Privacy Policy

Introduction

In the course of normal business with Lystr Pty Limited (ACN 673 819 433) and Lystr Services Pty Limited (ACN 675 190 235 ) referred to collectively as ‘Lystr’ there may be circumstances where Lystr collects personal information about you. This Privacy Policy has been developed to ensure that such information is handled appropriately.

Lystr is committed to complying with the Privacy Act 1988 (Cth) in relation to all personal information it collects. This commitment is demonstrated in this Policy. The Privacy Act incorporates the Australian Privacy Principles and, except as outlined below, personal information held by Lystr will be treated in accordance with those Principles, regardless of any exemptions which may apply under the Privacy Act.

This Policy sets out the broad controls which Lystr has adopted to govern the way it uses personal information, the circumstances in which it might disclose personal information to third parties, how persons can access their personal information held by Lystr and what they can do if they are unhappy with Lystr’s treatment of their personal information.

Who is Lystr Pty Limited and Lystr Services Pty Limited?

In this Policy, “Lystr” refers to Lystr Pty Limited (ACN 673 819 433) and Lystr Services Pty Limited (ACN 675 190 235).

Lystr Pty Limited (ACN 673 819 433) is a software company and was established in Canberra on 12th December 2023.

Lystr Services Pty Limited (ACN 675 190 235) is a Licensed Real Estate Agency in the Australian Capital Territory and New South Wales. Licence details are shown at lystr.com.au. Lystr Services Pty Limited was registered as a Company in Canberra on 21 February 2024.

Who does the Lystr Privacy Policy apply to?

This Policy applies to any persons in respect of whom Lystr currently holds, or may in the future collect, personal information.

What information does the Lystr Privacy Policy apply to?

This Policy applies to personal information. ‘Personal information’ is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not and recorded in a material form or not.

In this Policy there are also references to ‘sensitive information’. ‘Sensitive information’ is information or an opinion about a person’s racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual preferences or practices, criminal record or health, genetics or biometrics. Sensitive information is a subset of personal information.

What information is not personal information?

Information where Lystr has removed any reference to a person and provided that the identity of the person can no longer be ascertained from the information, is not personal information.

Lystr may use this information for its own purposes and commercial gain. For example, the fact that x users aged 30-35 have accessed the Lystr website is not personal information.

How and when does Lystr collect personal information?

Lystr collects personal information in a variety of ways in the course of conducting its businesses, including:

  • providing goods and services to customers;
  • collecting detailed information for the completion of forms;
  • responding to questions regarding our products and our business;
  • interacting with people via our websites; and
  • conducting trade promotions and competitions.

Where reasonable and practicable, Lystr will collect personal information directly from the person and inform the person that this is being done. However in some circumstances, it is necessary for Lystr to indirectly collect personal information, including through third party service providers or agents or from a source of publicly available information (e.g. a telephone directory).

At or soon after the time when Lystr collects personal information, Lystr will take reasonable steps to ensure that the person is aware Lystr has undertaken the collection, the purpose(s) of the collection, the types of organisation (if any) to which the information may be disclosed and any law that required the particular information to be collected.

What personal information does Lystr collect?

Lystr will routinely collect the names, addresses and contact information of the users of its website, and information about the property or service to which their account relates. This information is directly inputted into the Lystr Platform by a user and is held in the Lystr Platform in relation to the property or service to which the information relates.

Lystr’s data is held in the AWS data centres based in Sydney, Australia.

Collection of sensitive information

Lystr will not collect sensitive information without the consent of the person to whom it relates unless the collection is required by law, is necessary to prevent or lessen a serious and imminent threat to the person’s (or another person’s) life or health or is necessary in relation to legal proceedings (current, anticipated or potential).

How does Lystr use personal information?

The way in which Lystr uses personal information depends on the reason for which it was collected. At a high level, Lystr uses personal information to enable users of the Lystr Platform to sell and buy real estate.

Lystr may use personal information for its primary purpose of collection (e.g. the delivery of services to the person) or for any related secondary purpose that we could reasonably be expected to use the personal information for.

In certain circumstances, Lystr may use personal information for promotional or direct marketing purposes. However, a person may at any time request Lystr not to use their personal information for sending direct marketing material to that person. Such a request can be made by contacting Lystr either in writing, by email or by telephone at the contact details below. There is no fee for making such a request.

