Lead Form Consent Notice

C2A (Connect to Action) · Operated by 1BY0 SOLUTIONS · Aligned with India’s Digital Personal Data Protection Act, 2023 (DPDP) · Last updated: September 2026

This notice explains why personal details are collected on lead forms connected to C2A, how consent must be obtained, how you can withdraw consent, and how data is retained and shared. It applies to Meta / Facebook Lead Ads, RCS CTAs, and any web lead form that sends data into C2A.

Full policy: Privacy Policy · Sample compliant form: Lead form example

1. Why we collect each field

Name: to identify you and personalise follow-up by the business you contacted (service communication only).
Phone / mobile: so the business can call, SMS, WhatsApp, or RCS you about your enquiry (service communication). Required to create a lead record in C2A.
Email: to send replies, quotes, appointment details, or other responses related to your enquiry (service communication). Optional unless the specific form marks it required.
Other form answers (property preference, city, budget, etc.): to understand your request and route it to the right salesperson.

We do not collect these fields to sell your data. C2A stores them for the business account that owns the form / campaign so their team can follow up.

2. Consent under DPDP (India)

Under the DPDP Act, consent for personal data must be free, specific, informed, unconditional, and based on clear affirmative action.

Free: you choose to submit; submitting is not forced by unrelated conditions.
Specific: you know which business and which purpose (responding to your lead / enquiry).
Informed: this notice and the Privacy Policy explain use, retention, and sharing.
Unconditional: service follow-up is not bundled with unrelated processing without a separate choice.
Affirmative action: you actively submit the form / tick consent boxes. We do not use pre-ticked marketing consent.

3. Service communication vs marketing

Service communication (necessary for the enquiry): calls, messages, or emails about your request, appointment, quote, or support. This is the primary purpose of a lead form.
Marketing communication (optional): newsletters, promotions, or offers not directly related to your current enquiry. This requires a separate, unticked opt-in. Declining marketing does not block you from submitting a lead for service follow-up where the form allows.

Businesses using C2A must configure Meta Lead Ads (and any other forms) with clear consent language and must not pre-tick marketing consent.

4. How to withdraw consent

Email support@c2a.app with subject “Withdraw consent — C2A” and your phone/email used on the form.
Ask the business you submitted to (they control the lead in their C2A workspace) to stop contacting you and/or delete your lead.
For Meta forms, you may also use Meta’s tools and the Page’s privacy controls where available.

Withdrawal does not affect processing already completed lawfully before withdrawal. We will stop or instruct the business account to stop further processing for the withdrawn purpose as soon as practicable.

5. Retention, use & sharing

Use: store the lead in the customer’s C2A workspace; show it to authorised App Admins and assigned staff; enable follow-up, notes, status, and reporting.
Sharing: with the business that owns the form/campaign; with Meta or RCS providers only as needed to receive the lead; with infrastructure vendors who process data on our instructions. We do not sell personal data.
Retention: while the business account remains active and the lead is needed for follow-up or legal/compliance records, or until deletion is requested (subject to lawful retention needs).

6. Privacy notice on forms

Every lead form connected to C2A should make this notice and the Privacy Policy easy to open before submit:

Consent notice: https://c2a.app/consent/
Privacy Policy: https://c2a.app/privacy/
Example form UI: https://c2a.app/lead-form/

For Meta Lead Ads, add these URLs in the form’s privacy / custom disclaimer fields so users can open them before submitting.

7. Contact & grievance

Data requests: support@c2a.app
Grievance: Company & Grievance