Safehaus Privacy Policy
Last updated: 8 September 2026
MK Creative Enterprises Pty Ltd (ABN 47 162 760 572) trading as Safehaus (“Safehaus”, “we”, “us”, “our”) respects your privacy and handles personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), whether or not we are required to by the size of our business.
Registered address: Suite 656, 44 Lakeview Drive, Scoresby VIC 3179. We operate across metropolitan Melbourne and surrounding areas of Victoria.
This policy explains what we collect, why, who we share it with, and how to contact us. It applies to all Safehaus services, including assessments, reports, installations and maintenance work, and forms part of our Terms of Service.
1. What information we collect
We may collect personal information from:
- landlords and rental providers
- property managers and real estate agencies
- renters and occupants, for access coordination and safety purposes only
- homeowners and people who contact us, subscribe, or use our website
This may include names, contact details, property addresses, booking and appointment details, access instructions and arrangements, tenancy or work-order references, payment details, and photographs taken during inspections and on completion of work.
For card payments we see only the last four digits and expiry of the card. We do not see or store full card numbers; these are held by our payment processor (section 6).
We do not collect sensitive information unless it is reasonably necessary for our services and we are permitted to do so by law. If we receive sensitive information incidentally — for example a medical detail mentioned in an access note — we do not record it beyond what is needed to attend safely.
2. How we collect information
We collect information:
- directly from you — by booking form, enquiry, phone, email or SMS
- during on-site visits, assessments and completed work
- through our website, including forms, downloads, the online self home check, cookies and analytics tools
- from third parties — principally property managers, agencies and rental providers who engage us to attend a property
3. Property access and authority to engage us
Where a rental provider, property manager or agency engages us to attend a property, we act on their instructions and in reliance on their authority.
By engaging us, that party confirms that they:
- have the authority to permit access to the property
- have issued any notice of entry or other notification required under the Residential Tenancies Act 1997 (Vic) or any other applicable law
- are authorised to provide us with any renter or occupant details supplied to us
- have obtained or given any consent or notice required for us to attend, inspect, photograph and carry out the agreed work
We rely on those confirmations. We do not independently verify whether a notice of entry has been validly issued, and we are not responsible for a failure by the engaging party to obtain authority, give notice, or obtain any required consent.
If a renter or occupant asks us not to proceed on the day, we will not proceed, and we will refer the matter back to the party who engaged us.
4. Information about renters and occupants
Where we are engaged by a rental provider or agency, we are commonly given a renter’s name, contact number and access details so a visit can be arranged. We collect this from the agency or rental provider, not from the renter directly.
Where we collect information about you from someone else, we take reasonable steps to make you aware that we hold it, why we hold it, and how to contact us.
We use renter and occupant information only to arrange and carry out the visit, and to let you know if we are running late or need to reschedule. We do not use it for marketing, do not add it to any mailing list, do not ask renters for reviews, and do not disclose it to anyone other than the party who engaged us, except as set out in this policy or as required by law.
A renter’s name does not appear in a report unless it is necessary to record an access event, such as a refusal of entry.
Renter contact details are kept only for as long as needed for the visit and any follow-up or dispute relating to it, and are then deleted. Section 11 sets out retention for other records.
If you are a renter and want to know what we hold about you, contact us using the details in section 15. The rights in section 12 apply to you in full.
5. Why we collect information
We use personal information to:
- provide our assessment, reporting, installation and maintenance services
- arrange and coordinate property access
- prepare and issue reports, quotes, completion photographs and invoices
- process payments and manage accounts
- coordinate a licensed trade where you have asked us to
- provide warranty service and handle corrections and complaints
- respond to enquiries
- send you information you have asked for — such as a checklist you downloaded or updates on Victorian rental standards you subscribed to
- ask existing clients once for feedback or a Google review after a job, unless you have told us not to
- maintain records supporting our insurance, professional and legal obligations
- comply with our legal obligations
- improve our website and services using aggregated, non-identifying data
Marketing. We send marketing emails only to people who have subscribed, requested a download, or are existing clients who have not opted out. Every marketing email has an unsubscribe link that takes effect immediately. We do not send marketing to renters or occupants, we do not send unsolicited text messages, and we do not use personal information for unrelated marketing purposes.
