers or legal obligations.

The current version will be published on our website together with its last-updated date.

21. Contact us

For privacy enquiries, access or correction requests, database information requests or complaints, contact:

Core List Pty Ltd
ABN 76 164 573 040
Email: support@corelist.com.au
Website: corelist.com.au

!