Privacy Policy

Yes Property & Finance Services · ABN 48 626 700 605 · 7 Valentine Court, West End QLD 4810 · [email protected] · 0438 737 512

Effective: 17 October 2026 · Version: 1.2

The short version

We collect what we need to sell businesses and commercial property, vet buyers, run the War Room, broker finance and send Trent’s List (our newsletter).
We share buyer details with a seller and their advisers only when you consent, and we tell you before you consent.
In the War Room we record who opened which documents and when. We explain this before you agree to it.
Some of the tools we use are run from overseas, mainly the United States. We list them below.
We don’t sell your personal information. Our public listing feeds (including the ones built for AI tools) contain listing information only, never personal information.
You can ask to see or correct what we hold about you, unsubscribe at any time and complain to us. If we don’t fix it, you can go to the OAIC.

1. Who we are and what this policy covers

Yes Property & Finance Services (“Yes Property & Finance”, “we”, “us”, “our”) is a Townsville business run by Trent Yesberg. We:

sell businesses and commercial property, and lease commercial property, as a Licensed Queensland Real Estate Agent (licence no. 4244439) under the Property Occupations Act 2014 (Qld); and
arrange finance as a Finance Broker. Trent is Credit Representative No. 495906 of Australian Finance Group Ltd (ABN 11 066 385 822) (“AFG”), Australian Credit Licence 389087. See section 15.

This policy explains how we handle personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). It covers our website (yespf.com.au), the War Room, our newsletter, courses, and anything you tell us by phone, email, social media or in person.

We apply this policy to everything we do. Parts of our business are covered by the Privacy Act regardless of size: for example, from 1 July 2026, identity checks and record keeping we do under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth). We also have obligations under Queensland agency law, credit law and the Spam Act 2003 (Cth).

We treat the whole business as an APP entity: we handle personal information in line with the APPs across all of our activities, not just the ones the Privacy Act requires.

“Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

2. What we collect

What we collect depends on how you deal with us.

When you…	We may collect
Enquire, call or email	Name, email, phone, what you’re interested in, and anything you tell us.
Register as a buyer or request War Room access	Name, email, mobile, suburb or postcode, whether you’re buying personally or through a company, trust, SMSF or partnership, entity name and ABN, address, your authority to sign for the entity, budget, how you’ll fund the purchase (cash, borrowings, equity in your home or investments), the kind of business you want, desired earnings, current and past work, timing, any industry conflict of interest, whether another agent has introduced you to the business, your solicitor’s and accountant’s names (optional), how you heard about us, and your buyer quiz result if you choose to give it.
Enquire about an off-market opportunity	The same details as a buyer registration, so Trent can decide whether to reveal the business to you.
Sign the Prospective Buyer Agreement (NDA)	Your name, entity, signature, the date and time you signed, and the signing record kept on our own website signing page (your email, mobile, IP address and browser details). We don’t run identity checks at signing.
Use the War Room (data room)	Your name and email (to verify you on each visit), a watermark with your name on the documents, and an activity log: when you visited, which documents and pages you opened, how long you spent, and the IP address and device used.
Sell or lease through us	Your contact details, details of the business or property, financial records, leases, staff and supplier information (which may include other people’s personal information), and your instructions.
Ask us to arrange finance	Identity documents, contact details, employment and income, assets and liabilities, the business’s financials, credit history and other information a lender needs. See section 15.
Join Trent’s List (the newsletter)	Email address, first name (optional), where you signed up, and whether you open emails and click links.
Buy a course	Name, email, what you bought and payment confirmation. Payments are processed by Stripe. Stripe handles your card details; we don’t see or store full card numbers. After payment, you download your purchase directly from our website.
Use the buyer quiz	Your quiz answers, and the name, email, mobile and suburb or postcode you enter, when you submit the quiz to see your result. We use them to show your result and reply to your enquiry. We only add you to Trent’s List if you tick the box. We don’t send quiz answers to any outside service.
Visit the website	Technical information such as IP address, browser and device, pages viewed and the referring site, through hosting, security and analytics tools. See section 9.

Identity checks (AML/CTF). From 1 July 2026, real estate agents who broker the sale or purchase of real estate have to identify and verify their customers, which can include both the buyer and the seller. If a transaction involves real estate (for example, a business sold with its freehold), we may need to collect and verify identity information and keep records as that law requires.

Sensitive information. We don’t ask for sensitive information (such as health, racial or ethnic origin, religion or criminal record). If you choose to tell us something sensitive, we’ll only keep and use it with your consent and where we need it.

