.png){kind=logo}
Date of current version: 20 March 2026
Zenu Realestate Pty Ltd ACN 169 473 456, a company incorporated in Victoria, Australia (we, us or our), is committed to protecting the privacy of individuals and to the responsible handling of personal information. This Privacy Policy also applies to our related bodies corporate. This Privacy Policy explains what personal information we collect, why we collect it, and how we collect, use, disclose, store and protect personal information when you visit our website, provide us with information (such as when you sign up to our services or use our services), or when you accept services from us.
It also explains how to contact us to correct, update or delete any personal information provided to us, or make a complaint if you have concerns.
We will only collect personal information about you where it is reasonably necessary for one or more of our functions or activities, or where you have consented to the collection. We collect, hold, use and disclose personal information in accordance with the Privacy Act 1988 (Cth) (the Act) and the Australian Privacy Principles (APPs).
Unless otherwise indicated by the context, words importing the singular include the plural and vice versa.
We will notify you about any significant changes to our Privacy Policy by updating the "Date of current version" of this Privacy Policy, and where appropriate, by contacting you directly via email or other communication methods. You are encouraged to periodically review this Privacy Policy to stay informed of updates. You will be deemed to have been made aware of, will be subject to, and will be deemed to have accepted the changes in any revised Privacy Policy by your continued use of our website or services after the date such revised Privacy Policy is posted.
This Privacy Policy does not apply to third-party websites or services that are linked to or from our website. We encourage you to read the privacy policies of any third-party websites you visit. Where we disclose personal information to third-party service providers who assist us in delivering our services, including our digital marketing platform provider and online advertising partners, those third parties collect and handle personal information on our behalf and under our direction. We take reasonable steps to ensure that those third parties handle personal information in accordance with the APPs and are bound by contractual obligations consistent with this Privacy Policy.
If you do not agree with the terms of this Privacy Policy, please do not access our website, use our services or provide any information about yourself to us.
This Privacy Policy applies to us with respect to content on our website, our services and information you provide to us about yourself.
Under the Act, personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether it is recorded in a material form or not.
Sensitive information is a subset of personal information that is afforded a higher level of protection under the Act. It includes information about an individual's health, racial or ethnic origin, political opinions, religious beliefs, sexual orientation, criminal record, and membership of professional associations. We do not collect sensitive information in the ordinary course of our business.
We collect most personal information directly from the individual to whom it relates. We collect personal information about agents directly when they register for our services, use our platform, or communicate with us. We collect personal information about agents' clients indirectly, when agents upload or enter that information into our platform in the course of using our services. We may also collect personal information from publicly available sources, such as public property records and real estate listing portals, for the purpose of providing our Prospect Live prospecting service to agents.
You provide us your information when you use our services, navigate our website, or when you communicate with us directly such as via phone, email, or customer service platforms.
APP 2 of the Act requires us to give individuals the option of not identifying themselves, or of using a pseudonym, when dealing with us, where this is lawful and practicable. In most cases, it is not practicable for individuals to interact with us anonymously or using a pseudonym. Agents must be identifiable to register for and use our services, to manage their accounts, and to receive support. Agents' clients must be identifiable within the CRM for the purpose of receiving property alerts, inspection notifications, and marketing communications on behalf of the agent. Where an individual contacts us with a general enquiry and does not wish to identify themselves, we will handle that enquiry anonymously to the extent practicable.
We collect personal information about the following categories of individuals. The kinds of personal information we collect depend on the nature of the individual's relationship with us.
We collect the following personal information about real estate agents and agency staff who register for and use our services:
We also collect usage data generated through an agent's use of our platform, including login records, feature usage logs, and communications sent through the platform.
In providing our CRM and digital marketing services to agents, we collect and hold personal information about the agents' clients, including vendors, buyers, tenants, and prospective clients, that is uploaded to or generated within our platform by the agent. This personal information is collected by us on behalf of the agent and may include:
This personal information is provided to us by the agent and is held and used by us solely for the purpose of providing our services to that agent. The agent is responsible for ensuring that they have collected this personal information lawfully and that their clients have been informed of the disclosure to us.
You have the right to choose not to provide us with your personal information. However, please note that this might prevent you from taking full advantage of some of the features of our services or our website.
We may collect your personal information when required by law but generally we collect personal information from you (or about you) to allow us to:
Personal information collected or received by us will only be used for the stated purpose for which it was provided, or for a directly related secondary purpose, unless you agree otherwise, or an exception under the Act applies.
Where we hold personal information about an agent's clients, we collect and hold that information solely for the purpose of providing our services to the agent, including operating the agent's CRM database, sending communications on the agent's behalf, and facilitating digital marketing campaigns. We do not use personal information about agents' clients for our own purposes, including our own marketing or analytics, without the express consent of the agent and, where required, the individual concerned.
