Privacy policy
This policy explains how PropertyWorth handles personal information when you visit the Know Your Property Worth website or request a property report.
Last updated: 29 October 2026
1. Who we are
PropertyWorth (“we”, “us” or “our”) operates the Know Your Property Worth website at propertyworth.com.au and handles requests for property reports.
We aim to handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), where they apply to us. Whether the Privacy Act applies to a particular organisation can depend on its circumstances and statutory exceptions. We use the practices described in this policy as our standard for this service.
This policy covers personal information collected through this website and in related enquiries. It should be read with any privacy notice shown beside a form or request.
2. Information we collect
The information depends on how you interact with us. For a property-report request, the form is designed to collect:
- your name;
- the property address you ask us to review;
- your email address and phone number;
- your contact-consent selection; and
- submission details such as the time of the request and whether it passed the website’s security checks.
If you email or call us, we collect the contact details and any information you choose to provide in that communication. We do not ask for sensitive information through the report form. Please do not send sensitive information unless it is necessary and we have asked you for it.
For security, the API may temporarily use the connection IP address in memory to apply rate limits. When the form is enabled, Cloudflare Turnstile may process technical signals such as a visitor’s IP address, TLS fingerprint, browser User-Agent, site key and the website origin to detect automated abuse. The website host or network provider may also create ordinary technical logs (for example, requested page, time and connection information).
3. Why we use your information
We use information you provide to:
- receive, verify and respond to your property-report request;
- contact you about that request, clarify details and prepare or discuss the report you requested;
- review relevant property and local-market information for the requested address;
- protect the website, prevent spam or abuse, and troubleshoot service issues; and
- keep appropriate business records, meet legal obligations and deal with complaints or disputes.
If you do not provide the required contact or property details, we may be unable to process your request or contact you. You can browse the website without submitting the form.
4. When we share information
We do not sell or rent your personal information. If the report form is enabled, information will be shared only as reasonably needed to handle your request, operate the service or meet a legal obligation. This may include disclosure to:
- authorised PropertyWorth personnel and contractors involved in responding to your request;
- the website/API hosting and security providers;
- Cloudflare, for the Turnstile anti-bot check when that feature is enabled;
- the configured email provider, which delivers the enquiry to the property team and sends you an acknowledgement; or, if configured instead, a CRM provider that receives the enquiry; and
- professional advisers, regulators, law-enforcement bodies or other recipients where required or authorised by law.
The confirmation email acknowledges receipt of your request only. It does not include a completed report. We do not use the report-form contact consent as permission to add you to a marketing list. If we send commercial marketing messages in future, we will do so only as permitted by the Spam Act 2003 (Cth), including any applicable consent, sender-identification and unsubscribe requirements.
5. Automated checks and decisions
When submissions are enabled, Cloudflare Turnstile uses automated security checks to help distinguish people from bots. The signals described above may result in a challenge or a request being blocked if it appears automated. These checks are for website security; they do not assess your property, estimate its value, decide whether you qualify for a property service, or replace the property team’s review. If the security check prevents you from submitting a request, contact Tyrone Ha using the details below.
We do not currently use a computer program to make significant decisions about your property-report request or to determine a property worth. If our use of automated decision-making changes, we will update this policy with the relevant information, including as required by APP 1.7–1.9 from 10 December 2026.
For more about Turnstile’s processing, see Cloudflare’s Turnstile Privacy Addendum.
6. How information is stored, secured and retained
The report-request API does not keep a lead database. If enabled, it validates a request and forwards it to the configured email recipient or CRM; it also sends a separate acknowledgement to the email address you supplied. A connection IP used for rate limiting is held temporarily in application memory, rather than being added to the lead record.
After delivery, the relevant mailbox or CRM provider may hold the enquiry and acknowledgement in its systems and backups under its own retention settings. Website hosting and network providers may retain technical logs. We take reasonable steps to limit access to authorised people and to protect information, including encrypted connections where the service is configured for live use.
We keep personal information only for as long as it is reasonably needed to respond to your request, manage the related business relationship, meet legal obligations or resolve a dispute. When information is no longer needed, we take reasonable steps to delete or de-identify it, unless a law, court order or other permitted purpose requires retention. Provider backup and log retention periods may differ.
7. Overseas handling
Cloudflare, Inc. is based in the United States, but that alone does not establish where Turnstile signals for this website will be processed. Cloudflare's Turnstile Privacy Addendum describes its handling but does not identify the exact processing countries. The production configuration and terms have not yet been confirmed. Before enabling Turnstile and submissions, we will review the likely locations and update this section to identify overseas recipients and countries where practicable. You can also read Cloudflare's Privacy Policy.
The production hosting, email and CRM providers for this website have not yet been selected or configured. Their storage and processing locations are therefore not confirmed. Before the form is enabled, we will review those services and update this policy to identify likely overseas recipients and countries where practicable. Where the APPs apply, we take the steps required for any disclosure of personal information to an overseas recipient.
8. Your choices and privacy rights
You can choose not to submit a report request, or contact us with a general question without providing more information than is needed. The report form requires the listed details so we can identify the property and respond to you.
You may ask us for access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. Contact us by email or phone below and tell us what information you are asking about. We may need to verify your identity before giving access or making a change. We will respond within a reasonable period and explain any decision to refuse a request where the law requires it.
Some rights and exceptions depend on whether the Privacy Act applies to the relevant information and circumstances. We will consider each request under applicable law.
9. Privacy complaints and data breaches
If you are concerned about how we have handled your personal information, contact our Privacy Contact first. Please explain what happened, when it happened and how you would like us to resolve it. We aim to acknowledge and investigate complaints promptly and, where practicable, respond within 30 days.
If you are not satisfied with our response, or we do not respond within a reasonable time, you may complain to the Office of the Australian Information Commissioner (OAIC). The OAIC generally asks people to raise the complaint with the organisation first and allow a reasonable response period, usually 30 days.
If a data breach occurs, we will take steps to contain and assess it. If the Privacy Act and Notifiable Data Breaches scheme apply and the breach is eligible, we will notify the OAIC and affected individuals as required by law.
10. Contact and policy updates
Contact our Privacy Contact about access, correction or privacy complaints:
We may update this policy as our practices, service providers or legal requirements change. The current version and last-updated date will appear on this page.