Privacy Policy — SDA Listings

# Privacy Policy > **Status: DRAFT for solicitor review.** This document has not been approved by a legal practitioner. It is provided for internal review only and is not legal advice. **Applies to:** SDA Listings, ABN 44 156 567 671, based in Victoria, Australia. A postal address will be published once confirmed by the operator. Contact: support@sdalistings.com.au. Governing law: These terms are governed by the laws of Victoria, Australia, and applicable Commonwealth laws of Australia. ## About SDA Listings SDA Listings is an independent accommodation listing, information, enquiry and connection platform. SDA Listings is **not a registered NDIS provider** and does not itself provide Specialist Disability Accommodation (SDA), Supported Independent Living (SIL), personal supports, support coordination, plan management, clinical services or NDIS funding advice. ## Information we collect - Account information — name, email address, phone number, role, organisation. - Housing enquiries — preferred locations, SDA category preferences, building preferences, urgency, move timeframe, accessibility requirements you choose to disclose, and any support-related information you voluntarily submit. - Representative and Support Coordinator information — including confirmation of authority to act for another person. - Provider and property information — including business details, registration information, listings, photographs and uploaded documents. - Communications — messages, form submissions, complaints, evidence. - Consent, audit and security logs. - Device, browser and analytics information (subject to consent). We seek to **minimise sensitive and health information** and do not require unnecessary diagnoses or clinical detail. Where you choose to disclose sensitive information (for example accessibility needs), we treat it as sensitive information under the Privacy Act 1988 (Cth). ## How we collect Directly from you, from a nominated representative, from a Support Coordinator with your authority, or from an authorised provider representative for the properties they publish. ## Purposes of collection and use - Operating the platform and your account. - Administering your housing enquiry, saved searches and property alerts (where you have consented). - Sharing a **privacy-limited opportunity summary** with participating providers where you have separately consented. - Releasing your contact details to an authorised provider only where you have given a separate, explicit contact-release consent. - Automated matching and scoring — outputs are informational and are reviewed by humans where relevant. - Analytics and product improvement (where you have consented). - Marketing (only where you have separately opted in). - Legal compliance, complaint handling and safety. ## Provider sharing and contact release - We do not share your identifying contact details with providers by default. - Provider sharing of an opportunity summary requires a separate consent. - Release of your contact details requires a separate consent and can be withdrawn at any time prior to release. ## Service providers and overseas processing We use third-party service providers including cloud hosting, authentication, email delivery, analytics and error monitoring. Some of these providers may process data outside Australia. We take reasonable steps to require appropriate protections but we cannot guarantee that overseas processing will always meet Australian standards. Specific processor locations are under review and will be listed here once verified. ## Security We use role-based access control, audit logging, row-level security, encrypted transport (HTTPS), and regular platform maintenance. **No online service is completely secure.** We do not guarantee that a breach cannot occur. ## Your rights You may request access to, correction or deletion of your personal information, withdraw consent, opt out of marketing and communications, and object to certain uses. Contact support@sdalistings.com.au. ## Retention We retain personal information only for as long as necessary for the purposes for which it was collected, to meet legal obligations, or to resolve complaints or disputes. Backups follow a routine expiry schedule. Deletion from live systems is not always immediate in backups. ## Eligible data breaches If we assess that an eligible data breach has occurred, we will notify affected individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme. ## Complaints Complaints about privacy handling may be sent to support@sdalistings.com.au. If unresolved, complaints may be escalated to the Office of the Australian Information Commissioner (oaic.gov.au). ## Changes to this policy We will publish updates on this page with an updated version number. Where changes are material, we may request re-acceptance. ## Change history Version 0.1 — initial draft prepared for solicitor review.

Feedback on this document may be sent to support@sdalistings.com.au. Historical versions and change history are maintained by the SDA Listings platform team.