We may collect, hold, use and disclose your personal information for the following purposes:
We may disclose personal information for the purposes described in this Privacy Policy to:
Where we disclose personal information to third parties, we take reasonable steps to ensure that those third parties are bound by obligations consistent with the APPs and that they handle personal information in a manner consistent with this Privacy Policy.
In particular, we disclose personal information about agents and their clients to our digital marketing platform provider (Realforce) for the purpose of creating and delivering targeted online advertising campaigns on behalf of agents. Realforce and its subprocessors may process personal information on servers located overseas, including in Sweden, the United States of America, and the European Union. We have contractual arrangements in place with Realforce that require it to handle personal information in a manner consistent with the APPs. Further details about overseas disclosures are set out in the Overseas Disclosure section below.
We do not use personal information about agents' clients for the purpose of developing insights or analytics for our own commercial benefit, and we do not share personal information with third parties for that purpose.
We do not sell your personal information. We may aggregate the information you and others make available to us and share it with third parties.
We may use de-identified or aggregated information (from which no individual can be identified) for the purpose of improving our services and understanding how our platform is used. We do not sell, license, or share aggregated information derived from personal information for commercial purposes. However, this will only be done in accordance with the APPs, and the information will be anonymized to ensure that individual identities cannot be determined.
We and/or our carefully selected business partners may send you direct marketing communications and information about our service and products. This may take the form of emails, SMS, mail or other forms of communication, in accordance with the laws of your country. You may opt-out of receiving marketing materials from us by contacting us using the details set out below or by using the opt-out facilities provided (eg an unsubscribe link).
You can object to us using your information for these purposes.
You are not obligated to provide us with your personal information. You may choose whether you receive communications from us. Whilst it is your choice not to provide your personal information to us this may impede our ability to provide you with all the functionality of our services and website.
Should you wish to remove yourself from our database you may do so at any time by contacting us by emailing us at privacyofficer@zenu.com.au.
At any time, you may contact us and request your personal information be modified. We will make all efforts to correct information once we have proved your identity.
We will deal with all requests for access to personal information as quickly as possible, but no later than the prescribed time required by law (unless any complexities arise). Requests for a large amount of information, or information which is not currently in use, may require further time before a response can be given.
We will provide you your personal information in a structured, commonly used, machine-readable format.
In some cases, we may refuse to give you access to personal information we hold about you. This includes, but is not limited to, circumstances where giving you access would: be unlawful; have an unreasonable impact on other people's privacy; prejudice an investigation of unlawful activity; reveal our intentions in relation to negotiations with you so as to prejudice those negotiations; or prejudice enforcement related activities conducted by, or on behalf of, an enforcement body. However, we will not refuse to give you access to personal information we hold about you if it would reveal evaluative information generated within our business in connection with a commercially sensitive decision-making process, unless the refusal is in line with the Australian Privacy Principles.
We will also refuse access where providing access would reveal our intentions in relation to negotiations with you in such a way as to prejudice those negotiations. Further, we will refuse access where your request is frivolous or vexatious, and where we reasonably believe that unlawful activity, or misconduct of a serious nature, is being or may be engaged in against us and giving access would be likely to prejudice the taking of appropriate action in relation to that matter.
If we refuse to give you access, we will provide you with reasons for our refusal, unless doing so would be unreasonable in the circumstances. We will also take reasonable steps to give you access in a way that meets your needs without giving rise to the reasons of our refusal. Further, we will provide details of how you may make a complaint about our decision.
Please note that the access and correction requirements under this Privacy Policy operate alongside and do not replace other informal or legal procedures by which an individual can be provided access to, or correction of, their personal information.
For us to provide excellent service we are required to store some personal information and take the greatest of care to ensure this information is treated as private and confidential. Transmitting personal data via the internet does have inherent risks associated with it. We will however take all reasonable steps to ensure the security of this information.
We have taken the necessary measures to ensure the personal information we hold is not compromised. In accordance with and as permitted by applicable law and regulations we will retain your information as long as necessary to serve you, to maintain your account or as otherwise required to operate our service.
Our third-party data storage centre is equipped with the latest technology, infrastructure and dedicated technical staff to ensure our working environment has reliability and security for your information. We take all reasonable steps to ensure that our third-party service providers are also compliant with the Australian Privacy Principles.
Our website is protected by security certificates and is built considering all modern security standards where possible. We will take reasonable steps to maintain the integrity and security of any personal information we have stored, including taking reasonable steps to prevent interference and loss, misuse, unauthorised access, modification or disclosure of such personal information.
Note that no information transmitted over the Internet can be guaranteed to be completely secure. While we will endeavour to protect your personal information as best as possible, we cannot guarantee the security of any information that you transmit to us or receive from us. The transmission and exchange of information is carried out at your own risk.
