Privacy Policy

1. About This Policy

We are Mortgagefy (ACN 123 456 789), an authorised credit representative (Credit Representative No. 532656) operating under Australian Credit Licence 348324. Our registered office is located in Sydney, NSW 2000.

We are committed to protecting your personal information and handling it responsibly and in compliance with the Privacy Act 1988 (Cth) (the Privacy Act) and the Australian Privacy Principles (APPs) contained in Schedule 1 of the Privacy Act.

This Privacy Policy explains how we collect, hold, use and disclose your personal information when you use our website or engage our mortgage broking services. It also explains how you can access and correct your personal information and how to make a complaint if you believe we have mishandled your information.

By providing us with your personal information, or by continuing to use our website, you consent to the collection, use, disclosure and handling of your personal information as described in this policy. If you do not agree, please do not provide us with your personal information or continue to use our website.

2. What Personal Information We Collect

The types of personal information we collect will depend on the nature of your interaction with us. We may collect and hold the following types of information:

Identity and Contact Information

• Full name, date of birth and gender
• Residential, mailing and previous addresses
• Phone numbers (mobile and home) and email addresses
• Driver's licence, passport or other government-issued identification details

Financial and Employment Information

• Income details, including payslips, tax returns, PAYG summaries and Business Activity Statements (BAS)
• Employment status, employer details, and employment history
• Assets (property, vehicles, savings, investments) and liabilities (existing loans, credit cards, personal debts)
• Monthly living expenses and financial commitments
• Bank account details and transaction statements

Credit Information

• Credit history and credit scores obtained from credit reporting bodies
• Details of existing credit contracts, defaults, judgments or bankruptcies
• Repayment history information as permitted under the Privacy Act

Government Identifiers

We only collect Tax File Numbers (TFN) or other government identifiers when we are required to do so by law or with your express consent. We will not use or disclose your TFN for any purpose other than as required or authorised by law.

Sensitive Information

We will only collect sensitive information (such as health information relevant to insurance requirements, or information about your religion for Islamic finance products) with your express consent and where it is reasonably necessary for our services.

3. How We Collect Your Information

Directly From You

We collect most of your personal information directly from you when you:

• Complete enquiry or application forms on our website
• Speak with us by phone, video call or in person
• Send us emails or messages
• Provide supporting documents for a loan application
• Subscribe to our newsletter or request a callback

From Third Parties

We may also collect your personal information from third parties in limited circumstances, including:

• Credit reporting bodies such as Equifax, Illion and Experian, for the purpose of assessing your creditworthiness
• Lenders and financial institutions in the course of managing your loan application
• Your employer, with your prior consent, to verify income and employment details
• Accountants or financial advisers you have authorised to liaise with us on your behalf
• Real estate agents, where relevant to your property purchase

Automatically Through Our Website

When you visit our website, we may automatically collect certain technical information, including your IP address, browser type, pages visited, time spent on pages and referring URLs. This is collected through cookies and analytics tools such as Google Analytics. See Section 9 for more information about cookies.

4. Why We Collect Your Information

We collect, hold, use and disclose your personal information for the following primary purposes:

• Assessing your eligibility for home loans, refinance products or other credit products
• Preparing and submitting loan applications to lenders on your behalf
• Providing you with mortgage advice, product comparisons and recommendations tailored to your circumstances
• Managing your ongoing relationship with us, including post-settlement follow-ups and annual loan health checks
• Communicating with you about your application, including sending status updates and requesting documents
• Complying with our legal and regulatory obligations, including our responsible lending obligations under the National Consumer Credit Protection Act 2009 (NCCP Act)
• Maintaining our internal records and business operations
• Improving our website, services and marketing activities
• Sending you marketing communications about our products and services (you may opt out at any time)

We will only use or disclose your personal information for a secondary purpose if you have consented, or if you would reasonably expect us to use it for that purpose, or as otherwise required or permitted by law.

5. Who We Share Your Information With

We may disclose your personal information to third parties in the following circumstances:

Lenders and Credit Providers

We will share your personal information with lenders and credit providers as necessary to assess and process your loan application. This may include banks, non-bank lenders, and specialist finance providers.

