Buy Australian Property Investments Pty Ltd T/A Buy Australian Property

Last updated: 15 October 2026

This policy (Privacy Policy) explains how Buy Australian Property Investments Pty Ltd (ACN 628 863 561) trading as Buy Australian Property (BAPI, we, us or our) handles personal information about clients, prospective clients and our business and professional contacts (you or your) that we hold in our Complete Management System (CMS) (Contact Data).

We take your privacy seriously. We handle Contact Data in accordance with this Privacy Policy, the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and other applicable data protection laws. Personal information collected through our websites is covered by our Website Privacy Policy (see section 12).

1. Contact Data we may hold

We limit the personal information we hold to what is reasonably necessary to supply or market our services or otherwise conduct our business. We hold Contact Data about clients, potential clients, suppliers, service providers, government officials, journalists, academics, industry experts and others with whom we have a business or professional relationship (Contacts). The types of Contact Data we may hold include:

  • names;
  • contact details, such as telephone numbers, street and email addresses;
  • personal and family information you choose to share, such as birthdays, anniversaries and special occasions;
  • business and marketing-related details, such as Preferred Partners, Strategic Partners, business or professional roles, titles, hobbies or interests, and facility preferences for meeting planning;
  • BAPI products and services you have purchased or are interested in;
  • marketing channel preferences (for example, a preference to be contacted by email but not by telephone);
  • records of our communications with you; and
  • client risk assessments, affordability statements and financial information, such as payslips, income, assets and liabilities.

Financial information. We treat financial information as particularly sensitive. We collect it only with your knowledge and consent, only where it is reasonably necessary to assess suitability and affordability or to arrange the services you request, and we restrict access to the people who need it. We will not use it for unrelated purposes.

2. How we collect Contact Data

We collect Contact Data by lawful and fair means, and directly from you wherever practicable. We obtain it when you or others:

  • are designated by your employer as our contact for submitting proposals, managing client assignments or invoicing, or (for companies providing services to BAPI) for managing the service relationship and paying invoices;
  • complete a BAPI registration or other form, or ask to join our mailing list;
  • buy goods or services from BAPI, or request information from us;
  • subscribe through our websites, newsletters and landing pages;
  • attend trade shows, events, seminars or webinars, or respond to our email campaigns;
  • engage with our social media advertising and marketing; or
  • otherwise give BAPI, or a BAPI team member, contractor or Strategic Partner, your contact details or other personal information.

3. How we use Contact Data

We use Contact Data to:

  • provide clients with the goods, services and information they request;
  • assess client suitability and affordability for the services we provide;
  • advise clients and potential clients about products and services offered by BAPI and by our Strategic Partners, contractors and affiliates, subject to your marketing preferences;
  • engage and manage our suppliers and service providers;
  • manage accounts, invoicing and payments;
  • correspond with our Contacts; and
  • meet our legal and regulatory obligations.

4. When we disclose Contact Data

We disclose Contact Data to others only with your consent or in the following limited circumstances:

  • In the course of client work. We may disclose personal information about our clients to others in the same client organisation, or to third parties involved in your transaction (for example lenders, brokers, solicitors, conveyancers, accountants, builders and property managers), or disclose third-party personal information to our clients, but only where this is necessary to provide the service you requested and you have agreed or would reasonably expect it.
  • Service providers. We provide personal information to companies and individuals who perform functions on our behalf (for example, a mailing service or a venue arranging an event). They may use it only to perform the services they are engaged to provide for BAPI.
  • Business changes. If any BAPI business unit is sold, or substantially all of BAPI is acquired, Contact Data relevant to the business transferred may be one of the transferred assets, subject to confidentiality obligations.
  • Legal matters. As described in section 10.

We do not sell Contact Data.

5. Storage and disclosure overseas

Contact Data is stored and processed in the CMS in Australia and may also be stored or accessed in other countries. We may share Contact Data with our affiliated companies, offices and service providers where needed for the purposes in this policy. Before we disclose Contact Data overseas, we take reasonable steps to ensure the recipient handles it consistently with the APPs and this Privacy Policy, unless you consent or the law otherwise permits the disclosure. Some countries have different data protection standards from Australia.

6. How we protect Contact Data

We place a high priority on the security of your Contact Data. We use appropriate technical, administrative and physical safeguards to protect it from misuse, interference, loss, and unauthorised access, modification or disclosure. These include access controls limited to those who need the information, secure systems and secure transmission. No system can be completely secure, but we will take reasonable steps to keep your information safe.

All directors, team members, consultants, contractors, agents and Strategic Partners of BAPI must comply with this Privacy Policy and sign binding confidentiality agreements. Failure to do so may result in disciplinary action or termination.

If we experience a data breach that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

7. How long we keep Contact Data

We keep Contact Data only for as long as we need it for the purposes described in this policy or as required by law, contract or audit requirements. When we no longer need it, we take reasonable steps to destroy or de-identify it. Contact Data may remain in our backup systems for a limited period until it is overwritten in the ordinary backup cycle and will not be used in the meantime.

8. Your rights

  • Marketing. You can change your marketing channel’s preferences, or ask us to stop all communications, at any time by contacting us. We will acquire your request within five business days.
  • Access and correction. You can ask to see the Contact Data we hold about you and ask us to correct, update or delete it. We may need to verify your identity first. We will respond within 30 days and take reasonable steps to make requested changes promptly. We may refuse a request in limited circumstances allowed by law (for example, where we are legally required to keep the information) and will explain why in writing.

9. Automated decision-making

From 10 December 2026 the Privacy Act requires us to tell you about certain automated decisions. On the date of this policy, we do not use computer programs to make, or to substantially and directly assist in making, decisions that could significantly affect your rights or interests (for example, automated scoring of client risk or affordability). If this changes, we will update this policy to describe the kinds of personal information used and the kinds of decisions involved.

10. Legal matters

We may disclose Contact Data without your permission where the law requires or authorises it, including to satisfy a law, regulation, court order, legal process or government request, or where we reasonably believe disclosure is necessary to prevent or lessen a serious threat to life, health or safety, to investigate unlawful activity, or to establish, exercise or defend legal rights. In doing so we will comply with the privacy laws of the relevant jurisdiction.

This Privacy Policy sets a uniform minimum standard for BAPI’s handling of Contact Data. Where local law requires a stricter standard, BAPI will handle Contact Data in accordance with that stricter standard.

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version is available on our websites with the date it was last updated. If we change it in a way that significantly alters how we handle your Contact Data, we will notify you by email or other appropriate means and, where the law requires, seek your consent before using your Contact Data in the new way.

12. Personal information collected through our websites

We also collect personal information from visitors to our websites at www.buyaustralianproperty.com.au and www.buyaustralianproperty.com. That information is governed by our Website Privacy Policy, which is available on those sites. Where personal information collected through our websites is added to our client contact and marketing databases, it is then handled under this Client Data Privacy Policy as well.

13. Questions and complaints

If you have any questions or concerns about this policy, or wish to make a complaint, please contact us by email at office@buyaustralianproperty.com.au or call BAPI on 1300 99 44 17, or write to P.O. Box 5414, Robina Town Centre QLD 4230. We will acknowledge your complaint promptly and aim to respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at www.oaic.gov.au or on 1300 363 992.

Client Data Privacy Policy