Privacy Policy

Overview

This policy is structured into four key sections:

1. What's This Privacy Policy Covers – A summary of what this policy covers (and what it does not).
2. Data Collected & Security – The types of data we collect and how we protect it.
3. How We Collect, Use, and Share Your Information – How we process, store, and share data, including when it is shared outside Property Shell.
4. Your Rights – How you can exercise your legal rights regarding personal data stored by us or on our platform.

We may update this policy from time to time to reflect changes in the law, our CRM platform, or business operations. If we make any significant updates, we will notify you via our website, CRM platform, or another appropriate method. The date of the last update is displayed at the beginning of this policy.

For any questions about this policy or our data privacy practices, please contact us at support@propertyshell.com.

What This Privacy Policy Covers

Our Approach to Privacy

At Property Shell, we are committed to protecting personal data and ensuring transparency in how we collect, use, and manage information. This Privacy Policy outlines how we handle personal data in connection with our CRM platform, website, and broader business operations.

We classify personal data into two key categories:

• Customer Personal Information (Customer PII): Any personal data collected through our website (www.propertyshell.com) or other business interactions — signing up for a demo, registering for an event, or applying for a job. Under GDPR or the Australian Privacy Act 1988 (Cth) and APPs, we act as the "controller" of this data.
• CRM Data: Personal data that our customers store, upload, or process within the Property Shell CRM platform. CRM Data is owned by our customers; we act only as a "processor" under GDPR/APPs, handling it strictly in accordance with their instructions.

Our customers remain in control of their CRM Data. Property Shell does not use CRM Data for any purposes beyond those required to operate and maintain our platform.

This policy may include links to external resources such as Help Centre articles. These are for informational purposes only and do not form part of this policy.

Does This Privacy Policy Cover Third-Party Websites?

Our CRM platform and website may include links to external websites not operated or controlled by Property Shell. These third-party sites may include social media platforms like Facebook, LinkedIn, or Instagram. This Privacy Policy does not apply to third-party sites, and we do not control how they collect, use, or store your information. Your interactions are subject to their own privacy policies, which we encourage you to review.

Data Collected and Security

What Personal Information Do We Collect?

We collect personal information (Customer PII) in various ways, depending on how you interact with Property Shell. Below are the types of data we collect and how we obtain them:

• Website Visits & Cookies: IP address and browsing behaviour collected through cookies when you visit our website or social media pages.
• Event & Marketing Registrations: Contact details (name, email, phone, company, location) when you sign up for events, offers, or marketing materials.
• CRM Platform Registration & Payments: Information stored and processed for billing and general platform operations when you are added as a user.
• Usage Data: Technical information including IP address, browser type, OS, device details, and ISP collected while using our platform. Device model and OS version if using the mobile app.
• Third-Party Services & Integrations: Limited data shared by services like Google or Microsoft when you log in via a third-party service or connect an external application.
• Job Applications: Resume, employment history, and contact details if you apply for a role at Property Shell.
• Office Visits: Name, employer details, and sign-in information when visiting our physical offices.
• Other Sources: Information from external sources such as business mergers, data providers, account administrators, or commercial lists.
• Internal CRM Use: CRM Data related to our customers, leads, and business contacts as we use Property Shell's own CRM software to manage our business.

We take data security seriously and implement strict measures to protect your information from unauthorised access, misuse, and loss.

What CRM Data Do We Collect?

At Property Shell, we process CRM Data stored in our customers' accounts on our platform. The data collected and stored within the CRM is controlled by our customers, and we process it strictly in line with their instructions. The typical types of CRM Data include:

• Customer, Lead, and Contact Information: Names, email addresses, phone numbers, company information, and data related to sales opportunities or project implementation.
• Outlook and Gmail Integrations: Copies of emails and calendar entries when a customer connects their account to Google Workspace or Microsoft 365.
• Email Tracking: Information about whether an email was opened and the identity of the recipient(s) when customers activate email tracking features.
• Uploaded Files: Photos, voice recordings, or videos uploaded to the CRM platform.

Your use of our CRM platform and the provision of CRM Data are governed by our contractual agreements, and it is your responsibility to ensure that you have the necessary rights or permissions to store and process personal data on our platform.

Prohibited Data

We prohibit the storage or transmission of certain types of sensitive or regulated data on our platform. This includes, but is not limited to:

• Financial information such as credit card and bank account details
• Personal identifiers like driver's licenses or social security numbers
• Health-related information protected by HIPAA
• Sensitive categories of data under GDPR (e.g. racial/ethnic origin, political views, religious beliefs, union membership, genetic or biometric data, health information, or sexual orientation data)

Customers are responsible for ensuring that they, and their users, comply with these restrictions.

