Privacy Policy
Privacy Policy
PROPCRED PRIVACY POLICY
Effective date: 02.09.2026
PropCred Pty Ltd respects the privacy of individuals and is committed to handling personal information responsibly, securely and transparently.
This Privacy Policy explains how PropCred collects, holds, uses, discloses and protects personal information in connection with its websites, products and services, including PropCred Radar.
PropCred Pty Ltd
Victoria, Australia
Privacy contact: contact@propcred,com
In this Privacy Policy, PropCred, we, us and our mean PropCred Pty Ltd.
1. Our approach to privacy
We manage personal information having regard to the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) to the extent they apply to us.
As a matter of policy, we aim to handle personal information consistently with the APP standards even where a particular provision of the Privacy Act may not apply to a particular activity.
We may also be subject to other Australian laws relating to information, communications and privacy, including the:
- Spam Act 2003 (Cth);
- Do Not Call Register Act 2006 (Cth); and
- applicable State and Territory laws.
This Privacy Policy should be read together with any specific privacy notice presented when information is collected and, where applicable, the PropCred Radar Terms and Conditions.
2. Who this Privacy Policy applies to
This Privacy Policy applies to personal information we handle in connection with:
- the PropCred website;
- PropCred Radar;
- property valuation and appraisal services;
- rental appraisal services;
- property reports;
- subscriptions;
- customer accounts;
- agency accounts;
- enquiries and support;
- marketing and communications;
- report delivery;
- transactions and billing;
- website analytics; and
- other PropCred products and services.
It may apply to information about:
- customers;
- real estate agents;
- agency administrators;
- authorised Radar users;
- property buyers and sellers;
- vendors;
- landlords;
- tenants;
- prospective clients;
- people receiving PropCred Reports;
- website visitors;
- suppliers;
- contractors; and
- other individuals who interact with PropCred.
3. What is personal information?
For the purposes of this Privacy Policy, personal information generally means information or an opinion about an identified individual, or an individual who is reasonably identifiable.
Personal information can include information such as:
- name;
- email address;
- telephone number;
- residential or business address;
- employment information;
- account details;
- IP address;
- online identifiers; and
- information about an individual’s interactions with PropCred.
Some property information may not by itself constitute personal information.
For example, information such as:
- property address;
- land size;
- bedrooms;
- bathrooms;
- property characteristics;
- historical sale price; or
- property features
may relate primarily to the property.
However, property information may become personal information when it is connected with or capable of identifying an individual.
We therefore handle property information carefully where it is connected with identifiable individuals.
4. Personal information we may collect
Depending on how you interact with PropCred, we may collect and hold the following categories of personal information.
4.1 Account and identity information
This may include:
- full name;
- email address;
- telephone number;
- organisation or agency name;
- job title;
- agent details;
- real estate registration or licence information where provided;
- office address;
- account username or account identifier;
- profile information; and
- communication preferences.
5. PropCred Radar agency information
For Radar customers, we may collect:
- agency name;
- agency address;
- agency logo;
- agency contact information;
- Agency Administrator details;
- details of Named Users;
- user invitation information;
- agent name;
- agent telephone number;
- agent email address;
- registration or licence information where provided;
- subscription information;
- account permissions; and
- user activity associated with the Agency Account.
Radar allows multiple authorised users to operate under the same Agency Account.
Information and Reports submitted or created by one Named User may therefore be accessible to other authorised Named Users belonging to the same Agency.
Customers are responsible for ensuring that individuals added to an Agency Account are authorised to access the Agency’s information and Reports.
6. Client information supplied by real estate agencies
Radar allows real estate professionals to submit information about their Clients for the purpose of preparing and delivering Reports.
This may include:
- Client name;
- Client email address;
- Client telephone number where provided;
- property address;
- relationship to a property;
- report delivery details; and
- information contained in notes submitted by the agent.
In many cases, PropCred receives this information from the real estate agent or Agency rather than directly from the Client.
Customers using Radar are responsible for ensuring they have an appropriate lawful basis, authority or consent to provide personal information to PropCred.
Where required or appropriate, PropCred may also provide privacy information directly to a Client when a Report is delivered or accessed.
