1. LitoAcquisition and this policy
LitoAcquisition is a registered business name associated with ABN 57 270 363 404. This policy covers our business website and enquiries, our client relationships, and consumer enquiries processed through Meta campaigns or the LitoConnector solar assessment under that brand. The LitoConnector website also has its own consumer privacy policy with the details of its general enquiry and solar assessment paths. Contact contact@litoacquisition.com with a privacy question or complaint.
We manage personal information in line with the Australian Privacy Principles where they apply and use those standards as our operating baseline. A privacy policy does not replace the short collection notice shown when information is collected.
2. What we collect and how
From prospective and current business clients, we collect information such as contact and business details, service area, preferred work, capacity, campaign requirements, billing and agreement records, correspondence, and support or complaint information. We collect it through this website, email, calls, meetings, onboarding and our service systems.
For a business enquiry submitted from the United States, the form also offers a separate, optional SMS marketing choice. If selected, we record the phone number, whether consent was given, the consent wording and version shown, the website form source and the time the enquiry was submitted. Leaving the box empty records no SMS marketing consent.
Consumer information is collected through a Meta Instant Form registered to a defined campaign service and area. A campaign may serve more than one signed client. Depending on that campaign, the form may include name, phone number, email address, project location, requested service, timing, project details, decision-making authority and answers to the campaign's qualification questions. We may also hold the Meta lead, page, form, campaign and advertisement identifiers, submission time, available verification status, duplicate status, selected client and delivery evidence. The Meta form presents the collection notice and contact permission; our routing record does not itself store the full wording shown to the consumer.
The LitoConnector solar assessment is a separate website request. It asks what you hope to change with solar or a battery, whether you have existing solar, whether you own the home, the state and installation postcode, your three-month electricity bill range, who can make the decision at a visit, and your contact details and contact permission. A net-zero question may also ask what that goal means to you. We keep a request reference, source and review status with the record. This request does not itself book a visit or automatically deliver your answers to an installer.
If someone reaches our business website with campaign source or ad-click parameters such as UTM values, a Google click ID or a Facebook click ID, we retain the allowlisted values temporarily in that browser's session storage, with a 30-day expiry. If they submit the questionnaire, those values are sent with the enquiry to HighLevel for source attribution, whether or not they accept optional analytics. A browser may clear the values sooner.
We may receive campaign information directly from Meta and receive limited outcome, complaint or lead-quality information from the client selected to receive an accepted lead. Please do not provide unnecessary identity documents, financial account details, health information or information about another person.
If you accept Privacy choices, the Meta Pixel records page visits and successful enquiries, along with device data. With automatic advanced matching enabled, Meta may also receive hashed contact details such as name, email address and phone number entered into our questionnaire, including before submission. Hashing helps Meta match information to an account; it does not make the data anonymous to Meta. The Pixel does not load if you opt out.
If you accept Privacy choices, Google Analytics measures page views and records when HighLevel confirms receipt of an enquiry. Google Analytics receives page addresses with allowlisted UTM and Google ad-click parameters, along with standard technical, browser and cookie information, but not your questionnaire answers or contact details. It stays off if you opt out. When a Google click ID is available, we also send Google Ads the click ID, event time and a random enquiry reference after HighLevel accepts the enquiry. This server-to-server conversion upload runs only when you accept Privacy choices and does not include your form answers or contact details. Google ad personalisation is disabled.
3. Why we handle information
We use business information to assess and respond to enquiries, prepare agreements and campaign scopes, invoice and onboard clients, operate campaigns, support the relationship, keep records and deal with complaints or legal obligations.
If you accept Privacy choices, we use Meta Pixel data for advertising measurement and retargeting. Automatic advanced matching helps Meta associate website activity with its users. This use is separate from permission to contact you about a business enquiry.
Google Analytics measures page views and records successful enquiries only when the visitor has allowed it in this browser. After HighLevel accepts an enquiry, the server may also send Google Ads an available Google click ID, event time and random enquiry reference for conversion attribution. Neither route sends questionnaire answers or contact details to Google. Other page-address parameters are excluded. Google ad personalisation signals are disabled.