Children's Data

Our CRM platform is not intended for use by children under the age of 16, and we do not knowingly collect data from individuals in this age group. If this policy were to change in the future, we would seek parental or guardian consent before collecting any data from minors.

Enrichment Data

When a customer creates a record in the CRM platform, we may automatically enrich the data with publicly available information such as a person's name, location, address, and employer details. This enrichment data is sourced from public and third-party databases. We do not use the CRM Data itself to generate or populate enrichment data.

If you are using our CRM platform to manage personal data on behalf of someone else, please ensure that you have obtained their consent or have another valid legal basis for processing their information.

Do We Collect Email Tracking Information?

Yes, Property Shell's CRM platform includes email tracking features that notify senders when their emails are opened.

When Property Shell uses email tracking in communications with current or prospective clients, it forms part of our service. By using Property Shell you are agreeing to our Privacy Policy and providing consent to the use of email tracking in our correspondence.

We recommend our clients consult with legal advisors regarding their use of email tracking to ensure compliance with relevant legal requirements.

What Information Does Property Shell Access from Google or Outlook Integrations?

Our CRM platform integrates with Gmail and Outlook 365 to enhance your management of property projects and client relationships.

Email Integration

When you install an integration with Gmail or Outlook, the platform can sync with your account. This allows Property Shell to access your contacts, emails, calendar events, distribution lists, subject lines, and URLs from tracked links if email tracking is activated. You can also read, compose, modify, and send emails directly from Property Shell. The platform stores replies, sent messages, email headers, subject lines, distribution lists, aliases, timestamps, and email bodies. By default, these emails are visible to account owners and admins.

Calendar Integration

Property Shell may sync with your Calendars if you choose to do so in your settings, giving you access to your calendar events. This integration allows you to create and edit events, as well as send invitations from your account.

What Steps Do We Take to Keep Your Data Secure?

The security of your personal data is our top priority. We adhere to industry-standard practices to protect the personal data you provide, both during transmission and once it's securely stored.

In line with our terms of service, we are committed to maintaining robust administrative, physical, and technical safeguards. We will not significantly alter or reduce these security measures without first obtaining our customers' consent.

If you have any questions or concerns about the security of your personal data, please don't hesitate to contact us at support@propertyshell.com.

How We Collect, Use, and Share Your Information

How We Use CRM Data

We handle CRM Data strictly according to the instructions of our customers to deliver the services offered through our platform. Additionally, we may process CRM Data as required by law, including responding to lawful requests from regulatory or law enforcement agencies, ensuring compliance with our terms of service and internal policies, resolving customer support inquiries, and maintaining the overall integrity of our CRM platform.

How We Use Customer PII

We collect and process Customer Personally Identifiable Information (PII) and other personal data as required to operate our business, in line with our legitimate interests, and only where we have a lawful basis to do so. Below is an overview of the key ways we utilise Customer PII:

Providing CRM Services

We use Customer PII — such as contact details and technical system information — to facilitate and manage the services available through our CRM platform. This includes registering user accounts, processing payments, and enabling access to platform features.

Customer Communication & Support

We use your contact details and other relevant PII to communicate with you, provide assistance, and strengthen customer relationships. This may include processing service requests, offering technical support, providing account notifications, and subscription renewal reminders.

Sales & Marketing

We may use your contact information and browsing activity (such as cookie data) to send you promotional materials, updates on new features, exclusive offers, and relevant industry insights. This includes product updates, sales promotions, and invitations to webinars or partner-related content.

We may also analyse engagement with our website and CRM platform to personalise content and refine our advertising strategies. If you no longer wish to receive marketing messages, you can opt out using the unsubscribe link in our emails or by contacting us at privacy-support@propertyshell.com.

Enhancing and Optimising Our CRM Platform

To improve our services, we collect and analyse customer data including contact details, usage patterns, and system logs. This helps us enhance platform functionality, monitor system performance and reliability, and optimise our marketing and service offerings.

Other Business Purposes

We may also use Customer PII for business operations essential to protecting our platform and users, including enforcing our terms of service, detecting and preventing fraud or security threats, assessing employment applications, and meeting regulatory or legal obligations.

