First Hand Property, a trading name of Mitchell Farah Property Pty Ltd (ABN 31 637 604 829) (“we”, “us”), is committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), including the Privacy and Other Legislation Amendment Act 2024. This policy applies to our real estate sales and property management services and our website at www.first-hand.com.au. It may be updated from time to time; changes take effect when published on our website.
-
PERSONAL INFORMATION WE COLLECT
We collect personal information reasonably necessary for our functions, including: names, contact details, dates of birth, identification documents, financial and employment information, tenancy and rental history, property ownership records, and information provided at open homes or through our website. Sensitive information (e.g. health, criminal record) is only collected with express consent or as required by law. We may also collect information from third parties such as referees, tenancy databases, and public sources. Our website automatically collects technical data (IP address, browser type, cookies) for statistical and administrative purposes.
-
HOW WE USE AND DISCLOSE YOUR INFORMATION
We use personal information for the purpose it was collected, including: providing sales and property management services; processing tenancy applications; identity verification and KYC procedures; communicating about properties and transactions; maintaining records; and complying with legal obligations. We may disclose your information to: prospective buyers, sellers, landlords, or tenants; service providers (tradespeople, inspectors, valuers); financial institutions and conveyancers; tenancy databases; our related entity Mitchell Farah Property Pty Ltd; government and regulatory bodies; and professional advisors. We do not sell or trade your personal information.
-
CROSS-BORDER DISCLOSURE (APP 8)
We use cloud-based platforms and offshore support staff that may store or access personal information from outside Australia. Before disclosing information overseas, we take reasonable steps to ensure recipients comply with the APPs, including through contractual safeguards. We remain liable under APP 8 if an overseas recipient breaches the APPs, unless a specific exception applies (e.g. your informed consent or the recipient being subject to substantially similar protections).
-
DATA SECURITY
We take reasonable steps to protect personal information from misuse, loss, and unauthorised access through secure electronic storage, access controls, encryption, role-based permissions, secure disposal practices, and regular staff privacy training. No internet transmission is guaranteed secure; however, we use secure transmission facilities where appropriate.
-
DIRECT MARKETING & OPT-OUT (APP 7)
We may use your personal information (excluding sensitive information) for marketing where you have consented or would reasonably expect it, and we provide an easy opt-out. Every marketing communication includes an unsubscribe option. Information collected through tenancy applications will not be used for unrelated sales marketing without your separate consent. To opt out, contact our Privacy Officer or use the unsubscribe link.
-
DATA BREACH NOTIFICATION
If an eligible data breach likely to cause serious harm occurs, we will notify the OAIC and affected individuals within 30 days. “Serious harm” includes emotional and reputational harm under the 2024 amendments. Notifications will describe the breach, the types of information involved, and recommended protective steps.
-
AUTOMATED DECISION-MAKING
Where we use automated systems to assist decisions that significantly affect individuals (e.g. tenant screening), we will provide transparency about how the system operates and offer human review upon request.
-
DATA RETENTION, ERASURE & GOVERNMENT IDENTIFIERS
We retain personal information only as long as necessary or as required by law, then securely destroy or de-identify it. Under APP 9, we do not adopt government-related identifiers (TFNs, Medicare numbers, driver licence numbers) as internal identifiers and only collect them where reasonably necessary for verification or legally required.
-
ACCESS, CORRECTION & COMPLAINTS
You may request access to or correction of your personal information by writing to our Privacy Officer. We will respond within a reasonable timeframe; a fee may apply. Access may be refused in limited circumstances permitted by law, with written reasons provided.
Privacy Officer & Complaints:
Office Manager | 145a Macpherson Street, Bronte NSW 2024
P: 0466 967 826 | E: hello@first-hand.com.au
We will acknowledge complaints within 7 business days and aim to resolve within 30 business days. If unsatisfied, you may lodge a complaint with the OAIC at www.oaic.gov.au.
-
PENALTIES & ACCEPTANCE
Serious privacy breaches may attract civil penalties of up to $50 million for companies or $2.5 million for individuals. By engaging our services, using our website, or providing personal information, you acknowledge and accept this Privacy Policy and consent to the collection, use, and disclosure of your information as described.