7. Property information
We may collect and process information relating to residential real estate, including:
- property address;
- property type;
- land size;
- building size;
- bedrooms;
- bathrooms;
- car spaces;
- property condition;
- renovations;
- improvements;
- kitchen and bathroom condition;
- swimming pools;
- outdoor areas;
- solar installations;
- views and outlook;
- street appeal;
- defects;
- property risks;
- photographs;
- listing information;
- transaction history;
- comparable property information;
- sales information;
- rental information;
- market information;
- planning or location information;
- geographic information; and
- other property characteristics.
Some of this information may be provided directly by customers.
Other information may be obtained from public records, licensed data sources, third-party data providers, property websites and other lawful sources.
8. Report and service information
We may collect information about your use of PropCred services, including:
- Reports requested;
- properties researched;
- Report type;
- date and time of Report requests;
- Report status;
- Report contents;
- property information submitted;
- Client details associated with a Report;
- completed Reports;
- customer feedback;
- Report corrections;
- support requests; and
- other information relating to your use of our services.
9. Payment and subscription information
When you purchase a PropCred product or subscription, we may collect or receive information including:
- billing name;
- billing address;
- email address;
- transaction amount;
- subscription plan;
- subscription status;
- renewal dates;
- payment status;
- payment-provider identifiers;
- invoices;
- refunds; and
- transaction history.
Payments may be processed by third-party payment providers such as WooPayments, Stripe or other payment processors used by PropCred.
Full payment-card information is generally collected and processed by the relevant payment provider rather than stored directly by PropCred.
Those providers handle payment information in accordance with their own privacy and security obligations.
10. Website, device and technical information
When you use our websites or Radar, we may automatically collect technical information such as:
- IP address;
- browser type;
- device type;
- operating system;
- referring website;
- pages viewed;
- login timestamps;
- session information;
- approximate location derived from an IP address;
- website interactions;
- error logs;
- security logs;
- authentication information; and
- other technical information generated through use of the service.
We may use this information for:
- website operation;
- account authentication;
- fraud prevention;
- cybersecurity;
- troubleshooting;
- understanding service usage;
- improving functionality; and
- analytics.
11. Communications with us
We may collect personal information when you communicate with us through:
- email;
- contact forms;
- support requests;
- telephone;
- social media;
- surveys;
- customer feedback; or
- other communication channels.
We may retain those communications where reasonably necessary for customer service, security, dispute resolution and business records.
12. Sensitive information
PropCred does not ordinarily require sensitive information in order to provide property Reports or Radar.
Customers should not provide sensitive information unless it is reasonably necessary for a particular interaction with PropCred.
Sensitive information can include information about matters such as:
- health;
- racial or ethnic origin;
- political opinions;
- religious beliefs;
- sexual orientation;
- criminal record; or
- biometric information.
Where sensitive information is collected, we will handle it in accordance with applicable law, including obtaining consent where required.
If we receive unsolicited sensitive information that we are not permitted or required to retain, we may delete or de-identify it.
13. Government-related identifiers
PropCred does not ordinarily require government-related identifiers such as:
- Tax File Numbers;
- Medicare numbers;
- passport numbers; or
- driver licence numbers
for normal Radar or property appraisal services.
We will not adopt a government-related identifier as our own identifier of an individual except where permitted by law.
14. How we collect personal information
We may collect personal information in several ways.
14.1 Directly from you
We may collect information when you:
- create an account;
- purchase a product;
- purchase a Radar Subscription;
- submit a Report request;
- complete a form;
- update your profile;
- contact customer support;
- communicate with us;
- request information;
- subscribe to communications;
- participate in research or surveys; or
- otherwise interact with PropCred.
15. From an Agency or another user
We may receive personal information from another person.
For example:
- an Agency Administrator may create or invite another Named User;
- an agent may provide Client information;
- an agent may submit information about a property owner, vendor or landlord;
- another authorised representative may provide information on someone’s behalf.
Where reasonable and required by law, we will take steps to ensure individuals are made aware of relevant aspects of our collection and handling of that information.
