BoomAU Privacy Policy

Last updated: 2026-05-09

[ENTITY NAME] (ABN [ABN TBC]), trading as BoomAU (“BoomAU”, “we”, “us”, “our”), operates boomau.com and associated services. This policy explains how we handle personal information in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), how we handle commercial messages under the Spam Act 2003 (Cth), and how we treat the Do Not Call Register Act 2006 (Cth).

1. What we collect (APP 3).

We collect only what we need to provide the service:

We do not knowingly collect personal information from children under 18. BoomAU is intended for adult Australian property buyers.

2. Why we collect it (APP 3, APP 6).

We use personal information only for purposes reasonably necessary to operate the service:

We do not transfer your phone number or name to any third-party property professional unless and until you have confirmed that specific introduction.

3. Notification at the point of collection (APP 5).

The sign-in screen states what we collect, why we collect it, the channels we may contact you through (SMS or call), the categories of third parties we may match you with (buyers agents, mortgage brokers), the per-introduction confirmation requirement, and the opt-out mechanism. This policy is linked from that screen.

4. Direct marketing and opt-out (APP 7, Spam Act 2003, DNCR Act 2006).

When you sign in you provide express consent for BoomAU to contact you by SMS or call about your watchlist suburbs, market alerts, and matched property professionals. You can opt out at any time by replying STOP to any BoomAU SMS, or by asking the caller to stop us calling during a BoomAU call. Opt-outs are actioned within five business days (Spam Act s 16) and propagated to all BoomAU communication channels.

BoomAU is the named sender of every commercial SMS and the named caller for any phone contact we make. Each commercial SMS includes BoomAU as sender and a STOP opt-out instruction.

5. Per-introduction consent and third-party transfers (APP 6, APP 7).

We do not sell your personal information. We do not pass your phone number or name to a property professional based on your sign-in consent alone. Where we identify a buyers agent or mortgage broker who matches your watchlist suburbs, BoomAU will contact you first, name the specific professional, and ask you to confirm that introduction. Only on your confirmation do we transfer your name and phone number to that named professional, and only for the purpose of that single introduction. Each confirmation is recorded as a separate consent record.

Property professionals who receive an introduction in this way remain independently responsible for their own compliance with the Privacy Act, Spam Act, and Do Not Call Register Act in any further contact they have with you.

6. Third-party sub-processors.

We share personal information only with service providers who help us operate the service, under written agreements that restrict their use:

By using BoomAU you acknowledge that your personal information may be disclosed to these overseas recipients (APP 8). We take reasonable steps to ensure they handle it consistently with the APPs, but we cannot guarantee compliance with every Australian standard when data is held outside Australia.

7. Cookies and analytics.

We use a small number of first-party cookies for essential site function (authentication session, page state) and a Google Analytics cookie for anonymised usage measurement. You can disable non-essential cookies in your browser; the essential cookies are required for the service to function.

8. Retention.

We retain personal information only as long as reasonably necessary:

After these periods we de-identify or delete the data (APP 11.2).

9. Security (APP 11) and notifiable data breaches.

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. This includes TLS for all traffic, restricted administrative access, signed and httpOnly session cookies, and the security controls provided by Twilio, Vercel, and Google. If we become aware of a data breach that is likely to result in serious harm, we will assess and (where required) notify the Office of the Australian Information Commissioner and affected individuals in accordance with the Notifiable Data Breaches scheme (Part IIIC of the Privacy Act).

10. Access and correction (APPs 12, 13).

You may request access to, or correction of, the personal information we hold about you by emailing [CONTACT EMAIL] from the account contact details, or by replying to a BoomAU SMS with ACCESS or CORRECT. We will respond within 30 days. Access is free; we may charge a reasonable cost for retrieval of archived data. Where we refuse a request, we will explain why in writing.

11. Deletion.

You may request deletion of your personal information by emailing [CONTACT EMAIL]. We will delete or de-identify your account and consent data within 30 days, except where we are required by law to retain specific records (for example, evidence of opt-out under the Spam Act, or consent records under the Privacy Act).

12. Complaints.

If you believe we have handled your personal information in breach of the Privacy Act, email [CONTACT EMAIL] with a description of the concern. We will investigate and respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au, 1300 363 992.

13. Changes to this policy.

We may update this policy from time to time. Material changes will be communicated by a notice on the site for at least 30 days before taking effect, and by SMS to active accounts where the change affects how we contact you.

14. Contact.

[ENTITY NAME], ABN [ABN TBC].
Privacy inquiries: [CONTACT EMAIL].