How We Monitor the Use of Our Platform

We track and analyse how our customers interact with Property Shell to enhance functionality, optimise user experience, and improve our services. This may involve monitoring visits to specific pages within the platform and interactions with various features. Any insights derived from this data may be shared with third parties in an aggregated and anonymised format, ensuring that no identifiable customer or CRM Data is disclosed.

To facilitate this, we use a range of third-party tools, including Google Analytics and other tracking technologies, to measure usage patterns and engagement with our platform.

How We Share and Disclose Personal Data

We may share or disclose personal data under the following circumstances:

• With service providers and partners – We engage third-party providers to assist in delivering our services, maintaining our platform, and supporting business operations. These providers act on our behalf and process data in accordance with our instructions.
• With affiliated entities – We may share data with corporate subsidiaries that we own or control to support business operations, including customer service and marketing.
• For legal and security purposes – If required, we may disclose data in good faith to comply with legal obligations, respond to court orders or government inquiries, or protect the rights, safety, and security of individuals.
• During business transactions – In the event of a merger, acquisition, or sale of company assets, personal data may be transferred as part of the business transition.
• With third parties upon consent – We may share information with resellers, integration partners, or other third parties when explicitly authorised by the customer.
• On public-facing platforms – If you participate in public forums, wikis, blogs, or other interactive spaces within our community, your shared information may be visible to others.
• For anonymised reporting – We may compile aggregated data that does not personally identify individuals for analysis, research, or industry benchmarking.

Beyond these cases, we do not sell, trade, or otherwise transfer your personal data to external parties.

Sharing Personal Data with Sub-Processors

To deliver our services efficiently, we engage third-party providers — referred to as "sub-processors" under the GDPR — who process personal data on our behalf. These sub-processors assist in various operational functions, including payment processing, customer support, data hosting, analytics, marketing, and integration with external platforms.

All sub-processors are contractually bound to use personal data strictly for the purposes outlined in our agreements with them. Any onward transfer of data to other third parties is governed by these contractual obligations to ensure compliance with data protection regulations.

Where Do We Store Your Data?

Property Shell uses third-party cloud computing services to host its CRM platform and store and process CRM Data. The servers used to provide these hosting services are located in Australia.

CRM Data may be stored or processed on servers located outside your jurisdiction of residence, whose data protection laws may differ from the jurisdiction in which you live. As a result, this information may be subject to access requests from governments, courts, or law enforcement in those jurisdictions.

Some of the personal information we collect may be stored or backed up using third-party cloud services located in the United States. These services implement industry-standard security, encryption, and data protection measures to safeguard your personal information.

By using our services, you acknowledge that your information may be transferred to, stored in, or processed in jurisdictions outside Australia.

How Long We Retain CRM Data

When an account is deactivated or expires, we retain CRM Data in accordance with our terms of service and this Privacy Policy. Generally, we keep a copy of CRM Data for a minimum of 60 days following account termination. After this period, data will be deleted where instructed by the Licensee.

Your Rights

Managing Your Personal Data

You have the right to review, modify, or delete your personal data held by Property Shell. These rights extend to all personal data we collect, not just data related to cookies or marketing communications.

Updating Your Account Information

If you have an account on our CRM platform, you can update your details by logging in and adjusting your profile settings. This also applies to leads, contacts, and prospects stored in the CRM.

Requesting Changes or Deletion

To request access, corrections, or deletion of your personal data, please submit a request to support@propertyshell.com. Once we verify your identity, we will process your request in compliance with our legal obligations and internal policies. If your request relates to data stored within a CRM account, we may refer you to the licensed account administrator for further action.

Marketing Preferences

Unsubscribing

If you wish to opt out of marketing communications, follow the unsubscribe link in our emails or contact us at support@propertyshell.com.

Push Notifications

We may send push notifications about updates, events, or promotions. If you no longer wish to receive these, you can disable notifications in your device settings.

Complaints

We take privacy seriously and are committed to protecting your personal information. You may submit a complaint using the following procedure:

Internal Complaint-Handling Procedure

1. Submit a Complaint – You can lodge a complaint by contacting us via email at support@propertyshell.com.
2. Review and Investigation – We will acknowledge your complaint and conduct an internal review.
3. Response and Resolution – We will provide a written response outlining the outcome and any corrective measures taken.

External Complaint Options

If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Mail: GPO Box 5288, Sydney NSW 2001

Contact Details for Privacy-Related Enquiries

If you have any questions about this Privacy Policy, our data handling practices, or wish to exercise your rights under applicable privacy laws, you can contact us at:

Email: support@propertyshell.com

Phone: +613 8844 4844