Privacy Policy

Last updated: 28 August 2026

1. Our commitment to privacy

Penrose Real Estate (“Penrose Real Estate”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal information we collect, use, hold and disclose.

This Privacy Policy explains how we handle personal information relating to our clients, prospective clients, property owners, landlords, tenants, prospective tenants, buyers, prospective buyers, contractors, suppliers and other people who interact with us.

We are committed to handling personal information responsibly and in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as applicable to our activities, together with other laws applying to our business, including the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) (AML/CTF Act).

2. What personal information we collect

The personal information we collect depends on your relationship with us and the services we are providing.

It may include:

  • your name, residential or postal address, telephone number and email address;
  • date of birth;
  • details about properties you own, occupy, wish to purchase, sell, lease or rent;
  • information contained in sales, leasing and property management documents;
  • rental application information, including rental history, employment information, references and income information;
  • bank account, payment and transaction information;
  • correspondence and communications with us;
  • information provided when you attend an inspection, open home or auction;
  • photographs, video and other information relating to a property;
  • information provided through our website, property portals, social media, advertising platforms or enquiry forms;
  • identification information where required or authorised by law;
  • information relating to companies, trusts, partnerships and other entities;
  • beneficial ownership and control information;
  • source of funds or source of wealth information where required;
  • information required for sanctions, politically exposed person or other AML/CTF screening;
  • information required to comply with legal, regulatory and professional obligations; and
  • technical information relating to your use of our website, such as IP address, browser, device and website usage information.

We may collect sensitive information where it is reasonably necessary for our functions or activities and you have consented to its collection, or where collection is otherwise permitted or required by law.

We aim to collect only the personal information reasonably necessary for the relevant purpose.

3. How we collect personal information

Where practicable, we collect personal information directly from you.

This may occur when you:

  • contact us by telephone, email, SMS or through our website;
  • make a property enquiry;
  • attend an open home, inspection or auction;
  • request an appraisal or property report;
  • engage us to sell, lease or manage a property;
  • purchase or make an offer to purchase a property;
  • apply for a residential tenancy;
  • enter into a contract, appointment, lease or other agreement;
  • complete an identity or client verification process;
  • subscribe to property alerts, market information or other communications;
  • interact with us through social media; or
  • otherwise provide information to us during the course of our relationship.

We may also receive personal information from third parties where permitted by law, including:

  • your authorised representatives;
  • solicitors and conveyancers;
  • property owners, landlords, buyers, sellers and tenants;
  • other real estate agencies;
  • referees;
  • property portals and enquiry platforms;
  • publicly available databases and records;
  • government and regulatory bodies;
  • identity verification and AML/CTF service providers;
  • tenancy screening and tenancy database providers;
  • contractors, tradespeople and professional advisers; and
  • technology and other service providers assisting us in delivering our services.

Where appropriate, we may also provide a separate privacy collection notice at or around the time particular information is collected.

Information you provide through our website

If you choose to provide personal information to us through our website, including through enquiry forms, appraisal requests, property enquiries, subscription forms or other online forms, you acknowledge that Penrose Real Estate may collect, use and disclose that information in accordance with this Privacy Policy and for purposes connected with your enquiry, request or our services.

Where your consent is required by law for a particular use or disclosure, we will seek that consent where appropriate.

Simply visiting or browsing our website does not, by itself, amount to consent to all uses of personal information.

4. Anonymity and pseudonyms

Where it is lawful and practicable, you may interact with us anonymously or using a pseudonym for general enquiries.

However, in many circumstances associated with real estate transactions, residential tenancies, property management, trust accounting and AML/CTF obligations, we will need to know your identity in order to provide our services or comply with the law.

5. Why we collect, hold and use personal information

We may collect, hold and use personal information to:

  • provide real estate sales, property management, leasing and related services;
  • communicate with clients, customers and prospective clients;
  • respond to enquiries;
  • conduct property appraisals;
  • market properties for sale or lease;
  • manage inspections, offers, contracts, auctions and settlements;
  • process rental applications and manage residential tenancies;
  • communicate between landlords, tenants, buyers, sellers and other relevant parties;
  • coordinate repairs, maintenance and property services;
  • process payments, invoices and trust account transactions;
  • verify identity and client information;
  • conduct customer due diligence and AML/CTF checks;
  • comply with AML/CTF monitoring, record-keeping and reporting requirements;
  • comply with real estate, residential tenancy, taxation, trust accounting and other legal and regulatory obligations;
  • manage complaints and disputes;
  • prevent, identify or investigate suspected fraud or unlawful activity;
  • maintain business and accounting records;
  • improve our services and customer experience;
  • analyse the use and performance of our website and digital services;
  • provide property and market information that may be relevant to you; and
  • undertake normal administrative and business activities associated with operating Penrose Real Estate.

