Privacy policy

This policy explains how DFRNT Group Pty Ltd collects, holds, uses, sells and discloses personal information. It covers every brand and website we run, including DFRNT Group. It takes effect on 6 November 2026.

We are covered by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. We trade in personal information: when you send an enquiry through one of our own brands, we sell that enquiry to a business that pays us for it. This policy says plainly how that works.

How a lead is handled

This is the short version for anyone who has filled in one of our forms or quizzes. The rest of the policy has the detail.

1. You answer questions and give your name, phone, email and address on one of our pages. Some pages show you a price or rebate estimate once you do.
2. We store your enquiry and work out its map location from your address or suburb. We check whether it duplicates one you sent earlier, and record signals that help us spot bots and fake enquiries.
3. If the page belongs to a business we run it for (that business is named on the page), your enquiry goes to that business. We do not sell it to any other business.
4. On our own brands and pages, such as REEPA and SolarCompare, we sell your enquiry to one business that buys enquiries like yours in or near your area. That business pays us a fee for it.
5. That business receives your contact details and your answers, and may call, text or email you about your enquiry.
6. If no business can take your enquiry when it arrives, we hold it. If a business near you has run out of funds, has reached its budget or has its account on hold, we wait 24 hours and try again to match your enquiry to a business that can take it then. If none can, we hold it.
7. We may then sell a held enquiry, once, to a business that buys enquiries from us, at a lower price that falls as the enquiry ages. We do this for up to 40 days after you send it. It will be a business that does the type of work you asked about, in your area or further away.
8. We also send scrambled (hashed) copies of your contact details and details of your device to Meta, to measure and improve our ads.
9. You can ask us at any time to stop passing your details on, to tell you where we got them, to see or fix them, or to delete them. Email privacy@dfrntgroup.com.

Who we are

DFRNT Group Pty Ltd (ABN 21 679 198 317) runs a lead generation business and the DFRNT Leads app. Our address is 109 Robertson Street, Fortitude Valley QLD 4006. In this policy, "we", "us" and "our" mean DFRNT Group Pty Ltd, and "you" means the person whose information we hold.

Our brands and websites

REEPA is a brand of DFRNT Group Pty Ltd. SolarCompare and Solar Leads are names of pages run by DFRNT Group Pty Ltd. None of them is a government body, a charity or a separate company. This one policy covers them all.

Who this policy covers

• People who send an enquiry through one of our forms, quizzes or wizards. We call this an enquiry or a lead.
• Businesses that buy enquiries from us (buyers), and the people who work for them.
• Businesses we run advertising for (managed clients), and the people who work for them.
• People who book or buy consulting from us.
• People who visit our websites or use the DFRNT Leads app.
• People who call, text or email us, or use our contact form, or whose details reach us through our phone system or a client's customer system.
• People whose public Google reviews of a managed client we show on that client's pages.
• Our staff, contractors and job applicants.

What we collect

People who send an enquiry

• Your name, phone number and email address.
• Your street address, suburb, state and postcode, and the map coordinates we work out from them.
• Your answers to the questions on the page, such as your property, your energy use and bills, the system or product you want, your budget and your timing.
• Anything you type in a notes or message field.
• The price or rebate estimate we showed you.
• How you reached the page: the ad or link you clicked, ad click identifiers (such as Meta and Google click ids) and campaign tags.
• Your device and visit details, such as a scrambled (hashed) copy of your IP address, your device, your approximate country, region and city, the page address, the page that sent you and how long you spent on the page. These are described under "Cookies, pixels and device identification" below.

Our quizzes record each answer as you choose it, with your visit id, even if you do not finish. If you then send your enquiry, we link those answers to it. Device identification and the Meta pixel start when the page loads, before you type anything.

We do not ask for sensitive information such as health details. Please do not include it in a notes field.

Buyers and their staff

• Your business name, ABN, address, website and the trades and areas you serve.
• The names, emails, phone numbers and roles of the people on your account, and their login details.
• Your campaigns, territories, budgets, credit balance, invoices and payment history.
• Card and payment details, which Stripe holds. We see only limited card details, such as the last four digits.
• Referral codes you share or use, and the lead credits you earn from referrals.
• Your acceptance of our terms, and messages between you and us.
• Whether you open our emails.

When you sign up, we send Meta hashed copies of your contact details, to measure and improve our ads.

Managed clients and their staff

• Contact details of the people we work with, and their logins.
• Contracts, invoices, payment details, approvals and messages.
• Your advertising accounts and results.
• Records in the customer systems you connect to us, such as your CRM, booking tool or sales pipeline. This can include your own customers' details.

Consulting clients

• Your name, business, email and phone, the time you book, what you want to discuss, and your payment.

Website and app visitors

• Your IP address, browser and device type, the pages you view, the page that sent you, and when you visit.
• Ad click identifiers and cookie ids, as described below.
• If you sign in to the app, your account activity.

People who call, text or email us

• Your name, number or email address, what you tell us, and our notes.
• Some calls are recorded and transcribed through JustCall.
• When a managed client gives us access to its phone system, we may also read recordings and transcripts of its calls with customers. We do this to learn what customers ask, so we can improve that client's advertising. We may analyse these transcripts with AI tools, including Google Gemini, for this research.

People whose reviews we show

• When we build pages for a managed client, we may show public Google reviews of that client, with each reviewer's name and profile picture as Google shows them.

Staff, contractors and job applicants

• Your name, contact details, address, date of birth, emergency contact and identity documents.
• Your tax file number, bank account and superannuation details, pay, leave and contract, including your signature.
• If you apply for a job: your application, resume, interview notes and references.

We use a tax file number only for tax and superannuation purposes allowed by law. Some staff records are also governed by workplace and tax laws.

How we collect it

We collect most information directly from you: when you fill in a form or quiz, sign up, book, call or email us, or work with us.

We also collect information from other sources:

• Google, when it turns your address into map coordinates.
• A managed client's own systems, when the client connects them to us.
• Public sources, such as the Australian Business Register, which we use to check a buyer's ABN, and business websites, listings and public Google reviews.
• Someone who refers a business to us.

You do not have to give us your details. You can browse our pages without giving us your name or contact details. But we cannot pass on an enquiry, give you a personalised estimate, open a buyer account or employ you without them.

Cookies, pixels and device identification

Our pages use cookies, browser storage and similar tools. We have not set up a way to switch them off on our pages, so the tools below run when you visit. You can block or delete cookies in your browser settings, though some pages may then not work.

• Meta pixel and Conversions API. The pixel runs on our pages. When you send an enquiry, book or take other steps, our servers also tell Meta. Meta receives hashed copies of your email, phone, first and last name, suburb, state, postcode and country, plus your IP address, browser details, Meta cookie ids and our id for your enquiry. We may also send event details, such as your state and postcode in plain form, the estimated value of an enquiry, whether it is in an area we serve and whether it was sold. We use this to measure our ads and to help Meta show them to people likely to respond. Meta also uses this information under its own terms.
• Fingerprint device identification. On our landing pages and buyer sign-up pages, Fingerprint identifies your browser and device once per visit. It records your IP address and an approximate location from it, your browser, whether you use a VPN or private browsing, and the page you were on and the page that sent you. We link this to your visit and enquiry to help spot bots, fraud and duplicate enquiries.
• Google Tag Manager and Google Analytics. These load the tags we set in them, which report the pages you view, your device and how you arrived. Tag Manager can load other measurement tools. We name each one we use in this policy.
• Map tiles. The maps in our app load from Mapbox, which receives your IP address from your browser.
• Our own cookies and browser storage. A referral cookie (dfrnt_ref) lasts 60 days, so we know who referred a buyer. A Meta click cookie (_fbc) lasts 90 days. Login cookies keep you signed in to the app. We keep visit ids in your browser's local storage. Some forms keep your answers and contact details in your browser's session storage while you complete them, so they are not lost if the page reloads.

Your estimate page has its own web address. Anyone with that address can open it, and it does not expire. Do not share it.

How we hold it

We hold personal information electronically: mainly in our database in Sydney, and with the service providers listed below. Some records, such as exports, reports and call transcripts, are also held on our own work computers.

Why we collect and use it

• To sell each enquiry to one business that can help, or pass it to the managed client whose page you used.
• To hold enquiries no business can take at once, and to sell them later as described below.
• To show you a price or rebate estimate. These are guides, and the business confirms the actual price.
• To check enquiries for bots, fraud and duplicates.
• To run, measure and improve advertising for our brands and our managed clients.
• To set up and run buyer, client and consulting accounts, bill them and take payment.
• To send buyers and clients service messages, and to market our services to businesses.
• To answer your questions and complaints.
• To employ and pay staff and contractors, and to consider job applications.
• To keep records the law requires, and to protect our rights in a dispute.

Selling enquiries to businesses

When you send an enquiry through REEPA, SolarCompare or another of our own brands or pages, we sell it to one business. A computer program picks the business. It matches your location and the type of job to the areas and services buyers have set up, or to places within 20 km of them. It also checks that the buyer has funds and budget at that moment. Where several buyers cover your area, it looks at how many enquiries each has had against its weekly goal. The buyer pays us a fee for each enquiry, and also pays a share of what the ads cost.

We sell each enquiry to one business only. We do not sell the same enquiry to several businesses. If we send an enquiry to the wrong business by mistake, we withdraw it and send it to the right one.

What a buyer receives

• Your name, phone, email and address.
• Your suburb, state, postcode and the type of job.
• Your answers to the questions on the page and anything you typed in a notes field.
• When you sent the enquiry.

The buyer does not receive the ad click ids or our ad measurement data. Every person on the buyer's account can see the enquiry. The buyer can download it, or send it into its own systems, such as a CRM, by a web link the buyer chooses. Those systems may be outside Australia. The buyer keeps access to the enquiry in our app for 30 days after its account closes, and keeps any copies it has made in its own systems.

What a buyer must do

A buyer is responsible for how it handles your details once it has them. Our terms require every buyer to:

• Use your details only to respond to your enquiry, and not for other products or marketing unless you agree.
• Not sell, give or share them, except with its own staff and service providers who need them to respond to your enquiry.
• Follow the laws that apply when it contacts you, including the Spam Act 2003 (Cth) and the Do Not Call Register Act 2006 (Cth), and the Privacy Act 1988 (Cth) where it applies to the buyer.
• Honour an opt-out within 5 business days.
• Delete your details within 5 business days when we pass on a deletion request, and update them within 5 business days when we pass on a correction.
• Tell you truthfully, if you ask, that it got your details from us.
• Keep your details secure, and tell us within 24 hours of any breach.
• Delete your details once they are no longer needed.

A buyer may also have its own duties under the Privacy Act and its own privacy policy. If you want a buyer to stop contacting you, tell the buyer, and tell us so we can pass it on. If you think a buyer has misused your details, tell us. We can act under our terms, including stopping its account.

Enquiries we hold and sell later

Sometimes no business can take an enquiry when it arrives. This happens when:

• No buyer serves your area or that type of job.
• The buyer near you has paused its campaign. We hold your enquiry straight away.
• The business near you has run out of funds, has reached its budget or has its account on hold. We wait 24 hours and try again to match your enquiry to a business that can take it then. If none can, we hold it.

We then hold your enquiry. Held enquiries go on a discounted list in our app. A held enquiry can be bought only by a business that buys enquiries from us and does the type of work you asked about. It may be in your area or further away. The business near you that could not take it can also buy it. Each held enquiry is sold once only. The price starts at A$15 and falls to A$3 as the enquiry ages. We offer a held enquiry for up to 40 days after you send it, then stop offering it.

Every buyer signed in to our app can see a map of held enquiries waiting for a buyer. The map shows an approximate location, rounded to about 1 km, the type of job, its age and its price. It does not show your name or contact details. Once a business buys a held enquiry, it receives the same details and has the same duties as any other buyer.

Enquiries for managed clients

We also run advertising, landing pages and quote forms for business clients. On those pages we collect your enquiry on behalf of the client named on the page.

• We store your enquiry and answers in our system.
• We send your enquiry to the client, either straight into its customer system (for example a CRM such as Zoho) or by a web link the client chooses, such as Zapier. If you book a time on a client's booking page, we send the booking to the client's booking system (for example Zoho Bookings).
• We use your enquiry to run and measure the client's ads, including sending event data to Meta as described above.
• The client pays us for our work, through fees such as a management fee.

The client is a recipient of your details and handles them under its own privacy policy. We handle our copy under this one. We do not sell managed client enquiries to other businesses, and they never go on the discounted list.

Service providers and other recipients

Besides buyers and managed clients, we share personal information with the service providers below. They act for us under their own terms. Some of them, such as Meta, also use the information for their own purposes under their own terms.

We may also disclose information to our professional advisers, to a buyer of our business, or where the law requires or allows it, such as to a regulator or court.

Sending information overseas

Some of the providers above hold information outside Australia. Most of them are in the United States. Fingerprint holds device data in India. Xero may also access accounting records from New Zealand, and Google Gemini may process call transcripts in other countries where Google has facilities. Vercel also serves pages from locations around the world. A buyer or managed client may also load your enquiry into its own systems, which may be held in other countries that we do not choose.

Under the Privacy Act, we remain responsible for how an overseas provider we disclose your information to handles it.

Direct marketing and contact

Calls, texts and emails about your enquiry

When we sell your enquiry, we are helping a business market its services to you. The business that buys your enquiry, or the managed client named on the page, may contact you about it.

A line of text under the button you press to send your enquiry tells you that, by sending it, you agree to be contacted about it, or that you agree to the page's terms, which include this contact. When you send it, the business that buys your enquiry, including a business that buys it as a held enquiry, may call, text or email you about it for 3 months from the day you send it, even if your number is on the Do Not Call Register. After that, contact is between you and that business: it needs your further agreement or another lawful basis, and it must follow the Do Not Call rules. We keep a record of the wording you were shown and when. You can withdraw your agreement at any time by telling that business or emailing privacy@dfrntgroup.com.

Marketing from us

We send marketing emails to businesses about our services, such as offers for buyers. We do not email, text or call people who send an enquiry to market our own services. Meta may still show you our ads, based on the pixel and events described above.

Our marketing emails name us and include a way to unsubscribe. You can also email privacy@dfrntgroup.com to stop all of them, and we will stop within 5 business days. We keep one unsubscribe list: an unsubscribe from any of our emails stops every marketing email we send to that address, and messages from our staff carry a stop link.

Your choices

Under APP 7 of the Privacy Act, you can ask us, free of charge:

• Not to send you direct marketing.
• To stop selling or passing on your details to businesses for their marketing.
• To tell you where we got your details.

Email privacy@dfrntgroup.com with the email address or phone number you used. We stop marketing emails, and stop passing on your details, within 5 business days of your request. We act on your other requests within 30 days.

If you ask us to stop passing on your details, we take your enquiry off sale and tell any business that has already bought it. We keep a record of your request so we do not sell a later enquiry from the same email or phone. We log every request, whether you send it by email or through the form on our privacy page.

Automated decisions

We use computer programs to make some decisions with personal information. From 10 December 2026, APP 1.7 and APP 1.8 of the Privacy Act require us to describe these decisions. We describe them here.

The kinds of personal information these programs use are: your location and the type of job, your answers, your contact details (to find duplicates), your device and visit signals, and, for buyers, your areas, budget, funds and account status.

Decisions made by a computer program alone:

• Which buyer receives your enquiry, or whether we hold it.
• Whether a held enquiry goes on the discounted list, at once or after the 24 hours, and its price as it ages.
• Whether an enquiry duplicates one sent earlier the same day.
• The price or rebate estimate shown to you.
• Whether we report your enquiry to Meta as a lead, where a quality check is switched on.
• For buyers, pausing delivery when funds run out or a budget is reached, and automatic top-ups where the buyer has switched them on.

Decisions where a computer program does a main part of the work, and a person or another system makes the final call:

• Which people see our ads: we send event data to Meta, and Meta's systems choose who sees them.
• Whether an enquiry or visit looks like a bot, fraud or poor quality. This uses Fingerprint signals and rules, and may use AI classification through TypeSafe when we switch it on. Staff may act on the result.

We may use automated tools, including AI services, to assess whether an enquiry is genuine and to sort enquiries. No decision that affects you is made by those tools alone.

If you think a decision about your enquiry or account was wrong, email privacy@dfrntgroup.com and a person will review it.

How long we keep it

We keep personal information only while we need it for the purposes in this policy, or longer where the law requires. We are setting up scheduled deletion. Until it runs, we delete or de-identify information when you ask us to, as described below.

We may keep information longer if we need it for a complaint, dispute or claim. Buyers and managed clients keep their own copies of enquiries under their own policies.

Security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, change or disclosure. These include sign-in controls on our app, limits on who can see what, and encrypted connections between your browser and our servers. No system is completely secure.

If we suspect a data breach, we assess it promptly. If it is likely to result in serious harm to anyone, we tell the people affected and the Office of the Australian Information Commissioner (OAIC), as the Privacy Act requires.

Access and correction

You can ask to see the personal information we hold about you, and ask us to correct it if it is wrong, out of date or incomplete. Email privacy@dfrntgroup.com or write to us at the address below.

• Asking is free, and so is a correction.
• We may need to confirm who you are before we act.
• We will respond within 30 days.
• If we refuse, we will tell you why in writing and how to complain.
• If we correct details we have already given a buyer or managed client, we will tell them about the correction if you ask, unless that is impracticable or unlawful.

You can also ask us to delete your information. We will delete it or remove what identifies you, except what the law requires us to keep, and we will tell any buyer or managed client that received it.

Complaints

If you think we have mishandled your personal information, contact us first:

• Email: privacy@dfrntgroup.com
• Post: Privacy, DFRNT Group Pty Ltd, 109 Robertson Street, Fortitude Valley QLD 4006

Tell us what happened and what you would like us to do. We will look into it and give you a written answer within 30 days.

If you are not satisfied with our answer, or we do not respond within 30 days, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Children

Our services are for people aged 18 or over. Our forms are not meant for anyone under 18. If you think someone under 18 has sent us their details, email privacy@dfrntgroup.com. If we have not sold that enquiry, we will not sell it. If we have, we will tell the business to delete it. We will delete our copy unless the law requires us to keep it.

Changes to this policy

We update this policy when our practices change. The date at the top shows when this version took effect. We will tell buyers and managed clients by email about changes that affect them.

Contact us

DFRNT Group Pty Ltd, ABN 21 679 198 317

109 Robertson Street, Fortitude Valley QLD 4006

Email: privacy@dfrntgroup.com

This policy is free to read here. If you would like a copy in another form, email privacy@dfrntgroup.com.