Privacy Compliance Plan

C F Strata Management

This Privacy Compliance Plan outlines how C F Strata Management (referred to as we, us, or our) manages personal information in accordance with the Privacy Act 1988 (Cth), including Australian Privacy Principle 1.2.

We are committed to protecting your privacy and handling personal information in an open, transparent, and responsible manner.

This plan may be reviewed and updated from time to time to reflect changes in our business practices or applicable laws.

Open and Transparent Management of Personal Information

We manage personal information and sensitive information (where applicable) in a transparent and lawful way. When collecting personal information, we will notify individuals, at the time of collection or as soon as reasonably practicable, of:

• The type of personal information being collected

• How the personal information will be used

• To whom the personal information may be disclosed

Use and Disclosure of Contact Information

As part of our role as strata managing agents, we may collect and use contact details such as phone numbers and email addresses to effectively carry out our duties.

This may include disclosing such information to relevant third parties, such as contractors, service providers, or other parties involved in the management and maintenance of the property, where necessary to coordinate works, respond to issues, or provide services.

We take reasonable steps to ensure that any disclosure is limited to what is necessary and that your information is handled appropriately.

Privacy Officer

We have appointed a Privacy Officer to manage privacy-related matters. The Privacy Officer is responsible for handling:

• Requests to access or correct personal information

• Privacy-related enquiries and complaints

Staff Training

All employees receive regular privacy training to ensure they understand and comply with our obligations under the Privacy Act.

Our Privacy Policies

We have implemented privacy policies covering key areas of our business, including:

1. Real Estate and Strata Services

We maintain a Privacy Policy and Privacy Collection Notice (or a combined document) which is provided to current, prospective, or former clients, as well as any individuals who supply us with personal information.

These documents are available:

• On our website

• At our office

• At property inspections (where applicable)

• By email during initial communication with clients or other individuals

2. Website Privacy

Our website, www.cfstrata.com.au, operates under a dedicated privacy policy that governs the collection and use of personal information through the website.

Ongoing Review

If our business practices change, we will review our privacy policies to determine whether updates or additional policies are required to ensure continued compliance.

Cybersecurity & Data Protection

At C.F. Strata Management and Wedd Realty, we are committed to protecting the security and privacy of our customers’ data. Our Cybersecurity and Data Protection Policy outlines the robust measures we use to safeguard sensitive information and maintain a secure, resilient digital environment.

We implement a comprehensive, multi-layered security approach that includes data encryption, secure network architecture, endpoint protection, and strict access controls. All systems are protected by mandatory two-factor authentication (2FA) to prevent unauthorised access.

Our systems are continuously monitored and updated to respond to the evolving cyber threat landscape. This includes real-time threat intelligence, regular vulnerability assessments, and ongoing system enhancements. In addition, our employees receive regular cybersecurity training to promote a strong, organisation-wide culture of data protection.

In line with industry standards and regulatory requirements, we enforce rigorous data handling, security, and audit procedures to ensure the confidentiality, integrity, and availability of all customer information. Whether data is stored, processed, or transmitted, it is protected through robust technical safeguards and procedural controls.

These proactive measures allow us to uphold the trust our customers place in us and ensure they can engage with our services securely and confidently. Protecting customer data is not just a priority — it is a core part of who we are.