Privacy Policy
1. About this policy
Ally Property Group is an Australian buyer's agency that assists investors and owner-occupiers, including Australian expats, to purchase residential and commercial property across Australia. We work alongside our related entities, Ally Wealth Management Pty Ltd (financial planning) and Ally Home Loans (mortgage broking), where clients have consented to a coordinated service.3. The personal information we collect
Depending on the nature of your engagement with us, we may collect:
- Identity information, such as your full name, date of birth, residency and citizenship status, and government-issued identification (for example, passport or driver licence) where required for AML/CTF or contract purposes.
- Contact details, including residential address, postal address, email address and telephone numbers.
- Financial information relevant to your property search, such as borrowing capacity, deposit funds, pre-approval details, employment and income, and existing assets and liabilities.
- Property preferences, such as target locations, budget, property type, investment objectives, timeframes and risk appetite.
- Transaction and engagement records, including correspondence, file notes, signed agreements, fee arrangements and invoices.
- Technical information when you use our website, such as IP address, device identifiers, browser type, pages visited and cookies.
- Any other information you choose to provide to us during the buyer's agency engagement.
We generally do not collect sensitive information. Where we do (for example, health information relevant to accessibility needs of a property), we will only do so with your express consent and where it is reasonably necessary.4. How we collect personal information
We collect personal information:
- Directly from you, through enquiry forms, onboarding documents, emails, phone calls, video meetings and in-person discussions.
- From your authorised representatives, such as your financial adviser, mortgage broker, accountant, solicitor or conveyancer.
- From related Ally Group entities, where you have provided consent for information to be shared between us.
- From third-party service providers we engage on your behalf (for example, valuers, building and pest inspectors, conveyancers, real estate agents and selling agents).
- From publicly available sources, such as property data providers, government registers and title searches.
- Automatically through our website and digital tools (see Section 9).
5. Why we collect, hold, use and disclose personal information
We use your personal information to:
- Provide buyer's agency services, including property research, shortlisting, due diligence, negotiation and settlement support.
- Verify your identity and meet our legal and regulatory obligations.
- Communicate with you, respond to enquiries and provide updates on your property search.
- Coordinate with third parties involved in your transaction (with your authority).
- Process payments, issue invoices and manage our fee arrangements.
- Improve our services, including internal training, quality assurance and complaint handling.
- Send you marketing communications, where you have consented and can opt out at any time.
- Comply with Australian laws, including the Privacy Act 1988 (Cth), AML/CTF legislation, taxation law and any applicable real estate or property licensing law.
6. Who we disclose your information to
We may disclose your personal information to:
- Our related entities, Ally Wealth Management and Ally Home Loans, where you have consented to a coordinated service.
- Selling agents, vendors and their representatives, as required to make offers and progress transactions.
- Conveyancers, solicitors and settlement agents involved in your transaction.
- Mortgage brokers and lenders, where relevant to financing.
- Building and pest inspectors, valuers, property managers and other third-party specialists.
- Our professional service providers, including IT, cloud hosting, cyber security, accounting and legal advisers.
- Government agencies, regulators and law enforcement where required or authorised by law.
We will only disclose your information for the purpose it was collected, a directly related purpose, or where you have otherwise consented or it is required by law.7. Overseas disclosure
Some of our service providers (for example, cloud hosting and email platforms) may store data on servers located outside Australia, including in the United States, the European Union and Singapore. Where this occurs, we take reasonable steps to ensure those recipients handle your personal information consistently with the Australian Privacy Principles.8. Your right to take court action (statutory tort of serious invasion of privacy)
From 10 June 2025, individuals have a statutory right under Australian law to bring court action for serious invasions of privacy. We take this seriously. We have:
- Tightened how we collect, store and protect personal information.
- Implemented role-based access controls, multi-factor authentication and encryption for systems holding personal information.
- Trained our team on their privacy and confidentiality obligations.
- Established a clear escalation path for any suspected misuse or unauthorised access.
If you believe your privacy has been seriously invaded by us, please contact us first (see Section 14) so we can investigate and respond promptly.9. Use of AI and automated tools
In line with the OAIC's transparency expectations, we want to be open about our use of artificial intelligence (AI) and automated decision-making tools.We may use:
- AI-assisted research and recommendation tools to help shortlist suburbs, properties and market data.
- Fraud and identity verification screening tools to help meet our AML/CTF and verification obligations.
- Productivity tools (such as transcription, summarisation and document drafting tools) to assist our team with internal workflows.
These tools support, but do not replace, the judgement of our buyer's agents. No final property recommendation, negotiation strategy or service decision is made solely by an automated system. Where automated tools materially influence a decision about you, you can request a human review by contacting us.10. Data breach notification
We have a Data Breach Response Plan consistent with the Notifiable Data Breaches (NDB) scheme. If a data breach is likely to result in serious harm to an affected individual, we will:
- Contain and investigate the breach as quickly as possible.
- Notify the Office of the Australian Information Commissioner (OAIC).
- Notify affected individuals, including the nature of the breach, the information involved, and recommended steps they can take to protect themselves.
If you suspect a breach involving your information, please contact us immediately (see Section 14).11. Children's privacy (individuals under 18)
Our services are designed for adults. We do not knowingly collect personal information from anyone under 18 years of age. Where information about a minor is provided (for example, as a dependant on a family property plan), we:
- Collect only the minimum information necessary.
- Require it to be provided by a parent or legal guardian.
- Apply enhanced protections in line with the OAIC's guidance on children's privacy and the forthcoming Children's Online Privacy Code.
- Will not use a minor's personal information for marketing or profiling purposes.
If you believe we have inadvertently collected personal information about a person under 18, please contact us so we can delete it.12. Data retention and destruction
We will not hold your personal information for longer than we need it. Our retention approach is:
- Active clients: for the duration of our engagement and ongoing services.
- Former clients: for a minimum of 7 years after the end of our engagement, consistent with general Australian record-keeping obligations (including taxation and AML/CTF requirements).
- Prospects who do not proceed: for up to 24 months from last contact, unless you ask us to delete sooner.
- Marketing contacts: until you unsubscribe or request deletion.
Once personal information is no longer required and we are not legally required to retain it, we will destroy or de-identify it in a secure manner, including secure deletion of digital records and shredding of physical records.13. Your privacy rights
You have the right to:
- Access the personal information we hold about you.
- Request correction of information that is inaccurate, out of date or incomplete.
- Withdraw consent to direct marketing at any time.
- Request deletion of your personal information, subject to our legal retention obligations.
- Request a human review of any decision materially influenced by an automated tool.
- Make a complaint about how we have handled your personal information.
To exercise any of these rights, please contact our Privacy Officer (Section 14). We will respond within a reasonable period, usually within 30 days.14. Contact us and complaints
If you have a question, request or complaint about how we handle personal information, please contact:
- Privacy Officer, Ally Property Group
- Email: info@allyproperty.com.au
- Phone: +61 416 926 627
- Postal address: 402/26 Charles Street, South Perth, WA 6151
If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.15. Changes to this policy
We may update this policy from time to time to reflect changes in law, technology or our business. The current version will always be available on our website at www.allyproperty.com.au/privacy-policy. Material changes will be communicated to active clients by email.
Start your property investment journey with Ally Property Group today.