Privacy Statement 

1. About this Privacy Statement:
At MAKEMYLOAN PTY LTD (referred to as "MAKEMYLOAN," "we," "us," or "our"), we are committed to protecting your personal and private information. This Privacy Policy outline show we collect, handle, disclose, use, and share your personal information. Your privacy is important to us, and we strive to comply with applicable privacy laws, including the Privacy Act 1988 (Cth) ("Privacy Act").

2. What you need to know:
We take reasonable steps to protect your information and comply with notification requirements under the Privacy Act if your information is lost or compromised. Your information will never be sold to third parties. We collect and use your information to provide services to you and improve our operations. If you have any concerns or questions about how we handle your information, please get in touch with us at info@makemyloan.com.au.

3. Collection, use and sharing of personal information:
3.1 Why do we collect your information? We collect personal information to enable us to provide our services to you. We collect personal information relating to you and your financial requirements, in order to assist with providing you with home loan products and services. If you don’t want to or are unwilling to provide us with the information we need, we may be unable to provide services to you. 
3.2 How do we collect your personal information? We collect your personal information directly from you. We may also collect information about you from other sources, for example: 
- your representatives such as a solicitor or conveyancer;
- joint applicants, co-applicants, or guarantors;
- referral partners, who refer your business to us;
- publicly available information such as public registers or social media;
- your employer;
- other organisations we partner with to provide products or services to you; and
- credit reporting bodies. 
‍
We collect personal information when you: 
- enquire about, apply for, or use our products or services;
- speak to us about a loan application or a product or are a party to such loan application or product (for example, a joint applicant, co-applicant, guarantor, or director or trustee of a corporate or trust loan applicant);
- give us feedback or to make a complaint;- visit our website or use our digital services;
- participate in other activities we offer, such as competitions or surveys; or
- talk to us or do business with us. 

When you give us personal information about another person, you acknowledge that you are authorised by that person to do so and agree to inform that person of the contents of this document. 
‍
Examples of the personal information we may collect include: 
‍
Personal and contact details 
- Name, address, email address, phone number, date of birth, photographs, and audio recordings(including information contained in the recordings).  
- Australian Government or foreign government identifiers and identity documents  - Australian driver licence, passport, Medicare card, or pension card details;  
- Foreign identity documents;  - Citizenship or birth certificates;  
- Company names, numbers, and details; and  
- Country/countries of tax residency. 
‍
Financial information
 - Details of your recent and current employment, income, assets, financial liabilities;  
- Information from third parties about your credit history; and  
- Documents to help us verify your financial information, for example, payslips, tax returns, financial statements, bank statements, loan statements, credit card statements, and confirmation of employment from your employer/s. 
- Credit information  - See section 5.3for the types of credit information that we may collect. 

Socio-demographic information  
- Marital status,age, gender, number of dependents, occupation, and nationality. 

Interaction information  
- Details of your interactions with us, such as when you use our online services, speak to us, meet our brokers, or visit our stores. We may monitor and record our calls with you. You expressly provide us with your consent to record your telephone and online conversations with us. 
‍
Usage analytics  
- See section 5.4for the types of usage analytics we may collect. 

Sensitive information  
- We may collect and handle sensitive information, including:    
- Health information (for example, where this is relevant to your financial situation or to an insurance policy or claim, or if you’re in financial difficulty and ask for hardship relief due to illness); or    
- Race or ethnicity (for example, we may ask you what language you speak if you are not fluent in English). 

Camera surveillance  
- For the safety o four team members and customers, we may use camera surveillance such as Closed-Circuit Television (CCTV). We will let you know if CCTV is present at the location you visit. 

Information about your personal circumstances
 - We may ask you to provide information about your personal circumstances to provide you with support, for example:    - Information about significant life events such as a death in the family or relationship breakdown;    
- Information about family or domestic violence;    
- Where you have been impacted by an emergency event or natural disaster; or    
- Details of an injury or illness or gambling or addiction. 

Publicly available information  
- We may collect and handle information that is in the public domain, such as from:    
- Online forums, websites, Facebook, Twitter, YouTube, or other social media platforms (for example, if you use social media to make a complaint); or    
- Public registers(for example, those kept by the Australian Securities and Investments Commission). 

