Privacy Policy

Effective date: 21 April 2026

This Privacy Policy explains how Range Commercial Pty Ltd (ABN 31 663 770 643), trading as Range Commercial (“Range Commercial”, “we”, “us”, or “our”) collects, uses, discloses, stores and otherwise handles your personal information when you visit rangecommercial.com.au (the “website”), engage our services, or otherwise deal with us.

We are bound by the Privacy Act 1988 (Cth) and the thirteen Australian Privacy Principles (APPs). This policy describes how we comply with those obligations and your rights under them.

1. Who we are

Range Commercial is a Western Australian commercial property agency, based in Perth, providing commercial, retail, industrial, childcare and project leasing, sales, acquisitions and advisory services. We operate under Triennial Certificate / Real Estate and Business Agents Licence No. RA82523. For the purposes of this policy, Range Commercial is the data controller of your personal information.

Contact details for privacy matters are set out in section 16 below.

2. What personal information we collect

We only collect personal information that is reasonably necessary for our functions or activities. Depending on how you interact with us, this may include:

2.1 Information you give us directly

• Contact details — your name, email address, phone number, and postal or business address.
• Enquiry content — information you submit through our enquiry forms, newsletter subscription form, property interest forms, or when you email or call us (including any information in the body of the message).
• Property and transaction information — where you engage us as a vendor, landlord, purchaser, tenant, or acquirer, we may collect information about the property, your financial capacity, company structure, authorised signatories, tenancy preferences, proof of identity (including documents required for our anti-money-laundering, counter-terrorism financing, and “know your client” obligations), and bank or trust account details where required to complete a transaction.
• Employment and recruitment information — if you apply for a role with us, your CV, qualifications, work history, references, and any information you provide during the recruitment process.

2.2 Information we collect automatically

• Device and usage information — your IP address, device type, operating system, browser type and version, referring URL, pages viewed on our website, date and time of your visit, and time spent on each page.
• Cookies and similar technologies — see section 8.

2.3 Information from third parties

• Property data providers and CRM — we use Rex Software (Rex CRM) as our property management and CRM platform. Information about listings, enquiries, contacts, and leads is synchronised with Rex.
• Professional referrers — lawyers, accountants, brokers, valuers, buyer’s agents, or other intermediaries who refer you to us.
• Publicly available sources — Landgate, ASIC, PPSR, corporate websites, LinkedIn profiles, and other public registers where relevant to a transaction.
• Credit reporting bodies and verification services — where proportionate, and only with your consent where consent is required.

2.4 Sensitive information

We do not ordinarily collect sensitive information (as defined in the Privacy Act). If we need to collect sensitive information — for example, health information relevant to a disability access requirement — we will ask for your consent first, unless an exception under the Privacy Act applies.

3. How we collect personal information

We collect personal information:

• directly from you when you complete a form on our website, subscribe to our newsletter, enquire about a property, request an appraisal, attend an inspection or auction, sign an agency or lease agreement, or otherwise communicate with us;
• automatically through cookies and similar technologies when you use our website;
• from the third-party sources listed in section 2.3; and
• via our agents, employees, licensees, contractors, and service providers acting on our behalf.

Where it is reasonable and practicable, we collect personal information directly from you.

4. Why we collect and use your personal information

We collect, hold, and use your personal information for the following primary purposes:

• to respond to your enquiries and provide information about properties, appraisals, and our services;
• to market, sell, lease, manage, and advise on commercial property and to perform our obligations under agency, lease, or consultancy agreements;
• to match buyers, tenants, investors, and vendors with suitable opportunities;
• to verify your identity and satisfy our obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth), agency licensing obligations under the Real Estate and Business Agents Act 1978 (WA), and comparable laws;
• to send transactional communications — for example, inspection reminders, settlement updates, contract documents, or trust account confirmations;
• to send marketing communications, newsletters, and information about listings, market updates, and events (subject to section 6);
• to operate, secure, test, and improve our website and services;
• to comply with legal obligations, including responding to subpoenas, court orders, regulator requests, and reporting obligations; and
• to defend, establish, or exercise legal rights and to manage risk.

Where we propose to use your information for a secondary purpose, we will only do so where that secondary purpose is related to the primary purpose and you would reasonably expect such use, or where you have consented, or where the Privacy Act otherwise permits the use.

5. Legal bases for processing

Under Australian law our primary legal basis is that collection, use, and disclosure is reasonably necessary for our functions and activities as a licensed real estate agency, as permitted by the Privacy Act and the APPs. Where we rely on consent (for example, direct marketing or sensitive information), you may withdraw that consent at any time as described in sections 6 and 9.

6. Direct marketing and electronic communications

We may send you direct marketing communications — including property alerts, market updates, newsletters, and event invitations — where you have opted in, where you are an existing client, or where it is otherwise permitted by the Spam Act 2003 (Cth) and the Privacy Act.

Every marketing email we send contains a functional unsubscribe mechanism. You can also ask us to stop sending marketing communications at any time by emailing contact@rangecommercial.com.au. We will action your request within a reasonable period and, in any event, within five business days, except where further time is required to suppress your details across our systems.

If you unsubscribe from marketing, we will continue to send you transactional or legally required communications that relate to an active engagement, trust account, or statutory obligation.

7. Who we share your personal information with

We disclose personal information only to parties who have a legitimate need to receive it and only for the purposes set out in this policy. These categories include:

• Clients and counter-parties — vendors, landlords, purchasers, tenants, and their representatives where relevant to a transaction we are managing;
• Professional advisers — solicitors, conveyancers, accountants, auditors, settlement agents, mortgage brokers, valuers, surveyors, and insurers retained by you or by us;
• Regulators and government — the Department of Mines, Industry Regulation and Safety (WA), AUSTRAC, the Office of the Australian Information Commissioner, the Australian Taxation Office, courts, tribunals, and law enforcement;
• Industry bodies and trust account auditors — where required to meet our licensing, audit, and trust account obligations;
• Service providers and processors — the third parties listed in section 8, engaged to provide hosting, CRM, email, analytics, advertising, identity verification, payment, and IT support services on our behalf, under contracts that require them to keep your information confidential and handle it consistently with this policy;
• Prospective purchasers of our business — in the context of a sale, merger, or restructure of Range Commercial, subject to appropriate confidentiality undertakings;
• Other parties — where you have consented, where disclosure is required or authorised by law, or where disclosure is necessary to prevent a serious threat to life, health, or safety.

We do not sell, rent, or trade your personal information.

8. Third-party services, cookies, and similar technologies

We use a limited number of third-party platforms to operate our website and deliver our services. Each provider processes a specific subset of information, listed below. Their own privacy policies govern how they handle that information when it is in their possession.

• WP Engine / Local hosting (or equivalent) — web hosting and server-side logging, including IP addresses, request headers, and security logs.
• Rex Software (Rex CRM) — property listing data, buyer and tenant enquiries, contact records, and leads. Operated by Rex Software Pty Ltd (Australia).
• Gravity Forms — form processing for newsletter sign-ups, enquiries, and contact forms.
• Google Maps (Maps JavaScript API) — interactive maps displayed on property listings and the contact page. Google collects IP address and interaction data when the map loads. Governed by the Google Privacy Policy.
• Cloudflare Stream — hosting and playback of hero and property videos. Cloudflare may process your IP address and basic delivery metadata.
• Cloudflare — content delivery, caching, DDoS protection, and bot mitigation.
• Email and transactional services — we may use WordPress email, Microsoft 365, or an equivalent provider to send transactional and newsletter email. Mail servers retain delivery logs.
• Analytics — where analytics is enabled (for example, Google Analytics 4), it is configured with IP anonymisation where available and retention periods set to the minimum practical. Analytics cookies are only set where applicable consent has been obtained in accordance with your region’s requirements.

8.1 Cookies

A cookie is a small text file stored on your device. We use:

• Strictly necessary cookies to operate the website, provide security, and remember preferences;
• Performance / analytics cookies to understand how the website is used and to improve it; and
• Functionality cookies to remember selections such as saved properties or form inputs.

You can control cookies through your browser settings. Disabling cookies may affect website functionality. Where applicable to your region (for example, visitors in the EEA, UK, or jurisdictions with similar rules), we will request your consent before setting non-essential cookies.

9. Your rights

Subject to the Privacy Act and any applicable exceptions, you have the right to:

• Access the personal information we hold about you;
• Correct information that is inaccurate, incomplete, irrelevant, out of date, or misleading;
• Opt out of direct marketing at any time;
• Anonymity or pseudonymity when dealing with us, where lawful and practicable;
• Complain about how we have handled your personal information (see section 10); and
• Request deletion of your personal information, subject to our record-keeping obligations under agency, AML, trust account, taxation, and other laws — which typically require us to retain transaction records for a minimum of seven years.

To exercise any of these rights, contact us using the details in section 16. We will verify your identity before acting on your request. We will respond within a reasonable period, and in any event within 30 days, to access and correction requests.

Where additional rights apply because of your location — for example, rights under the EU or UK GDPR (such as data portability or the right to object or restrict processing) — we will honour those rights to the extent they apply.

10. Complaints

If you believe we have breached the Privacy Act or the APPs, or have otherwise mishandled your personal information, please email contact@rangecommercial.com.au with “Privacy Complaint” in the subject line and a description of the issue. We will acknowledge your complaint within five business days and aim to resolve it within 30 days.

If you are not satisfied with our response, you may refer your complaint to the Office of the Australian Information Commissioner:

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

11. Data security and retention

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure, including role-based access controls, encryption in transit (TLS), password policies, logging, and staff training. No internet-based system is completely secure, and we cannot guarantee absolute security.

We retain personal information only for as long as necessary to fulfil the purposes described in this policy and to comply with our legal, accounting, tax, licensing, trust account, and reporting obligations. Where retention is no longer required or permitted, we will destroy, delete, or de-identify the information. Transaction and trust account records are retained for a minimum of seven years as required by Australian law.

12. Overseas disclosure and cross-border transfers

Some of our service providers store or process personal information outside Australia, including in the United States (for example, Cloudflare and Google). Before disclosing your information overseas, we take reasonable steps to ensure the overseas recipient handles your information in a manner consistent with the APPs, or we rely on an exception permitted by the Privacy Act (for example, your consent after being informed that APP 8.1 will not apply).

13. Notifiable data breaches

If we experience a data breach likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act.

14. Children

Our website and services are directed at commercial property professionals and investors. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such information, please contact us so we can delete it.

15. Changes to this policy

We may update this policy from time to time. The revised version will be posted on this page with a new effective date. Where changes are material, we will take reasonable steps to notify you — for example, by email or a prominent website notice.

16. How to contact us

For privacy enquiries, access or correction requests, marketing opt-outs, or complaints, contact our Privacy Officer:

• Email: contact@rangecommercial.com.au
• Post: Privacy Officer, Range Commercial, 35-37 Northwood Street, West Leederville WA 6007
• Phone: 08 6288 8140