Privacy Policy
GTSH Digital (ABN 34 394 498 506), a sole trader business, trading as Solar Prospect
Effective date: 22 July 2026 Last updated: 22 July 2026
1. About this Policy
GTSH Digital ("we", "us", "our") operates Solar Prospect, a lead generation service supplying qualified residential solar enquiries to solar installation companies in Australia.
This Policy explains how we collect, hold, use and disclose personal information relating to:
Visitors to www.solarprospect.com.au
Solar installation businesses that enquire about, purchase or use our services ("Clients")
Individuals who represent those businesses (directors, owners, sales managers, staff)
This Policy does not cover homeowners. Personal information collected from homeowners through our advertising campaigns and lead capture forms is governed by a separate Homeowner Privacy Policy and Collection Notice, available at www.solarprospect.com.au/homeowner-privacy. Section 6 below explains how homeowner data flows to Clients, because our Clients need to understand their own obligations as recipients.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs), the Spam Act 2003 (Cth), and the Do Not Call Register Act 2006 (Cth).
We do not rely on the small business exemption in the Privacy Act. Because we disclose personal information about individuals to third parties for a benefit, we are an APP entity under section 6D(4)(c) of the Privacy Act and comply with the APPs in full.
2. Information We Collect from Clients
2.1 Information you provide directly
Contact information: name, position, business email address, phone number, business name, business address
Business information: ABN, CEC (Clean Energy Council) accreditation or retailer status, electrical contractor licence details, service areas and postcodes, installation capacity, sales team size, current lead volume and close rates
Account information: username, password, portal preferences, lead delivery settings (CRM endpoint, email, webhook)
Commercial information: lead tier purchased (exclusive or shared), volume commitments, contract terms, return/credit requests
Communication data: enquiry form submissions, discovery call notes and recordings (where you have been notified and consented), email and SMS correspondence, support tickets
Payment information: billing contact and payment method details. Card details are collected and stored by our third-party payment processor. We do not store full card numbers on our systems.
2.2 Information collected automatically
When you use our website we collect:
Usage data: pages viewed, referring URL, links clicked, time on page, form interactions, conversion events
Device and technical data: IP address, browser type and version, operating system, device identifiers, approximate location derived from IP address
Advertising and analytics identifiers: cookie IDs, click identifiers (for example Meta fbclid, Google gclid, TikTok ttclid) and equivalent event data
See section 10 for details of the cookies and tracking technologies we use.
2.3 Information from third parties
Advertising and analytics platforms: campaign, conversion and audience data from Meta, Google, TikTok and LinkedIn
Publicly available business sources: the Australian Business Register, the Clean Energy Council accredited installer and approved retailer lists, state electrical licensing registers, business websites and public professional profiles
Referrals: information provided by industry partners or existing Clients who refer you to us
2.4 Sensitive information
We do not seek to collect sensitive information (as defined in section 6 of the Privacy Act) about Clients. If sensitive information is provided to us unsolicited, we will deal with it in accordance with APP 4 and destroy or de-identify it where lawful to do so.
3. How We Use Client Information
We use personal information for the following purposes:
Purpose Examples: Providing our services Assessing suitability, agreeing lead criteria, delivering leads to your CRM, managing your account Qualification and matching: Matching leads to your service areas, capacity and lead tier Billing and payments Invoicing, processing payments, managing arrears, issuing credits Support and communication Responding to enquiries, scheduling discovery calls, sending service notices and delivery alerts
Direct marketing: Sending offers, case studies and campaign updates (see section 8)
Analytics and improvement: Measuring campaign performance, improving qualification criteria and website conversion
Risk, legal and compliance: Verifying accreditation and licensing, preventing fraud, resolving disputes, meeting legal obligations
We will not use or disclose your personal information for a purpose other than the purpose for which it was collected, unless you would reasonably expect it, you consent, or the use or disclosure is required or authorised by law (APP 6).
4. Recorded Calls
Discovery calls and support calls may be recorded for quality, training and record-keeping purposes. You will be notified at the start of any recorded call and may decline recording without affecting your ability to use our services. Recording without notice is prohibited under state and territory surveillance devices legislation and we do not do it.