6. Disclosure of information
We may disclose personal information to:
- the landlord, rental provider, property manager or agency who engaged us
- licensed or qualified trades we engage to carry out regulated work (for example gasfitters, electricians, plumbers and locksmiths), limited to what they need to attend and complete the work, and who are required to keep it confidential under section 13 of our Terms of Service
- a nominated backup inspector, for continuity of agency work where the owner is unavailable, limited to booking details and property records
- third-party service providers supporting our operations: Mitti (inspection and reporting), Acuity Scheduling (bookings and appointment reminders), Stripe (payments), Squarespace (website hosting, forms and email campaigns), Google (website analytics, advertising measurement, Business Profile and review links) and Meta (Facebook and Instagram advertising measurement)
- a product manufacturer, limited to purchaser name and installation date, only where needed to register a manufacturer’s warranty on your behalf
- our insurers, legal and professional advisers, where reasonably required
- government or regulatory bodies, where required or authorised by law
Where you contract a licensed trade directly under section 36 of our Terms of Service, that trade’s handling of your information is governed by their own privacy practices.
We do not sell, rent or trade personal information.
We take reasonable steps to ensure our service providers handle personal information appropriately, but we are not responsible for the independent acts or omissions of third parties beyond those reasonable steps.
7. Photographs
Photographs taken during an assessment, or on completion of work, record the condition of the property and evidence the work carried out. They are taken solely for that purpose. This section is referred to in section 47 of our Terms of Service.
What we photograph. Building elements, fixtures, fittings, appliances, openings, switchboards, the exterior and completed work. We do not enter or photograph areas that are not relevant to the work we have been engaged to do.
People and belongings. We do not deliberately photograph people. We avoid capturing personal belongings, documents, correspondence, screens, medications, vehicle registration plates and other identifying items wherever practicable. Where a person is incidentally captured and is identifiable, we crop or delete the image before it is used. Where other identifying items are captured incidentally and are not relevant to the work, we will remove, crop or obscure them on request.
What we don’t do to them. We do not use artificial intelligence to generate, add, remove, alter or embellish anything shown in a report or completion photograph. The only adjustments are cropping, rotation, resizing, and correction of exposure or white balance where an image would otherwise be too dark or bright to read.
Your say on the day. Photography is undertaken in reliance on the authority and consents described in section 3. If you are present and ask us not to photograph a particular area, we will not do so, and we will note it in the report.
Marketing use. We may use photographs of completed work — a fitted screen door, a gate latch, a mailbox — on our website and social media as examples of our work. These show the hardware, not the address, people or identifying items. If you would rather photographs of your property were not used, tell us at any time and we will not use them, and will remove any already published from anything we control.
8. Reports
Reports are prepared solely for the person or entity who booked the assessment, for the purpose stated in the report, and as at the date of inspection.
Reports are limited to what was visible and safely accessible on the day. Reports are not a building inspection, a pest inspection, a gas or electrical safety certificate, or legal compliance certification. Where a report identifies items requiring a licensed trade, those items must be assessed and certified by an appropriately licensed provider. Any cost figures are indicative estimates, not fixed quotes, unless expressly stated otherwise.
A report, with its photographs, is intended to form part of the records a rental provider may keep. It is not a complete record set and does not establish compliance on its own.
We do not provide property-specific reports or photographs to any other party unless you ask us to, or we are required to by law.
No third party may rely on a Safehaus report. We accept no responsibility to any person or entity other than the party who engaged us.
9. Storage and security
We store information securely using reputable cloud service providers, in our email, and on password-protected devices used only by Safehaus. Access is restricted to the people who need it to carry out the work.
We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.
No method of transmission or electronic storage is completely secure. While we take reasonable steps to protect information, we cannot guarantee absolute security.
