Privacy policy.
How we collect, use and protect your personal information. Last updated [DATE].
Who we are
Kaló Haus is a buyers agency in Brisbane, Queensland. In this policy, we means [LEGAL ENTITY NAME] (ABN [ABN]), trading as Kaló Haus. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. From 1 July 2026 we are a reporting entity under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth).
For anything to do with privacy, contact Lily Fokas at lily@kalohaus.com.
What we collect
To act for you, we collect your name, contact details, household details, your budget and funding position, your property preferences, and your feedback on the properties we present.
To meet our legal obligations, we collect identification documents such as your passport or driver licence, your date of birth and address, information about the source of your funds, and where you buy through a company or trust, details of who ultimately owns or controls it.
When you use this portal we collect your email address to sign you in, along with basic technical information our hosting providers generate for security and reliability.
Why we collect it
- To understand your brief and search for, assess and acquire property for you
- To communicate with you about properties, inspections, offers and settlement
- To meet our obligations under the AML/CTF Act, including identifying you, keeping records and reporting to AUSTRAC
- To meet our obligations under Queensland property and agency law
- To run our business, including accounts, insurance and resolving disputes
If you do not give us the information we ask for, we may be unable to act for you. Without identification, we are prohibited by law from acting for you at all.
Who we share it with
We may disclose your information to AUSTRAC, and to law enforcement or regulators where required by law. With your consent we share relevant details with your solicitor, broker and accountant, and with inspectors and valuers we engage for you. We give selling agents only what is needed to make and progress an offer.
We never sell your information, and we never show it to our other clients. Each client can only ever see their own records here, and that is enforced by our database rather than simply by our policy.
Where the law requires us to report a matter to AUSTRAC, we are prohibited from telling you that we have done so.
Where your information is held
This portal is hosted using Vercel and Supabase. [State your hosting regions here once confirmed.] Where information is held or processed outside Australia, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.
How we keep it safe
- Every connection to this portal is encrypted
- Signing in uses a secure emailed link, so there is no password to be stolen
- Client records are separated at the database level
- Documents are stored privately and reachable only through short-lived links that expire
No system is completely secure. If we suffer a breach likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.
How long we keep it
The AML/CTF Act requires us to keep certain records, including your identification records, for seven years after our relationship or the relevant transaction ends. After that we assess whether we still have a lawful reason to hold them, and if not, we destroy or de-identify them.
Access, correction and complaints
You can ask us for the information we hold about you and ask us to correct it. Email lily@kalohaus.com and we will respond within a reasonable period, usually 30 days. In limited cases we may refuse access, for example where giving it would be unlawful, and we will tell you why in writing.
If you think we have mishandled your information, please raise it with us first. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.