Forrester Properties Group Privacy Policy

Version 2.0, effective 11 September 2026.

1. Our commitment to your privacy

Forrester Properties Group (we, us, our) respects your privacy and is committed to protecting the personal information we hold. This Privacy Policy explains what personal information we collect, how we collect, hold, use and disclose it, how you can access and correct it, and how you can make a complaint.

We manage personal information in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs). Where we manage residential tenancies in Queensland we also comply with the personal information requirements of the Residential Tenancies and Rooming Accommodation Act 2008 (Qld) (RTRA Act). Where we act as a real estate agent or property developer we comply with any applicable identity verification and reporting obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) (AML/CTF Act).

2. Who this policy covers

This Privacy Policy applies to all entities and related bodies corporate within the Forrester Properties Group, including Hudpac Corporation Pty Ltd, Hudpac Corporation No 2 Pty Ltd, Hudpac Corporation No 3 Pty Ltd and TMF Constructions Pty Ltd, and to the residential and commercial properties we own, develop or manage, including South Central Apartments, South Brisbane.

It applies to our websites www.forresterproperties.com.au and www.southcentral.com.au, and to any social media pages, online forms and applications we operate.

3. What is personal information

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not the information is true and whether or not it is recorded in a material form.

Sensitive information is a subset of personal information and includes information about a person’s racial or ethnic origin, political opinions, religious beliefs, sexual orientation, criminal record and health information. We do not generally collect sensitive information. If we need to collect sensitive information (for example, health information to assess a request for a disability modification to a rental property) we will only do so with your consent, or where the collection is required or authorised by law.

4. The personal information we collect

The kinds of personal information we collect depend on your dealings with us. It may include:

• identity and contact details, such as your name, date of birth, residential and postal address, telephone number and email address;
• identity verification documents, such as a driver licence, passport or other identification, where we are required to verify your identity;
• tenancy application information, such as your rental history, employment details, income and referee contact details, collected in accordance with the RTRA Act (see section 6);
• tenancy management information, such as tenancy agreements, bond lodgement details, rent payment records, entry and exit condition reports, inspection reports and photographs, maintenance requests and correspondence;
• purchaser, owner and investor information, such as contract details, settlement information, ownership records, bank account details for the payment of rent or distributions, and body corporate records;
• supplier and contractor information, such as business contact details, licences, insurance details and payment details;
• information relating to short term accommodation bookings, including booking dates, guest details and payment information;
• records of your communications with us, including emails, letters, telephone calls and messages;
• information relating to complaints, disputes and legal proceedings; and
• information about job applicants, employees and contractors, to the extent it is not covered by the employee records exemption in the Privacy Act.

When you visit our websites or use our online services we may also collect technical information, such as your server or IP address, the date and time of your visit, the pages you visit, the documents you download, the website you visited before ours, the browser or device you use, and general location data. This information is collected through cookies and similar technologies and is used to operate and improve our websites. You can disable cookies in your browser settings, although some features of our websites may not work correctly if you do.

5. How we collect personal information

Where reasonable and practicable we collect personal information directly from you. This may occur when you:

• submit a rental application, tenancy form or booking enquiry;
• enter into a tenancy agreement, contract of sale, agency agreement or other agreement with us;
• complete a form on one of our websites, or contact us by email, telephone, post or social media;
• attend an open home, inspection or meeting; or
• deal with us as an owner, purchaser, investor, supplier or contractor.

We may also collect personal information from third parties, including:

• online rental application platforms that you use to apply for one of our properties;
• residential tenancy databases, where you have consented or the law allows;
• your referees, previous landlords or property managers and employers, where you have provided their details;
• the Residential Tenancies Authority, body corporate managers, solicitors, conveyancers, financiers and other parties involved in a transaction;
• publicly available sources, such as title searches, company searches and social media; and
• our related bodies corporate and service providers.

If we collect personal information about you from a third party, or receive personal information we did not ask for, we will take reasonable steps to notify you of the collection and, if we could not have collected the information under the Privacy Act, we will destroy or de-identify it.