3.3 How do we use your information?
How we may use your information: 
‍
Serving you as a customer
- To provide you with MAKEMYLOAN Group or third-party (if applicable) products and services.
This may include:  
Verifying your identity;
- Assessing your eligibility for lender’s products;    
- Assisting you with online applications;    
- Assessing, processing, and submitting your application for credit and providing you with information about related insurance products;    
- Telling you about other MAKEMYLOAN Group or third-party products or services;    
- Managing our relationship with you or your business; and    
- Better understanding you and your needs and improving our service, products, and your experience. 
‍
Managing our operations and improving our business  
- For internal purposes, including reporting and analysis.  
- Systems development and testing purposes.  
- Learning which areas of the websites are of most interest to you (see Cookies and web beacons).  
- Responding to complaints and seeking to resolve them.  
- Reviewing and responding to your feedback and assessing how you use our products or services.  
- Monitoring and reviewing call recordings, online chats, and other business activities for quality assurance, training, and compliance purposes.  
- Managing corporate governance and audit.  
- Understanding and managing our risks. 
‍
Complying with our legal obligations  
- Meeting our legal and regulatory obligations.  
- Sharing relevant information with law enforcement, government, and regulatory bodies .  
- Identification, investigation, and prevention of criminal activity.  
- Investigating health and safety issues. 
‍
De-identifying information
- We de-identify your information to provide anonymized datasets to other organizations, or for the purpose of generating insights and analytics. 

3.4 Who do we share your information with?
We will never sell your information. We will share your information: 
- Across the MAKEMYLOAN Group, including with our brokers and credit representatives.
- To external organizations to help us deliver the services we provide to you.
- To other third parties with your consent, such as lenders to whom you make an application. 

Before we share your information with any third party, we conduct reasonable and appropriate checks on that third party. 
‍
We may share your information with the following types of third parties: 
- Our panel of lenders/credit providers
- Government and law enforcement agencies
- Credit reporting bodies (CRBs)
- Authorised third parties
- Our service providers
- Other third parties
- Our auditors and insurers
- Organisations that assist us to identify, investigate, or prevent fraud, cybercrime, or other misconduct
- Organisations involved in our funding arrangements
- Any person considering acquiring or taking an interest in our business
- As required by law 

3.5 Location of information we hold about you
We may hold or process your information on servers located overseas. When we do this, we make sure there are appropriate data handling and security arrangements in place to protect your data. If our team members, brokers, and credit representatives perform their duties from overseas, they will only use authorised MAKEMYLOAN Group systems and processes. 

Where your information is sent overseas, it is likely to be to one of the following countries: 
- Canada
- Ireland
- Japan
- New Zealand
- Philippines
- Singapore
- United States
‍
 Overseas organisations may be required to disclose information we share with them under foreign law. In those instances, we will not be responsible for that disclosure. As electronic or networked storage can be accessed from anywhere via an internet connection, it is not always practicable to know which country your information may be held in. If your information is stored in this way, disclosures may occur from time to time in countries other than those listed here or those we referred to. 

4. Holding and protecting your information
We protect your information in a number of ways, including: 
- Confidentiality requirements of our team members and brokers
- Document storage security policies- Security measures for access to our systems
- Only giving access to personal information to authorised or verified people
- Control of access to our buildings
- Oversight from our Cybersecurity team and security engineers to ensure that security controls are in place and effective

 We have a plan that is designed to enable us to contain, assess, and respond to suspected data breaches in a timely fashion, and to help mitigate potential harm to affected individuals. 

Much of the information we hold about you will be stored electronically (such as electronic documents and audio recordings). Some information we hold about you will be stored on paper files until such time that it is uploaded to our systems and securely destroyed. 

Our cybersecurity program and governance are aligned to industry standards, and we strive to meet or exceed standard security benchmarks. However, security incidents and data breach events can occur. If you have reason to believe that your interaction with us has been compromised, please contact us immediately using the details provided in How to contact us below. 

We will keep your personal information while you are a customer of the Group. We generally keep your personal information for up to 7 years after you stop being a customer, but we may keep your personal information for longer: 
- To fulfil legal or regulatory obligations
- For internal research and analytics
- To respond to a question or complaint 

If we receive information about you that we did not requestor need, and if we decide we did not collect the information in accordance with this Statement and applicable Privacy Laws, we will take reasonable steps to destroy or de-identify the information. 

When we no longer require your information, and we are legally permitted to, we will take reasonable steps to destroy or de-identify the information. If it is impossible or impractical to completely remove the information, the same security safeguards will be in place to protect the information, as detailed in this Statement. 

5. Other relevant matters
5.1 E-consent By providing your email address and then clicking submit on any MAKEMYLOAN Group website, online form, application, calculator, tool, or query, you acknowledge that communication and document sharing may be electronic and not paper-based. You acknowledge that electronic communications must be regularly checked. You may withdraw your consent to provide documents by electronic communication at any time. 