16. From third parties
We may obtain information from third-party sources including:
- property data providers;
- real estate listing services;
- government or public databases;
- local councils or authorities;
- property research providers;
- service providers;
- payment providers;
- analytics providers;
- identity or fraud-prevention services; and
- business partners.
We only use third-party information in ways permitted by applicable law and any applicable licensing restrictions.
17. Publicly available information
We may collect information from publicly available sources.
This may include:
- property listings;
- property sales information;
- publicly accessible government information;
- business websites;
- publicly available professional information; and
- other lawfully accessible public sources.
The fact that information is publicly available does not necessarily mean it falls outside privacy law.
Where publicly available information constitutes personal information, we will handle it having regard to applicable privacy requirements.
18. Unsolicited personal information
Sometimes we may receive personal information that we did not request.
Where required by the Privacy Act, we will determine whether we could lawfully have collected that information ourselves.
If we could not have collected it and we are not otherwise legally required or permitted to retain it, we will take reasonable steps to destroy or de-identify it.
19. Why we collect and use personal information
We may collect, hold, use and disclose personal information for purposes including:
Providing PropCred services
- creating and managing accounts;
- establishing Radar Agency Accounts;
- authenticating users;
- processing subscriptions;
- processing property Report requests;
- producing property valuation appraisals;
- producing rental appraisals;
- delivering Reports;
- displaying Reports to authorised Agency users;
- delivering Reports to Clients where requested;
- providing customer support; and
- resolving Report issues.
Operating our business
- billing;
- accounting;
- taxation;
- administration;
- customer relationship management;
- customer service;
- auditing;
- record keeping;
- managing suppliers;
- managing subscriptions;
- processing refunds; and
- enforcing agreements.
Security and fraud prevention
- authenticating accounts;
- investigating suspicious activity;
- preventing unauthorised account access;
- preventing misuse of Radar;
- protecting our systems;
- enforcing Named User limits;
- detecting malicious activity; and
- investigating security incidents.
Improving our services
We may analyse service usage and property information to:
- improve report quality;
- improve our property research methodologies;
- improve functionality;
- understand customer usage;
- identify technical problems;
- evaluate product performance; and
- develop new products and features.
Where reasonably practicable, aggregated or de-identified information may be used for these purposes.
Legal and regulatory purposes
We may handle information to:
- comply with legal obligations;
- respond to lawful government or regulatory requests;
- establish, exercise or defend legal rights;
- investigate fraud or unlawful conduct;
- respond to court orders; and
- comply with applicable regulatory requirements.
20. Property appraisal analysis and automated systems
PropCred uses software, statistical analysis, modelling, machine learning and other automated processes as part of its property research and Report-generation processes.
These systems may analyse information including:
- property characteristics;
- property transaction information;
- comparable properties;
- market information;
- rental information;
- location data; and
- information supplied by customers.
The purpose of this processing is to assist in generating property research, valuation appraisals and rental appraisals.
Client names and contact information are not ordinarily relevant to determining a property’s estimated value or rental assessment and are not ordinarily used for that analytical purpose.
PropCred Radar provides information and appraisal outputs to real estate professionals. It does not itself decide whether an individual:
- receives credit;
- obtains a mortgage;
- receives insurance;
- receives government benefits;
- is employed;
- is accepted as a tenant; or
- receives another significant service.
As at the effective date of this Privacy Policy, PropCred does not ordinarily arrange for personal information to be used by a computer program to make a decision that could reasonably be expected to significantly affect an individual’s rights or interests in the manner contemplated by APP 1.7–1.9.
If our practices change so that those provisions apply, we will update this Privacy Policy to describe:
- the kinds of personal information used;
- the kinds of decisions made solely by automated systems; and
- the kinds of decisions for which automated systems perform something substantially and directly related to making the decision.
21. De-identified and aggregated information
We may create aggregated or de-identified information from data available to us.
Where information has been properly de-identified so that individuals are no longer reasonably identifiable, it may no longer constitute personal information under the Privacy Act.
We may use properly de-identified or aggregated information for purposes such as:
- property research;
- market analysis;
- statistical research;
- product development;
- service improvement;
- performance analysis; and
- business planning.
We will not represent information as de-identified where individuals remain reasonably identifiable.