It is important that you protect your privacy by ensuring that no one obtains your personal information, and you must contact us directly if your details change. Should your information be erroneously provided to us or no longer remain valid within the constraints of this Privacy Policy we will securely destroy or de-identify it as soon as practicable, as long as it is lawful to do so.
We have obligations under the Privacy Amendment (Notifiable Data Breaches) Act 2017 to notify you if you are affected by a data breach which is deemed a serious data breach. We will take all reasonable precautions to take remedial action to prevent such an event. However, as we cannot guarantee that remedial action will be sufficient to prevent all instances of a breach, we will take steps to notify you of an eligible data breach as soon as practicable and provide recommendations as to what steps you should take to mitigate any serious issues.
We retain personal information only for as long as is reasonably necessary for the purposes for which it was collected, or as required by law. Personal information held in an agent's CRM account is retained for the duration of the agent's subscription with us. After the applicable retention period, we will take reasonable steps to securely destroy or permanently de-identify the personal information.
Whenever you use our website, or in a case of an error within the website, we collect data and information (through third party products) called Log Data. This Log Data may include information such as your device, Internet Protocol address, device name, operating system version, the configuration of the device when utilizing our website, the time and date of your use of our website and other statistics.
In the course of providing our services, we may disclose personal information to third-party service providers who assist us in operating our business and providing services to our Agents. These third parties may include technology platform providers, digital marketing and advertising services, property data and analytics services, cloud storage providers, and other software and service vendors.
A list of the third-party service providers to whom we may disclose personal information, together with details of the services they provide, the kinds of personal information we disclose, the countries in which personal information may be stored or processed, and the legal basis for any overseas disclosure, is maintained in our Third Party Vendor Register, which is available at: https://www.zenu.com.au/third-party-register
We update the Third Party Vendor Register from time to time as our vendor relationships change. We encourage you to review the Register periodically.
Notwithstanding those contractual protections, individuals should be aware that overseas recipients are subject to the laws of their own countries, which may differ from Australian privacy law.
If you have concerns about the overseas disclosure of your personal information, please contact our Privacy Officer using the contact details set out at the end of this policy.
We reserve the right to modify or amend this Privacy Policy at any time. We will notify you of these changes and provide you with an opportunity to review them before they take effect.
If you object to any changes, you may cease using our website and/or our services. Alternatively, you may also opt out of certain types of information collection, use or sharing. You acknowledge and agree that your continued use of our website means that the collection, use and sharing of your personal information is subject to the updated Privacy Policy.
Cookies are text files placed on your computer to collect standard Internet log information and visitor behaviour information. When you visit our website, we may collect information from you automatically through cookies or similar technology. While we do not use browsing information to identify you personally, we may record certain information about your use of our website, such as which pages you visit, the time and date of your visit and the internet protocol address assigned to your computer.
Insofar as those cookies are not strictly necessary for the provision of our website and services, we will ask you to consent to our use of cookies when you first visit our website. You may withdraw this consent at any time.
We may also use 'cookies' or other similar tracking technologies on our website that help us track your website usage and remember your preferences. Cookies are small files that store information on your computer, TV, mobile phone or other device. They enable the entity that put the cookie on your device to recognise you across different websites, services, devices and/or browsing sessions. You can disable cookies through your internet browser, but our websites may not work as intended for you if you do so.
Cookies may be either "persistent" cookies or "session" cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.
We use cookies for the following purposes:
Our service providers use cookies, and those cookies may be stored on your computer when you visit our website.
Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser, and from version to version. You can, however, obtain up-to-date information about blocking and deleting cookies via these links:
Blocking all cookies will have a negative impact upon the usability of many websites. If you block cookies, you will not be able to use all the features on our website.
Enquiries regarding this Privacy Policy or the personal information we may hold on you should be addressed to the Privacy Officer at privacyofficer@zenu.com.au.
We are subject to the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Act. If we become aware of a data breach that is likely to result in serious harm to any individual whose personal information is involved, we will notify the affected individuals and the Office of the Australian Information Commissioner (OAIC) as soon as practicable. We will provide affected individuals with recommendations about the steps they should take to protect themselves from the consequences of the breach.
If you think your personal information, held by us, may have been compromised in any way or you have any other privacy related complaints or issues, you should also raise the matter with the Privacy Officer.
We will ensure your claims are investigated and a formal response will be provided to you, within a reasonable time, considering the circumstances of your claims. If any corrective action is determined to be required, as a result of that investigation, we will take all reasonable steps to rectify the situation and advise you of such, again within a reasonable time considering the circumstances.
If we do not resolve your enquiry, concern or complaint to your satisfaction or you require further information in relation to any privacy matters, please contact the Office of the Australian Information Commissioner:
