Privacy Policy

Last updated: September 2026

1. About this Privacy Policy

Lithos Projects respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how Lithos Projects collects, holds, uses and discloses personal information in connection with:

our website;
enquiries and consultations;
project management consultancy services;
prospective client communications;
existing client relationships; and
our general business operations.

In this Privacy Policy, “Lithos Projects”, “Lithos”, “we”, “us” and “our” refer to:

[insert legal entity name]
ABN: [insert ABN]

This policy should be read together with our Website Terms of Use.

2. What is personal information?

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable.

Depending on how you interact with Lithos, this may include information relating to you personally as well as information connected with your property or project.

3. Personal information we may collect

The types of personal information we may collect include:

your name;
email address;
telephone number;
residential address;
project address;
project suburb;
contact preferences;
details about your proposed renovation, construction or owner-builder project;
indicative project budgets;
preferred project timing;
information about your desired level of involvement in the project;
plans;
drawings;
specifications;
photographs;
reports;
quotations;
schedules;
consultant information;
trade or supplier information;
project correspondence;
records of meetings, calls and site discussions;
information provided through an enquiry or consultation;
information relating to services provided by Lithos;
billing information relating to Lithos consultancy fees; and
information relating to feedback, complaints or enquiries.

We may also collect technical information when you use our website, including:

IP address;
browser type;
device type;
pages viewed;
time spent on the website;
referral source;
approximate geographic location;
cookie information; and
website analytics data.

4. Sensitive information

Lithos does not generally seek to collect sensitive information.

If sensitive information is provided to us and is reasonably necessary for a particular purpose, we will handle it in accordance with applicable privacy law.

We ask that clients avoid providing sensitive or unrelated personal information unless it is reasonably necessary for the project or engagement.

5. How we collect personal information

Lithos may collect personal information in a number of ways, including when you:

submit an enquiry through our website;
complete a consultation form;
book a consultation;
contact us by telephone;
contact us by email;
send us plans, drawings or project documents;
meet with us;
engage Lithos for consultancy services;
attend a site meeting;
provide quotations or consultant information;
communicate with us during the course of a project;
provide feedback or a testimonial; or
interact with our website.

We may also receive information from third parties where appropriate, including:

designers;
architects;
engineers;
building surveyors;
consultants;
contractors;
trades;
suppliers;
existing clients;
professional referrers; and
publicly available sources.

Where reasonably practicable, we collect personal information directly from you.

6. Why we collect personal information

Lithos may collect, hold, use and disclose personal information for purposes including:

responding to enquiries;
arranging consultations;
understanding a proposed project;
determining whether our services may be suitable;
reviewing plans and project information;
preparing proposals;
preparing consultancy agreements;
providing project management consultancy services;
coordinating project participants;
communicating with designers, consultants, contractors, trades and suppliers;
coordinating project documentation;
assisting with project planning and programming;
assisting with procurement and quotation review;
monitoring project progress;
maintaining project records;
administering our relationship with clients;
issuing invoices for Lithos consultancy fees;
maintaining financial and business records;
managing disputes or complaints;
improving our services;
improving our website;
conducting business administration;
complying with legal, insurance, professional or regulatory obligations; and
protecting our legal rights.

We will generally only use personal information for the purpose for which it was collected or for a related purpose where permitted by law.

7. Project information and documents

Clients may provide Lithos with project information including:

architectural drawings;
engineering drawings;
consultant reports;
specifications;
photographs;
quotations;
contracts;
trade information;
supplier information;
programme information; and
correspondence.

Lithos may use that information where reasonably required to provide project management consultancy services.

This may include sharing relevant project information with project participants where appropriate.

For example, Lithos may provide relevant drawings or project information to:

designers;
architects;
engineers;
consultants;
building surveyors;
contractors;
trades; or
suppliers

where this is reasonably necessary to coordinate the project.

8. Disclosure of personal information

Lithos may disclose personal information to third parties where reasonably necessary to operate our business or provide our services.

These parties may include:

architects;
building designers;
engineers;
planning consultants;
building surveyors;
technical consultants;
contractors;
trades;
suppliers;
insurers;
accountants;
lawyers;
professional advisers;
software providers;
cloud-storage providers;
email providers;
website hosting providers;
customer relationship management providers;
online booking providers;
website analytics providers; and
government or regulatory authorities where required or authorised by law.

We only disclose information where reasonably necessary for the relevant purpose.

Lithos does not sell personal information.

9. Trades, consultants and suppliers

Lithos is a project management consultancy.

Consultants, contractors, trades and suppliers involved in a client's project are generally independent third parties engaged directly by the client.

Where Lithos coordinates communication between those parties as part of our consultancy services, we may provide them with personal or project information reasonably required for the performance or coordination of their work.

Each third party may have its own privacy obligations and practices.

10. Website enquiry forms

If you submit an enquiry through our website, we may collect information such as:

your name;
email address;
telephone number;
project suburb;
project type;
indicative budget;
project stage;
proposed timing;
brief project description;
preferred level of Lithos involvement; and
project documents you choose to upload.

We use this information to:

respond to your enquiry;
assess whether Lithos may be suitable for the project;
prepare for an initial consultation; and
contact you regarding the project.

Providing an enquiry does not create a formal consultancy engagement.

11. If you do not provide personal information

You are not required to provide personal information simply to browse our website.

However, if you do not provide information reasonably required for a particular purpose, we may be unable to:

respond properly to your enquiry;
understand your project;
provide a consultation;
prepare a proposal; or
provide consultancy services.

12. Website cookies and analytics

Our website may use cookies and similar technologies.