We will generally only use or disclose personal information for the purpose for which it was collected, for a related purpose that you would reasonably expect, with your consent, or where permitted or required by law.

6. Anti-Money Laundering and Counter-Terrorism Financing

Certain real estate services are subject to Australian AML/CTF legislation.

Where Penrose Real Estate provides a service subject to the AML/CTF Act, we may be required to collect and verify information about clients and other relevant persons before providing the service and throughout the business relationship.

Depending on the circumstances, this may include:

  • full legal name;
  • date of birth;
  • residential address;
  • identification document information;
  • information relating to companies, trusts and other entities;
  • beneficial ownership and control information;
  • information about authorised representatives;
  • source of funds or source of wealth information;
  • transaction information; and
  • other information necessary to assess and manage money laundering, terrorism financing and proliferation financing risk.

We may use secure third-party identity verification and screening services to assist us in meeting these obligations.

AML/CTF information may be disclosed to AUSTRAC, law enforcement agencies, government authorities or other parties where required or authorised by law.

In some circumstances, the law may restrict what we are permitted to tell a person about an AML/CTF investigation, report or disclosure.

We aim to minimise the amount of identification information we retain. Copies of full identity documents, such as passports or driver licences, will not be retained longer than reasonably necessary unless their continued retention is permitted or required by law.

Required AML/CTF verification, transaction, due diligence and other compliance records will be retained for the periods required by applicable law.

7. Rental applications and tenancy information

If you apply to rent a property managed by Penrose Real Estate, we may collect information reasonably necessary to assess your application and, if successful, establish and manage your tenancy.

This may include identification information, rental history, employment and income information, references and other information relevant to assessing the application.

Information may be disclosed to the property owner and, where permitted by law, referees, tenancy screening services or tenancy database operators.

We handle tenancy information in accordance with applicable privacy and Queensland residential tenancy laws.

8. Who we may disclose personal information to

Depending on the circumstances, we may disclose personal information to:

  • property owners and landlords;
  • prospective or actual buyers and sellers;
  • prospective or actual tenants;
  • solicitors and conveyancers;
  • building managers and bodies corporate;
  • tradespeople, contractors and maintenance providers;
  • insurers;
  • valuers, building inspectors, pest inspectors and other property professionals;
  • photographers, stylists and marketing providers;
  • auctioneers;
  • utility connection providers where requested or authorised;
  • tenancy screening and tenancy database providers where permitted by law;
  • accountants, auditors and professional advisers;
  • banks and financial institutions where necessary;
  • property management, CRM, communications, document storage and other technology providers;
  • website, analytics and marketing service providers;
  • identity verification and AML/CTF screening providers;
  • AUSTRAC and other government or regulatory authorities;
  • law enforcement agencies where required or authorised by law; and
  • other parties authorised by you or to whom disclosure is permitted or required by law.

We do not sell personal information to third parties.

9. Overseas access and disclosure

Penrose Real Estate engages Australian-based service providers to assist with the operation of our business. Some of these providers may utilise personnel located outside Australia.

In particular, administrative support services provided to Penrose Real Estate may involve personnel located in the Philippines who may access personal information as part of providing those services.

We also use technology, communications, cloud storage, analytics and other software and service providers. Depending on the provider and service, information may be stored, accessed or processed outside Australia.

Where personal information is disclosed to an overseas recipient, we take reasonable steps, as required by applicable privacy law, to ensure that personal information is appropriately protected.

The locations used by technology and other service providers may change from time to time. Further information about overseas handling of personal information can be requested from our Privacy Officer.

10. Direct marketing

Where permitted by law, we may use your contact information to communicate with you about:

  • properties for sale or lease;
  • property market information and updates;
  • appraisal opportunities;
  • real estate and property management services;
  • newsletters;
  • events; and
  • other information we reasonably believe may be relevant to you.

