ON THIS PAGE · 11 sections
Privacy policy
Pluralstar Pty Ltd (ABN 41 669 590 176), trading as marsdenparkhomes.com.au ("we", "us", "our"), respects your privacy and handles personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
This policy explains what we collect, why, and what you can do about it.
1. What we collect
We collect personal information directly from you when you:
- Enquire about a listing — your name, email address, phone number (if provided), and the contents of your enquiry message.
- Save a search or property alert — your email address and the filters you applied.
- Create an agent account — your name, email, mobile, agency, ABN, real-estate licence number, photo, bio, and any social-media handles you choose to add.
- Pay an agent subscription (dormant — listing is currently free for invited agents and no payment details are collected for new accounts; this item applies while paid subscriptions operate, and to payment records already held from that period) — Stripe (our payments processor) collects card details directly. We receive a tokenised payment method, the last four digits of the card, the billing postcode, and the subscription status. We never see or store the full card number.
We also automatically collect technical information when you use the site:
- IP address, browser type and version, device type, referring URL, and the pages you view.
- Cookies and similar technologies as described in section 8.
- Usage data — pages visited, approximate location (city level), device and browser type — collected via Google Analytics as described in section 8.
2. Why we collect it
We collect personal information only where it is reasonably necessary for, or directly related to, one or more of our functions:
| Purpose | Information used |
|---|---|
| Routing your enquiry to the listing agent | Your name, email, phone, message |
| Sending you the property alerts you signed up for | Your email, your saved search filters |
| Running the agent platform — accounts, profile pages, billing (billing dormant while listing is free) | Agent KYC details, payment method (none collected while no fee is payable) |
| Detecting and preventing fraud, abuse, or misuse | Technical data, behavioural patterns |
| Improving the product and measuring use | Aggregated analytics (see section 8) |
| Complying with our legal obligations | Any of the above as required |
3. Who we share it with
- The listing agent for the property you enquire about. Your name, email, phone (if provided), and message are forwarded to them so they can reply.
- Our infrastructure providers as sub-processors:
- Amazon Web Services (Sydney region) — hosting, file storage, transactional email via SES.
- Stripe — payment processing for agent subscriptions (dormant while listing is free for invited agents; existing payment records from the paid period remain with Stripe).
- Mapbox — interactive map tiles (no personally identifiable information shared).
- Sentry (Functional Software, Inc. — error monitoring, EU data region) — when a page or background task fails, technical details of the failure (the page address, browser type and error message — not the contents of forms you submit) are sent so we can find and fix the fault.
- Google (Google Analytics), which processes usage data on our behalf to give us aggregate statistics about how the site is used. Advertising features are disabled — see section 8.
- Authorities or third parties where we are required to by law, or where we believe in good faith disclosure is necessary to protect our rights, your safety, or the safety of others.
We do not sell your personal information to anyone, and we do not share it with third-party marketers.
4. Where it is stored
We store personal information on servers operated by Amazon Web Services in the Sydney (ap-southeast-2) region, with database backups held in the same region.
Stripe processes payment information on its own servers — see stripe.com/au/privacy.
Error reports go to Sentry, which stores them in its European Union data region. These carry technical details of a failure (page address, browser type, error message), not your enquiry or profile content. Everything else stays in Australia.
5. How long we keep it
| Category | Retention period |
|---|---|
| Enquiries | 24 months from the date sent, then deleted |
| Saved-search subscribers | Until you unsubscribe |
| Agent accounts and profiles | While the account is active. On account deletion, profile and listing content is deleted or de-identified; invoices and audit logs are retained per the rows below |
| Invoices and payment records | 7 years (Tax records as required by the ATO) |
| Technical and analytics data | 14 months (aggregated only after 90 days) |
| Audit logs | 5 years |
6. Your rights
Under the Australian Privacy Principles you can ask us to:
- Access the personal information we hold about you.
- Correct information that is inaccurate, incomplete, or out of date.
- Delete information we no longer have a lawful basis to retain.
- Stop receiving any direct marketing from us.
Account deletion. Agents can request deletion of their account at any time by emailing us. We delete or de-identify your profile, photos, and listing content, and cancel any active subscription. Invoices and audit logs are retained for the periods above because the law requires it. Deletion is permanent — if you sign up again later, you start with a fresh account; deleted data is not restored.
Email privacy@marsdenparkhomes.com.au with your request. We will respond within 30 days. There is no charge.
If you are not satisfied with our response you can refer the complaint to the Office of the Australian Information Commissioner at oaic.gov.au or by phone on 1300 363 992.
7. How we secure it
- All traffic to and from the site uses TLS 1.2 or later.
- Passwords are not stored — we use single-use magic-link sign-in tokens.
- Personal information is encrypted at rest using AES-256.
- Access to production systems is limited to a small number of staff and audited.
- We run automated dependency scans and security reviews quarterly.
No system is perfectly secure, but we treat your data as if it were our own.
8. Cookies
We use a small number of strictly necessary cookies:
| Cookie | Purpose | Duration |
|---|---|---|
authjs.session-token |
Keeps you signed in | 30 days |
authjs.csrf-token |
CSRF protection on form submissions | Session |
We also use Google Analytics 4 to understand how the site is used — pageview counts, unique visitors, and which pages people arrive from. It sets these cookies:
| Cookie | Purpose | Duration |
|---|---|---|
_ga |
Google Analytics — distinguishes visitors | 2 years |
_ga_* |
Google Analytics — keeps session state | 2 years |
Google processes this data on our behalf. We have disabled Google's advertising features and Google signals — we do not use advertising trackers, and this data is not used to build advertising profiles. Analytics data is retained for 14 months. You can opt out with the Google Analytics opt-out browser add-on or by blocking cookies for this site.
You can clear all cookies at any time through your browser settings.
9. Children
The site is not directed at children under 18. We do not knowingly collect information from children. If you believe we have, email us and we will delete the record.
10. Changes to this policy
We may update this policy from time to time. The current version is always at this URL and dated below. Material changes will be announced on the homepage for at least 30 days before taking effect.
11. Contact
Privacy Officer
Pluralstar Pty Ltd trading as marsdenparkhomes.com.au
ABN 41 669 590 176
privacy@marsdenparkhomes.com.au
Last updated: 5 September 2026.
See /data-sharing for a summary of who receives what.