22. Who we may disclose personal information to
We may disclose personal information where reasonably necessary to provide or operate our services.
Recipients may include:
- authorised users of the relevant Agency Account;
- the Client for whom a Report was prepared, where requested;
- technology service providers;
- website and hosting providers;
- cloud infrastructure providers;
- payment processors;
- email and communications providers;
- analytics providers;
- cybersecurity providers;
- customer-support providers;
- database and infrastructure providers;
- professional advisers;
- accountants;
- lawyers;
- insurers;
- contractors;
- data providers;
- regulators;
- government agencies;
- law enforcement bodies; and
- other recipients where disclosure is authorised or required by law.
We do not sell Client contact information as a standalone marketing database.
23. Agency access to information
Radar is designed around an Agency Account rather than a separate isolated database for each agent.
Accordingly:
- information submitted by one authorised Named User may be available to other Named Users within the same Agency;
- Reports belong to the Agency Account;
- authorised Agency users may access historical Reports created by other authorised users; and
- removal of a Named User does not necessarily remove Reports or data created while that user was authorised.
Customers are responsible for managing who is authorised to access their Agency Account.
24. Service providers
We use third-party service providers to operate our business and provide our services.
These may include providers of:
- hosting;
- cloud infrastructure;
- databases;
- payment processing;
- subscriptions;
- website software;
- forms;
- analytics;
- communications;
- email;
- cybersecurity;
- workflow automation;
- property information;
- data processing;
- software development;
- customer support; and
- business administration.
We seek to provide service providers only with information reasonably necessary for the relevant service.
Where appropriate, we also use contractual, technical and organisational measures to protect personal information handled by service providers.
25. Overseas disclosure and processing
Some technology and service providers used by PropCred may store, access or process personal information outside Australia.
This may occur where providers of services such as:
- cloud infrastructure;
- payment processing;
- website technology;
- communications;
- analytics;
- workflow processing;
- customer support; or
- software services
operate infrastructure or personnel overseas.
Where the Australian Privacy Principles apply, we take reasonable steps as required by APP 8 in relation to overseas disclosures.
Countries in which overseas recipients are currently likely to be located include:
[INSERT COUNTRIES AFTER CONFIRMING PROPCRED’S HOSTING, PAYMENT, EMAIL, ANALYTICS, AUTOMATION AND REPORT-PROCESSING PROVIDERS BEFORE PUBLICATION.]
Provider locations and infrastructure may change over time. We will update this Privacy Policy where appropriate when our overseas handling arrangements materially change.
26. Payment providers
Payments may be processed by third-party payment providers.
The payment provider may collect information such as:
- cardholder name;
- billing address;
- card details;
- payment authentication data; and
- transaction information.
Payment providers may store and process this information in Australia or overseas in accordance with their own privacy policies.
PropCred generally receives information confirming the transaction rather than complete card credentials.
Customers should also review the privacy information provided by the relevant payment provider.
27. Direct marketing
Where permitted by law, we may use personal information to communicate with customers and prospective customers about:
- PropCred products;
- Radar features;
- service updates;
- property research;
- relevant content;
- offers; and
- other PropCred services.
We will comply with applicable requirements relating to direct marketing.
You can ask us to stop using your personal information for direct marketing.
You may also unsubscribe using the unsubscribe mechanism provided in a marketing communication.
We do not charge for opting out.
Where required, we will action electronic marketing unsubscribe requests within the period required by Australian law.
28. Email and SMS marketing
Where the Spam Act 2003 (Cth) applies to a commercial electronic message, we will take reasonable steps to ensure that:
- we have the required consent or other lawful basis to send the message;
- the message accurately identifies the sender;
- appropriate contact information is provided; and
- the message contains a functional unsubscribe facility.
We aim to action unsubscribe requests within 5 business days, as required by applicable Australian spam laws.
Operational communications concerning matters such as:
- security;
- account access;
- payments;
- Report completion;
- service interruptions; and
- subscription administration
may still be sent where reasonably necessary to provide the service.
We aim to keep operational communications separate from promotional communications where appropriate.
29. Telephone marketing
If PropCred conducts telephone marketing, we will do so having regard to applicable Australian laws, including the Do Not Call Register Act 2006 (Cth) and associated requirements.