Tax file numbers. Please don’t send us your TFN. If a document you send includes one, we’ll redact it or ask you to.

3. How we collect it

We collect most information directly from you: through our website forms, by phone, email, in person and through the tools listed in section 8. We may also collect it from:

sellers, buyers, landlords and tenants, and their solicitors, accountants and advisers;
other agents, referrers and franchisors;
lenders, aggregators and other finance professionals (for finance broking);
public sources such as ABN Lookup, ASIC registers, the PPSR, land title searches and business or social media profiles; and
automatically, when you use our website, emails and the War Room.

If we receive personal information we didn’t ask for and don’t need, we’ll destroy or de-identify it when it’s lawful and reasonable to do so.

Staying anonymous. You can browse the site, read the guides and ask general questions without telling us who you are, or by using a pseudonym. To see confidential listing information, sign the Prospective Buyer Agreement, buy, sell or arrange finance, we need to know who you are.

If you don’t give us information. We may not be able to respond to your enquiry, approve War Room access, prepare the agreement, act for you or arrange finance.

4. Why we use it

We collect, use and disclose personal information to:

respond to enquiries and keep in touch about a deal;
assess and vet buyers before sharing confidential information, including off-market opportunities;
prepare and manage the Prospective Buyer Agreement and protect sellers’ confidential information;
run the War Room, including verifying visitors, watermarking documents and logging access (see section 5);
market and sell businesses and property for our clients, and match buyers with suitable listings;
arrange finance, if you ask us to;
send Trent’s List and other marketing, with your consent (see section 10);
deliver courses you buy;
comply with our legal obligations, including agency law, AML/CTF law, tax law and credit law;
run, secure and improve our website and services, and deal with complaints and disputes.

We’ll only use your information for another purpose if you consent, if you’d reasonably expect it and it’s related to the original purpose, or if the law allows or requires it.

5. The War Room

The War Room is where approved buyers see confidential information about a business: the information memorandum, financials, lease and similar documents. Here’s how it works from a privacy point of view.

Privacy notice and consent come first. Before you give us your buyer profile, we show you our Privacy Collection Notice on its own screen and ask for separate consents. The consents you need for the War Room are kept separate from optional ones (marketing and finance).
Trent reviews every request himself. A person, not a computer program, decides whether to approve, decline or call you first.
The Prospective Buyer Agreement. You sign the agreement on our website by typing your name and ticking a box. When you sign, we record a signing record: your typed name, who you’re signing for, your email and mobile, the date and time, your IP address and browser details, and the version and a digital fingerprint (SHA-256 hash) of the exact agreement text you were shown. We keep a PDF copy of the signed agreement with that record. Trent reviews your request after you sign, and countersigns if he approves it. Your access link and cookie. If approved, Trent emails you a private link that works once. Opening it sets a secure, essential cookie on that device so the War Room knows it’s you; it holds a reference to your approved request and expires when your access does. Off-market opportunities are invite-only and shown under a code name until you’re approved.
View tracking. Inside the data room, every visit is logged: who you are, when you visited, which documents and pages you opened and for how long. Documents carry a watermark with your name, email and the date and time, added to every page when you open them, and are view-only by default; where Trent allows a download, the downloaded copy carries the same watermark. Access is limited to the listing you were approved for and expires after 30 days unless renewed.
What the seller sees. We only share your details with the seller and their advisers when you ask us to, or when you progress to making an offer. Even then, we share a summary relevant to your offer: who you are, the entity you’re buying through, a summary of your buying capacity, and whether you’ve signed the agreement. We don’t hand over your full financial position.

We use the activity log to follow up with interested buyers, protect sellers’ confidential information and keep a record if confidentiality is ever breached.

6. Automated decisions

We don’t use computer programs to make decisions about you that could significantly affect your rights or interests. Every War Room request is reviewed by Trent personally.

Some of our tools do things automatically, but a person makes the decision. Examples:

bot and spam checks on our forms;
a “hot buyer” flag based on War Room activity, so Trent knows who to call first;
newsletter tools grouping subscribers by interest.

If that changes, we’ll update this policy before the change to describe the kinds of personal information used and the kinds of decisions involved, as the Privacy Act requires from 10 December 2026.

No tool on our website automatically approves or declines War Room access: Trent reviews and decides every request himself.

We share personal information only as this policy describes, or as you agree. This may include:

Sellers and their advisers (solicitors, accountants, business brokers): a summary of buyer details relevant to an offer, only when the buyer asks us to or progresses to an offer, so they can consider your interest and protect their confidential information.
Buyers and their advisers: where you’re a seller, the information needed to market and sell your business or property, as you instruct us.
Solicitors and conveyancers acting on either side, once a deal proceeds.
Franchisors and landlords, where their approval is needed (for example, a franchise resale or lease assignment), with your consent.
AFG, lenders, valuers and insurers, when you ask us to arrange finance (see section 15).
Service providers who run tools for us: website hosting and analytics (Cloudflare), email, newsletter (Mailchimp), forms, e-signature, data room, automation, course platform, payments (Stripe), and IT support. They may only use the information to provide services to us.
Regulators and authorities when the law requires or allows it, such as the Queensland Office of Fair Trading, AUSTRAC, the ATO, courts and police.
Our professional advisers and insurers.
A buyer of our business, if we sell or restructure it, under appropriate confidentiality.

We don’t sell personal information.

8. Overseas disclosure

Some of our service providers store or process information outside Australia. Based on the tools we use or plan to use, recipients are likely to be in the following countries. Where we haven’t named a provider, we describe the type of provider and where it may be located.

What it’s for	Provider (or type)	Likely country
Newsletter and marketing email	Mailchimp (Intuit)	United States
Website hosting, security, bot checks and analytics	Cloudflare (including Cloudflare Web Analytics)	United States (with servers worldwide)
War Room data room (documents, access records, activity log, signed agreements)	Cloudflare (Cloudflare R2 storage and D1 database)	Stored in Cloudflare’s Oceania region; Cloudflare is a United States company
E-signature for the Prospective Buyer Agreement	Our own website signing page, hosted on Cloudflare (no third-party e-signature provider)	United States (with servers worldwide)
Website forms and workflow	Cloudflare (Cloudflare Pages Functions)	United States (with servers worldwide)
Email delivery of website enquiries	Microsoft (Microsoft 365)	May be located in Australia and/or the United States
Course payments	Stripe	United States and Australia
Course delivery	Our own website, hosted on Cloudflare (Stripe hosted Checkout for payment)	United States (with servers worldwide)
Office email and file storage	Microsoft (Microsoft 365)	May be located in Australia and/or the United States

We may also disclose information to a buyer, seller or adviser located overseas when they’re a party to a deal. For finance broking, AFG and lenders may use overseas service providers; AFG’s privacy policy lists the countries it discloses to.

Before disclosing personal information overseas, we take reasonable steps to make sure the recipient handles it consistently with the APPs. For example, we choose established providers and rely on their contractual privacy and security terms. Overseas recipients may also be subject to the laws of their own country, including access by authorities there.

9. Cookies and analytics

Our website uses:

Essential cookies and similar technology only, for security and to keep forms working, for example Cloudflare’s bot checks on our forms.
War Room cookies: an essential, secure cookie that keeps an approved buyer signed in to the War Room until their access expires, and a separate one for our own administrator sign-in. They aren’t used for advertising or analytics.
Browser storage so a long form, like the War Room request, doesn’t lose your answers. This stays on your device; clear your browser storage to remove it.
Cloudflare Web Analytics to see which pages are useful, such as pages visited, referring site, browser, device type and country. It is cookieless: it doesn’t set cookies or use local storage to track you, and it doesn’t build profiles of individual visitors. Cloudflare is based in the United States.
Email tracking: Trent’s List emails contain standard tracking (a small image and tracked links) so we can see opens and clicks.

Because we only use essential cookies and don’t set tracking or advertising cookies, we don’t show a cookie banner. If that changes, we’ll update this policy and ask for your consent where needed.

You can block or delete cookies in your browser settings. Some parts of the site may not work properly if you do.

10. AI tools and our public data

We publish public listing information in formats that search engines and AI tools can read: a listings JSON feed, an RSS feed and an llms.txt file. These contain public listing information only, such as business type, town, price guide, description and photos. They never contain personal information, off-market details or anything from the War Room.

We may use AI tools, some provided by overseas companies, to help prepare documents and communications (for example, drafting listings or emails). We review what these tools produce before we use it.

11. Direct marketing and Trent’s List

We’ll only send you marketing emails or SMS (including Trent’s List) if you’ve agreed to receive them, or where the Spam Act 2003 otherwise allows. Every marketing message identifies us, includes our contact details, and has an easy way to unsubscribe. We act on unsubscribe requests within 5 working days.