5. Data Quality
We take reasonable steps to ensure the personal information we collect, use and disclose is accurate, up to date, complete and relevant (APP 10). You can update your business and account details at any time by contacting us using the details in section 17.
6. Homeowner Lead Data — How It Reaches You
This section is included so Clients understand the provenance of the data they receive and their own obligations.
6.1 How leads are collected
Homeowner personal information is collected through advertising campaigns we run on Meta, Google, TikTok and other channels, and through landing page forms operated by us. At the point of collection, homeowners are given an APP 5 collection notice and provide express consent to be contacted by us and by the solar installation business their enquiry is referred to.
6.2 What is collected
Name, email address, phone number, residential address or postcode, homeowner status, approximate monthly electricity bill, roof and shading details, and any financing indication the homeowner elects to provide.
6.3 Exclusive and shared leads
We supply leads under two tiers, and the tier is specified in your service agreement:
Exclusive leads are supplied to a single Client only. We do not supply that lead record to any other Client.
Shared leads are supplied to more than one Client. Homeowners are told at the point of collection that their enquiry may be referred to more than one solar installation business.
6.4 Your obligations as a recipient
Once a lead is delivered to you, you become an independent handler of that personal information. You are responsible for:
Complying with the Privacy Act and the APPs in your own handling of that data
Complying with the Spam Act 2003 when sending email or SMS, including functional unsubscribe facilities
Complying with the Do Not Call Register Act 2006, including relying only on consent that is current and within its validity period
Using the data only for the purpose of quoting on and supplying solar installation services
Not on-selling, sub-licensing or re-supplying lead data to any third party
We supply proof of consent (form submission timestamp, IP address, page URL and consent wording) on request for any lead we have delivered to you.
6.5 Credit and financing information
We do not access credit reporting bodies and we do not obtain, hold or supply credit reporting information, credit eligibility information or credit scores as defined in Part IIIA of the Privacy Act.
Any indication of financing suitability included in a lead record is self-reported by the homeowner and is an unverified statement of their own circumstances. It is not a credit assessment, credit report or credit check, and must not be relied upon as one. Any formal credit assessment is a matter for you or your finance partner.
7. When We Disclose Information
We may disclose personal information to:
Service providers: hosting and infrastructure, CRM and marketing automation, email and SMS delivery, call tracking and telephony, payment processing, accounting, analytics and advertising platforms
Professional advisers: lawyers, accountants and auditors, under obligations of confidentiality
Related entities and contractors: personnel engaged to deliver our services, bound by confidentiality obligations
Law enforcement and regulators: where required or authorised by law, including responding to lawful requests, enforcing our agreements, or where necessary to prevent a serious threat to life, health or safety
Acquirers: in connection with a merger, acquisition, restructure or sale of assets, subject to the acquirer being bound to handle the information consistently with this Policy
Anyone else you consent to
We do not disclose Client personal information to third parties for their own independent marketing purposes.
8. Direct Marketing (APP 7)
We may send you marketing communications about our services by email, SMS and telephone where you have consented or where consent is reasonably inferred from an existing business relationship.
Every commercial electronic message we send will:
Clearly identify GTSH Digital as the sender and include our contact details
Contain a functional unsubscribe facility
Honour unsubscribe requests within 5 business days, at no cost to you
To opt out, use the unsubscribe link in any message or contact us at [email protected]. You may also request that we stop using or disclosing your personal information for direct marketing purposes, and ask us to identify the source of your information, and we will respond within a reasonable period.
Telephone contact is made in accordance with the Do Not Call Register Act 2006.
9. Overseas Disclosure (APP 8)
Client records and homeowner lead records are hosted on servers located in Australia.
However, some of our service providers operate or store data outside Australia. In particular, our advertising, analytics and communications platforms may receive and process personal information in the United States, and in other countries where those providers maintain infrastructure, including Ireland and Singapore.
Before disclosing personal information to an overseas recipient we take reasonable steps to ensure the recipient does not breach the APPs, including through contractual data processing terms.
