Privacy Policy

1. Purpose and scope

This Privacy Policy explains how Finity Finance collects, uses, stores and discloses personal information in connection with mortgage and finance broking services.

We aim to handle personal information in an open and transparent way and in line with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs).

2. What personal information we collect

Depending on your enquiry and lending scenario, we may collect identification and contact details, employment and income details, financial position information, credit-related information, and supporting documents required for loan applications.

Where relevant and lawful, we may also collect sensitive information with your consent or where otherwise permitted by law.

3. How we collect personal information

We generally collect information directly from you by phone, email, online enquiry, application documents and supporting records you provide.

We may also collect information from third parties involved in your lending process, such as lenders, aggregators, credit reporting bodies, referrers, accountants, solicitors and valuation providers, where authorised or permitted.

4. Why we collect, hold, use and disclose information

We collect and use personal information to assess your lending requirements, provide credit assistance, prepare and submit applications, liaise with lenders and service providers, and manage ongoing client communication.

We may also use information for compliance, record keeping, internal administration, dispute handling and other lawful business purposes.

5. Who we may disclose information to

Your information may be disclosed to credit providers, lender partners, credit reporting bodies, valuation firms, legal advisers, settlement agents, service providers, technology providers, regulators and dispute resolution bodies where required for service delivery or legal compliance.

We take reasonable steps to only disclose information required for the relevant purpose.

6. Overseas disclosure

Some technology or service providers may store or process information outside Australia. Where this occurs, we take reasonable steps to ensure information is protected in accordance with applicable privacy requirements.

7. Direct marketing and communications

We may send service updates and, where lawful, marketing communications. You can opt out of marketing communications at any time.

For commercial electronic messages, we seek to comply with the Spam Act 2003 requirements, including sender identification and clear unsubscribe options.

8. Cookies and website analytics

Our website may use cookies and analytics tools to improve site performance and user experience. These tools may collect technical data such as browser type, pages visited and session activity.

9. Data security and retention

We use administrative, technical and physical safeguards to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

We retain personal information only as long as reasonably required for business and legal purposes, then securely destroy or de-identify it where appropriate.

10. Data breaches

If we suspect an eligible data breach, we will assess and respond in line with the Notifiable Data Breaches scheme requirements, including notification to affected individuals and the OAIC where required by law.

11. Access and correction

You may request access to personal information we hold about you and ask us to correct information that is inaccurate, out-of-date, incomplete, irrelevant or misleading.

To request access or correction, contact us using the details below.

12. Privacy complaints

If you have a privacy concern, contact us first so we can investigate and respond. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.