Privacy policy.

1. About this policy

This policy explains how CHAD Property Pty Ltd (ABN 88 673 892 718) collects, uses, holds, and discloses personal information. We refer to ourselves in this policy as “CHAD”, “we”, “us”, or “our”. You are “you” or “your”.

We are committed to handling your personal information in accordance with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs).

2. What information we collect

When you fill in the introduction on this website, we collect:

• your name
• your email address and mobile number
• how you found us (and, where you tell us, who referred you)
• what you are looking to do (the property goal you select)
• your rough timeline
• your goals and your situation (in your own words)
• your pre-approval status
• your availability for a fit-check call
• your acknowledgement of our engagement fee structure

If we move forward into a fit-check call or a formal engagement, we may also collect:

• notes from our conversations with you
• information about your borrowing capacity, property strategy, and financial circumstances that is relevant to the buyer's-agent work
• identification documents and information required to satisfy our anti-money-laundering and counter-terrorism-financing obligations
• contact details for the professionals around you (your conveyancer, mortgage broker, property manager, accountant)

We do not collect sensitive information (as defined in the Privacy Act) unless you provide it voluntarily and it is relevant to the work we are doing for you. We do not collect tax file numbers through this website.

3. How we collect it

We collect personal information directly from you, in the following ways:

• when you fill in the introduction on this website
• when you correspond with us by email
• when you speak with us on a fit-check call or during an engagement
• when you provide identification documents required for the engagement

We do not buy lists of contacts. We do not collect personal information from third parties about you without your knowledge.

4. Why we collect it

We collect personal information so we can:

• read your introduction and decide whether CHAD is a fit for what you are trying to achieve
• reply to you personally and arrange a fit-check call
• deliver the buyer's-agent service to you if we move into a formal engagement
• meet our obligations under Australian law, including anti-money-laundering, taxation, and consumer protection requirements
• keep accurate records of our work for you

5. How we use and disclose it

Personal information you provide to us is read by the founders of CHAD (Dan Kwek and Charissa Lee). It is not sent to any external sales process or automated marketing system.

Where you become an engaged client, we may disclose your personal information to the professionals coordinating with us on your purchase, with your knowledge and at your direction. These typically include:

• your conveyancer or solicitor
• your mortgage broker or lender
• your appointed property manager
• your accountant or financial planner (where relevant to the property side of the engagement)

We use the following third-party service providers to operate the website and conduct our business. Each provider receives only the information necessary for its role:

• Google Workspace, for our business email and document storage
• the hosting provider of chadproperty.com.au, for the website itself
• a website analytics provider (named in this policy before analytics goes live), for understanding how visitors use the website so we can improve it

We do not sell personal information. We do not share personal information so that third parties can advertise or market to you.

Some of our service providers, including Google Workspace, store and process information on servers located outside Australia, including in the United States. If we add website analytics (see section 9), that provider may also process limited data overseas. Where we disclose personal information to an overseas provider, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.

If we send you updates, market commentary, or other marketing emails, every message will identify us and include a way to unsubscribe. You can opt out at any time, either by using the unsubscribe link in the email or by contacting us using the channels in section 12. Opting out of marketing does not affect emails we need to send you about an active engagement.

We may also disclose personal information where we are required to do so by law, by court order, or in response to a lawful request from a government agency.

6. How we store and protect it

Personal information you provide is stored within Google Workspace and within our internal client records system. Access to this information is limited to the founders of CHAD and, during an engagement, to the specific professionals coordinating on your purchase at your direction.

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, modification, and disclosure. These steps include access controls, encrypted-in-transit transmission, and reasonable retention practices.

No internet-based system is perfectly secure. While we take reasonable measures to protect your personal information, we cannot guarantee absolute security of information transmitted to or held by us.

If a data breach occurs that is likely to result in serious harm to you, we will follow our Data Breach Response Plan. This includes taking steps to contain the breach, assessing the risk to you, and notifying you and, where appropriate, the Office of the Australian Information Commissioner.

7. How long we keep it

We hold your personal information for as long as you remain in conversation with us, and we will delete it on your request.

If you fill in the introduction and we do not move forward into an engagement, your information is held until you ask us to delete it. To request deletion, contact us using the channels in section 12.

If we move into a formal engagement, we hold your records for the duration of the engagement and for any period after settlement required by Australian law (including taxation, anti-money-laundering, and professional-services record-keeping obligations). Where the law does not specify a period, we retain records for seven years after the conclusion of the engagement, after which we securely destroy or de-identify them.

8. Your rights

Under the Privacy Act 1988 (Cth) you have the right to:

• request access to the personal information we hold about you
• request correction of any inaccurate, out-of-date, incomplete, irrelevant, or misleading personal information
• request that we delete your personal information (subject to our legal record-keeping obligations)
• withdraw consent for non-essential processing of your personal information at any time
• make a complaint about how we have handled your personal information

We will respond to requests within a reasonable period (and within 30 days where the request is for access or correction). We do not charge a fee for these requests.

If you are not satisfied with how we have handled your personal information, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

9. Cookies and analytics

This website uses analytics to understand how visitors use the site so we can improve it. We do not use analytics for third-party advertising.

Before analytics is activated, we will disclose here the specific analytics provider, the data it collects, the cookies it sets and how long they last, and whether it transfers any data outside Australia (covered in section 5 where it does). Where consent is required, we will ask for it through a cookie banner before any non-essential cookies are set, not after.

10. Children

This website is intended for adults. We do not knowingly collect personal information from children under the age of 18. If you believe a child has provided personal information to us, please contact us using the channels in section 12 and we will delete it.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of the page. Where the change is significant (for example, a change in the third-party services we use, or a change in how we handle personal information), we will make reasonable efforts to notify current clients directly.

12. Contact us about your privacy

If you have questions about this policy, want to access or correct your personal information, want to make a complaint, or want to request deletion of your personal information, you can contact us at privacy@chadproperty.com.au. We will acknowledge your request, tell you how we will handle it, and respond within a reasonable period. Where you have made a complaint, we will investigate it and let you know the outcome.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5288, Sydney NSW 2001