5.2 Opting out of direct marketing
You can let us know at any time if you no longer wish to receive direct marketing offers from us by: 
- Contacting us using the details provided in How to contact us below
- Contacting your broker
- Using the method outlined in the marketing materials We will not charge you for  opting out. We will process your request as soon as we can, however, it may take a few days for your profile updates to be reflected in our systems. 

5.3 Credit information Credit information is a sub-set of personal information and may include information in relation to any loans that you have outstanding, your repayment history, opened and closed dates, and any defaults. Usually, credit information is exchanged between credit providers and credit reporting bodies ‘CRBs’). Credit information held by the CRBs has a bearing on an individual's creditworthiness and is used to establish the individual's eligibility for credit. 

We may ask CRBs to give us your overall credit score and may use credit information from CRBs, together with other information, to arrive at our own assessment of your ability to manage credit. You authorise us to obtain a copy of your credit report from a CRB as an ‘access seeker’. As an ‘access seeker’, our enquiry will not appear on your report or impact your credit score. You consent to us providing information contained in that report (including arrears, credit, and personal information) to any credit provider whom you authorise us to do so, and who maybe able to provide credit to you. 
‍
We may disclose your credit information to joint applicants or co-borrowers. 

You have the right to request access to the credit information that we hold about you and to directly request a CRB to correct that credit information. You may also contact a CRB to advise them that you believe that you may have been a victim of fraud. For 21 days after the CRB receives your notification, the CRB must not use or disclose that credit information. You can contact any of the following CRBs for more information: illion (www.illion.com.au), Experian (www.experian.com.au), and Equifax Pty Limited (www.equifax.com.au).

 5.4 Cookies and web beacons
Cookies: 
A 'cookie' is a small text file placed on your computer by a webpage server that may later be retrieved by webpage servers. We use cookies on our websites to provide you with a better website experience. When you visit one of our websites or related landing pages to read, browse, submit, or download information, our system will record/log your IP address, date and time of your visit to our site, your user identifier (in some scenarios), the pages viewed, and any information downloaded. We may automatically collect non-personal information about you, such as the site from which you linked to our websites. You can configure your browser to refuse cookies or delete existing cookies from your hard drive. Rejecting cookies may have the effect of limiting access to, or functionality of, parts of our website. 

Web beacons: 
A web beacon is typically a transparent graphic image invisible to the user that is placed on a website or in an email. The use of a web beacon allows the website to record the simple actions of the user (such as opening the page that contains the beacon) through a tracking pixel. We may use web beacons (and cookies) for purposes such as site usage analytics, advertising auditing and reporting, as well as content and "advertising/marketing personalization". We may share any data collected from web beacons (and cookies) with third parties to provide you with relevant advertising when browsing Third-Party networks and websites(Third-Party Websites) such as Google and Facebook. 

5.5 Changes to our Privacy Statement
We may update our Privacy Statement and procedures from time to time to help ensure we keep up to date with market expectations, legislative updates, practices, and technology.
Our latest Statement will be available: 
- On our websites
- By request using the contact details in How to contact us below
- Directly from our brokers 

6. Personal information about employees, credit representatives, or employee or credit representative applicants
We will also collect personal information from you if you: 
- Apply for a job with and/or become employed by us
- Apply to become a credit representative or become a credit representative under one of our Australian Credit Licences

In these circumstances, you: 
- Consent for us to collect any personal information(whether written or verbal) from any referee or previous employer specified in your application for employment or curriculum vitae for evaluation of your application for employment and to hold such information on your personal file for future evaluation of your employment by us
- Acknowledge that your personal information is collected for the purpose of evaluating your application for employment by us or your application to become a credit representative of ours
- Acknowledge that should you accept employment with us or become a credit representative of ours, your personal information is collected and held for the purpose of assessing your continued engagement with us and the administration by us of your remuneration and contractual obligations
- Acknowledge that a failure by you to provide the requested personal information will have a detrimental effect on our ability to give your application proper consideration. You can request to access and/or correct your personal information in accordance with this Statement at any time. 

7. Managing and accessing your information
7.1 Accessing and correcting your information
We need your help to ensure the information we hold is up to date and accurate. If you move or change contact details, please let us know as soon as possible. If you need to access information that we hold about you, we can provide this to you by contacting us by using the details in How to contact us below. 

There is no fee to ask for your information, but sometimes we might charge a fee to cover the time we spend gathering the information you want. We can provide you with general information, such as your name, address, and contact details quite easily, but other information may take longer to provide. If there’s a fee, we’ll let you know how much it is likely to be, so you can choose if you want to go ahead. You'll need to  identify yourself to ensure that we provide the correct information to the correct person. 

7.2 Seeking corrections
If you think the information we hold about you is inaccurate, incomplete, or out of date, you can request that we correct the information by contacting us by using the details in How to contact us below. We will generally rely on you to assist us in informing us if the information we hold about you is inaccurate or incomplete. 

7.3 Dealing with concerns and complaints
If you have any concerns about how your personal information is handled or if you have a complaint about a breach of privacy, please contact us using the details provided in How to contact us below. 

We will consider and respond to your complaint within a reasonable time. We may need to contact other entities to properly investigate your complaint. If you are not satisfied with our response to your complaint, or at any time, you can contact the Office of the Australian Information Commissioner. 

We hope that we will be able to resolve any complaints you may have, but if not, the Office of the Australian Information Commissioner can be contacted by telephone on 1300 363 992 or by using the contact details atwww.oaic.gov.au. 

8. How to contact us
You can contact us by: 
- Emailing us at info@makemyloan.com.au
- Visiting our website at www.MakeMyLoan.com.au.au 

Please provide as much detail as possible about your requestor complaint to help us find your information. We will respond to your request within a reasonable time.

 9. Website usage
The MAKEMYLOAN Group uses a third-party analytics company, Google Analytics, to collect web traffic data. The information generated by the cookie about your use of our websites (including your IP address) will be transmitted to and stored by Google Analytics on servers outside Australia. This information is used for the purpose of evaluating your use of our websites, compiling reports on website activity for website operators, and providing other services relating to website activity and internet usage. Google Analytics may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google Analytics' behalf. Google Analytics will not associate your IP address with any other data held by Google Analytics. By using this website, you consent to the processing of data about you by Google Analytics in the manner described in Google's Privacy Policy and for the purposes set out above. 

10. How we interact with you
10.1 Electronic and digital interactions
We use various digital channels to engage with you, including email, social media, and our websites. In doing so, we may collect and store your email address, social media handle, and interaction history(e.g., likes, comments, and shares). We use this information to engage with you, to provide you with information, updates, and offers, and to improve our products and services. You can opt-out of these communications at any time. 

10.2 Telephone interactions
When you call us or we call you, we may collect and store information about the call, including your phone number, the date and time of the call, and the content of the call (e.g., call recordings). We use this information to train our team members, improve our services, and for compliance and quality assurance purposes. 

10.3 In-person interactions
When you visit our offices or meet with our team members, we may collect and store information about the visit or meeting, including your name, contact details, and the content of the discussion. We use this information to provide you with services, improve our offerings, and for compliance and quality assurance purposes. 

11. General information
11.1 Privacy Act and related definitions
When used in this document, the term ‘personal information’ has the meaning given to it in the Privacy Act. Generally, it means any information that can be used to personally identify you, such as your name or contact details. 

The term 'Credit Provider' is used in this document to refer to us in our role as a provider of credit or loans. 'Credit Providers' includes MAKEMYLOAN PTY LTD and any subsidiary or related bodies corporate that are involved in providing credit or loans. 

The terms 'credit representative' and 'mortgage broker' are used in this document to refer to us in our role as an ACL/'Credit representatives' includes anyone who is authorised to engage in credit activities on our behalf. 

These credit representatives and mortgage brokers may have their own privacy policies. 

11.2 Overseas disclosure of personal information
We may disclose personal information to overseas recipients in the countries listed in section 3.5. 

11.3 How we deal with unsolicited information
If we receive personal information about you that we did not request and if we determine that we could not have collected that information under the Privacy Act, we will destroy or de-identify the information, if it is lawful and reasonable to do so. 

11.4 Anonymity and pseudonymity
You have the option of not identifying yourself or of using a pseudonym when dealing with us. However, this may not always be practical or possible (for example, if you wish to apply for credit or enter into a contractual arrangement with us). 

11.5 Privacy concerns outside Australia
The Privacy Act applies only to information about individuals that is covered by the Privacy Act, such as personal information about Australian residents. This Privacy Statement and the consent you give, apply only to our collection, handling, use, and disclosure of information about individuals covered by the Privacy Act. 

11.6 Privacy policy
This document is our Privacy Policy. It sets out the policy of the MAKEMYLOAN Group with respect to the way we collect, hold, use, and disclose personal information. Our Privacy Policy supersedes any previous notices or statements regarding our privacy practices. If you have any queries or concerns, please contact us using the contact details in How to contact us above. 

11.7 Consent
By accessing or using our products and services, you consent to the collection, use, disclosure, storage, and processing of personal information about you as described in this Privacy Policy. 

This Privacy Statement was last updated in August 2023. 

(end of Privacy Policy)