Privacy Policy

Last updated: 6 August 2026

FinSavvy Finance PTY LTD ABN 54 665 455 541, trading as FinSavvy Finance ("we", "us", "our"), is committed to protecting the privacy and security of your personal information.

This policy explains how we collect, hold, use, disclose and protect your personal information, and how you can access, correct or complain about our handling of it. It applies to our website at finsavvyfinance.com.au and to all services we provide.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Because we arrange credit, we are also bound by Part IIIA of the Privacy Act and the Privacy (Credit Reporting) Code 2024, which impose additional obligations on how we handle credit-related information.

1. The information we collect

The information we need depends on the service you are asking us to provide. Broadly, we collect:

Identity and contact information — your name, date of birth, residential and postal addresses, email addresses, phone numbers, driver licence or passport details, and other identification we are required to verify under anti-money laundering law.

Financial information — your income, employment history and status, assets, liabilities, expenses, existing loans and credit facilities, bank statements, tax returns, payslips, superannuation details, and details of the property or asset you intend to purchase or refinance.

Personal circumstances — your marital status, number and age of dependants, residency status, and your objectives, requirements and financial situation as they relate to the credit you are seeking.

Credit information and credit eligibility information — information about your credit history obtained from credit reporting bodies and from lenders, including repayment history, defaults, credit enquiries, court proceedings information and personal insolvency information. Where we derive our own assessment from a credit report, that becomes credit eligibility information and is subject to strict handling rules under Part IIIA.

Sensitive information — occasionally we may collect health information, for example where you are being referred for insurance or where a health matter is relevant to your capacity to service a loan. We only collect sensitive information with your consent and where it is reasonably necessary.

Website and technical information — your IP address, browser type and version, device information, pages viewed, referring URL, and the date and time of your visit. See section 9 for how we use cookies and analytics.

If you do not provide the information we ask for, we may be unable to arrange credit for you or to assess whether a particular loan is suitable.

2. Information about other people

If you give us personal information about another person — a co-borrower, guarantor, spouse, accountant, solicitor or referee — you must have that person's consent to do so, and you should tell them that we hold their information and that they can read this policy.

3. How we collect your information

We collect information directly from you wherever we can: through enquiry and application forms on our website, in meetings, by phone and email, and through documents you supply.

We also collect information about you from third parties, including:

• credit reporting bodies
• your employer, accountant, financial adviser or solicitor
• lenders and other credit providers
• lenders mortgage insurers and title insurers
• valuers, real estate agents and conveyancers
• our aggregator and the software platforms we use to manage applications
• referral partners who have introduced you to us
• publicly available sources, including ASIC and land title registers

Where we collect information about you from someone other than you, we will take reasonable steps to let you know.

4. Why we collect and use your information

We collect, hold and use your personal information to:

• assess your objectives, requirements and financial situation
• research and recommend credit products and provide credit assistance
• comply with our best interests duty and responsible lending obligations
• prepare, lodge and manage credit applications on your behalf
• verify your identity and meet our obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth)
• communicate with you about your application, settlement and your loan after settlement
• conduct periodic reviews of your loan and let you know about options that may better suit you
• manage our relationship with you and respond to your enquiries and complaints
• administer, improve and secure our website and services
• meet our obligations under the National Consumer Credit Protection Act 2009 (Cth), our Australian Credit Licence, and other laws

5. Who we disclose your information to

We may disclose your personal information to:

• Lenders and credit providers we approach on your behalf, and their assessors, underwriters and service providers
• Our aggregator, LMG, which provides the licensing, software and lender panel arrangements we operate under
• Credit reporting bodies — see section 6
• Lenders mortgage insurers and title insurers
• Valuers, conveyancers, solicitors and settlement agents involved in your transaction
• Your nominated professional advisers, where you have asked us to deal with them
• Referral partners, where a referral arrangement applies and you have consented
• Our service providers, including IT, cloud hosting, email, CRM, document storage, marketing and analytics providers
• Our professional advisers, including auditors, lawyers and compliance consultants
• Government agencies, courts and regulators, where we are required or authorised by law
• A purchaser or prospective purchaser of our business, on a confidential basis

We do not sell your personal information.

6. Credit reporting

To assess a credit application we may obtain a credit report about you from a credit reporting body. The bodies we may use are:

• Equifax Australia — equifax.com.au
• illion Australia — illion.com.au
• Experian Australia — experian.com.au

Each of these bodies has a policy describing how it manages credit-related personal information. Their policies are available on their websites, or on request from them.

You have specific rights in relation to credit reporting:

Pre-screening. You can ask a credit reporting body not to use your credit reporting information to pre-screen you for direct marketing by a credit provider.

Ban periods. If you believe you have been, or are likely to be, a victim of fraud, you can ask a credit reporting body not to use or disclose your credit reporting information. The body must comply for a minimum period, which it can extend at your request.

Correction. If you believe credit information about you is inaccurate, out of date, incomplete, irrelevant or misleading, you can ask us or the relevant credit reporting body to correct it. We will respond within 30 days and will consult with the other parties involved where necessary.

We will not use or disclose credit eligibility information for direct marketing.

7. Direct marketing

We may send you information about our services, market updates, rate changes and options that may benefit you, by email, SMS, phone or post. We only do this where you have consented or where you would reasonably expect it given your relationship with us.

You can opt out at any time by using the unsubscribe link in any email, replying STOP to any SMS, or contacting us using the details in section 12. We will action your request promptly and at no cost to you. Note that we will still need to contact you about matters relating to a live application or an existing loan.

Our marketing complies with the Spam Act 2003 (Cth) and the Do Not Call Register.

8. Overseas disclosure

Some of the service providers we use store or process data on servers located outside Australia, including in the United States, the European Union and Singapore. This typically applies to cloud hosting, email and CRM platforms.

Where we disclose personal information to an overseas recipient, we take reasonable steps to ensure the recipient handles it in a manner consistent with the Australian Privacy Principles. We do not disclose credit eligibility information overseas except where permitted under Part IIIA of the Privacy Act.

9. Our website, cookies and analytics

Our website uses cookies and similar technologies to remember your preferences, understand how the site is used, and measure the performance of our marketing.

We use Google Analytics 4. These platforms may set cookies and collect information about your visit, including your IP address and browsing behaviour, and may combine it with information they hold from other sources. Their handling of that information is governed by their own privacy policies.

You can control or disable cookies through your browser settings. Some parts of the site may not function properly if you do.

Our website may contain links to third party websites. We are not responsible for the privacy practices of those sites.

10. Security and retention

We hold personal information in both electronic and paper form. We take reasonable steps to protect it from misuse, interference, loss, and unauthorised access, modification or disclosure, including access controls, encryption in transit, secure cloud storage, staff training and confidentiality obligations.

We retain your information for as long as it is needed for the purposes described in this policy and for as long as we are required to keep it by law. Under the National Consumer Credit Protection Act 2009 (Cth) we are generally required to retain credit assistance records for seven years. When information is no longer needed and we are no longer required to keep it, we destroy or de-identify it.

11. Accessing and correcting your information

You can ask us for access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading.

Make your request in writing to the contact details in section 12. We will need to verify your identity before we act on it. We will respond within 30 days.

There is no charge for making a request. We may charge a reasonable fee for the cost of providing access where the request is substantial, and we will tell you the amount before we proceed. In limited circumstances the Privacy Act allows us to refuse access or correction. If we refuse, we will tell you why in writing and explain how you can complain.

12. Complaints and contact

If you have a question about this policy, or a complaint about how we have handled your personal information, contact our Privacy Officer:

Privacy Officer
FinSavvy Finance PTY LTD ABN 54 665 455 541 trading as FinSavvy Finance
4 Kamilaroy Rd
West Pymble NSW 2073
Email: hello@finsavvyfinance.com.au
Phone: (02) 7229 7363

We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. We will tell you the outcome in writing.

If you are not satisfied with our response, you can take your complaint to:

Office of the Australian Information Commissioner (OAIC)
GPO Box 5218, Sydney NSW 2001
1300 363 992 — oaic.gov.au

For complaints involving credit or our credit assistance services, you can also contact:

Australian Financial Complaints Authority (AFCA)
GPO Box 3, Melbourne VIC 3001
1800 931 678 — afca.org.au —info@afca.org.au

AFCA provides fair and independent financial services complaint resolution that is free to consumers.

13. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. The current version is always available at finsavvyfinance.com.au/privacy/. Material changes will be notified on our website.