Privacy Policy

Last updated: 24 August 2026

This Privacy Policy explains how Verabid Pty Ltd ("Verabid", "we", "us") handles personal information. We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. About this policy

This policy applies to personal information handled by Verabid through the Verabid platform and related services. Verabid provides software that helps real estate agencies manage bidder registration for property auctions.

Much of the personal information in the platform, such as bidder details, is entered by agencies that use Verabid. For that information, the agency decides why and how it is collected and used, and Verabid handles it on the agency's behalf to provide the platform. If you are a bidder or member of the public, the agency you dealt with is your first point of contact and its own privacy policy will also apply.

2. Information we may collect

Agency and account information

• Name, email address, phone number and role of agency staff who create or use accounts;
• Agency name, business details and settings;
• Authentication data, such as a hashed password or login and two-factor authentication factors; and
• Identity-verification information, sanctions-screening records, politically exposed person screening records, beneficial-ownership information and related risk-assessment information.

Bidder and registration information processed for agencies

• Bidder names, contact details and the entity details required to register for an auction, including company, trust or SMSF details and the people associated with them;
• Identity-verification outcomes and related records, and document acknowledgements and signatures; and
• Registration, attendance, bidder-number and auction-outcome records.

Technical and usage information

• Device, browser, IP address, log and usage data collected automatically to operate, secure and improve the platform.

3. How we collect it

We collect personal information directly from agency users when they sign up and use the platform, from agencies when they enter or invite bidders, from individuals who complete registration or identity verification, and automatically through use of the platform. Where it is reasonable and practicable, we collect information directly from the individual concerned.

4. Why we use it

• To provide, operate and support the platform;
• To enable bidder registration, identity verification, document signing and the auction-day workflow;
• To authenticate users and secure accounts;
• To communicate with you about your account, service updates and support;
• To maintain records, detect or investigate fraud and misuse, and meet our legal obligations;
• For sanctions compliance, prevention of illegal bidding activity, regulatory compliance and complaint investigations; and
• To improve and develop the platform.

We use bidder contact details only to provide the platform to the relevant agency. We do not sell personal information.

5. Disclosure to third parties

We disclose personal information to service providers that help us run the platform, under contracts that require them to protect it. These include:

• Cloud hosting and database providers that store platform data;
• Identity-verification and payment providers where verification or billing is used;
• Communications providers, including SMS and email delivery; and
• Analytics and error-monitoring providers.

We may also disclose personal information to selling agencies, auctioneers, solicitors, conveyancers, regulators, law-enforcement agencies, courts, auditors, professional advisers, identity-verification providers or other parties where reasonably necessary to operate the platform, verify identities, investigate misuse, prevent fraud, comply with legal obligations, protect our rights or the safety of others, or in connection with a sale or restructure of our business subject to confidentiality.

6. Overseas disclosure

Some service providers may store or process information outside Australia. Where that happens, we take reasonable steps to ensure the information is handled consistently with the APPs.

7. Security and retention

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure, including encryption in transit, access controls and at-rest protection provided by our infrastructure. No system is completely secure, so we cannot guarantee absolute security.

We keep personal information for as long as needed to provide the platform and meet legal, accounting or reporting requirements, then de-identify or securely delete it. We may retain identity-verification records, audit logs and transaction records for periods required by law or reasonably necessary to investigate disputes, regulatory matters or fraud.

8. Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember preferences and understand how the platform is used so we can improve it. You can control cookies through your browser settings, though some features may not work without them.

9. Accessing and correcting your information

You can ask us to access or correct personal information we hold about you. If your information sits within an agency's account, we may direct your request to that agency, which controls that data. We will respond within a reasonable time and may need to verify your identity first.

10. Complaints

If you have a privacy concern or complaint, contact us using the details below and we will investigate and respond. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Changes to this policy

We may update this policy from time to time. The "last updated" date above shows when it last changed. Material changes will be notified through the platform or by email where appropriate.

12. Contact us

For privacy questions or requests, contact our Privacy Officer at privacy@verabid.com.au.