You may opt out of receiving direct marketing communications at any time by using an unsubscribe facility provided in the communication or by contacting us.

We will take reasonable steps to action your request.

Opting out of marketing will not prevent us from contacting you where communication is necessary to provide an existing service, manage a transaction or tenancy, or comply with a legal obligation.

11. Website, cookies, analytics and log data

When you visit our website, certain technical information may be collected automatically.

This may include information such as:

  • your IP address;
  • browser type and version;
  • device information;
  • pages visited;
  • the date and time of your visit;
  • time spent on particular pages;
  • referring websites; and
  • other website usage information.

We may use cookies and similar technologies to:

  • enable website functionality;
  • understand how visitors use our website;
  • improve website performance and user experience;
  • measure the effectiveness of advertising; and
  • provide more relevant content and marketing.

We may use third-party analytics, advertising and website technology providers, including services provided by Google and Meta, where enabled on our website.

These providers may collect or receive information about your use of our website in accordance with their own privacy policies.

You can generally manage or disable cookies through your browser settings. If you disable cookies, some website features may not function as intended.

12. Third-party service providers

We engage third-party companies and service providers to assist us in operating our business and delivering our services.

These providers may have access to personal information where reasonably necessary to perform services on our behalf.

We take reasonable steps to select appropriate service providers and to ensure that personal information provided to them is handled appropriately and only used for authorised purposes.

13. Links to other websites

Our website may contain links to websites or services operated by third parties.

If you follow a link to another website, that website will have its own privacy practices and policies.

Penrose Real Estate does not control, and is not responsible for, the content, security or privacy practices of third-party websites or services.

We encourage you to review the privacy policy of any third-party website or service you use.

14. How we protect personal information

We take reasonable steps to protect personal information we hold from misuse, interference, loss, unauthorised access, modification or disclosure.

Measures may include:

  • access controls and limiting information access according to role;
  • password protection and multi-factor authentication where appropriate;
  • secure technology systems and service providers;
  • staff and contractor confidentiality obligations;
  • information security procedures;
  • staff training;
  • secure document handling and storage; and
  • processes for responding to suspected privacy or security incidents.

While we take reasonable precautions, no method of electronic transmission or storage can be guaranteed to be completely secure.

15. Retention and destruction of information

We retain personal information for as long as reasonably necessary for the purpose for which it was collected and to satisfy our legal, regulatory, accounting and professional obligations.

Some records are required by law to be retained for specified periods, including certain real estate, trust accounting, taxation and AML/CTF records.

When personal information is no longer required and we are not legally permitted or required to retain it, we will take reasonable steps to securely destroy or de-identify it.

We seek to avoid retaining copies of highly sensitive identification documents for longer than necessary.

16. Accessing and correcting your personal information

You may request access to personal information we hold about you.

You may also ask us to correct personal information that you believe is inaccurate, incomplete, out of date, irrelevant or misleading.

We may need to verify your identity before providing access or making a correction.

There may be circumstances in which we are permitted or required by law to refuse access to particular information. If this occurs, we will explain our decision where we are legally permitted to do so.

Requests for access or correction can be made to our Privacy Officer using the contact details below.

17. Data breaches

Penrose Real Estate takes actual and suspected data breaches seriously.

If we become aware of a suspected data breach, we will take reasonable steps to contain and assess the incident and reduce potential harm.

Where a data breach is an eligible data breach under the Notifiable Data Breaches scheme, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) where required by law.

18. Privacy enquiries and complaints

If you have a question or concern about the way we have handled your personal information, please contact our Privacy Officer.

We ask that privacy complaints be made in writing where possible so that we can properly investigate the matter.

We will review and investigate your complaint, contact you if further information is required and respond within a reasonable period.

We aim to respond to privacy complaints within 30 days where reasonably practicable.

If you are not satisfied with our response, you may be entitled to make a complaint to the Office of the Australian Information Commissioner (OAIC).

19. Contact us

Privacy Officer
Penrose Real Estate

Christina Penrose
Phone: 0418 737 327
Email: christina@penroserealestate.com.au

You may also contact us through the Penrose Real Estate website.

20. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business practices, technology, service providers or legal obligations.

Any updated Privacy Policy will be published on our website and will show the date it was last updated.

We encourage you to review this Privacy Policy periodically.

homephone-handset