Privacy Policy

1. Who we are

 

Lateral CRE Services (Australia) Pty Ltd (ACN 654 694 756) of Suite 402/9 Help Street, Chatswood NSW 2067, Australia (“Lateral”, “we”, “us”) provides commercial real estate investment management software delivered as a service (“Lateral SaaS”). This policy explains how we collect, use, and protect personal data when we act as a data controller — principally, data about individuals who access Lateral SaaS on behalf of our customers (“Customer Users”), and visitors to our website.
This policy does not cover data our customers upload into Lateral SaaS in the course of using it (“Customer Data”), which we process as a data processor under contract with our customers, not as a controller. If your personal data appears in Customer Data — for example, in a valuation report or tenancy schedule — please contact the relevant Lateral customer directly, as they control that data, not us.

 

2. Personal data we process as controller

 

We process the following categories of personal data about Customer Users:
+ Name and work email address, provided by our customer to create and manage a Customer User’s account
+ Login credentials and authentication records
+ Access logs, IP addresses, and device or browser information, used to secure our systems and investigate misuse
+ Support correspondence

 

We process this data (“User Account Data”) on the basis of our legitimate interests in operating, securing, and improving Lateral SaaS, preventing unauthorised access, and maintaining service integrity. We do not use User Account Data for marketing without separate consent.

 

To sign you in, we use Microsoft Entra ID for authentication, which sets strictly necessary cookies to keep you signed in, maintain your session, support single sign-on, and protect against unauthorised access and cross-site request forgery. These cookies are essential to providing Lateral SaaS and do not require your consent, but we disclose them here for transparency.

 

3. Website enquiries

 

If you contact us through the enquiry form on our website, we collect your name, company, and email address in order to respond to your enquiry. We process this data on the basis of our legitimate interest in responding to business enquiries and, where relevant, following up about Lateral's products and services. We retain enquiry data for 12 months from your last contact with us, or until you ask us to stop, whichever is earlier. You can ask us to delete this data or stop being contacted at any time by emailing privacy@runlateral.com.

 

4. Personal data we process as a processor

 

Data entered into Lateral SaaS by our customers (“Customer Data”) may include personal data about third parties — for example, names of individuals in valuation, tenancy, debt, or portfolio records. We process this data solely as a processor, on our customers’ documented instructions, under a Data Processing Addendum agreed with each customer. We do not decide how or why this data is processed — our customer does.

 

5. Who we share data with

 

Lateral SaaS is hosted on Microsoft Azure, and we rely on Azure’s infrastructure to store and process data. We may share User Account Data and website enquiry data with service providers who support our operations (for example, customer support or CRM tooling), each bound by appropriate confidentiality and data protection obligations. We do not sell personal data.

 

6. International data transfers

 

We are based in Australia, and our infrastructure providers may process data in other countries, including outside the United Kingdom and European Economic Area. Where we transfer personal data internationally, we rely on appropriate safeguards, such as Standard Contractual Clauses or an equivalent transfer mechanism, as required by applicable law.

 

7. How long we keep it

 

Following deactivation of a Customer User's account, we delete or anonymise login credentials and authentication data within 30 days. We retain access logs, audit records, and other User Account Data for as long as reasonably necessary for security investigation, billing reconciliation, or dispute resolution, or to meet a legal or record-keeping obligation, consistent with Clause 11.9 of our Access Agreement with your organisation. Website enquiry data is retained as described in Section 3 above.

 

8. Your rights

 

Subject to applicable law, you may have the right to request access to, correction of, or deletion of your personal data, to object to or restrict our processing, and to request portability of your data. To exercise these rights, contact us at privacy@runlateral.com. If you are not satisfied with our response, you may lodge a complaint with your local data protection authority.

 

9. Security

 

We maintain technical and organisational measures designed to protect personal data appropriate to the risk, including encryption of data in transit, access controls restricting data to authorised personnel, logging and monitoring of access to production systems, regular backups, and a documented incident response process. Further detail is available on request.

 

10. Cookies and website analytics

 

This section covers our website, runlateral.com. For cookies used within Lateral SaaS itself, including authentication cookies, see Section 2.

 

11. Children

 

Lateral SaaS is a business tool intended for use by adult professionals and is not directed at children. We do not knowingly collect personal data from children.

 

12. Changes to this policy

 

We may update this policy from time to time. We will post the updated version on our website with a revised “Last updated” date and, where changes are material, notify Customer Users directly.

 

13. Contact us

 

If you have questions about this policy or how we handle personal data, contact us at privacy@runlateral.com or write to us at Lateral CRE Services (Australia) Pty Ltd, Suite 402/9 Help Street, Chatswood NSW 2067, Australia.