Privacy Policy.

Last updated 10 September 2026

About this policy

Your privacy is important to us. This is our Privacy Policy, and it sets out how Hybrid Real Estate (ABN 96 638 367 763) and our related entities (We, Us, and Our) collect, use, and disclose your personal information.

We are bound by the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the Act). The principles are designed to protect the privacy of individuals by regulating the way personal information is managed by Australian businesses. Personal information is any information that allows an individual to be personally identified.

We are bound by and acknowledge the importance of the Notifiable Data Breach Scheme, which has been addressed by Us in Our Data Breach Response Plan. You do not have to provide Us with your personal information. However, if you do not, We may not be able to provide you with information or services you request or important notices in relation to Our provision of and your use of Our products or services.

By visiting Our website, applying for, or using any of Our services or providing Us with your information, you agree to your information being collected, held, used, and disclosed as set out in this Privacy Policy.

The information we collect

We collect information that is reasonably necessary for Us to provide you with the services or products you have requested from Us, and to manage Our obligations to you under any customer contract or applicable law. Some of the services or products may include:

• acting as an agent, and leasing properties;
• marketing purposes and providing you with information about products and services that may be of interest to you; and
• improvements to the products and services We provide.

We will only collect your sensitive information if you have provided Us with consent to do so. Where practicable, We will give you the option of interacting with Us anonymously.

The information We collect and hold generally includes:

• names, addresses, e-mail addresses, phone numbers, other contact details, payment details, occupation, household details, financial information, employment references, rental references, personal references, and other information to assist Us in conducting Our business, providing and marketing Our products and services;
• identity documents so We can verify your identity;
• information about staff and directors, as required in the normal course of human resource management and the operation of a business; and
• information about current and previous suppliers and clients with whom We have dealings.

However, We may also collect and hold other information required to provide services or assistance to you, including your emergency contact details, sensitive information, and information necessary to assess your creditworthiness.

How we collect your information

We may collect your information in various ways, including via telephone, Our website, third party websites or software suppliers, hard copy forms or email, face-to-face meetings including inspections or interviews, third parties, referrals through Our related entities or strategic partners, and social media channels.

We only collect personal information by lawful and fair means. By providing personal information to Us, you consent to Us collecting and storing this information as well as further information as may be provided by you in order that We may follow up your enquiries and best service your needs.

Whenever you choose to deal with Us directly, We will collect this information directly from you. However, there may be occasions when We collect your information from someone else. This may include contracted service providers, agents acting on Our behalf or related entities and/or anyone you have authorised to deal with Us on your behalf.

By subscribing to the forms on Our website, you are actively asking Us to supply you with information about Our services and We will do this through the method of contact provided by you, which may be phone or email. On all occasions, your information is collected, held, used, and disclosed by Us in accordance with this policy and applicable Australian Privacy Principles.

When you submit an enquiry form on Our website, We also record technical information sent by your browser and Our hosting provider: your IP address, approximate location (country and region), device and browser type, language, time zone, the page you arrived on, the page you submitted from, any advertising campaign identifiers in the link you clicked, and how long you spent on the page. We use this to detect automated and fraudulent submissions and to understand how people find Us. This information is processed by Cloudflare (hosting and bot protection), Make (automation) and Notion (Our enquiry database), each of which may store it outside Australia. We keep enquiry records for 12 months unless you become a client, in which case they form part of your client file.

We may also seek to collect information about someone else from you. However, you must not provide Us with information about another person unless you have clear consent from that person to do so, let them know about this Privacy Policy, and where to find it.

How we use your information

We only use your information for the purpose for which it was provided to Us, related purposes that you would reasonably expect and as permitted or required by law. Such purposes include:

• responding to your inquiries;
• maintaining and administering your account and processing payments you have authorised;
• communicating with you about works that may affect your premises;
• processing your survey or questionnaire responses for the purposes notified in the survey or questionnaire, where you have chosen to participate;
• market research and programs so that We can improve Our services and meet Our customers' needs;
• analysing broader market trends and demographics so that We may best serve Our customers in the future;
• providing you with marketing information regarding other products and services, of ours or of a third party, which We believe may be of interest to you, but not if you have opted out from receiving such information;
• reporting to Our owners or their shareholders;
• quality assurance and training purposes;
• the ordinary course of conducting Our business, for example supplying services such as leasing properties, acquiring products and services, connecting utility services when you authorise or request Us to do so, responding to your enquiries and feedback, and providing information about Our events, news, publications, products and services that may be of interest to you;
• performing general administration, reporting and management functions, for example invoicing and account management, payment processing, risk management, training, quality assurance and managing suppliers;
• employment-related purposes, such as recruiting and providing services to staff;
• as part of a sale, or proposed sale, of all or part of Our business;
• other purposes related to or in connection with Our business, including meeting Our legal and contractual obligations to third parties and for internal corporate governance purposes; and
• any other purposes identified at the time of collecting your information.

