EchoRealty recognises the importance of protecting the privacy and rights of individuals in relation to their personal information.
This Privacy Policy outlines how EchoRealty collects, uses, stores and discloses and individual’s personal information in accordance with the Australian Privacy Principles 2014 (APP) under the Privacy Act 1988 (Cth) (Privacy Act).
This Privacy Policy applies to all individuals who EchoRealty collects personal information from. Individuals include, but are not limited to, tenants, applicants, residents, household members and property owners.
4.1 Personal Information
When used in this Privacy Policy, the term “personal information” has the meaning given to it in the Privacy Act. In general terms it is any information that can be used to personally identify an individual. This may include, but is not limited to, an individual’s:
EchoRealty may also collect information that is not personal information because it does not identify a particular individual. For example, EchoRealty may collect anonymous answers / feedback to surveys or aggregated information about how users use the EchoRealty website.
4.2 Collecting Personal Information
EchoRealty collects personal information directly from the individual unless it is unreasonable or impracticable to do so. EchoRealty collects personal information in the following ways:
We may also collect personal information from third parties including:
4.3 Purpose of Collecting Personal Information
EchoRealty collects personal information to perform business activities and deliver on service requirements. EchoRealty will not collect information unless it is for a proper and lawful purpose.
In most situations, individuals will be advised as to why EchoRealty is collecting personal information and who else might receive this information. EchoRealty may decide not to provide this advice to individuals if:
The purposes for collecting information are as follows:
If an individual does not provide EchoRealty with personal information when prompted, EchoRealty may be unable to contact the individual or provide any services to the individual.
4.4 Unsolicited Personal Information
In the event EchoRealty receives unsolicited personal information, EchoRealty will determine whether it could have been lawful for the personal information to be collected if it had been solicited. If it is not, EchoRealty will destroy the information or ensure that the information is de-identified, as soon as practicable and only if it is lawful and reasonable to do so.
4.5 Disclosure of Personal Information
EchoRealty will only disclose personal information to a third party:
EchoRealty and local law enforcement may also exchange information under the guidelines of a Record of Understanding to:
EchoRealty will provide information to police when subpoenaed, unless the information is not in the public interest – in these cases, EchoRealty may lodge an appeal not to provide the information.
Where information is being disclosed to a third party, EchoRealty ensures that the third party is also bound by the Privacy Act and has an obligation to keep personal information confidential and to take reasonable steps to keep the personal information secure from misuse, interference, loss, unauthorised access, modification or disclosure.
4.6 Storage of Personal Information
EchoRealty is committed to protecting personal information and takes reasonable steps to ensure personal information is protected from misuse, interference, loss, unauthorised access, modification or disclosure. Some of the security measures include:
4.7 Sensitive Information
Sensitive information’ is a subset of personal information and is defined as:
EchoRealty recognises that sensitive information is generally afforded a higher level of privacy protection under the APP than other personal information. EchoRealty recognises that inappropriate handling of sensitive information can have adverse consequences for an individual or those associated with the individual, including discrimination, mistreatment, humiliation, embarrassment and the undermining of an individual’s dignity.
EchoRealty may collect sensitive information about an individual where the individual has provided consent and where the information is relevant to the services provided by EchoRealty.
4.8 Access and Correction of Information
Individuals have the right to request access to the personal information EchoRealty holds about them, and can request that information is corrected if it is inaccurate, out-of-date, incomplete, irrelevant or misleading. It is the individual’s responsibility to inform EchoRealty of any corrections or changes to personal information that are needed. If an individual would like to request access to, or correction of the personal information held by EchoRealty, please contact EchoRealty using the details provided in Section 4.10 below.
4.9 Complaints
If an individual is concerned that EchoRealty has not complied with applicable privacy laws, the individual may raise a complaint internally through EchoRealty’s complaints process. The process is as follows:
Step 1: Let EchoRealty know
If you would like to make a complaint, you should let us know by contacting out Privacy Officer using the details provided in Section 4.10 below. We will acknowledge the complaint within 2 working days.
Step 2: Investigation of Complaint
Your complaint will be investigated by our Privacy Officer. A response to your complaint will be provided in writing within 20 working days.
Step 3: We expect our procedures will deal fairly and promptly with your complaint. However, if you remain dissatisfied, you can also contact the Office of the Australian Information Commissioner as follows:
Office of the Australian Information Commissioner (OAIC)
GPO Box 5218
Sydney NSW 2001
www.oaic.gov.au
Note: Complaints must be made in writing
4.10 Contacting EchoRealty about Privacy
Individuals may contact EchoRealty with regards to the following matters:
Matter Contact Details and Options
This policy is subject to change from time to time at the discretion of EchoRealty. Where an individual is observed to not be working within the scope of this policy, the breach will be addressed by a team leader.
It is the responsibility of the: