Privacy Policy

HRISTO (“we,” “us,” “our,” or “the Agent”) takes its obligations under the Privacy Act 1988 (Cth) (“the Act”) and the Australian Privacy Principles seriously, and is dedicated to safeguarding the personal information and privacy rights of all individuals we interact with.

The Act permits personal information to be gathered, used, and shared for the purposes for which it was originally collected, in accordance with the Act.

This Privacy Policy governs the way we handle personal information in connection with this website and the services we provide.

Acceptance of this Privacy Policy

By submitting your personal information, accessing this website, or making use of any of our products, services or features, you agree to the collection, use and disclosure of your personal information as described in this Privacy Policy.

What is your personal information?

As used in this Privacy Policy, “personal information” carries the meaning defined in the Privacy Act 1988 (Cth). Put simply, it refers to any information that could be used to identify you as an individual. This may include details such as your name, address, phone number, email address, and profession or occupation. Where information we collect identifies you — or could reasonably be used to do so — it will be treated as personal information.

What personal information do we collect and hold?

We may collect details including your name, mailing or street address, email address, phone number, fax number, age or date of birth, profession, occupation or job title, and any other information you share with us — whether directly through our website, through our representatives, via our customer service channels, or through surveys and site visits.

We will only collect “sensitive information” with your consent and where it is reasonably necessary for one or more of our functions or activities. Sensitive information can include, but is not limited to, details relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, sexual preferences, criminal history, health, or genetic information.

We may also collect non-personal information that cannot be used to identify any individual, such as anonymous survey responses and aggregated website usage data.

How do we collect your personal information?

Wherever possible, we collect your personal information directly from you. This may occur in the following ways:

• when you visit or use our website;
• via telephone, letter, fax or email;
• through conversations with our team;
• when you enquire about or request our products or services — online, by phone, via social media, or in person;
• when you enter into an agreement with us or complete any forms;
• when you subscribe to our communications, sign up for a webinar, or register for a course;
• when you engage with us through our website or social media channels;
• when you participate in competitions, promotions, or request materials from us;
• when you apply for a role with us, or become an employee, supplier or contractor; or
• when you complete a survey, leave feedback, make a complaint, or otherwise get in touch.
  
  

Where it is not practical or reasonable to collect information directly from you, we may obtain personal information from third parties, such as:

• credit reporting agencies, law enforcement agencies or government bodies;
• your authorised representatives, such as solicitors, accountants or financial advisers;
• your employer;
• if you are a job applicant, your referees, relevant law enforcement agencies for background checks, or recruitment intermediaries; or
• publicly available sources or other organisations, where you have given your consent.
  
  

Personal information about other people

If you share personal information about someone else with us, it is your responsibility to ensure you have their consent to do so under this Privacy Policy. We will assume that such consent has been obtained.

Anonymity

In some circumstances, we may be unable to assist individuals who choose not to identify themselves or who decline to provide information we are required to collect by law. Without your personal information, we may not be able to deliver the service you are seeking.

That said, general visitors to our website are not required to identify themselves. We do not collect personal information from website visitors unless they choose to provide it — for example, through a contact form or by sending us an email.

How do we use and disclose your personal information?

We only use and disclose personal information for the purposes for which it was collected, in accordance with the Act. These purposes include:

• delivering services and providing customer support;
• keeping our records accurate and current;
• verifying information and cross-checking it with third parties;
• fulfilling legal obligations or requirements set by government bodies;
• conducting customer due diligence as required by law; and
• any additional purpose you have specifically consented to.
  
  

We may share your personal information with third parties for these purposes, including:

• buyers, sellers, and their respective legal or professional representatives;
• existing and prospective clients of HRISTO;
• property data providers, media and advertising organisations, valuers, owners’ corporations, government and statutory bodies, financial institutions, insurers, and other service providers;
• courts, regulatory bodies, law enforcement agencies, and government authorities — including AUSTRAC — who may in turn share information with foreign or other regulatory bodies; or
• any party where disclosure is required, permitted, or authorised by law.
  
  

When does the law require us to collect your personal information?

Certain legislation may obligate us to collect and disclose your personal information. This includes requirements under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) and any associated regulations and rules.

Cookies

A cookie is a small electronic file passed between your browser and our server each time a page is loaded.

Our website may use cookies to track which pages you visit during your session. They also allow information entered into forms to be temporarily saved until you choose to submit or store it. Cookies may persist on your device after your session has ended.

When you visit our website, our server may record details such as your browser type, operating system, domain name, referring website, IP address, visit date and time, and pages accessed. This information is used for internal analytics and system administration only.

Any other information you provide — such as through an email or contact form — is handled in line with this Privacy Policy.

Information Security

We take reasonable measures to protect all information in our care — including personal information — from misuse, loss, and unauthorised access, modification or disclosure.

Information may be held in cloud-based or electronic storage systems accessible across multiple locations. While we take appropriate precautions, we cannot always confirm the specific country in which data may be stored at any given time.

We use secure transmission methods where practical. However, no online data transmission is entirely risk-free, and we cannot guarantee the absolute security of information sent to us over the internet.

We regularly review our data handling practices and train our staff to maintain compliance with applicable privacy legislation.

Data Retention and Erasure Rights

We keep personal information only for as long as it is needed to fulfil the purpose for which it was collected, or as required by law. Once it is no longer needed, information is securely disposed of or de-identified.

In certain circumstances — such as where you withdraw your consent or the information is no longer necessary — you may request that we erase your personal information.

Offshore Data Disclosure

From time to time, we may share personal information with trusted service providers or team members based overseas who assist us with administrative, support, or data-related functions.

Prior to any such disclosure, we take reasonable steps to confirm that the overseas recipient handles personal information in a manner consistent with the Act and the Australian Privacy Principles.

Links to Other Websites

Our website may include links to third-party websites. We have no control over and accept no responsibility for the privacy practices or content of those sites. This Privacy Policy applies only to HRISTO’s own website and services.

Marketing and Opt-Out

We may use your personal information (excluding sensitive information) for marketing, research, and service improvement purposes, and to keep you informed about products or opportunities that may be relevant to you. This information may also be shared with our partners, suppliers, and related entities for the same purposes.

If you would prefer not to receive marketing communications, please reach out to our team at any time. We will never use sensitive information for marketing without your explicit consent. All email communications from us will include an unsubscribe option. To opt out of other types of communications, please contact us using the details provided below.

Accessing and Correcting Your Personal Information

You have the right to request access to the personal information we hold about you, and to ask us to correct anything that is inaccurate, incomplete, or outdated. We will respond within a reasonable timeframe and take appropriate steps to ensure your information is kept accurate and current.

To make a request, please get in touch with our team.