Skip to main content

Privacy Policy

Introduction

This Privacy Policy explains what personal information Geoscore Pty Ltd (ABN 33 692 634 192) collects when you use geoscore.com.au, why we collect it, who we give it to, and what you can do about it. It applies to this website, to the neighbourhood report tool we provide to real estate agencies for use on their own websites, and to our API.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.


1. Summary

The short version, with the detail in the sections that follow:

  • If you ask us to connect you with an agent — through a lead form, or through the neighbourhood report tool on an agency's website — we pass your name, email, phone number and what you asked about to that agency. That is the purpose of those forms.
  • If you just browse the site, we record the pages you visit, the addresses you search for, your IP address and your browser type. We do not sell this to anyone.
  • We never sell your personal information.
  • Marketing is optional and separate. You can decline it and still get whatever you asked for, and you can withdraw it at any time.
  • You can ask us what we hold about you, ask us to correct it, and ask us to delete it. Email [email protected].

2. What We Collect

2.1 Information you give us

When you…We collect
Create an account Email address, password (stored hashed, never in readable form), and optionally your name, display name and organisation
Request a neighbourhood report through an agency's website First and last name, email address, phone number (optional), the suburb you searched for, and which marketing channels you agreed to
Enquire about a property or ask for an appraisal Name, email address, phone number, preferred contact method, the property or area concerned, and any message you write
Enquire on behalf of an agency Contact name, email, phone, agency name and website, state, suburbs of interest, listing volume and any message
Send feedback Your name, email address (if you provide one) and what you wrote
Set up multi-factor authentication The authentication method you register — an authenticator app or a passkey

2.2 Information we collect automatically

When you use the site, whether or not you have an account, we record:

  • Your IP address
  • Your browser and device type (from the user-agent your browser sends)
  • The pages you visit and when
  • The page or site you arrived from
  • The addresses and suburbs you type into the search box
  • A session identifier stored in a cookie, which lets us follow a single visit across pages

We single out address searches because people are often surprised by them. If you search for the address you live at, we hold a record that someone at your IP address looked up that property. We use this to understand which areas people are interested in and to improve the search itself.

2.3 Information from other sources

We receive property listing data from real estate agencies and their listing feed providers. This includes the names and contact details of listing agents, and property details including addresses and, where the vendor permits it, sale prices. We honour instructions in those feeds not to publish a particular address or price.

We also use publicly available and licensed datasets to build the property and area profiles on this site, including the Geocoded National Address File and OpenStreetMap. These describe places, not people.


3. Why We Collect It

  • To do what you asked — send the report you requested, pass your enquiry to an agent, answer your question, run your account.
  • To connect you with a real estate agency, where that is what the form you used is for.
  • To keep the service working and secure — detect abuse, rate-limit automated traffic, investigate suspicious sign-in activity.
  • To understand and improve the site — which pages and areas people use, where search fails.
  • To send you marketing, only on the channels you agreed to, and only until you tell us to stop.
  • To meet our legal obligations.

We do not sell your personal information, and we do not use it to make automated decisions about you. The Geoscore ratings on this site are calculated about locations, not about people.


4. Who We Share It With

4.1 Real estate agencies

If you submit a lead form or request a neighbourhood report, we pass your details to the relevant real estate agency so they can contact you. This is the purpose of those forms and it is stated on them at the point you fill them in.

Once an agency has your details they hold their own record of you and are responsible for it under their own privacy policy. If you ask us to stop marketing to you we will also withdraw the marketing consent we passed on, but you may need to contact the agency directly to be removed from records they keep themselves. If you are not sure which agency received your details, email us and we will tell you.

4.2 Service providers

We use a small number of providers who handle personal information on our behalf:

ProviderWhat they handle
Google (Google Analytics) Website usage data, including IP address and pages viewed
Cloudflare Delivery of the site, images and files, including any photos uploaded to agent profiles
Our email provider Sending email to you, including the address it is sent to and its contents

4.3 Others

We may disclose personal information where we are required or permitted to by law, or where it is necessary to investigate suspected unlawful activity or a threat to someone's safety.


5. Overseas Disclosure

Your personal information is stored on servers located in Australia.

Some of the service providers listed above are located overseas, or operate global networks through which information may pass. In particular, Google and Cloudflare are based in the United States and operate infrastructure in many countries. When we disclose personal information to an overseas recipient we take reasonable steps to ensure they handle it consistently with the Australian Privacy Principles.


6. Cookies and Analytics

We use a small number of cookies:

CookiePurposeHow long it lasts
sessionid Keeps you signed in, and links the pages you view within one visit 30 days
csrftoken Security — stops other websites submitting forms as you 1 year
_ga, _ga_* Google Analytics — tells us how the site is used Up to 2 years

Google Analytics is off unless you turn it on. We ask when you first visit, and we remember your answer for 12 months. You can change it at any time using the cookie settings link in the footer of every page.

You can also delete cookies and block them through your browser settings. If you block the session cookie you will not be able to sign in.

For more detail see our Cookie Policy. You can also install Google's Analytics Opt-out Browser Add-on.


7. Marketing and How to Opt Out

We ask separately whether you are happy to receive marketing by email, by phone and by SMS. These are optional. Declining them does not affect the report, enquiry or service you asked for.

You can withdraw consent at any time:

  • Use the unsubscribe link at the bottom of any marketing email we send you.
  • Or email [email protected] and ask us to stop.

When you unsubscribe we add your email address to a suppression list so we do not email you again, and we withdraw the marketing consent we passed to any agency you were introduced to. We keep the suppression record itself so that we can honour it — deleting it would be how we started emailing you again by mistake.

If an agency contacts you after that, they are working from a record they hold themselves. Contact them directly, or email us and we will tell you which agency received your details.


8. How Long We Keep It

InformationHow long we keep it
Detailed browsing records (pages viewed, IP address, searches) 90 days, after which they are reduced to daily totals that do not identify you. The detailed records are deleted entirely after 180 days.
Your account For as long as your account is open. Ask us to close it and we will delete it.
Enquiries and leads [BLOCKED — see note]
Marketing suppression records Indefinitely — this is the record that stops us contacting you again

Where we no longer need personal information for any purpose set out in this policy, and we are not required to keep it by law, we delete it or remove the details that identify you.


9. How We Protect It

  • Traffic to and from this site is encrypted in transit.
  • Passwords are stored hashed, never in a form we or anyone else can read.
  • Multi-factor authentication is available on accounts, and required for our staff.
  • Access to lead and enquiry data is limited to the agency it belongs to and to our staff.
  • We record and review sign-in failures and other security events.

No system is perfectly secure, and we cannot guarantee that information sent to us over the internet is never intercepted. What we can commit to is taking reasonable steps to protect it, and telling you promptly if something goes wrong.


10. Data Breaches

If personal information we hold is lost, or accessed or disclosed without authorisation, and this is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

If you are affected we will tell you what happened, what information was involved, and what we suggest you do about it.


11. Your Rights

You can ask us to:

  • Tell you what we hold about you, and give you a copy.
  • Correct it, if it is wrong, out of date or incomplete.
  • Delete it, or close your account.
  • Stop marketing to you, on any or all channels.

Email [email protected]. We will respond within 30 days. We may need to verify your identity first, so that we do not hand your information to someone else claiming to be you.

There are limited circumstances where we may not be able to do what you ask — for example where we are required by law to keep a record. If that happens we will tell you why in writing.

If you have an account you can do the first three yourself, from your profile page: download a copy of your data, or delete your account. Either way, email us if you would rather we did it, or if you never created an account.

One thing to know about deletion. If you made an enquiry, we do not delete the record outright — we remove you from it. Your name, email address, phone number and message are erased; what remains is that an enquiry happened, which is the agency's business record as much as yours, and it can no longer be connected back to you. We will also withdraw the marketing consent we passed to them. The agency holds its own copy of your details and you may need to contact them directly; ask us and we will tell you who they are.


12. Complaints

If you think we have mishandled your personal information, tell us first — email [email protected] with the details. We will acknowledge your complaint and respond within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner:


13. Children

This site is intended for adults. We do not knowingly collect personal information from children. If you believe a child has given us their information, email [email protected] and we will delete it.


14. Changes to This Policy

We may update this policy. The current version is always at this address, and the date it last changed is shown below. If we make a change that materially affects how we handle information we already hold about you, we will take reasonable steps to tell you rather than relying on you noticing.


15. Contact Us

Geoscore Pty Ltd (ABN 33 692 634 192)

Privacy enquiries: [email protected]

General enquiries: [email protected]

Last updated: [DATE — set at publication, not at drafting]

This privacy policy is effective as of the date of last update.