If you would like a current list of the countries in which our service providers store personal information, contact us at [email protected].
10. Cookies and Tracking Technologies
We use cookies, pixels, tags and similar technologies:
Type Purpose Essential Required for the site to function, including security and session management Analytics Understanding how visitors use the site and where they drop off Advertising Delivering and measuring advertising, including conversion tracking and remarketing audiences on Meta, Google, TikTok and LinkedIn Preference Remembering your settings
You can control cookies through your browser settings and through the consent banner on our website. Disabling cookies may limit some site functionality.
We honour Global Privacy Control and Do Not Track browser signals where technically supported.
11. Automated Processing
We use automated systems to filter, score and route lead enquiries against qualification criteria such as homeowner status, electricity bill threshold, roof suitability and service area.
These systems are used to determine which Client receives an enquiry. They are not used to make decisions that produce legal effects or similarly significant effects for individuals. Where an automated process materially affects the handling of your information, you may request human review by contacting us at [email protected].
[Retain and expand this section: transparency obligations for automated decision-making under the Privacy Act amendments commence 10 December 2026.]
12. Data Security
We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure (APP 11), including:
Encryption in transit (TLS) and at rest
Role-based access controls and multi-factor authentication on administrative systems
Vendor due diligence and contractual data protection terms
Regular access reviews and logging
No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we will notify you as set out in section 13 if a breach occurs.
13. Data Breach Notification
We comply with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act.
If we suspect an eligible data breach, we will carry out a reasonable and expeditious assessment within 30 days. If we conclude there has been an eligible data breach that is likely to result in serious harm, we will notify the Office of the Australian Information Commissioner and all affected individuals as soon as practicable.
14. Data Retention
We retain personal information only for as long as it is needed for the purposes set out in this Policy, or for as long as required by law.
Data Indicative retention Client account and contract records 7 years after the end of the relationship (Corporations Act and tax record-keeping) Financial and billing records 5 years minimum (ATO requirement) Consent records for leads supplied 5 years from date of consent Website analytics and advertising data 26 months, or the platform default where shorter Marketing contact records Until you unsubscribe, plus a suppression record retained indefinitely so we do not re-contact you
When information is no longer needed we destroy it or de-identify it (APP 11.2).
15. Access and Correction (APPs 12 and 13)
You may request access to the personal information we hold about you, and request that it be corrected if it is inaccurate, out of date, incomplete, irrelevant or misleading.
Send your request to [email protected]
We will verify your identity before acting on the request
We will respond within 30 days
We do not charge a fee for making a request. We may charge a reasonable cost-based fee for providing access to a large volume of information, and will tell you the amount before proceeding
If we refuse access or correction, we will give you written reasons and explain how to complain
16. Anonymity
You may deal with us anonymously or under a pseudonym where it is lawful and practicable. In most cases we cannot supply leads or process payments without identifying you and your business.
17. Complaints
If you believe we have breached the Privacy Act or the APPs:
Step 1 — Contact us Email: [email protected] We will acknowledge your complaint within 5 business days and respond in writing within 30 days.
Step 2 — Escalate to the regulator If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner:
Phone: 1300 363 992 (Monday to Thursday, 10am to 4pm AEST/AEDT)
Email: [email protected]
Post: GPO Box 5288, Sydney NSW 2001
Online: www.oaic.gov.au
Complaints about spam or telemarketing can be made to the Australian Communications and Media Authority at www.acma.gov.au.
18. Children
Our services are directed to businesses and are not intended for individuals under 18. We do not knowingly collect personal information from children. If we become aware that we have done so, we will delete it promptly.
19. Changes to this Policy
We may update this Policy from time to time. The current version is always available at www.solarprospect.com.au/privacy-policy and the effective date appears at the top of this page. Where changes are material, we will notify active Clients by email before they take effect.
20. Contact Us
GTSH Digital ABN 34 394 498 506 A sole trader business, trading as Solar Prospect
Email: [email protected] Website: www.solarprospect.com.au
This Policy is governed by the laws of Victoria, Australia.