Effective: 20 August 2026

About this policy

One Agency Gatty Coastal (ABN 80 480 579 821) respects your privacy. This policy explains how we collect, use, disclose, protect and manage personal information when you use our website or deal with us about property sales, property management, short-term accommodation or related services.

What we collect

• Identity and contact details; property, tenancy, booking and transaction information; enquiry and communication records.

• Payment and trust-related information, handled through approved providers and controls.

• Identity, beneficial ownership, source/risk and verification information required for fraud prevention and AML/CTF compliance.

• Website, device, cookie, analytics and marketing-preference information.

• Complaint, safety, access, employment/contractor and other information reasonably necessary for our functions or required by law.

Why we collect and use it

We use personal information to respond to enquiries; market, sell and manage property; manage short-term accommodation, bookings and payments; communicate with clients and counterparties; verify identity and authority; prevent and investigate fraud; manage safety and complaints; operate and improve our services; and comply with legal obligations, including property-agent, taxation, trust-account, privacy and AML/CTF requirements. If required information is not provided, we may be unable to provide a service.

Who we may disclose it to

• Owners, sellers, buyers, tenants, guests, applicants, counterparties and their representatives where needed for the service.

• One Agency network services and approved technology, hosting, CRM, booking, advertising, portal, payment, identity-verification, security, maintenance and professional advisers/providers.

• AUSTRAC, NSW Fair Trading, courts, tribunals, police, emergency services, insurers and other regulators or authorities where authorised or required by law.

• A prospective purchaser or adviser in a properly controlled business sale or restructure.

AML/CTF information

For designated real-estate services we may need to identify and verify customers, representatives and beneficial owners, assess risk, conduct ongoing due diligence and make reports to AUSTRAC. We may use approved verification providers and authoritative sources. The law may limit what we can tell you about some AML/CTF processes. We generally record identity-document details and verification outcomes; we do not retain a full identity-document copy solely because it was presented.

Overseas disclosures

Some service providers may store, process or support personal information outside Australia. Depending on the service and configuration, locations may include the United States, New Zealand, Singapore, Ireland and other countries used by a provider or its approved subprocessors. Relevant services may include Microsoft 365/Outlook, Google Drive, Dropbox, LockedOn CRM, Guesty, Airbnb, Vrbo/Stayz, website/hosting, property portals, payment and verification services. We take reasonable steps required by Australian privacy law before an overseas disclosure, but provider locations can change. Contact us if you need information about a particular disclosure.

Cookies and links

Our website may use necessary, preference, analytics and advertising cookies or similar technologies. Browser controls can limit cookies, although parts of the site may not work as intended. Third-party sites and property/booking portals have their own privacy practices; review their policies before providing information.

Security and retention

We use reasonable administrative, technical and physical safeguards appropriate to the information and service. No internet service is completely secure. We retain information for the period required by law and for legitimate service, claim, audit and security needs, then securely destroy or de-identify it where required. AML/CTF CDD records are generally kept for seven years after the business relationship ends or an occasional transaction completes.

Access, correction and complaints

You may ask for access to or correction of personal information we hold, or make a privacy complaint. We may need to verify your identity and may refuse or limit a request where permitted by law, in which case we will explain the reason and available complaint options. We aim to respond within 30 days.

Automated decisions

We do not currently use a computer program to make decisions that significantly affect a person's rights or interests without meaningful human involvement. We will update this policy before introducing a relevant automated decision-making process.

Contact us

One Agency Gatty Coastal - Privacy Officer

5/38-50 Evans Road, Tuross Head NSW 2537

Email: mail@oneagencygattycoastal.com.au

Phone: (02) 4473 9253

Website: www.oneagencygattycoastal.com.au

If you are not satisfied with our response, you may be able to complain to the Office of the Australian Information Commissioner at oaic.gov.au.