Privacy policy

Privacy Policy

RAJNIL PTY LTD T/A KESTREL COMMERCIAL and its related entities understand the importance you attach to your personal information and are committed to protecting your privacy. RAJNIL PTY LTD T/A KESTREL COMMERCIAL is bound by the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth).

We are a licensed Victorian estate agency (Jignesh Jhanjaria, License 089481L) and an AUSTRAC reporting entity. We handle personal information in connection with industrial and commercial property sales, leasing, management, enquiries, and compliance with anti-money laundering and counter-terrorism financing (AML/CTF) laws.

What personal information is collected about you?

The nature of personal information obtained and collected depends on the services you request and may include (but is not limited to):

• Name
• Address
• Date of birth
• Contact details (phone, email, company)
• Identification documents
• Employment details
• Beneficial ownership information for companies, trusts and SMSFs
• Financial information and source-of-funds details relevant to property transactions
• Rental, ownership or transaction history
• Information you include in enquiry, inspection or appraisal forms on this website

Most information is obtained directly from you through enquiry forms, appraisal requests, tenancy or leasing applications, and client records. This information is recorded and maintained as part of ongoing customer service and property activities.

To comply with legal obligations — including AML/CTF requirements — we may verify your identity and request personal identification documents. If you choose not to provide required information, we may be unable to provide the requested services.

How your personal information is used and disclosed

We collect, use, and exchange your personal information to:

• Verify your identity and beneficial ownership
• Respond to enquiries and provide property sales, leasing and management services
• Communicate with you while you are a client or prospective client
• Market property and, where permitted, send you relevant updates about the desk
• Prevent fraud and unlawful activity
• Comply with legal, regulatory and AUSTRAC reporting obligations
• Respond to requests from government agencies or regulators

We may disclose personal information to:

• Related entities within our corporate group
• Landlords, tenants, buyers, sellers, and their representatives
• Service providers such as solicitors, conveyancers, PEXA, accountants, contractors, insurers, credit agencies, and IT providers
• Any person authorised by you in writing
• Courts, tribunals, or regulatory authorities as required by law

All service providers are required to maintain confidentiality and comply with privacy obligations. We do not sell personal information.

We may use your contact details for marketing communications about property and services. You may opt out at any time by emailing jignesh@kestrelcommercial.com.

We do not adopt government identifiers such as Tax File Numbers or Medicare numbers as our own identifiers.

Sending information overseas

Kestrel Commercial generally does not use overseas service providers. If overseas providers are engaged — for example cloud hosting or software — we take reasonable steps to ensure they handle your personal information in accordance with Australian privacy laws and appropriate data security standards.

Storage of personal information

We store personal information in secure electronic systems and, where applicable, paper-based files, taking reasonable steps to protect information from misuse, interference, loss, unauthorised access, modification, or disclosure.

We retain records for the period required by law, typically at least seven years after the end of a client relationship or as required under AML/CTF legislation. After this period, identifying information is securely destroyed or de-identified.

Accessing and correcting your personal information

You may request access to or correction of personal information we hold by contacting us in writing at jignesh@kestrelcommercial.com and verifying your identity. Requests will be acknowledged within 7 days and responded to within 30 days.

Keeping your information accurate

Please notify us if your details change so we can maintain accurate records.

Changes to this policy

This Privacy Policy may be updated from time to time. The latest version is published on www.kestrelcommercial.com.au.

Complaints

If you believe your privacy has been breached, contact us at jignesh@kestrelcommercial.com. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner:

• Phone: 1300 363 992
• Website: www.oaic.gov.au
• Email: enquiries@oaic.gov.au
• Post: GPO Box 5218, Sydney NSW 2001

Data Breach Policy

RAJNIL PTY LTD T/A KESTREL COMMERCIAL and its related entities are committed to protecting your personal information and responding to data breaches in accordance with the Privacy Act 1988 (Cth) and the Notifiable Data Breaches (NDB) scheme.

What is a data breach?

A data breach occurs when personal information held by us is:

• Accessed or disclosed without authorisation, or
• Lost in circumstances where unauthorised access or disclosure is likely

Our approach to preventing data breaches

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. This includes secure electronic systems, access controls, staff awareness, and handling procedures.

Reporting a suspected data breach

All employees, contractors, and service providers must promptly report any suspected or actual data breach to management or the Privacy Officer at jignesh@kestrelcommercial.com.

Assessment of a data breach

When we become aware of a data breach, we will:

• Contain the breach where possible
• Assess the breach within 30 days
• Determine whether it is an eligible data breach (likely to result in serious harm)

If remedial action prevents the likelihood of serious harm, notification may not be required.

Notification obligations

Where an eligible data breach occurs, we will:

• Notify affected individuals as soon as practicable
• Notify the Office of the Australian Information Commissioner

Notifications include:

• Description of the data breach
• Type of personal information involved
• Steps individuals can take to reduce potential harm

Record keeping and policy review

We keep records of all data breaches, including those not requiring notification. This policy may be updated from time to time and the latest version is available on our website.

Cookie Policy

This Cookie Policy explains how RAJNIL PTY LTD T/A KESTREL COMMERCIAL and its related entities use cookies and similar technologies on our website. It forms part of our Privacy Policy.

What are cookies?

Cookies are small text files placed on your device when you visit a website. They allow a website to recognise your device and store information about your preferences or past actions.

How we use cookies

We may use cookies to:

• Enable essential website functionality and security
• Remember preferences for authenticated desk users
• Analyse website usage and improve services
• Support features provided by third-party services (such as embedded maps or media)

Personal information collected through cookies

Some cookies may collect information that can identify you or be reasonably linked to you. Where this occurs, we handle the information in accordance with the Australian Privacy Principles and our Privacy Policy.

Managing cookies

You can manage or disable cookies through your web browser settings, including blocking cookies or deleting existing cookies. Restricting cookies may affect website functionality.

Third-party cookies

Our website may use third-party services that place cookies on your device. These cookies are managed by the relevant third parties and are subject to their own privacy policies.

Changes to this policy

This Cookie Policy may be updated from time to time.