30. Cookies and similar technologies
Our websites may use cookies and similar technologies.
A cookie is a small data file stored on or associated with your device.
Cookies may be used for purposes including:
- keeping users logged in;
- maintaining secure sessions;
- recognising returning users;
- saving preferences;
- protecting against fraud;
- maintaining shopping-cart and checkout functionality;
- understanding website usage;
- measuring website performance;
- diagnosing technical problems; and
- analytics.
Some cookies are necessary for website or account functionality.
Other cookies may relate to analytics or marketing.
31. Analytics
We may use third-party analytics services such as Google Analytics or similar services where enabled.
These services may collect information including:
- IP address;
- device information;
- browser information;
- page views;
- referral information;
- session duration; and
- interaction information.
We use analytics to understand how our websites and products are used and to improve their performance.
Analytics providers may process information overseas.
32. Managing cookies
Most browsers allow users to:
- block cookies;
- delete cookies;
- restrict particular cookies; or
- receive alerts when cookies are being used.
Disabling essential cookies may prevent parts of our websites or Radar from functioning correctly.
Where PropCred provides a cookie-management tool, users may also manage applicable preferences through that tool.
33. Social media and external websites
Our websites may contain links to:
- social media;
- third-party websites;
- external services; or
- content operated by other organisations.
Those services have their own privacy practices.
PropCred is not responsible for the privacy practices of a third-party website simply because our website links to it.
You should review the privacy policy of the relevant third party.
34. Security of personal information
PropCred takes reasonable steps appropriate to the circumstances to protect personal information we hold from:
- misuse;
- interference;
- loss;
- unauthorised access;
- unauthorised modification; and
- unauthorised disclosure.
Security measures may include, where appropriate:
- access controls;
- authentication;
- account permissions;
- encrypted communications;
- secure hosting;
- system monitoring;
- backups;
- software updates;
- cybersecurity protections;
- restricted administrative access;
- password controls;
- security logging; and
- incident-response procedures.
However, no internet service, computer system or method of electronic storage is completely secure.
We cannot guarantee that unauthorised access or security incidents will never occur.
35. Customer responsibilities for security
Radar customers also play an important role in protecting personal information.
Customers and Named Users should:
- use strong passwords;
- keep passwords confidential;
- not share user accounts;
- restrict access to authorised personnel;
- remove users who leave an Agency;
- protect computers and devices used to access Radar; and
- notify PropCred promptly of suspected unauthorised access.
36. Data breaches
PropCred maintains processes for identifying, investigating and responding to suspected data breaches.
Where we are subject to the Notifiable Data Breaches scheme under the Privacy Act and a breach constitutes an eligible data breach, we will comply with applicable notification obligations.
This may include notifying:
- affected individuals; and
- the Office of the Australian Information Commissioner
where required by law.
We will also take reasonable steps to contain, investigate and remediate security incidents.
37. Data retention
We retain personal information only for as long as reasonably necessary for the purpose for which it is held or as otherwise required or permitted by law.
Retention periods may depend on factors such as:
- whether an account remains active;
- the nature of a Report;
- contractual obligations;
- taxation and accounting requirements;
- legal requirements;
- dispute or claims periods;
- fraud-prevention requirements;
- security requirements;
- backup systems; and
- legitimate business record-keeping requirements.
Reports and related records may be retained after a Subscription ends where reasonably necessary for legal, business, security, audit or record-keeping purposes.
When personal information is no longer required and we are not required or permitted by law to retain it, we will take reasonable steps to destroy or de-identify it.
38. Backups
Personal information may remain temporarily within secure backup systems after it has been removed from active systems.
Information contained in backups will generally be deleted or overwritten in accordance with our normal backup cycles unless it must be retained for legal, security or technical reasons.
39. Quality and accuracy of information
We take reasonable steps appropriate to the circumstances to ensure that personal information we collect is:
- accurate;
- up to date; and
- complete.
We also take reasonable steps to ensure that personal information used or disclosed is accurate, current, complete and relevant having regard to the purpose for which it is used or disclosed.
Customers can assist by keeping their account information current.
40. Accessing your personal information
You may request access to personal information PropCred holds about you.
