Privacy Policy

Personal information is information or an opinion about an individual whose identity is apparent or can reasonably be ascertained from that material.

We collect information about individuals:
(1) who use our online services such as websites, social media, mobile applications and other relevant online services
(2) who register, login or subscribe or participate in our our services
(3) who use our assets services such as connecting to wifi, hiring equipment (mobility aids) and purchasing gift cards
(4) who provide evidence or are involved in an incident at one of our properties
(5) who are tenants or prospective tenants
(6) who are prospective or current employees
(7) who invest in our products or services
(8) who we provide products or services to during the course of business.

The type of personal information Abacus collects and holds depends upon its dealings with relevant individuals Information includes:

• name, date of birth, gender and contact details including address(es), email address and telephone numbers;
• bank account and credit card details;
• identification documents such as drivers licence or passport;
• incident details recorded at each asset;
• enquiries, complaints and records of interactions;
• trust or fund name and documents;
• registration and activity details relating to our online services including date and time of access, IP addresses and URL where you accessed our website from;
• tax file numbers;
• ABNs, insurance details, guarantor details, bank guarantees and contact details;
• financial and trading information
• CCTV surveillance footage within our properties;
• employee information such as tax file number, training records, police check, contact details, references, qualifications, employment history, emergency contact details, leave, superannuation details and health and safety information
• any information that is required to be collected by law and in the necessary course of business.

Abacus only collects personal information that is reasonably necessary for its dealings with relevant individuals.
Abacus usually collects personal information directly from the individuals it deals with. However, Abacus may collect such information from third parties, for example an individual’s agent, where this is reasonably necessary to allow Abacus to deal with the individual. In such circumstances Abacus will take reasonable steps to inform the individual that it holds the individual’s personal information, unless that is apparent from the circumstances in which the information is provided.
If Abacus inadvertently collects unsolicited personal information from an individual we will, within a reasonable time after collecting any such personal information, determine whether or not we may have collected it in any event under APP 3. If we determine that we could not have collected the personal information, we will, as soon as practicable and where it is lawful and reasonable to do so, destroy the personal information or ensure that it is de-identified.
You do not have to identify yourself (or you may choose to use a pseudonym) when dealing with Abacus, except where:

• Abacus is required or authorised by or under an Australian law, or a court/tribunal order, to deal with individuals who have not identified themselves; or
• it is impracticable for Abacus to deal with individuals who have not identified themselves.

Abacus does not generally collect sensitive personal information (including that relating to religious views, personal health, ethnicity or political opinion). However, in certain circumstances Abacus may collect some sensitive information if it is reasonably necessary to allow Abacus to deal with the individual and the individual has provided consent to Abacus to do so.

We collect personnel information to allow us to provide, administer, improve and personalise our services, process payments, identify you, communicate with you (including marketing and investor communications), conduct promotions, investigate and deal with unlawful activity and misconduct, respond to information requests that are required by law, protect our lawful interests and deal with enquires and complaints.

We are authorised to collect tax file numbers by tax law. It is not compulsory for you to provide your tax file number in order to receive all of our services but, if you don’t, tax law requires us to deduct tax from your distributions at the highest marginal rate. We do require tax file numbers for our mortgage investments as, without them, the trustee may incur substantial withholding tax liabilities.
We may use your personal information for direct marketing purposes. If you do not wish to receive marketing communications from us, you can let us know by e-mailing or telephoning us at the contact address below or opt out details are provided on all marketing communications.

We will not use or disclose your personal information for any purpose other than as set out in this policy, or for a related purpose in circumstances where you would reasonably expect such use or disclosure, where you have consented to such use or disclosure or in circumstances otherwise authorised by the APPs.

Investors
Abacus registry is outsourced to an external service provider Boardroom. A copy of their privacy policy is available at https://boardroomlimited.com.au/
Boardroom has their own privacy policy detailing the collection, use, disclosure and management of personal information that Boardroom collects on our behalf. This information is used to carry our registry functions.

Personal information about an individual is not disclosed to anyone without the consent of the individual concerned or where required by law, except in the following circumstances:

• As Abacus outsources certain functions such as its securities registry and custodial services, it needs to disclose investor personal information to these entities.
• The need to disclose personal information to others is generally restricted to consultants such as auditors, accountants and lawyers, insurance companies, property managers and estate agents, and is consistent with normal business practices and service delivery.
• Abacus may sometimes disclose personal information to overseas recipients. However, Abacus will only do so in accordance with the APP’s.
• To assist in locating a missing person.
• To establish, exercise or defend a legal or equitable claim.
• For the purposes of a confidential alternative dispute resolution.
• Where necessary to lessen or prevent a serious threat to any individual’s life, health or safety or to public health or safety, and it is unreasonable or impracticable to obtain your consent.
• Where necessary in order for Abacus to take appropriate action in relation to a reasonable suspicion of unlawful activity, or misconduct of a serious nature.

Our web site may use cookies which allow us to identify your browser while you are using our site. Cookies do not identify you; they simply allow us to track usage patterns so that we can measure the level of interest in various areas of our site. Most web browsers are set up to accept cookies. You can re-set your browser to refuse all cookies or to receive a warning message with each cookie which you can then refuse by turning it off in your browser. Your internet service provider should be able to assist you to set your preferences.
Unless you provide an e-mail address in the course of your visit to our website, we cannot identify you.

We treat your personal information as confidential. Access to our premises is controlled by allowing only personnel with security passes to access the premises. All electronically held information is protected through the use of firewalls and access passwords on each computer.

If you have a complaint about our treatment of your personal information, you should contact us by any of the methods set out below.  Depending on the complexity of your complaint, we will consider and respond to it within 7-30 days. We will use our best endeavours to resolve any complaint to your satisfaction. However, if you are not satisfied with our response, you are entitled to contact the Office of the Privacy Commissioner who may investigate your complaint further.

A data breach occurs when personnel information held by an entity is lost or subjected to unauthorised access, modification, disclosure or other misuse or interference.
In the event of a suspected or actual data breach contact us by the method detailed in this website.

Abacus has a data breach response plan which sets out procedures and clear lines of authority in the event of a data breach.