Privacy Policy

Who we are

VerandaWorth is operated by Moovers CommV, trading as VerandaWorth, a company established in Belgium. Registered office: Schildersstraat 1, 8770 Ingelmunster, Belgium. Company number: Belgian company number (KBO/BCE) BE 0767.796.570. Contact: hello@verandaworth.com.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and, because we operate from Belgium, with the EU General Data Protection Regulation. Where the two differ we apply whichever gives the individual more protection.

For agency account, billing, website, security and dashboard administration data, we decide how and why the information is handled.

For requests submitted through the VerandaWorth widget on an agency's website, the AGENCY decides why and how the request is used. VerandaWorth handles that information for the agency, on its documented instructions.

We have not appointed a privacy officer with a separate title; for any privacy question, write to the address above and it reaches the person who can answer it.

What we collect

• Agency account users: names, work email addresses, account settings, access logs, billing status and, when you arrived through one of our advertisements, the campaign labels carried in that link, so we know which advertising works.
• Owner requests: name, mobile number or email address, the property address and its characteristics, the estimate shown, the selling timeframe, and the consent record.
• Technical records: session, security, audit and rate-limiting logs needed to run the service safely.
• We do not collect sensitive information as the Privacy Act defines it, and the widget must not be used to ask for any.
• If you do not give contact and property details, the estimate and the follow-up cannot happen.

Why we handle personal information

• Agency account users: to provide, bill for and secure the service, and to keep the tax and accounting records the law requires.
• Owner requests: the agency decides why it collects and follows up your request; we handle it only for that agency and on its instructions. If the agency asked for your consent, you can withdraw it at any time by contacting them.
• Security and abuse prevention: technical and audit logs keep the service safe.
• Billing: agency payments are handled by Stripe. We never receive a full card number.

Where the estimate comes from

Most of what the estimate rests on is what the owner enters. To produce the range we combine it with published sale statistics we hold as open data: NSW Rent and Sales Report (Department of Communities and Justice), Victorian Property Sales Report (Department of Transport and Planning), and Metropolitan Median House Sales (SA Department for Housing and Urban Development). Your request is not sent to any of those departments, and none of them receives your personal information.

The range is produced automatically from published statistics for the postcode or the suburb. It is a statistically derived estimate, not a valuation under the Australian Property Institute standards, and it must not be relied on as one. It is not a professional appraisal, and it does not approve, refuse or legally affect anything. It exists to start a conversation with the agency, who can appraise the property on site.

The published statistics carry no floor area, no land size and no room count, so nothing entered about the individual property changes the range. The result says so in its own words.

Who else sees it

Requests are handled for the agency whose website you used. Beyond that, we use these service providers:

• Render: hosting and infrastructure, in a European Union data centre (Frankfurt).
• Resend: transactional email such as sign-in links and lead notifications, from a European Union region.
• Twilio: SMS verification of the mobile number an owner enters in the widget. Twilio receives the number and the verification result, only to send and check the code. Located in the United States.
• Stripe: agency subscription billing only. Stripe handles the payment details and we do not receive full card numbers.
• We do not sell owner requests, and we do not use them for our own marketing or model training unless they have first been anonymised so that no person can be identified.

Overseas disclosure

Australian Privacy Principle 8 requires us to say so plainly: your personal information is stored and handled OUTSIDE Australia. The service runs in the European Union (Belgium and Germany), and SMS verification is delivered through a provider in the United States.

Before disclosing information overseas we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles, through the contracts we hold with each provider. Transfers within our own operations rely on the European Union's own data protection framework, which the Australian Privacy Principles recognise as a comparable scheme.

How long we keep it

• Owner requests: each agency sets its own retention period in the dashboard, between 30 days and 10 years. Unless it is changed, a request is deleted or anonymised 24 months after it was made.
• If an agency deletes a request, it goes from the live service promptly. Backup copies are kept only as long as disaster recovery needs them and are protected the same way live data is.
• If an account ends, its lead data can be exported before closure and is then deleted or anonymised from the live service.
• Agency account records are kept while the account is active and for up to 12 months after cancellation, unless they are needed for legal, accounting, security or dispute purposes.
• Invoices and tax records are kept for 7 years, or longer where the law requires it.
• Security and audit logs are kept for up to 12 months, unless an investigation or a legal claim needs them longer.

Data breaches

We keep to the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act. If a data breach is likely to result in serious harm to an individual, we notify the affected individuals and the Office of the Australian Information Commissioner as soon as practicable, and we tell the agency whose data is affected without undue delay so that it can meet its own obligation.

Your rights, and how to complain

For a request made through an agency's website, the AGENCY holds it: contact them first to see it, correct it, have it deleted, or withdraw your consent. You can also write to us at hello@verandaworth.com and we will pass your request on and help.

For information VerandaWorth holds in its own right (agency accounts, billing, security and our own website), write to us directly at hello@verandaworth.com. We answer an access or correction request within 30 days.

If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992). Because the operator is a Belgian company, you may instead complain to the Belgian Data Protection Authority (gegevensbeschermingsautoriteit.be). We would like the chance to fix it first, but you do not have to come to us before complaining.