Lead terms

1. The form and who runs it

These terms explain what happens when you send a request through a service enquiry form on a website that Dotto runs the form for.

Dotto runs the form as a third party. Dotto is not the business the website is about. The website’s owner is the person or business that lists its domain name on Dotto, and has chosen to collect requests on it.

Dotto is [lawyer: Dotto’s legal entity name and address]. You can reach us at privacy@dotto.com.au.

We do not put this form on websites about injury or compensation claims, insurance, finance or credit, trading, sending money overseas, legal services or health.

2. The form’s wording

This is the notice the form shows, word for word:

And this is the box you tick to send your request:

This wording is version 2026-10-07-draft-2. We record the version you saw with your request, so we can always show what you agreed to.

3. Information collected

When you send a request, we collect:

• your name
• your email address
• your phone number, if you choose to give one
• your message
• the website and page you sent it from
• your consent, the time you gave it, and the version of the wording you saw

We also keep a scrambled code made from your IP address and browser details. It lets us spot repeated or automated requests without storing the address itself.

The form uses Cloudflare Turnstile to check that a person, not an automated script, is sending it. Turnstile runs when a page with the form loads, so your IP address and browser details reach Cloudflare even if you never send a request.

We need a way to reach you, or nobody can reply to your request. That is why your name and email address are required.

4. Purposes

We collect your request so that we can:

• share it with the website’s owner, who sees it in the Leads section of their Dotto account
• where the law allows, sell it as a lead to a business that provides the service the website is about, so that business can contact you about your request
• send you an email confirming we received it
• keep the form free of spam and abuse

When Dotto sells a lead, the business that buys it pays Dotto. [lawyer: confirm whether the website’s owner shares in any payment for a lead]

We do not use AI to read, sort or reply to requests sent through this form.

5. Recipients

Your request goes to:

• The website’s owner, in the Leads section of their Dotto account.
• A business that provides the service, which buys your request as a lead. [lawyer: confirm whether a lead may be sold to more than one business; the form’s consent says “a business”]
• Our service providers, who store and deliver it for us: hosting and database (Vercel, Supabase), email delivery (Resend) and bot protection (Cloudflare).

Some of our service providers store or process information outside Australia, mostly in the United States, as section 9 of our privacy policy explains. [lawyer: confirm overseas recipients, including where lead records are stored and whether a business that buys a lead may be outside Australia]

6. Consent

The form has a box of its own for your consent, apart from the notice, and it is never ticked for you. Your request is not sent unless you tick it.

Ticking it means you agree that Dotto may share your request with the website’s owner and may sell it as a lead to a business that provides the service, as these terms explain. It does not sign you up for marketing.

7. Sensitive details

Please leave out health, financial or other sensitive details, such as a medical condition, a debt, a legal matter or a criminal record. A business can contact you about your request without them.

If you include them anyway, they are shared along with the rest of your request. [lawyer: confirm how sensitive information sent despite the notice is handled]

8. Direct marketing

A business that buys your request may contact you by email, or by phone if you gave a number, about that request.

Anything beyond your request, such as a newsletter or offers for other services, needs your separate consent, and every marketing email must let you unsubscribe. That is the law under the Spam Act 2003 (Cth), and it applies to the business that contacts you.

Dotto’s own email to you confirms your request and promotes nothing. We do not add you to any mailing list.

9. Retention and deletion

We keep your request for 12 months from the day you send it, then delete it.

You can ask us to delete it sooner by emailing privacy@dotto.com.au. We will delete our copy, which also removes it from the website owner’s Leads section. A business that has already bought your request holds its own copy, so please contact that business too.

10. Access, correction and complaints

You can ask to see the details we hold about you, or to correct them, by emailing privacy@dotto.com.au. Our privacy policy explains how we handle your details and how to make a complaint.

If you are not happy with our answer, you can complain to the Office of the Australian Information Commissioner.

11. Changes to these terms

If we change the form’s wording, we give it a new version number. Your request stays under the version you agreed to.