Credit Reporting Bodies

We may disclose your information to, or obtain your credit information from, credit reporting bodies including Equifax (formerly Veda), Illion (formerly Dun & Bradstreet) and Experian.

Our Aggregator and Licence Holder

As an authorised credit representative, we operate under the umbrella of our Australian Credit Licence holder. We may share your information with them for compliance, auditing and oversight purposes.

Professional Advisers

We may share your information with our legal advisers, accountants or IT service providers who assist us in operating our business. These parties are bound by confidentiality obligations.

Government and Regulatory Bodies

We may disclose your information to government agencies, courts or regulatory bodies (including ASIC and AUSTRAC) where required by law or a court order.

What We Do Not Do

We do not sell, rent or trade your personal information to third parties for their own marketing purposes. We do not share your information with overseas third parties unless required by a lender with overseas operations, and only with your prior consent or where required by law.

6. Security of Your Information

We take the security of your personal information seriously and implement reasonable technical and organisational measures to protect it from misuse, interference, loss, unauthorised access, modification or disclosure. Our security measures include:

• Encrypted storage: Personal and financial documents are stored using industry-standard encryption both in transit (TLS/SSL) and at rest
• Access controls: Access to personal information is restricted to authorised staff who need it to perform their duties
• Password protection: All internal systems require strong passwords and multi-factor authentication where available
• Staff training: Our team receives regular training on privacy obligations and data handling best practices
• Incident response: We maintain a data breach response plan and will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in the event of an eligible data breach under the Notifiable Data Breaches scheme
• Secure document disposal: Physical documents are securely destroyed when no longer required

While we take all reasonable steps to protect your information, no data transmission over the internet is completely secure. If you have concerns about the security of information you have provided to us, please contact us immediately.

7. Access and Correction

Under the Privacy Act, you have the right to request access to the personal information we hold about you, and to request that we correct any information that is inaccurate, out of date, incomplete, irrelevant or misleading.

How to Make a Request

To request access to or correction of your personal information, please contact our Privacy Officer in writing:

• Email: privacy@mortgagefy.com.au
• Phone: 0432 634 648
• Post: Privacy Officer, Mortgagefy, Sydney NSW 2000

We will respond to your request within 30 days. In some cases, we may need to verify your identity before providing access. We will not charge a fee for making an access request, but we may charge a reasonable fee for the cost of providing access (for example, photocopying costs).

When Access May Be Refused

In limited circumstances, we may refuse to provide access to personal information where doing so would be unlawful, would have an unreasonable impact on the privacy of others, or where the information relates to legal proceedings between you and us.

8. Complaints

If you believe we have breached the Australian Privacy Principles or otherwise mishandled your personal information, we encourage you to contact us in the first instance so we can resolve the matter directly.

Step 1 — Contact Us

Submit your complaint in writing to our Privacy Officer at privacy@mortgagefy.com.au. Please include your name, contact details and a description of your concerns. We will acknowledge your complaint within 5 business days and aim to provide a substantive response within 30 days.

Step 2 — Escalate to OAIC

If you are not satisfied with our response, or we fail to respond within 30 days, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

9. Cookies and Website Tracking

Our website uses cookies and similar tracking technologies to enhance your browsing experience and to analyse how our website is used.

Types of Cookies We Use

• Essential cookies: Required for the website to function correctly (e.g., session management, form submissions)
• Analytics cookies: We use Google Analytics to collect anonymised data about how visitors use our website, including pages visited, time on site and referring sources. This data helps us improve our website and services.
• Marketing cookies: We may use cookies to show you relevant advertising on other platforms (e.g., Google Ads remarketing). These cookies do not store personally identifiable information.

Managing Cookies

You can control or disable cookies through your browser settings. Please note that disabling cookies may affect the functionality of our website. You can also opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

• Email: hello@mortgagefy.com.au
• Phone: 0432 634 648
• Hours: Monday to Saturday, 9am–7pm AEST
• Address: Sydney, NSW 2000

For credit-related queries, you may also wish to review our Credit Guide and Terms & Conditions.