Disclosure of personal information

Lystr respects the privacy of personal information and we will take reasonable steps to keep it confidential.

Lystr will disclose personal information to third parties if it is necessary for the primary purpose of collecting the information, or for a related secondary purpose, if the disclosure could be reasonably expected (e.g. disclosure of the name of a buyer of real estate to the seller and their solicitor). Where such a disclosure is necessary, Lystr will require that the third party undertake to treat the personal information in accordance with the Australian Privacy Principles.

Otherwise, Lystr will only disclose personal information to third parties without the consent of the person to whom it relates if the disclosure is:

  1. necessary to protect or enforce Lystr’s legal rights or interests or to defend any claims;
  2. necessary to prevent or lessen a serious threat to a persons’ health or safety; or
  3. required by law.

Under no circumstances will Lystr sell personal information without the consent of the person to whom it relates.

Disclosure between companies in Australia

Lystr in Australia may disclose personal information to a related company in Australia, subject to the provisions of the Privacy Act. In such circumstances, the related company will only use the personal information for the same purposes that the disclosing company is authorised to use the personal information for.

Disclosure outside Australia

Lystr will not transfer personal information overseas to a third party unless:

  1. Lystr has the consent of the person to whom the information relates to do so;
  2. the receiving party provides commitments to privacy and confidentiality which are at least equal to the Australian Privacy Principles; or
  3. the receiving party is under privacy protection laws that offer at least the same level of protection as required under the Privacy Act in Australia.

Information Security

Lystr will take all reasonable steps to ensure that all personal information held by Lystr is secure from any unauthorised access or disclosure. However, Lystr does not guarantee that personal information cannot be accessed by an unauthorised person (e.g. a hacker) or that unauthorised disclosures will not occur.

Lystr will take reasonable steps to destroy or permanently de-identify personal information if it is no longer needed for the purposes for which Lystr is authorised to use it.

Accessing personal information

Individuals have a right to request access to personal information about them held by Lystr and to have that information corrected if it is wrong. Such a request must be made in writing to the email address provided below.

Lystr will grant a person access to their personal information as soon as possible, subject to the circumstances of the request.

A request to access personal information will be rejected if:

  1. the request is frivolous or vexatious;
  2. providing access would have an unreasonable impact on the privacy of another person;
  3. providing access would pose a serious and imminent threat to the life or health of any person;
  4. providing access would prejudice Lystr ‘s legal rights; or
  5. there are other legal grounds to deny the request.

Lystr may charge a fee for reasonable costs incurred in responding to an access request. The fee (if any) will be disclosed prior to it being levied.

Website tracking and analytics

Our website uses third-party analytics and advertising services, including Google Analytics, Meta Pixel and Microsoft Clarity, to help us understand visitor interactions and improve our services. These tools may collect information such as your IP address, device type, browser information, and pages visited. This information may be stored in and transmitted to servers outside Australia.

These services may use cookies or similar technologies to collect this information. While we do not share personal information directly with these providers, the information collected may be linked to your identity depending on your browser and platform settings.

You can manage your cookie and privacy preferences through your browser settings and can opt out of Lystr's analytics and advertising tracking in this browser at any time. For more information on how these services collect and process data, we encourage you to review their respective privacy policies.

We use Sentry and Laravel Nightwatch, third-party application monitoring services, to identify and resolve errors and performance issues on our website and application. They may collect technical data such as IP addresses, browser information, device details and error diagnostic information. This data helps us ensure our services run reliably and securely.

Information collected by Sentry and Laravel Nightwatch may be transmitted to and stored on servers located outside Australia. We configure them to limit the collection of personally identifiable information, but in some cases, technical data may be linked to users depending on how they interact with our services.

Correcting personal information

Lystr will take reasonable steps to ensure the accuracy and completeness of the personal information we hold. However, if a person believes that any personal information that we hold about them is inaccurate or out of date, then they should contact Lystr in writing at the address below.

Contact Lystr

If there are any questions or complaints regarding the Lystr Privacy Policy or the way that Lystr manages personal information or if there are any concerns about Lystr ‘s treatment of personal information, please contact:

Jasmin Barker-Mitchell
Chief Operating Officer
hello@lystr.com.au.

We will aim to investigate and respond to all complaints in writing within 28 days of receipt.