We use consumer information to identify the campaign, check for duplicates and a usable postcode, and compare the requested service and postcode with participating clients' recorded coverage. We select one eligible client for a routable lead; where several clients are eligible, separate leads rotate among them. Form answers may be reviewed against campaign criteria, but the routing system does not currently use custom answers to automatically accept or reject a lead. LitoAcquisition is paid by the receiving client for leads that meet the agreed qualification standard. We do not auction a lead or send the same accepted lead to multiple clients.
For a solar assessment submitted on LitoConnector, we review the answers and contact the household about suitability and availability. If a visit is agreed, we may share the booking details needed for Local & Licensed Electrical & Solar Solutions to attend, as explained in the assessment consent. The visiting business handles its own assessment, advice, quote and follow-up. A website request or preliminary fit indication is not an appointment or a guarantee of an outcome.
4. What you are told at collection
Our website questionnaire identifies LitoAcquisition, explains why the details are needed, explains that providers may process information outside Australia, and asks permission for contact about that business enquiry through the channels stated in the form. For U.S. enquiries, a separate unchecked and optional box asks for marketing texts about the enquiry and our lead-generation services, including invitations to book a discovery call. The SMS choice is not required to submit the enquiry. The form explains message frequency, possible message and data rates, and HELP and STOP instructions. Campaign source and ad-click parameters may be sent to HighLevel with the enquiry whether or not optional analytics are accepted. It also tells you that automatic advanced matching may share hashed contact details with Meta. Submitting the form without selecting the SMS box does not subscribe you to SMS marketing.
Each consumer Meta form must explain that LitoAcquisition will use the campaign, service and postcode to select one eligible participating business for a routable enquiry, and may separately assess the answers against the campaign's qualification criteria. It must explain that the selected business may contact the consumer by the stated channels about the enquiry and link to the current privacy policy. If this selection and disclosure are not clear on a form, do not submit it and contact us.
You do not need to give us your name to read this website, but Meta may recognise your browser or match your activity to an account. If required information is not provided, we may be unable to assess an enquiry, respond or pass it to a selected eligible client. Campaign forms are intended for adults who are requesting a service for themselves or are authorised to enquire for the property or project.
5. Who receives information
An accepted consumer lead is supplied to only one participating service-business client selected for the requested service and postcode. We do not supply the same accepted lead to a second client, resell it or broadcast it to competing providers. The receiving client then controls its own follow-up, quoting, service delivery and records, and must handle the information lawfully.
The separate LitoConnector solar assessment stays with our team for manual review. If we confirm an in-home visit with the household, we share the necessary booking details with Local & Licensed Electrical & Solar Solutions so its team can attend. That handoff is distinct from the automatic selection of a client for an accepted Meta form lead.
Providers that support our operations may also handle information:
- Meta hosts the advertisements and consumer Instant Forms and receives Pixel events and potentially hashed contact details from this business website.
- HighLevel (GoHighLevel / LeadConnector) provides customer relationship management, campaign records and delivery evidence.
- Zapier may route authorised client, onboarding, campaign or lead information between approved systems when a workflow is configured.
- Cloudflare delivers and protects our websites and runs the lead-routing service. Google provides business email and workspace services and, when a visitor opts in, processes pageview and successful-enquiry events for measurement and Google Ads conversion reporting. If you accept Privacy choices, Google Ads also receives the available click ID and limited event metadata after HighLevel accepts an enquiry.
We may also disclose information to professional advisers, insurers, regulators or other parties where reasonably necessary to protect legal rights or where required or authorised by law.
For the U.S. SMS program, we send a phone number and its consent record to HighLevel and telecommunications providers as needed to operate the customer relationship system and deliver messages the person requested. We do not sell or share mobile numbers or SMS consent records with third parties or affiliates for their own marketing or promotional purposes.
