1. Introduction
Buyfinder Australia Pty Ltd (ACN 696 397 903, ABN 30 696 397 903) ("BuyFinder", "we", "us", "our") is committed to handling personal information responsibly and in accordance with the Privacy Act 1988 (Cth) ("Privacy Act") and the Australian Privacy Principles ("APPs") contained in that Act.
This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the BuyFinder platform ("Platform"). BuyFinder is an APP entity and the Privacy Act applies to our handling of personal information.
By accessing or using the Platform, you acknowledge that we may collect, use and disclose your personal information as described in this Privacy Policy.
2. Information We Collect
- •Full name
- •Email address
- •Phone number
- •Password (encrypted)
- •Profile photo (optional)
- •Agency name and details
- •Professional role (agent, homeowner, administrator)
- •Specialisation areas and suburbs
- •Other professional details you choose to add
- •Property addresses and details you upload
- •Listing information and photos
- •Pricing and commission details (where you enter them)
- •Open home schedules
- •Messages sent through the Platform
- •Email and SMS communications
- •Document signing records and timestamps
- •Full name, email address, and IP address recorded at the time of signing
- •Date and time of signing (UTC)
- •Phone number used for one-time SMS verification (OTP) prior to signing
- •Cryptographic hash of the signed document content
- •Login history and session information
- •Pages visited and features used
- •Device information and browser type
- •IP address and approximate location
- •Cookies and similar technologies
- •Subscription and payment details
- •Billing history
- •Invoice records
We may collect certain categories of personal information depending on how you use the Platform and what features are enabled. This may include:
Account Information:
Professional Information:
Property and Listing Information:
Communication Data:
Electronic Signature Data:
Usage Data:
Transaction Information:
Consequences of not providing information:
If you choose not to provide certain personal information, we may not be able to create your account, verify your identity, send you OTP verification codes required for signing documents, process payments, or provide full access to Platform features. Where providing information is optional, you can decline without affecting your access to that feature.
3. Source of Information
- •Directly from you when you register, use the Platform or contact us
- •From agency administrators or colleagues who create or manage accounts on your behalf
- •From your activity on the Platform
- •From integrated service providers (for example, authentication or payment providers)
- •From public or professional sources where reasonably necessary for platform operations
Personal information may be collected:
4. How We Use Your Information
- •Create and manage your account
- •Enable property listings and agent connections
- •Process conjunction agreements and document signing
- •Enable messaging between users
- •Send email and SMS notifications requested by users
- •Deliver platform updates and alerts
- •Provide customer support
- •Detect and prevent fraud or abuse
- •Comply with legal obligations
- •Enforce our Terms and Conditions
- •Process payments and subscriptions
- •Send invoices and receipts
- •Analyse usage patterns and trends
- •Develop new features and services
- •Fix bugs and improve performance
- •Respond to lawful requests
- •Investigate misuse or enforce terms
We use personal information for the following purposes:
Provide and administer the Platform:
Enable invitations, collaboration and communications:
Maintain records and security:
Process payments:
Troubleshoot, analytics and product improvement:
Comply with legal obligations and investigate misuse:
5. How We Share Your Information
- •Cloud hosting and data storage (Google Cloud, Firebase)
- •Authentication services (Google, Firebase Auth)
- •Email and SMS delivery (Twilio, SendGrid)
- •Messaging infrastructure (Stream)
- •Payment processing (Stripe)
- •Analytics (Google Analytics)
BuyFinder does not sell your personal information.
We may share your information with:
Other Platform Users:
Certain profile, contact and transaction-related information may be visible to other users as part of core platform functionality. Contact details may be shared when you accept an invitation or enter an agreement.
Users are responsible for only uploading personal information they are authorised to share. BuyFinder is not responsible for how another user handles information once lawfully shared through core platform functions, except to the extent required by law.
Service Providers:
We engage third-party service providers to help operate our Platform:
These providers are contractually obligated to protect your information and use it only for the services they provide to us.
Legal and Regulatory Authorities:
We may disclose information where required by law, court order, or regulatory request.
Business Transfers:
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
6. Business Contact Information
Since this is a platform for real estate professionals, some information we collect and disclose may be business contact information and professional profile information used to operate the network and platform functionality. This helps frame how we handle information in the context of our business model.
8. Data Security
- •Encryption of data in transit (HTTPS/TLS)
- •Secure password hashing
- •Access controls and authentication
- •Secure cloud infrastructure
- •Employee training on data protection
- •Keep your login credentials confidential
- •Use a strong, unique password
- •Log out of shared devices
- •Report any suspected security breaches
BuyFinder implements safeguards appropriate to the nature of the information and risk profile, including:
Your Responsibilities:
No Absolute Guarantee:
We cannot guarantee absolute security. No method of electronic transmission or storage is 100% secure.
Data Breach Response:
If BuyFinder becomes aware of a data incident affecting personal information, we will assess the incident and take steps required under applicable law, including notification where legally required.