Requests can be made using the contact details in this Privacy Policy.
Before giving access, we may need to verify your identity.
We will respond within a reasonable period.
There may be circumstances under the Privacy Act where we are permitted or required to refuse access.
If we refuse access, we will provide an explanation where required by law.
41. Correcting personal information
You may ask us to correct personal information that you believe is:
- inaccurate;
- out of date;
- incomplete;
- irrelevant; or
- misleading.
We will take reasonable steps to investigate and correct information where appropriate.
Where required by law, if we refuse a correction request, we will explain the reasons and available complaint mechanisms.
42. Deletion requests
You may contact PropCred to request deletion of personal information.
Australian privacy law does not create an unrestricted right to deletion in every circumstance.
We may need to retain information for purposes including:
- contractual records;
- taxation;
- legal obligations;
- fraud prevention;
- security;
- disputes;
- completed Reports;
- accounting; or
- legitimate business records.
Where there is no continuing lawful or reasonable need to retain personal information, we will take reasonable steps to delete or de-identify it as appropriate.
43. Anonymity and pseudonymity
Where lawful and practicable, individuals may interact with PropCred anonymously or using a pseudonym.
However, this may not be practical for activities including:
- purchasing a product;
- creating a Radar account;
- becoming a Named User;
- managing a Subscription;
- processing payments;
- accessing Agency Reports;
- dealing with account-security matters; or
- exercising privacy rights where identity must be verified.
44. Children
PropCred Radar is a business service intended for real estate professionals and is not directed at children.
We do not knowingly seek to collect personal information from children through Radar.
If we become aware that personal information about a child has been submitted where it is not reasonably necessary, we will consider appropriate steps having regard to applicable law and the circumstances.
45. Business transfers
If PropCred undergoes a:
- corporate restructure;
- merger;
- acquisition;
- financing;
- sale of business; or
- sale or transfer of assets,
personal information may be disclosed to professional advisers, prospective purchasers or the acquiring organisation where reasonably necessary and permitted by law.
We will take reasonable steps appropriate to the circumstances to protect personal information during such a transaction.
46. Required disclosures
We may disclose personal information where required or authorised by Australian law.
This may include disclosures to:
- courts;
- regulators;
- law-enforcement authorities;
- government agencies; or
- other persons where legally required.
We may also disclose information where reasonably necessary to establish, exercise or defend legal rights or address suspected fraud or unlawful conduct, to the extent permitted by law.
47. Privacy complaints
If you believe PropCred has mishandled your personal information or breached applicable privacy obligations, please contact our Privacy Officer.
Please include enough information for us to understand:
- what occurred;
- which information is involved;
- your concern; and
- what outcome you are seeking.
We will generally:
- acknowledge the complaint;
- investigate the circumstances;
- request further information where reasonably necessary; and
- provide a response within a reasonable period.
We aim, where practicable, to acknowledge privacy complaints within 7 business days and resolve or respond to them within 30 days.
More complex matters may require additional time.
48. Office of the Australian Information Commissioner
If you are not satisfied with our response to a privacy complaint, you may be entitled to contact the:
Office of the Australian Information Commissioner (OAIC)
Information about privacy complaints and the OAIC’s contact details is available at:
We encourage individuals to first give PropCred an opportunity to investigate and address the issue.
49. Contacting our Privacy Officer
For questions, access requests, correction requests, complaints or other privacy enquiries, contact:
Privacy Officer
PropCred Pty Ltd
ACN: [INSERT ACN]
ABN: [INSERT COMPANY ABN]
Victoria, Australia
Email: [INSERT PRIVACY EMAIL]
Website: https://propcred.com
50. Changes to this Privacy Policy
Our products, systems, service providers and legal obligations may change over time.
We may therefore update this Privacy Policy.
The current version will be published on our website together with its effective date.
Where a change materially affects the way we handle personal information, we will take reasonable steps appropriate to the circumstances to notify affected individuals.
We encourage users to review the current version of this Privacy Policy periodically.
51. Current version
Effective date: 02.09.2026
Last updated: 02.09.2026
This Privacy Policy applies to PropCred Pty Ltd and the PropCred services described above.