We may disclose your personal information to government agencies, Our service providers, agents, contractors, business partners and other recipients from time to time, only if one or more of the following apply:

• you have consented;
• you would reasonably expect Us to use or disclose your personal information in this way;
• We are authorised or required to do so by law;
• disclosure will lessen or prevent a serious threat to the life, health or safety of an individual, or to public safety;
• another permitted general situation or permitted health situation exception applies; or
• disclosure is reasonably necessary for a law enforcement related activity.

However, We will only use your sensitive information for the purposes for which it was initially collected, other directly related purposes or purposes to which you otherwise consent.

If you are not a customer, for example if you are a supplier or other third party, your information will only be used for the specific purpose for which it was provided to Us, unless you have consented to other uses.

How we disclose your information

We may disclose your information to Our related entities and third parties who provide services to Us or on Our behalf, including:

• government bodies, regulators, law enforcement agencies and any other parties where required or otherwise permitted by law;
• other service providers where necessary to cross check the accuracy of your contact details;
• parties that help operate and maintain Our IT infrastructure and other business assets;
• parties that manage customer accounts and billing;
• parties that are Our business partners, joint venturers, strategic partners, or agents;
• external IT service providers, infrastructure and other third party service providers;
• mailing houses and marketing companies;
• as part of a sale, or proposed sale, of all or part of Our business, for example We may disclose information to Our external advisers, to potential and actual bidders and to their external advisors;
• in the case of claims, or likely claims, assessors, repairers, builders, and investigators;
• parties that assess creditworthiness or assist in recovery against you if you are in breach of your obligations; and
• other entities that may offer you related products or services if you have not opted out of receiving such information.

We will only disclose your sensitive information for the purposes for which it was initially collected, other directly related purposes or purposes to which you consent. We may disclose, and you consent to Us disclosing, your personal information among the entities that comprise Us and to any of Our related bodies corporate or related entities, as both are described in the Corporations Act 2001 (Cth), whether located in Australia or overseas. If We disclose your personal information to a related body corporate, your information will be collected, stored, used, and disclosed in accordance with this Privacy Policy and the APPs.

We may disclose personal information to various overseas recipients including but not limited to contracted service providers or related bodies corporate or related entities based outside Australia for processing, storage, or back-up.

We will take reasonable steps, for example contractual measures, to ensure that these providers comply with the applicable Australian Privacy Principles. Further, certain contracted service providers may enter arrangements with overseas providers from time to time. We recommend that you view their privacy policies for details.

Any overseas disclosure does not affect Our commitment to safeguarding your personal information. Where reasonable in the circumstances, Our contracts with overseas recipients oblige them to comply with the APPs and the Act. However, you acknowledge that, in agreeing to the disclosure of your information to overseas recipients, We will not be required to take further reasonable steps to ensure overseas recipients' compliance with the APPs in relation to your information and We will not be liable to you for any breach of the APPs by those overseas recipients. On this basis, you consent to such disclosure.

GDPR

The General Data Protection Regulation (GDPR) relates to EU and UK residents' control over their Personal Data. It is a comprehensive law that provides greater data rights for individuals and requires organisations who control and process data to comply with data protection principles.

Personal Data means data that relates to an individual which, in isolation or in combination with other information, enables the individual to be identified directly or indirectly.

Where the GDPR applies with regard to any Personal Data We collect, then this section applies to that Personal Data. For the purpose of GDPR, We are the controller.

If you are a resident in the EU or UK, you have the following rights with respect to your Personal Data, and can exercise them by sending a request to the Privacy Officer at legal@hybridrealestate.com.au or by phoning +61 431 492 743. Those rights include:

• the right to be informed about the collection and use of your Personal Data at the time it is collected from you, including the purposes for processing your data, how long it will be kept for, and who it will be shared with;
• the right of access, so you can obtain a copy of your Personal Data;
• the right to have your inaccurate Personal Data rectified or completed if it is incomplete. We must reconsider accuracy upon your request;
• the right to remove your Personal Data, known as the right to be forgotten. This applies if the Personal Data is no longer necessary for the purpose for which it was originally collected or processed, or if you withdraw your consent and there is no other lawful basis for holding your data;
• the right to restrict processing. You can limit the way your data is used in certain circumstances, for instance if you contest the accuracy of your Personal Data and We are verifying it;
• the right to data portability, a right to have your data moved, copied, or transferred easily from one IT environment to another securely and without affecting its usability. You can request direct transfer of your data to another controller;
• the right to object, in certain circumstances, to the processing of all or some of your Personal Data or for particular purposes; and
• rights in relation to automated decision-making and profiling. You have a right to be informed of and to receive information about automated decision-making and profiling of your data, and a right to request human intervention or challenge an automated decision.

Security of your information

We recognise the importance of your privacy and are committed to protecting the personal and financial information you entrust to us. We adhere to the Australian Privacy Principles under the Privacy Act 1988 and other relevant laws pertaining to the protection of personal information.