Trent’s List is sent through Mailchimp. Consent to marketing is always optional and separate from the consents needed for an enquiry or the War Room.

You can also ask us at any time to stop contacting you for marketing by phone, post or email, and ask where we got your details. We don’t use credit information for marketing.

12. Security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, change or disclosure. These include:

HTTPS encryption on our website;
access to the War Room limited to approved buyers, with email verification, watermarks, view-only settings and expiry;
limiting access to the people who need it;
password-protected accounts for our email, data room and other business systems; and
using reputable cloud providers that encrypt the data they store for us.

No system is completely secure. If we have a data breach likely to cause serious harm, we’ll notify you and the Office of the Australian Information Commissioner (OAIC) as the Notifiable Data Breaches scheme requires.

13. How long we keep it

We keep records for 7 years, then securely destroy them (or de-identify them where destruction isn’t practical). This applies to:

agency and transaction records (including records we keep under the Property Occupations Act 2014 and Agents Financial Administration Act 2014 (Qld));
AML/CTF identity and transaction records;
finance broking records (AFG may keep its own records under its own policies);
War Room access logs and signed Prospective Buyer Agreements; and
buyer registrations that don’t proceed. You can ask us to delete these sooner, and we will where the law allows.

The 7 years runs from the end of the matter or our last dealing with you. If a law requires a longer period for a particular record, we keep it for that period.

Newsletter: we keep your subscription until you unsubscribe. After that we keep your email on a “do not send” list so we don’t email you again.

14. Accessing and correcting your information

You can ask for access to the personal information we hold about you, and ask us to correct it if it’s wrong, out of date, incomplete or misleading. Contact Trent (see section 18). We’ll respond within 30 days. Access is free; if a request involves a lot of work we may charge a reasonable fee, and we’ll tell you first.

If we refuse access or correction (for example, where giving access would unreasonably affect someone else’s privacy or reveal commercially sensitive information), we’ll explain why in writing and tell you how to complain. You can ask us to attach a statement to your record if we don’t agree to correct it.

15. Finance broking and credit information

Trent arranges finance as Credit Representative No. 495906 of Australian Finance Group Ltd (ABN 11 066 385 822) (“AFG”), which holds Australian Credit Licence 389087. AFG is our aggregator and credit licensee.

When we arrange finance:

We collect the information lenders need to assess an application and pass it to AFG and the lenders you choose.
AFG’s own privacy policy and credit guide apply to our credit activities. We’ll give you AFG’s Credit Guide and privacy consent before we arrange credit. AFG’s privacy policy (afgonline.com.au/privacy-policy/) explains how AFG handles credit-related information, including the credit reporting bodies it uses and the overseas countries it may disclose to.
Lenders and AFG, not us, obtain credit reports from credit reporting bodies. Their privacy and credit reporting policies apply to that.
Many business loans aren’t covered by the National Consumer Credit Protection Act 2009 (Cth), but we treat your information with the same care either way.

16. Serious invasions of privacy

Since 10 June 2025, Australian law gives individuals the right to sue for serious invasions of privacy. We take that seriously: we don’t intrude on people’s private lives, and we don’t misuse private information.

17. Complaints

If you have a concern about how we’ve handled your personal information:

Contact Trent first (section 18). Tell us what happened and how you’d like it fixed. We’ll acknowledge your complaint within 3 business days and aim to respond in full within 30 days.
If you’re not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au, 1300 363 992. The OAIC generally expects you to have raised the complaint with us first.

Finance broking and credit complaints can also go through AFG’s complaints process: [email protected], 1300 130 987, or Complaints Officer, Australian Finance Group Ltd, GPO Box 2730, Cloisters Square WA 6850. If you’re not satisfied with the response, or it isn’t resolved within the required time, you can take it to the Australian Financial Complaints Authority (AFCA), AFG’s external dispute resolution scheme: www.afca.org.au, 1800 931 678, [email protected]. AFCA is free.

For complaints about real estate agency conduct, you can contact the Queensland Office of Fair Trading (www.qld.gov.au/fairtrading, 13 QGOV (13 74 68)).

18. Contact us

Trent Yesberg, Yes Property & Finance Services 7 Valentine Court, West End QLD 4810 Email: [email protected] · Phone: 0438 737 512

You can ask for a copy of this policy in another form (for example, printed) free of charge.

19. Changes to this policy

We’ll update this policy when our practices or the law change. The current version is always at yespf.com.au/privacy/, with the date it was last updated.

Effective 17 October 2026 (version 1.2).