Privacy Policy

Effective Date: 21 Feb 2026

Welcome to Light Leads ("we," "our," or "us"). We are an all-in-one digital marketing agency and software solutions provider based in Queensland, Australia. We are committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our custom CRM software, or engage with our marketing services. This policy is designed to comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as well as international frameworks such as the General Data Protection Regulation (GDPR) for our global clients.

1. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked to you. This includes:

• Identity & Contact Data: Your name, email address, phone number, and business details (such as company name and job title).

• Consent-Based Data: Explicit consent records for receiving marketing communications, specifically including SMS text messages and email newsletters.

• Financial Data: Payment details necessary to process your subscriptions or service fees. (Note: We do not store full credit card numbers on our servers; these are securely handled by our payment processor).

• Technical Data: Your Internet Protocol (IP) address, browser type, operating system, and data collected via cookies and similar tracking technologies when you interact with our website.

• Platform Data: Data you upload, store, or process within your Light Leads custom CRM account (e.g., your own clients' data). In this context, you are the "Data Controller" and we act as the "Data Processor."

2. How We Use Your Information

We use the information we collect to operate our business and provide you with high-quality services. Specifically, we use your data to:

• Deliver Our Services: Provide, operate, and maintain your CRM account, dashboard, and digital marketing campaigns.

• Process Transactions: Manage billing, invoicing, and process payments securely.

• Communicate with You: Send you account updates, technical notices, and customer support responses.

• Marketing (With Your Consent): Send promotional emails or SMS text messages about new features, services, or offers. You may opt out of these at any time by clicking "unsubscribe" in emails or replying "STOP" to SMS messages.

• Improve Our Platform: Analyse website usage, troubleshoot software bugs, and optimise our website and CRM interface.

3. Third-Party Sharing and Disclosure

We do not sell your personal information. We only share your data with trusted third parties necessary to deliver our services:

• Advertising Platforms: We integrate with Google and Meta for advertising and analytics. This is done exclusively via your own respective ad accounts to manage your marketing campaigns.

• Service Providers: We share data with specialised infrastructure providers, including secure CRM hosting services and SMS/email gateway providers (to facilitate your communications).

• Payment Processors: We use secure third-party payment gateways, such as Stripe, to process your subscription and service payments.

• Legal Obligations: We may disclose your information if required to do so by law, in response to a valid subpoena, court order, or government request.

4. International Data Transfers

Because we serve clients globally - including in Australia, Brazil, and Europe - your information may be transferred to, stored, or processed in countries outside of your own. When we transfer data internationally, we ensure it is protected by appropriate legal safeguards, such as Standard Contractual Clauses (SCCs) under the GDPR and compliance with cross-border disclosure rules under the APPs.

5. Data Retention and Security

• Retention: We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, including satisfying any legal, accounting, or reporting requirements. If you terminate your CRM account, we will delete or anonymise your data in accordance with our standard deletion schedules.

• Security: We implement robust, industry-standard administrative, technical, and physical security measures to protect your personal information from unauthorised access, loss, or alteration. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

6. Your Privacy Rights

Depending on your location (such as under the APPs or the GDPR), you have specific rights regarding your personal data:

• The Right to Access: You can request a copy of the personal data we hold about you.

• The Right to Rectification: You can request that we correct any inaccurate or incomplete data.

• The Right to Erasure ("Right to be Forgotten"): You can ask us to delete your personal data, subject to certain legal exceptions.

• The Right to Restrict/Object to Processing: You can object to our processing of your data, particularly for direct marketing purposes.

• The Right to Data Portability: You can request that we transfer your data to another organisation or directly to you in a structured, commonly used format.

To exercise any of these rights, please contact us using the details below. We will respond to your request within the timeframes required by applicable law.

7. Cookies and Tracking Technologies

Our website uses cookies to enhance user experience, analyse site traffic, and assist in our marketing efforts. You can control cookie preferences through your browser settings. However, disabling certain cookies may limit your ability to use some features of our website or CRM.

8. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

• Email: [email protected]

• Phone: 0483 923 331