Legal · Updated 19 October 2026
Privacy policy.
What we collect, why we need it and how to ask about it.
This policy covers lil.business, Customer Vault and advisory work. The supplier is lilMONSTER, a sole trader, ABN 59 870 881 596, Melbourne, Victoria, Australia.
We handle personal information under the Australian Privacy Principles in the Privacy Act 1988 (Cth). We do not sell it.
Discovery intake and booking
The form asks for your name, business name, email, what you need help with and your consent. We also record the consent version and submission time. We use these details to prepare for and answer your enquiry, not to sign you up for marketing.
Details are encrypted in the consultation service. The owner-only email notification contains a reference, not your answers. Keep passwords, health information and private customer records out of the form.
We keep consultation intake and linked CRM records for 7 years from submission for Australian record-keeping. They are then automatically deleted by a daily purge, normally within 24 hours of expiry. A contact linked to a newer intake stays until that intake expires.
Private backup snapshots last 24 hours and are removed in the next hourly cleanup. Restored snapshots are purged before use. Downtime can delay deletion and needs operator repair. We cannot promise physical erasure from storage hardware.
After saving your details, you may follow the link to Cal.com. That separate service receives the technical and booking details you provide there. It keeps its own records under its privacy policy. No calendar or cloud AI is embedded here.
Email shoutout@lil.business for access, correction, deletion or an enquiry without the form. The owner reads that mailbox. The automation does not read inbound email.
What else we collect
- Contact details you provide, including a phone number where relevant.
- Order details: product, date, amount and reference.
- Support messages and enquiries.
- Technical and business information you agree to share for an engagement.
- Request data such as IP address, browser and requested page, to run and protect the site.
Our payment provider handles card details. We never receive your full card number. Where lawful and practical, you can use a pseudonym or stay anonymous. Purchases and Vault access need contact details.
Do not send sensitive information, secrets or production data unless a signed engagement says how to handle them.
Where it comes from
We collect details from you when you enquire, buy, use Vault, book or email. The payment provider sends order information. Server logs may record technical requests. The previous newsletter signup is retired.
Why we use it
To fulfil purchases, provide Vault access, answer enquiries, deliver agreed services, keep required records, protect against abuse and send purchase-related service messages.
Marketing email requires consent or another lawful basis and a working unsubscribe. You can opt out at any time.
Who receives it
Only what each provider needs: payment, hosting and content delivery, email delivery, identity and Vault services, and our accountants or advisers. We may also disclose information when law requires it or to protect legal rights.
Some providers process information outside Australia. We take reasonable steps to choose appropriate protections and limit the information shared.
Cookies and separate services
The static storefront does not create an account or shopping cart. It has no advertising or analytics code. Hosting and security providers may process request data or use security cookies.
Customer Vault, Stripe and Cal.com have separate cookies and storage. Blocking cookies may stop parts of those services working. Read their policies before sharing information.
Storage and other records
We take reasonable steps against misuse, loss and unauthorised access or changes. No storage or transmission method is completely secure.
Order and financial records follow Australian legal retention requirements. Consultation records follow the seven-year rule above. Other engagement records follow the signed agreement. We delete or de-identify other information when it is no longer needed and no law requires retention.
If a breach happens
We assess suspected eligible breaches. Where the Notifiable Data Breaches scheme applies, we notify affected people and the Office of the Australian Information Commissioner.
Access, corrections and complaints
Ask what we hold or request a correction by email. We respond within 30 days and may first verify your identity. Requests are free. Any lawful access charge will be reasonable and explained first. If the law allows us to refuse access, we explain why.
If you think we mishandled information, email the details. We will investigate and respond. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner.
Changes and contact
The date above identifies this version. We announce material changes here. Victorian law governs this policy.
Contact shoutout@lil.business. Written notices: lilMONSTER, ABN 59 870 881 596, Melbourne, Victoria, Australia. Do not email card numbers, passwords or private client data.