6. Rental applications and tenants (Queensland)

From 1 May 2025 the RTRA Act limits the personal information that a lessor or property manager may collect from prospective tenants, and sets out how that information must be handled. We comply with those requirements as follows:

• we use the approved rental application form (RTA Form 22) and offer at least two ways to submit an application, at least one of which does not require the use of a third party online platform or the payment of a fee;
• we only collect information that is relevant to assessing your application or managing the tenancy, and we will not ask you for information about any legal action, dispute resolution or tribunal matters you have been involved in, your rental bond claim history, any notices to remedy breach you have given or received, or statements of your credit or bank accounts that detail your transactions;
• you may choose to have us sight your original identity documents rather than providing copies, and if we sight a document we will not keep a copy of it without your consent;
• we will use your application information only to assess your suitability as a tenant and, if your application is successful, to manage the tenancy, and we will not use it for any other purpose without your consent;
• if your application is unsuccessful we will securely destroy your personal information within three months of the application being decided, unless you ask us to keep it (for example, for a waiting list) or the law requires us to keep it; and
• when a tenancy ends we will securely destroy the personal information we hold about you within seven years, except for information we are required by law to retain for a longer period.

Government identifiers. We do not adopt your driver licence number, passport number, Medicare number or any other government related identifier as our own identifier for you, and we do not use or disclose those identifiers except where required or authorised by law.

Residential tenancy databases. We may check a residential tenancy database (such as TICA or the National Tenancy Database) when assessing your rental application. If we do, we will tell you in writing, in the manner required by the RTRA Act, the name of each database we use, how to contact the database operator, and how you can find out what information is held about you. We will only list a person on a tenancy database where the RTRA Act permits it, and we will give the required prior notice and an opportunity to respond before any listing is made.

7. Why we collect, hold, use and disclose personal information

We collect, hold, use and disclose personal information for the purposes for which it was collected, for related purposes that you would reasonably expect, where you have consented, or where the law requires or permits us to do so. Those purposes include to:

• identify you and verify your identity;
• assess rental applications and manage residential and commercial tenancies, including lodging bonds, collecting rent, arranging repairs and maintenance, conducting inspections and dealing with the end of a tenancy;
• process bookings and enquiries, including short term accommodation bookings;
• market, sell, lease and manage properties, and act as your agent where appointed;
• manage our relationships with owners, investors, purchasers, body corporates, suppliers and contractors;
• provide information about our projects, products and services, and carry out direct marketing (see section 10);
• improve our services, websites and customer experience;
• manage, train and develop our employees and representatives;
• manage complaints, disputes, insurance claims and legal proceedings;
• comply with our legal and regulatory obligations, including under tenancy, body corporate, taxation and AML/CTF laws; and
• protect the safety and security of our properties, staff and the public.

8. Anonymity and choosing not to provide information

Where it is lawful and practicable you may deal with us anonymously or by using a pseudonym, for example when making a general enquiry about a property. However, we will usually need to identify you in order to enter into a tenancy agreement, contract or other transaction with you, or to comply with the law.

If you choose not to provide personal information we have requested, or the information you provide is incomplete or inaccurate, we may not be able to assess your application, provide the product or service you have requested, or deal with your enquiry.

9. Who we disclose personal information to

We may disclose your personal information to:

• our related bodies corporate within the Forrester Properties Group;
• our employees, contractors and service providers who assist us to operate our business, including property management software providers, online application platforms, cloud storage and IT providers, accountants, bookkeepers, insurers, tradespeople and maintenance contractors, cleaners, strata and body corporate managers, and mail houses;
• property owners and their representatives where we manage a property on their behalf, and prospective purchasers of a property where required for a sale;
• the Residential Tenancies Authority in connection with rental bonds and dispute resolution;
• residential tenancy database operators, in the circumstances described in section 6;
• referees, previous landlords, employers and other parties you have nominated for the purpose of verifying information in an application;
• utility providers, telecommunications providers and embedded network operators in connection with the connection and billing of services to your premises;
• financial institutions, payment processors and debt collection agencies;
• our professional advisers, including lawyers, conveyancers, auditors and consultants;
• government agencies, regulators, courts, tribunals and law enforcement bodies where we are required or authorised by law to do so, including AUSTRAC where AML/CTF reporting obligations apply; and
• other parties with your consent.

Where we disclose personal information to service providers we take reasonable steps to ensure they only use it for the purpose for which it was disclosed and that they handle it in accordance with the Privacy Act.