6. Overseas processing
Our providers operate internationally. Information may be processed in the United States and India and in other countries where those providers or their subprocessors operate; we do not promise Australian-only storage. Where the cross-border privacy rules apply, we take reasonable steps appropriate to the service and information involved before using an overseas recipient. Current provider information is available from Meta, HighLevel, Zapier, Cloudflare and Google.
7. Contact and direct marketing
We contact a business enquirer only about the enquiry unless there is a separate lawful basis for other marketing. The one eligible client selected to receive a consumer lead may contact that person by the channels stated in the form about the submitted service enquiry. That permission is not consent to unrelated marketing.
For the LitoConnector solar assessment, the required contact choice permits us to call, SMS or email about that request and to share booking details with the named visiting business only if a visit is confirmed. It is not permission for unrelated marketing. A person may withdraw permission for future contact by contacting us.
For U.S. business enquiries, LitoAcquisition may send SMS follow-ups about our lead-generation services and invitations to book a discovery call only when the person separately selects the optional, unchecked marketing-text box. Consent is not a condition of submitting an enquiry. Message frequency varies and message and data rates may apply. Reply STOP to opt out or HELP for assistance. We record the consent choice, wording, form source and submission time with the enquiry.
Any commercial email or SMS we authorise must have the required consent, identify the sender, provide current contact details and include a working unsubscribe option. You may withdraw contact permission or opt out of marketing at any time. A withdrawal stops future contact covered by it but cannot undo a disclosure or communication already made while the permission applied.
You can accept or opt out of both Meta Pixel and Google Analytics in this browser using Privacy choices in the footer or on our cookies and tracking notice. Tracking is off until you accept. Opting out does not retract data already sent. You can also manage advertising preferences in your Meta account.
8. Security, quality and retention
We use measures appropriate to the information and systems involved, including HTTPS, restricted access, server-held credentials, validation, campaign and form identifiers, duplicate controls and delivery records. No internet, advertising, email or CRM service is completely secure. We assess suspected data breaches and make notifications required under applicable law.
For routed Meta enquiries, Cloudflare may store an encrypted copy of contact details and form answers for a 30-day recovery window to review and recover held or failed deliveries. Recovery is blocked after that window, and an hourly process deletes expired ciphertext. Lead identifiers and assignment status may remain for audit and duplicate prevention. Separate records may remain with Meta, HighLevel, Zapier or in business correspondence. We retain these records while needed to answer an enquiry, deliver and account for a lead, operate a client relationship, resolve a complaint or meet a legal requirement. There is no single automatic deletion date for every CRM, correspondence or provider copy. We assess whether personal information is still needed for these purposes and take reasonable steps to delete or de-identify it when it is not needed and no law or order requires retention. Contracts, accounting records, disputes, backups and provider logs may require different periods.
We retain U.S. SMS opt-in and opt-out records for as long as needed to document consent and honour messaging preferences. If someone opts out, we may keep a limited suppression record, such as the phone number and opt-out status, so that number is not added back to marketing messages by mistake.
9. Access, correction and complaints
Email us to request access to or correction of personal information we hold, or to request deletion where applicable. We may verify your identity using proportionate information and will explain any lawful reason for refusing or limiting a request.
Send a privacy complaint to contact@litoacquisition.com with enough detail for us to investigate. We will acknowledge it and aim to respond within 30 days. If the Privacy Act applies and you remain dissatisfied, you may be able to complain to the Office of the Australian Information Commissioner.
10. Website data and changes
Cloudflare may process IP address, browser, request and security-log information to deliver and protect our websites. This business website uses the Meta Pixel for page visits, successful enquiries, advertising measurement and retargeting only if you accept Privacy choices. Automatic advanced matching may send hashed contact details entered in our questionnaire to Meta. Google Analytics and server-side Google Ads conversion uploads run only if you accept. Google receives an available click ID and limited enquiry event metadata, but not questionnaire answers or contact details. Google ad personalisation signals are disabled. Read our cookies notice for the current configuration and ways to manage tracking.
The date above identifies this version. We will update this policy and any relevant collection notice before making a material change to how information is collected, used or disclosed.