Privacy policy.

Updated: 2 November 2026.

Who this policy covers

Hillstone Security Services operates under The Trustee for BLUE BAY TRUST, ABN 40 677 155 005. This policy covers Hillstone Security Services’ website and the installation, upgrade, maintenance and repair enquiries made through it. It does not describe how a customer operates CCTV, access control or alarm equipment at their own premises.

For privacy questions, contact Craig Bortignon at [email protected] or 0418 946 523. You can also write to PO Box 599, Wembley WA 6913.

Information you give us

The enquiry form asks for your name, email, phone number, suburb or town, postcode, premises type, the system and work you need, and preferred timing. Your business name and additional project details are optional. We also keep the details of any follow-up conversation needed to handle your request.

Please only provide information you are entitled to share. Do not include passwords, alarm codes, access credentials, footage or detailed security plans. We can agree a suitable way to exchange sensitive project information later.

You can browse without giving us your contact details. To send an online enquiry, we need the required fields so we can understand and respond to it. You can call us instead to discuss what information is needed.

How we use it

Craig receives installation, upgrade, maintenance and repair enquiries through Hillstone’s GoHighLevel account. We use these details to acknowledge your enquiry by email, respond, discuss requirements, prepare a quote, arrange agreed work and keep a record of the request. We also use limited technical information to secure the website and investigate problems.

Submitting an enquiry is permission to discuss that request. It does not subscribe you to a marketing mailing list. Website enquiries are for Hillstone; they are not allocated or sold to other installers through a lead marketplace.

Website storage and security checks

The website holds your unfinished answers in the current page so you can close and reopen the quote window. It does not save those answers in browser local storage. It can keep campaign labels and advertising click identifiers from a link in your browser’s session storage and attach them to a submitted enquiry to identify its source. Session storage normally clears when that browser tab or session ends.

This website uses Cloudflare Web Analytics to understand page visits and loading performance. It does not use analytics cookies or track visitors across websites. No advertising pixel is installed. Cloudflare also provides hosting and security. When live forms are enabled, Cloudflare Turnstile processes browser, device and network signals, including an IP address, to detect automated abuse. See Cloudflare’s Turnstile Privacy Addendum.

Service providers and overseas processing

Enquiries are stored in Hillstone’s GoHighLevel account as a contact, enquiry note and pipeline record. LitoAcquisition administers the website and CRM on Hillstone’s behalf. Authorised staff and service providers need access to the information required for their role.

Cloudflare and GoHighLevel use infrastructure and support teams outside Australia. GoHighLevel lists core data storage in the United States and support processing in India. Cloudflare operates internationally and describes primary storage in the United States and the European Economic Area. Your information may therefore be processed overseas. See GoHighLevel’s service-provider list and Cloudflare’s privacy policy. We may also disclose information when required by law.

Keeping and protecting information

Access to enquiry records is limited to people who need it to respond or administer the service. We take reasonable steps to protect information, but no online system can be guaranteed completely secure.

We keep enquiry records while they are needed to respond or manage agreed work. Inactive enquiries are reviewed at least annually, and information that is no longer needed is securely deleted or de-identified. Records needed for ongoing work, warranty matters, disputes or applicable legal obligations are retained for those purposes and reviewed again when those needs end. Craig manages privacy and deletion requests, with authorised administration support where needed.

To prevent duplicate processing, the enquiry system keeps a random request reference, a one-way fingerprint of the submitted business details and limited processing state, including relevant GoHighLevel record identifiers. These technical records do not contain your answers, email address or phone number. They are retained as needed to prevent a repeated request from creating duplicate records and are reviewed with the enquiry under the retention process below. An abuse-rate counter expires after 10 minutes. Removing technical records does not delete your enquiry from GoHighLevel or provider security logs.

Access, correction and privacy concerns

Contact us using the details above to request access to your information, correct it, ask about deletion or raise a privacy concern. We may need to verify your identity before providing or changing records. We will explain any information we need and any legal reason that prevents a request being fulfilled.

Tell us what happened and the outcome you are seeking. We will review the concern and respond. If you remain dissatisfied, you can contact the Office of the Australian Information Commissioner for information about available complaint options.

Website imagery

The commercial security images on this website are AI-generated illustrations. They show example settings and equipment, not completed Hillstone installations or client premises.

The decorative Western Australia map uses simplified Australian Bureau of Statistics 2021 boundary data via geoBoundaries, adapted for a three-dimensional graphic under CC BY 4.0. It is not a service-coverage map.

Changes to this policy

We will update this page when the website’s information-handling practices change. Policy version: 2026-11-02.