Data Protection Policy
At Bondi, we are committed to protecting your personal data and ensuring your privacy rights. This policy outlines how we collect, use, and safeguard your information.
Last updated: August 21, 2025
What Data We Collect
Personal Information
- • Name, email address, and phone number
- • Profile information and preferences
- • Account credentials and authentication data
- • Communication history and support tickets
Property-Related Data
- • Property inquiries and viewing requests
- • Offer submissions and negotiations
- • Property preferences and search history
- • Transaction and payment information
How We Use Your Data
Primary Purposes
- • Provide and maintain our services
- • Process property inquiries and transactions
- • Communicate with you about our services
- • Improve user experience and platform functionality
Legal Basis
- • Contract performance and service delivery
- • Legitimate business interests
- • Legal obligations and compliance
- • Your explicit consent where required
Your Data Protection Rights
Right to Access
You have the right to request access to all personal data we hold about you.
Right to Rectification
You can request correction of inaccurate or incomplete personal data.
Right to Erasure
You can request deletion of your personal data under certain circumstances.
Right to Restriction
You can request limitation of processing your personal data.
Right to Portability
You can request transfer of your data to another service provider.
Right to Object
You can object to processing of your personal data for specific purposes.
Data Security Measures
Technical Safeguards
- • End-to-end encryption for data transmission
- • Secure data storage with encryption at rest
- • Regular security audits and penetration testing
- • Multi-factor authentication for account access
Organizational Measures
- • Staff training on data protection
- • Access controls and role-based permissions
- • Incident response and breach notification procedures
- • Regular policy reviews and updates
Data Retention Policy
Retention Periods
- • Account data: Until account deletion
- • Transaction records: 7 years for legal compliance
- • Communication logs: 3 years for service quality
- • Analytics data: 2 years for platform improvement
Deletion Process
- • Automatic deletion after retention periods
- • Manual deletion upon user request
- • Secure data destruction methods
- • Confirmation of deletion completion
Questions About Data Protection?
Contact our Data Protection Officer for any concerns or requests