Data collection and storage

We collect and store personal and financial information necessary for our property rental services. This information includes, but is not limited to, your name, contact details, financial information, and details about your property. We store this information in secure databases, with access strictly controlled and limited to necessary personnel only.

Data usage

We use your information to provide, improve, and personalise our services. We do not disclose your information to third parties unless it is necessary for providing our services, or we are legally obliged to do so. If we need to disclose your information to overseas recipients, we will inform you about the countries where the information is likely to be disclosed.

Data protection measures

We employ a range of security measures to protect your information. These include:

• Data discovery and classification. We identify and classify sensitive data to understand what needs to be protected and how.
• Access control. We limit access to sensitive data based on the principle of least privilege, ensuring that individuals have access only to the data they need to perform their roles.
• Data encryption. We encrypt your data both at rest and in transit to ensure its security.
• Regular monitoring and auditing. We regularly monitor and audit our data handling practices to identify and address any potential risks.

Data breach notification

In the unlikely event of a data breach, we will promptly notify the affected individuals and the Office of the Australian Information Commissioner, in accordance with the Notifiable Data Breaches scheme under the Privacy Act.

Data accuracy, access, and correction

We take reasonable steps to ensure the information that we collect and store is accurate, up to date, and complete, and if used or disclosed, also relevant. Please let us know as soon as possible if there are any changes to your information or if you believe the information We hold about you is not accurate, complete, or is misleading.

Website, cookies and analytics

In compliance with Australian legal requirements, we employ cookies and Google Analytics to enhance user experience and gather insights on website usage.

Cookies

Cookies are small data files placed on your device when you visit our website. They are instrumental in remembering user preferences, tailoring content to user interests, and enhancing website functionality. Our website uses both session cookies, which expire once you close your browser, and persistent cookies, which remain on your device until they are either deleted or reach their expiration date.

We use Google's SOCS cookie, which has a lifespan of 13 months, to remember your cookie preferences. Additionally, Google's _ga cookie, which is unique to our website, is employed to track user behaviour for analytics purposes.

You have the ability to manage cookies through your browser settings. Should you choose to reject or delete cookies, you will still be able to access our website, although some functionality may be reduced.

Google Analytics

Google Analytics is a service we use to collect and analyse data on how visitors use our website. It primarily utilises first-party cookies to report on user interactions, aiding us in understanding our audience and enhancing our website for a superior user experience.

Google Analytics gathers information related to your device, browser, IP address, and on-site activities to compile statistics on website interactions. This may include details of the pages you visit, the links you click, and other actions you take on our website.

We do not use Google Analytics to collect or process personal data that could be used by Google to identify individuals, such as names, email addresses, or any data that permanently identifies a specific device, if such an identifier is non-resettable.

To prevent Google Analytics from recognising you on subsequent visits to our site, you can disable cookies in your browser or install the Google Analytics Opt-out Browser Add-on.

Meta Pixel

Our website also loads the Meta Pixel, a service of Meta Platforms. It sets a cookie and reports page views to Meta so that We can measure and target Our advertising on Facebook and Instagram. Meta may combine this with information it already holds about you if you have a Meta account. You can limit this through your Meta ad preferences, by using your browser's tracking protection, or by rejecting cookies in your browser settings. The Pixel does not receive the contents of any enquiry you send Us.

Your rights

Under Australian law, you have the right to access, correct, or delete your personal data. You can also object to our processing of your personal data and request a restriction of processing. If you have any concerns about our use of cookies or Google Analytics, please reach out to us. If you believe we are not processing your personal data in accordance with the law, you may lodge a complaint with the Office of the Australian Information Commissioner.

Inquiries and complaints

If you have an inquiry or complaint relating to Our Privacy Policy or compliance with the applicable APPs, please contact Us using the details below. You will need to provide Us with sufficient details regarding your complaint, as well as any supporting evidence or information. We will refer your inquiry or complaint to Our Privacy Officer. They will, within a reasonable time, investigate the issue and determine the steps that We will undertake to resolve any complaints. We will contact you if We require any additional information from you and will notify you in writing of the response or determination of Our Privacy Officer. If you are not satisfied with Our response or determination, you can contact Us or raise your concerns with the Australian Privacy Commissioner via www.oaic.gov.au.

If you believe We have breached the APPs or mishandled your personal information, or you have any questions about this Privacy Policy, please email legal@hybridrealestate.com.au or call +61 431 492 743.

Revision of this policy

We may revise this Privacy Policy or any part of it from time to time. Please review this policy periodically for changes. If We make significant changes to this policy, We may notify you using the contact details provided by you or by putting a notice on Our website at hybridrealestate.com.au.

Your continued use of Our website, services, requesting Our assistance or the provision of further personal or sensitive information to Us after this Privacy Policy has been revised, constitutes your acceptance of the revised Privacy Policy.