10. Data breaches
If we become aware of a data breach likely to result in serious harm to any individual whose information we hold, we will:
- contain and assess the breach promptly
- notify affected individuals as soon as practicable, and tell them what we recommend they do
- notify the Office of the Australian Information Commissioner where required under the Notifiable Data Breaches scheme
11. Data retention
We retain inspection records, reports, photographs, quotes and invoices for seven years, to support our professional, insurance and record-keeping obligations, the warranty period, and to assist rental providers in meeting their own record-keeping obligations under Victorian rental law.
Shorter periods apply to:
- Renter and occupant contact details — only as long as needed for the visit and any follow-up (section 4)
- Enquiries that do not become a booking — 12 months
- Marketing subscriptions — until you unsubscribe
After the relevant period, information is securely deleted or de-identified. You may request earlier deletion by contacting us, subject to our legal, insurance and record-keeping obligations.
12. Access and correction
You may request access to, or correction of, the personal information we hold about you at any time, using the details in section 15.
We will respond within 30 days. We may ask you to verify your identity before releasing information.
There is no charge for making a request. We may charge a reasonable fee for the cost of providing access where a request is substantial.
We may decline a request where we are permitted or required to do so by law — for example where providing access would unreasonably affect the privacy of another person, or where the information relates to a legal or insurance matter. If we decline, we will tell you why in writing and explain how to complain.
13. Website, cookies and analytics
Our website uses cookies and analytics tools to improve your experience and understand how the site is used. This may include your IP address, browser and device type, pages visited and referring site. We use Google Analytics for aggregate reporting, and we may use the Google Ads tag and the Meta (Facebook) pixel to measure whether advertising leads to enquiries or bookings and to show our ads to people who have visited our site. These tools may set cookies and share limited browsing data with Google and Meta under their own privacy policies. We do not use them to identify individuals. You can opt out of personalised advertising through your Google and Facebook account settings, and Meta’s pixel is not loaded if your browser blocks third-party cookies.
Our online self home check does not require any personal details to show a result. If you choose to enter an email address to receive your results or a checklist, it is handled as described in section 5.
You can disable cookies through your browser settings. Some parts of the site, including the booking form, may not work as intended if you do.
Our website may contain links to third-party websites. We are not responsible for the content or privacy practices of those sites.
14. Overseas disclosure
Some service providers we use store or process data outside Australia:
| Provider | Purpose | Location |
|---|---|---|
| Mitti | Inspection and reporting | Australia |
| Acuity Scheduling | Bookings | United States |
| Squarespace | Website hosting and forms | United States |
| Stripe | Payments | United States and Ireland |
| Meta | Advertising measurement (Facebook pixel) | United States and other Meta locations |
| Analytics, advertising measurement, Business Profile | United States and other Google locations |
Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure the recipient handles it in a manner consistent with the Australian Privacy Principles. By providing personal information to us, you acknowledge it may be stored by these providers in those locations.
15. Complaints and contact
For any privacy enquiry, access or correction request, or complaint:
MK Creative Enterprises Pty Ltd trading as Safehaus
Email: hello@safehaus.com.au
Phone: 0451 177 610
Post: Suite 656, 44 Lakeview Drive, Scoresby VIC 3179
If you believe we have mishandled your personal information or breached the Australian Privacy Principles, please contact us and set out what happened and the outcome you are seeking.
We will acknowledge your complaint within 5 business days and provide a written response within 30 days.
If you are not satisfied with our response, you may refer the matter to the Office of the Australian Information Commissioner:
Web: oaic.gov.au
Phone: 1300 363 992
Post: GPO Box 5218, Sydney NSW 2001
16. General
This policy is governed by the laws of Victoria, Australia.
Nothing in this policy excludes, restricts or modifies any right or remedy you have under the Privacy Act 1988 (Cth), the Australian Consumer Law, or any other law that cannot lawfully be excluded.
We may update this policy from time to time. The current version, with its “Last updated” date, is always available at safehaus.com.au/privacy-policy.
MK Creative Enterprises Pty Ltd trading as Safehaus · ABN 47 162 760 572
Suite 656, 44 Lakeview Drive, Scoresby VIC 3179 · hello@safehaus.com.au · 0451 177 610