Privacy Policy

Castellan Smart Access respects the privacy of users, residents, property owners, administrators, visitors and customers.

This Privacy Policy explains how personal information may be collected, used, stored and protected when using Castellan.

Depending on how Castellan is used, information may include:

• Name
• Email address
• Mobile number
• Account details
• Property or estate association
• Unit or residence information
• Business or organisation association
• User role and permissions
• Access-point permissions
• Visitor invitations
• Temporary access permissions
• Access history
• Date and time of access events
• Device and browser information
• IP address
• Security and authentication records
• Support requests
• Safety incident reports

Information may be processed for purposes including:

• Creating and managing accounts
• Authenticating users
• Providing access-control services
• Determining whether a user is authorised to access an entrance
• Issuing visitor or temporary access
• Maintaining access and security logs
• Supporting customers
• Investigating faults or security incidents
• Improving the Castellan platform
• Meeting legal or regulatory obligations
• Protecting users, properties and the Castellan platform

Where Castellan is used by an estate, body corporate, apartment building, business or other organisation, authorised administrators may have access to relevant information regarding users, permissions and access activity associated with their property or organisation.

Castellan will implement reasonable technical and organisational measures designed to protect personal information against loss, unauthorised access, misuse, alteration or disclosure.

Personal information will be retained only for as long as reasonably necessary for the purpose for which it was collected, legitimate operational and security requirements, contractual requirements and applicable legal obligations.

Castellan may rely on appropriate third-party infrastructure and technology providers to deliver its services.

Personal information will only be shared where reasonably necessary to provide the service, meet legal requirements or protect legitimate security interests.

Subject to applicable law, users may request access to or correction of their personal information and may exercise other rights provided under the Protection of Personal Information Act.

Access and authentication information may be retained and reviewed where necessary to investigate suspected unauthorised access, technical faults, fraud or safety incidents.

Privacy-related requests can be submitted through the Castellan Contact page.