These technologies may be used to:

operate the website;
remember website preferences;
understand website usage;
monitor website performance;
improve user experience;
understand which pages are most useful;
measure enquiry conversions; and
assess the effectiveness of marketing.

Information collected may include:

IP address;
browser information;
device information;
pages visited;
time spent on pages;
referral source; and
general location information.

You may be able to disable cookies through your browser settings.

Some website functionality may operate differently if cookies are disabled.

13. Google Analytics, Meta Pixel and similar services

If Lithos uses services such as:

Google Analytics;
Google Tag Manager;
Google Ads;
Meta Pixel;
social media advertising tools; or
similar analytics or advertising services,

those providers may collect information about your interaction with the website.

Before publication, this section should be updated to accurately reflect the tracking services actually installed on the Lithos website.

Do not list analytics or marketing platforms that Lithos does not actually use.

14. Booking and contact platforms

Lithos may use third-party platforms to manage:

consultation bookings;
enquiry forms;
email communications;
contact records; or
client relationship management.

If these services are used, information you provide may also be processed by the relevant platform provider.

Examples might include services such as Calendly, Microsoft 365, Google Workspace, HubSpot or another CRM or booking platform.

The final published version of this policy should reflect the systems Lithos actually uses.

15. Storage of personal information

Personal information may be stored:

electronically;
in email systems;
in cloud-based file storage;
in project management systems;
in customer relationship management systems;
in accounting systems; and
where necessary, in physical records.

Lithos takes reasonable steps to protect information from:

misuse;
interference;
loss;
unauthorised access;
unauthorised modification; and
unauthorised disclosure.

Security measures may include:

password protection;
access controls;
multi-factor authentication;
secure cloud storage;
restricted access to project information;
software security measures; and
appropriate business procedures.

No method of electronic storage or transmission is completely secure, and absolute security cannot be guaranteed.

16. Overseas storage and disclosure

Some technology providers used by Lithos may store or process information outside Australia.

This may occur where Lithos uses cloud-based services, website hosting, email, analytics, booking systems or other technology platforms.

Where applicable and reasonably practicable, Lithos will take reasonable steps to understand how those providers handle personal information.

If personal information is likely to be disclosed to overseas recipients, privacy law may require the policy or collection notice to identify that fact and, where practicable, the countries involved.

The final version of this Privacy Policy should be updated once Lithos's actual technology providers and data-storage arrangements are confirmed.

17. Marketing communications

Lithos may occasionally contact:

existing clients;
previous clients;
prospective clients; or
people who have made an enquiry

with information about our services or business where permitted by law.

You may ask us to stop sending marketing communications at any time.

Where an unsubscribe function is provided, you may use that function.

You may also contact Lithos directly.

18. Photographs, testimonials and case studies

Lithos may wish to use project information, photographs, testimonials or case studies for marketing purposes.

Where appropriate, Lithos will seek the relevant consent or permission before publishing identifiable client information.

Where a client provides a testimonial for marketing purposes, Lithos may publish the testimonial together with agreed identifying information such as:

first name;
project type;
suburb or general location; or
project photographs.

Lithos will not intentionally publish a client's private personal information without appropriate permission.

19. Retention of information

Lithos retains personal information for as long as reasonably required for the purposes for which it was collected.

This may include retaining information for:

ongoing project management;
project records;
contractual records;
financial records;
insurance purposes;
dispute management;
legal obligations; and
reasonable business record-keeping.

Information that is no longer reasonably required may be:

securely deleted;
securely destroyed; or
de-identified,

subject to applicable legal and business requirements.

20. Access to your personal information

You may request access to personal information Lithos holds about you.

To request access, contact us using the details at the end of this Privacy Policy.

We may ask you to verify your identity before providing access.

There may be circumstances where access can lawfully be limited or refused.

If access is refused, we will provide an explanation where required by law.

OAIC privacy guidance expects organisations covered by the Australian Privacy Principles to explain how individuals may access personal information held about them.

21. Correction of personal information

If you believe personal information held by Lithos is:

inaccurate;
incomplete;
out of date;
irrelevant; or
misleading,

you may ask us to correct it.

We will take reasonable steps to consider the request and update information where appropriate.

22. Privacy complaints

If you believe Lithos has mishandled your personal information, please contact us.

Your complaint should include enough information for us to understand:

what happened;
the information involved; and
the outcome you are seeking.

We will review the complaint and respond within a reasonable period.

If the Privacy Act 1988 applies to Lithos and you remain dissatisfied with our response, you may have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

OAIC guidance requires privacy policies of APP entities to explain how privacy complaints can be made and how they will be handled.

23. Australian Privacy Principles

Where Lithos is required to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, we will handle personal information in accordance with those requirements.

Where those laws do not apply to a particular activity, Lithos nevertheless aims to apply reasonable privacy and information-handling practices consistent with this policy.

24. Third-party websites

Our website may contain links to third-party websites.

Lithos is not responsible for:

the privacy practices of third-party websites;
the security of those websites; or
how those third parties collect or use information.

You should review the privacy policy of any external website you use.

25. Changes to this Privacy Policy

Lithos may update this Privacy Policy from time to time.

Changes may be required because of:

changes to our services;
changes to our website;
new technology providers;
changes in data-handling practices; or
changes to applicable law.

The current version will be published on the Lithos website and will show the date it was last updated.

OAIC guidance recommends keeping privacy policies current as an organisation's information-handling practices change.

26. Contact

If you have questions regarding this Privacy Policy, wish to access or correct your information, or wish to make a privacy complaint, contact:

Lithos Projects
[legal entity name]
ABN: [ABN]
Melbourne, Victoria, Australia
Email: info@lithosprojects.com.au
Phone: 0456 222 293