Privacy Policy | Redden Family Real Estate

Privacy Policy Last updated: JUNE 2026

Redden Family Real Estate (ABN 46 169 052 653) ("we", "us", "our") is committed to protecting your privacy and complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, disclose and protect your personal information.

This policy applies to clients, customers, vendors, buyers and sellers, website users, contractors, suppliers and job applicants.

A current version of this Privacy Policy is available at: www.reddenfamily.com.au

1. What personal information we collect

We collect personal information that is reasonably necessary for our business activities, including:

Full name, address, email address and telephone number
Date and place of birth
Government-issued identification information (e.g. driver’s licence, passport, medicare card or other ID documents where required)
Biometric information, such as a facial image or short video used to verify your identity
financial and banking information
property ownership and sales transaction information
employment and application details
marketing preferences
enquiry details and communication records

Sensitive information is only collected where reasonably necessary and permitted by law or with your consent.

2. How we collect personal information

We collect personal information directly from you when you:

sell your property
enquire about, buy or inspect a property
attend inspections or auctions
complete forms or online enquiries
apply for employment
interact with us via phone, email, website or social media

We may also collect personal information from third parties where permitted by law, including:

government registers
service providers and contractors
publicly available sources

3. Why we collect and use personal information

We collect, use and disclose personal information for purposes including:

Verify your identity
providing real estate and property services
managing property sales and related transactions
verifying identity and complying with legal obligations
communicating with you, including responding to enquiries
Meet our legal and regulatory obligations, including anti-money laundering and counter-terrorism finance (AML/CTF) requirements
Detect and prevent fraud, and keep our systems secure
sending marketing communications (you may opt out at any time)
operating, maintaining and improving our systems and services
managing complaints and disputes

We will not use or disclose personal information for purposes unrelated to the purpose of collection without your consent unless permitted by law.

4. Use of third-party service providers

We use trusted third-party service providers to assist in operating our business, including:

MRI Software (MRI Eagle) – our customer relationship management (CRM) system
Birdeye – for managing customer communications, reviews and enquiry automation
AML Hub – for managing our AML/CTF responsibilities and checking identity

These providers may collect, store and process personal information on our behalf, including:

contact details
communication history
transaction-related information
review and feedback data

These providers act only on our behalf and are contractually required to:

use personal information solely for providing services to us
protect personal information
not use or disclose personal information for their own purposes

5. Identity Verification and Government Data Matching (DVS)

To verify your identity, we may use electronic identity verification services, including the Australian Government’s Document Verification Service (DVS).

Where you have consented, your name, date of birth and identity document details will be securely sent to the relevant Commonwealth or State authority that issued your document. This may include passport offices, driver licence authorities, the Department of Home Affairs, Births Deaths and Marriages, or other authorised record holders.

These authorities check whether the details you have provided match the records they hold.

We do not receive a copy of your government records. The authority returns a match result only, confirming whether your details match (yes or no).

This process may be carried out through accredited identity verification providers, including APLYiD (APLYiD Pty Ltd, ABN 36 632 866 794) and its sub-providers.

More information about DVS is available at idmatch.gov.au.

6. Biometric Information

As part of the identity verification, we may collect biometric information, such as facial image or a short video of you holding your ID.

Biometric information may be used to:

confirm that you are a real person and physically present
match your image to the photograph on your identification document
reduce the risk of fraud and identity theft

Biometric information is treated as sensitive information under the Privacy Act. We only use it for identity verification and related compliance purposes, and only with your consent.

7. Consent to Collection and Identity Verification

By providing your personal information and completing the identity verification process, you consent to:

The collection, use and disclosure of personal information for identity verification, AML/CTF and related compliance purposes
The collection and use of biometric information, such as a facial image or video, for identity verification
Your information being checked against records held by Commonwealth and Stateauthorities through the DVS
Your information being shared with our authorised identity verification providers including APLYiD

Your consent is voluntary. You can withdraw your consent at any time by contacting us using the details in paragraph 16.

If you do not consent, or do not provide the information we need, we may not be able to verify your identity electronically. In that case, we may need to verify your identity in another way, or we may not be able to provide our services to you.

8. Disclosure of Personal Information

We may store or process personal information using cloud-based systems to:

Identity verification providers, including APLYiD and its authorised sub-providers
Commonwealth and State authorities and official record holders, through the DVS
Our employees and authorised representatives, on a need-to-know basis
Our professional advisors, such as lawyers, accountants and auditors
Trusted technology and service providers that help us operate our business
Regulators, law enforcement or other third parties where required or authorised by law.

We do not sell your personal information.

9. Overseas Disclosure

Some of our service providers may store or process personal information outside Australia, including but not limited to the United States, New Zealand and Singapore.

In particular:

MRI Software (MRI Eagle) is headquartered in Solon, Ohio, United States
Birdeye is headquartered in Palo Alto, California, United States
AML Hub is headquartered in New Zealand

Where this happens, we take reasonable steps to ensure that your personal information is handled in line with the Australian Privacy Principles, including through contractual obligations with our providers.

By providing your personal information, you acknowledge and consent to this overseas disclosure.

10. Marketing communications

We may use your personal information (excluding sensitive information) to send you marketing communications about our services.

You may opt out of receiving marketing communications at any time by:

using the unsubscribe link in communications, or
contacting us directly

We do not sell personal information to third parties.

11. Cookies and website analytics

Our website and third-party service providers (including CRM, review platforms and AML/CT providers) may use cookies and similar technologies to:

improve website functionality
analyse website usage
personalise content and communications

These technologies may collect information such as:

IP address
browser type
pages visited and interactions

You can manage cookie preferences through your browser settings.

12. Anonymity and pseudonyms

You may interact with us anonymously or using a pseudonym where lawful and practical.

However, we may not be able to provide certain services if you do not identify yourself.

13. Data Security and Storage

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure.

This includes:

secure systems and access controls
staff training and confidentiality obligations
use of reputable service providers

However, no data transmission over the internet is completely secure.

We retain personal information only for as long as we need it for the purposes set out in this Policy, or as required by law. When we no longer need your information, we securely delete or de-identify it

14. Access and correction

You have the right to ask for access to the personal information we hold about you, and to ask us to correct it if it is inaccurate, incomplete or out of date.

Requests should be made to our Privacy Officer. We will respond within a reasonable time. A reasonable fee may apply where permitted by law.

15. Complaints

If you believe your privacy has been breached, you may contact our Privacy Officer.

We will investigate and respond in accordance with our complaints process.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):

Phone: 1300 363 992
www.oaic.gov.au

16. Contact us

Privacy Officer
Redden Family Real Estate
Phone: (02) 6884 4036
Email: [email protected]

17. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be published on our website.

18. Acceptance

By using our services or providing personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use and disclosure of your personal information in accordance with it.