Data Protection Information

Last updated: June 26, 2026

Our Commitment to Data Protection

While we are based in Australia and primarily subject to the Privacy Act 1988, we recognize that some of our clients may be located in regions covered by the General Data Protection Regulation. This page outlines our data protection practices in alignment with international privacy standards.

Legal Basis for Processing

We process personal data under the following legal bases:

  • Consent: When you submit inquiry forms or opt in to communications, you provide explicit consent for data processing
  • Contract Performance: Processing necessary to deliver services you have engaged us to provide
  • Legitimate Interests: Business operations including website analytics and security, provided these do not override your privacy rights
  • Legal Obligations: Compliance with Australian business and financial record-keeping requirements

Data Subject Rights

You have the following rights regarding your personal information:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data in a structured, commonly used format.

Right to Rectification

If you believe any personal information we hold is inaccurate or incomplete, you may request correction.

Right to Erasure

You may request deletion of your personal data, subject to legal retention obligations for business records, financial documentation, and contractual agreements.

Right to Restrict Processing

You may request that we limit how we use your personal information in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

Where technically feasible, you may request transfer of your personal data to another service provider in a machine-readable format.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless we demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing before withdrawal.

Data Processing Activities

We process the following categories of personal data:

  • Identity data: name, title
  • Contact data: email address, postal address
  • Preference data: property search criteria, location preferences, budget parameters
  • Technical data: IP address, browser type, device information, cookies
  • Usage data: website navigation patterns, page views, time spent on pages

International Data Transfers

Your personal data is primarily stored and processed in Australia. If transfers to other jurisdictions occur, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions recognized under applicable law.

Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.

Data Retention Periods

Personal data is retained according to the following schedule:

  • Inquiry form submissions: 24 months from submission if no service engagement follows
  • Client consultation records: 7 years from completion of services for business record compliance
  • Marketing communications: until you unsubscribe or request deletion
  • Website analytics data: 26 months in aggregated form

Third-Party Data Processors

We engage limited third-party service providers who may process personal data on our behalf, including:

  • Website hosting and infrastructure providers
  • Email delivery services for consultation responses
  • Analytics platforms for website performance monitoring

All processors are bound by data protection agreements requiring security measures and restricting use of personal data solely for specified purposes.

Data Security Measures

We implement technical and organizational measures including:

  • Encryption of data transmission using SSL/TLS protocols
  • Access controls limiting personnel who can view personal information
  • Regular security assessments and updates to infrastructure
  • Secure backup procedures with encrypted storage
  • Staff training on data protection obligations

Data Breach Notification

In the event of a data breach likely to result in risk to your rights and freedoms, we will notify affected individuals without undue delay and inform relevant supervisory authorities as required by applicable law.

Exercising Your Rights

To exercise any of the rights described above, contact us at:

Email: [email protected]

We will respond to requests within 30 days. In some cases, we may require verification of your identity before fulfilling requests.

Supervisory Authority

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with:

Office of the Australian Information Commissioner (OAIC)
Website: www.oaic.gov.au
Phone: 1300 363 992

For individuals located in the European Union, you may also contact your local data protection authority.

Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware such data has been collected, we will delete it promptly.

Updates to This Notice

We may update this data protection information periodically. Material changes will be communicated through website notification or direct email to active clients.