9. Data Retention
- •Active account data: retained while your account remains open and for a reasonable period after closure
- •Signed conjunction agreements and audit trails: retained for 7 years from the date of signing (consistent with standard legal and tax obligations)
- •OTP verification and signing records: retained as part of the document audit trail for the same period as the signed agreement
- •Payment and billing records: retained for at least 5 years as required by Australian tax law
- •Communications and messaging data: retained while your account is active and for up to 2 years after closure
- •Marketing preferences and opt-out records: retained indefinitely to honour opt-out requests
We retain personal information for as long as reasonably necessary for the purposes described in this policy. The following are indicative timeframes for common categories of data:
Typical retention periods:
Extended retention:
Information may be retained beyond these periods where required for ongoing legal proceedings, regulatory investigations, security reviews, or other legitimate legal or business reasons.
When information is no longer required, it will be de-identified or securely deleted, subject to backup cycle timelines and legal retention obligations.
Account Deletion:
You may request deletion of your account by contacting us at admin@buyfinder.com.au. Deletion of signed agreement records, payment records and audit trails may not be possible where retention is required by law or for dispute resolution.
10. Your Rights
Where applicable under Australian privacy law, you may have the right to:
Access Your Information:
Request access to the personal information we hold about you. Requests are subject to identity verification and legal limitations.
Correct Your Information:
Request correction of any inaccurate, incomplete, or outdated information.
Opt-Out of Marketing:
You may unsubscribe from marketing communications at any time using the unsubscribe link in our emails or by contacting us at admin@buyfinder.com.au.
Please note that opting out of marketing does not affect service-related communications. We will continue to send account alerts, OTP verification codes, document signing notifications, billing receipts, security notices and other transactional messages that are necessary for the operation of your account and the Platform.
Withdraw Consent:
Where we rely on your consent, you may withdraw it at any time, though this may affect your ability to use certain features.
Request Deletion:
Request deletion of your personal information. Deletion may not be possible where data must be retained for security, legal, billing, dispute or audit purposes.
Lodge a Complaint:
If you believe we have breached applicable privacy law, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
How to Exercise Your Rights:
Contact us at admin@buyfinder.com.au with your request. Response timeframes may vary depending on complexity, though we will respond within a reasonable period.
11. Third-Party Services
- •Google Sign-In: governed by Google's Privacy Policy
- •Twilio (SMS and Email): governed by Twilio's Privacy Policy
- •Stream (Messaging): governed by Stream's Privacy Policy
- •Stripe: governed by Stripe's Privacy Policy
- •Google Analytics: governed by Google's Privacy Policy
Our Platform integrates with third-party services that have their own privacy policies:
Authentication:
Communications:
Payments:
Analytics:
We encourage you to review the privacy policies of these third-party services.
External Links:
The Platform may contain links to external websites. We are not responsible for the privacy practices of these websites.
12. International Data Transfers
- •United States: Google (Firebase, Google Cloud, Google Analytics, Google Sign-In), Twilio (SMS/email), Stripe (payments), Stream (messaging)
- •Ireland and European Union: Google Cloud infrastructure (certain regions)
- •Other jurisdictions where our service providers operate their infrastructure
BuyFinder uses third-party service providers who may store or process personal information outside Australia. Under Australian Privacy Principle 8, we are required to disclose this and take reasonable steps to ensure overseas recipients handle your information appropriately.
Countries where your data may be processed:
What this means for you:
These overseas recipients may be subject to the laws of their own countries, which may differ from Australian privacy law. In some cases, foreign laws may require disclosure to government authorities without equivalent protections to those available under the Privacy Act 1988 (Cth).
BuyFinder takes reasonable contractual steps to ensure overseas providers protect personal information to a standard comparable to the APPs, including relying on data processing agreements and standard contractual clauses where applicable.
By using the Platform, you acknowledge and consent to your personal information being transferred to and processed in the countries listed above for the purposes described in this Privacy Policy.
If you do not consent to overseas transfer, you should not use the Platform, as these transfers are necessary for core platform functions including authentication, messaging, payments and document signing.
13. Children's Privacy
The Platform is intended for use by adults and licensed real estate professionals.
We do not knowingly collect personal information from children under 18 years of age.
If we become aware that we have collected information from a child, we will take steps to delete it promptly.
If you believe a child has provided us with personal information, please contact us at admin@buyfinder.com.au.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
Material changes:
For changes that materially affect how we collect, use or disclose personal information — such as new data types collected, new third-party recipients, or new overseas transfers — we will provide active notice by email or Platform notification at least 14 days before the change takes effect. You will have the opportunity to review the changes before they apply to your data.
Minor changes:
For minor updates such as clarifications, formatting corrections or changes to contact details, we will update the "Last updated" date. Continued use of the Platform after such changes constitutes acceptance.
We encourage you to review this Privacy Policy periodically. If you do not agree to a material change, you may close your account before the change takes effect by contacting us at admin@buyfinder.com.au.
15. Contact Us
- •Website: www.oaic.gov.au
- •Phone: 1300 363 992
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Email:
Legal entity:
Buyfinder Australia Pty Ltd (ACN 696 397 903, ABN 30 696 397 903)
Office of the Australian Information Commissioner (OAIC):
If you are not satisfied with our response to a privacy concern, you may contact the OAIC:
Questions about your privacy?
If you have any questions about this Privacy Policy or how we handle your data, please contact us.
admin@buyfinder.com.auBuyfinder Australia Pty Ltd · ACN 696 397 903 · ABN 30 696 397 903
