1. About this Privacy Policy

This Privacy Policy explains how Rose Costello Property Pty Ltd T/As Property Finders Group (we, us, our) collects, holds, uses and discloses Personal Information, and how you may access or correct your Personal Information or make a privacy complaint.

We are committed to handling Personal Information in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs), as applicable, and in a manner that supports our compliance processes, including our anti‑money laundering and counter‑terrorism financing (AML/CTF) related onboarding and verification processes where applicable.

2. Contact details

If you have any questions about this Privacy Policy, our privacy practices, or wish to make a request or complaint, please contact:

Privacy Contact
Rose Costello Property Pty Ltd T/As Property Finders Group
Email: rose@propertyfindersgroup.com.au
Phone: 0414 557 714
Postal: PO Box 5, Aldinga Beach SA 5173, Australia

3. Key definitions

• Personal Information has the meaning given in the Privacy Act and includes information or an opinion about an identified individual, or an individual who is reasonably identifiable.
• Sensitive Information has the meaning given in the Privacy Act (including information about health, biometrics and other sensitive categories).
• Verification Information includes information and documents reasonably required by us to verify identity, conduct due diligence, manage risk, and meet AML/CTF-related onboarding and record keeping requirements where applicable (for example, identity documents and information derived from verification checks).

4. What Personal Information we collect and hold

We may collect and hold Personal Information including (without limitation):

4.1 Identification and onboarding information

• your name, date of birth and contact details (address, email, telephone);
• identification documents and identifiers (for example, driver licence, passport, proof of address);
• information needed to verify your identity and undertake due diligence (Verification Information);
• information about your authority to act for an entity or another person.

4.2 Service and transaction information

• details about your property requirements, preferences and budget parameters (where provided);
• communications between you and us (including emails and call notes);
• details of introductions or referrals to third parties (such as conveyancers, brokers or other service providers), where relevant.

4.3 Website and electronic information

If you interact with our website (if any) or online services, we may collect information such as your IP address, device information and usage data through cookies or similar technologies.

5. How we collect Personal Information

We may collect Personal Information:

• directly from you (including via forms, emails, phone calls, onboarding processes and meetings);
• from third parties where reasonably necessary for our functions or activities, including identity verification service providers, referees, professional advisers, and publicly available sources;
• from related entities or counterparties where you have provided authority for us to do so or where permitted by law.

Where practical, we will collect Personal Information directly from you.

6. Why we collect, hold, use and disclose Personal Information

We collect, hold, use and disclose Personal Information for purposes including:

• providing our services and performing our engagements (including client onboarding);
• communicating with you and responding to enquiries;
• verifying identity, conducting due diligence, and managing risk (including through Verification Information and verification checks);
• record keeping, billing and administration;
• improving and maintaining our services, systems and processes;
• complying with our legal and regulatory obligations, including obligations relating to AML/CTF-style verification, record keeping and risk management processes where applicable; and
• otherwise as required or authorised by law.

7. Sensitive Information

We do not seek to collect Sensitive Information unless it is reasonably necessary for our functions or activities and permitted by law.

If we collect Sensitive Information, we will handle it in accordance with the Privacy Act, including obtaining consent where required.

8. Consequences of not providing Personal Information

If you do not provide Personal Information we reasonably request, we may be unable to:

• provide services to you (or provide them fully); and/or
• complete identity verification, due diligence or risk checks required for onboarding or engagement.

In some circumstances, this may mean we cannot proceed with an engagement or must suspend or stop providing services.

9. Disclosing Personal Information (including for verification)

We may disclose Personal Information to third parties where necessary or convenient to provide services, undertake verification and/or manage risk, including to:

• identity verification and due diligence service providers;
• our contractors, suppliers and service providers (including IT, cloud storage, document management and communications providers);
• professional advisers (including accountants, lawyers and consultants);
• referral partners or third parties you ask us to liaise with (such as conveyancers, finance brokers, real estate agents and other property professionals);
• payment processors and financial institutions (where relevant); and
• regulators, courts, tribunals and law enforcement agencies, where required or authorised by law.

We do not sell Personal Information.

10. Overseas disclosures

We may disclose Personal Information to overseas recipients, including where our service providers store or process data outside Australia (for example, cloud service providers).

Where practicable, we take reasonable steps to ensure overseas recipients handle Personal Information in a manner consistent with the APPs. In some cases, you consent to overseas disclosure by engaging with us and providing Personal Information for the purposes described in this Privacy Policy.

11. Direct marketing

We may use your Personal Information to send you information about our services where permitted by law.

You may opt out of receiving marketing communications by using the unsubscribe function (if provided) or contacting us using the details in section 2.

12. Use of government identifiers

We do not adopt, use or disclose government related identifiers (such as driver licence numbers, Medicare numbers or passport numbers) except as permitted by law, including for identity verification, record keeping, and risk management where applicable.

13. How we store and secure Personal Information

We take reasonable steps to protect Personal Information from misuse, interference, loss, unauthorised access, modification or disclosure.

Security measures may include:

• access controls and user authentication;
• secure storage and restricted access to documents;
• staff and contractor confidentiality expectations; and
• using reputable third-party IT and cloud service providers.

No method of transmission or storage is completely secure. You should take care when sending information electronically.

14. Data retention and destruction

We retain Personal Information (including Verification Information) for as long as necessary to:

• provide services;
• meet legal, regulatory, verification, risk management and record keeping requirements; and
• resolve disputes and enforce agreements.

When Personal Information is no longer required, we take reasonable steps to destroy or de-identify it, unless we are required or authorised by law to retain it.

15. Access to and correction of Personal Information

You may request access to Personal Information we hold about you and request correction if you believe it is inaccurate, out of date, incomplete, irrelevant or misleading.

To make a request, contact us using the details in section 2.

We may need to verify your identity before providing access or making corrections. In some circumstances, we may refuse access or correction as permitted by law. If we refuse, we will provide reasons (where required) and explain available complaint mechanisms.

16. Complaints

If you believe we have breached the Privacy Act or this Privacy Policy, you may make a complaint by contacting us using the details in section 2.

Please include sufficient details so we can investigate. We will:

• acknowledge receipt of your complaint within a reasonable time; and
• investigate and respond within a reasonable time.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

17. Privacy of third parties

If you provide Personal Information about another person to us, you warrant that you have authority to do so and that you have informed that person that:

• you are providing their Personal Information to us; and
• we will handle it in accordance with this Privacy Policy.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version will be made available on our website (if we maintain one) and/or on request.

Last updated: 29 June 2026