10. Direct marketing

We may use your personal information to send you information about our projects, properties, products and services that we consider may be of interest to you, by post, email, SMS, telephone or online, in accordance with the Privacy Act, the Spam Act 2003 (Cth) and the Do Not Call Register Act 2006 (Cth).

You may opt out of receiving marketing communications at any time by using the unsubscribe facility in any electronic message we send you, or by contacting our Privacy Officer using the details in section 17. We will action your request as soon as practicable. We do not sell personal information to third parties for marketing purposes.

11. Disclosure of personal information overseas

We store most personal information in Australia. However, some of our service providers, including providers of cloud storage, email, property management, accounting and online application software, may store or access personal information from servers located outside Australia, including in the United States, the United Kingdom, New Zealand and Singapore.

Before we disclose personal information to an overseas recipient we take reasonable steps to ensure the recipient handles the information in accordance with the Australian Privacy Principles, or we rely on another basis permitted by APP 8, such as your consent or the recipient being subject to laws that are substantially similar to the Privacy Act.

12. Automated decision making

We do not use computer programs to make decisions about you without human involvement. All decisions that could significantly affect your rights or interests, such as whether to approve a rental application, offer or renew a lease, end a tenancy, or list a person on a tenancy database, are made by our staff.

The online rental application platforms we use may employ automated tools to collect, collate and verify the information in your application, including the verification of identity documents and the checking of tenancy databases. Any automated output produced by those platforms is used only to assist our staff in assessing your application. If this changes we will update this policy to describe the kinds of personal information used, and the kinds of decisions made, using automated decision making, as required by the Privacy Act.

13. How we hold and secure personal information

We hold personal information in electronic form in our property management, accounting and document management systems, in our email and cloud storage systems, and in hard copy files at our office. We take reasonable steps, including technical and organisational measures, to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These measures include password and multi-factor authentication controls, restricted access to systems and files on a need to know basis, secure storage of hard copy documents, staff training, and the use of reputable service providers with appropriate security safeguards.

Retention and destruction. We keep personal information only for as long as it is needed for the purposes for which it was collected, or as required by law. Financial, taxation, tenancy and body corporate records are generally retained for seven years. Rental application information and tenancy records are destroyed within the time frames described in section 6. When personal information is no longer needed we take reasonable steps to securely destroy or de-identify it.

Our websites may contain links to third party websites and services. We are not responsible for the privacy practices or content of those websites, and we encourage you to read their privacy policies.

14. Data breaches

We have procedures in place to identify, contain, assess and respond to data breaches. If a data breach occurs that is likely to result in serious harm to any individual whose personal information is involved, we will notify the affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme in the Privacy Act, and we will take steps to reduce the risk of harm.

15. Access to and correction of your personal information

You may ask to access the personal information we hold about you, or ask us to correct it if you believe it is inaccurate, out of date, incomplete, irrelevant or misleading, by writing to our Privacy Officer using the details in section 17.

We will respond to your request within 30 days. We may need to verify your identity before providing access. We do not charge for making a request or for correcting your information, but we may charge a reasonable fee to cover the cost of retrieving and supplying information where a request is complex. If we refuse to give you access or to correct your information we will give you written reasons, unless it would be unreasonable to do so, and tell you how you can complain about the refusal.

16. Complaints

If you have a concern about how we have handled your personal information, or you believe we have breached the Privacy Act, the APPs or the RTRA Act, please contact our Privacy Officer in writing using the details in section 17. We will acknowledge your complaint promptly, investigate it, and aim to respond to you within 30 days.

If you are not satisfied with our response you may complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992. Tenancy related complaints may also be directed to the Residential Tenancies Authority at www.rta.qld.gov.au or on 1300 366 311.

17. Contacting us

If you have any questions about this Privacy Policy, wish to access or correct your personal information, wish to update your marketing preferences, or wish to make a complaint, please contact:

Privacy Officer
Forrester Properties Group
PO Box 3392
South Brisbane Qld 4101
Telephone: (07) 3328 8000
Email: bardi@forresterproperties.com.au

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our business or our information handling practices. The current version will always be published on our websites, and a copy is available on request from our Privacy Officer. This Privacy Policy was last updated on 11 September 2026.