• Full legal name, date of birth, and gender
• Residential address (current and previous), postal address, and length of occupancy
• Contact details including telephone numbers and email address
• Government-issued identification such as driver's licence number, passport details, and Medicare card details
• Signature and other identity verification data
• Tax File Number (TFN), where required by law and provided with your consent

• Income details including salary, bonuses, rental income, business income, and government benefits
• Assets including savings, investments, superannuation, and real property holdings
• Liabilities including existing loans, credit card limits, HECS/HELP debts, and other financial obligations
• Living expenses and monthly expenditure assessments
• Credit history, credit scores, and credit reports obtained from credit reporting bodies
• Bank account statements and transaction histories
• Existing loan agreements, mortgage documents, and property valuations
• Details of any previous defaults, judgments, insolvencies, or serious credit infringements
• Serviceability calculations and borrowing capacity assessments

• Employer name, address, and contact details
• Employment status (full-time, part-time, casual, self-employed, or contract)
• Duration of current and previous employment
• Pay slips, PAYG summaries, tax returns, and business financial statements
• ABN and business registration details (for self-employed applicants)

• Address of property being purchased, refinanced, or used as security
• Property type, purpose, and estimated value
• Ownership structure and proposed loan purpose

We will collect sensitive information only with your express consent or where required or permitted by law. Sensitive information may include:

• health information (in limited circumstances, for example in connection with income protection insurance enquiries);
• information about your vulnerability or circumstances that may be relevant to our obligations under responsible lending legislation.

• IP address, browser type, operating system, and device identifiers
• Pages visited, time spent on pages, referral source, and navigation pathways
• Cookie identifiers and session data (refer to our Cookies Policy at www.finconnex.com.au for full details)
• Form completion data and enquiry submission content

• Completion of mortgage enquiry forms, loan application forms, or fact-find documents provided by our brokers
• In-person, telephone, video conference, or email communications with our team
• Submission of documents including payslips, bank statements, tax returns, and identity documents
• Registration or use of our client portal or online onboarding tools
• Participation in competitions, surveys, or promotional activities
• Subscription to our email newsletters or marketing communications

• Visits to www.finconnex.com.au and related digital properties
• Online enquiry and contact forms
• Use of online calculators or assessment tools
• Cookies and similar tracking technologies (see our Cookies Policy)
• Interactions with our digital advertising campaigns on platforms including Google, Meta, and LinkedIn

In the course of providing mortgage broking services, we may receive personal information about you from:

• credit reporting bodies (including Equifax, Illion, and Experian), in connection with credit checks and credit eligibility assessments;
• lenders, banks, and other financial institutions to which loan applications are submitted;
• referral partners, mortgage aggregators, and finance brokers who refer clients to us;
• employers or accountants providing verification of income or financial position;
• solicitors, conveyancers, or other professional advisers acting in connection with a property transaction;
• government agencies and identity verification services, as required for compliance purposes; and
• publicly available sources including the Australian Bureau of Statistics, property data services, and ASIC registers.

Where we collect personal information about you from a third party, we will take reasonable steps to notify you of that collection as soon as practicable, unless doing so would be impracticable or disproportionate in the circumstances.

• Assessing your financial position, borrowing capacity, and suitability for particular loan products
• Providing credit assistance, which includes recommending, arranging, and assisting you to apply for home loans, investment loans, refinancing, and other credit products
• Preparing and submitting loan applications to lenders on your behalf
• Negotiating loan terms and conditions with lenders
• Managing your ongoing loan relationship and supporting variations, refinancing, or discharge requests

• Verifying your identity in accordance with Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) obligations
• Conducting Know Your Customer (KYC) checks
• Meeting our responsible lending obligations under the National Consumer Credit Protection Act 2009 (Cth) (NCCP Act)
• Complying with ASIC regulatory requirements and our obligations as a Credit Representative
• Maintaining records as required by applicable law and our aggregator's compliance framework

As part of our credit assistance services, we may obtain a credit report about you from one or more credit reporting bodies. This is done to:

• assess your creditworthiness and eligibility for loan products;
• verify the accuracy of the financial information you have provided;
• identify any credit history issues that may affect the suitability of specific loan products; and
• comply with lender credit assessment requirements.

• Contacting you by telephone, email, or SMS in connection with your enquiry or application
• Sending you status updates, document requests, and loan progress notifications
• Managing our client relationship and providing ongoing support after loan settlement
• Recording and storing communications (including phone calls and video meetings) for accuracy and compliance purposes

• Providing you with information about loan products, market updates, refinancing opportunities, and our services that may be of interest to you
• Conducting targeted digital marketing campaigns, including remarketing on Google, Meta, and LinkedIn platforms
• Analysing client engagement and enquiry patterns to improve our services

You may opt out of marketing communications at any time. Refer to Section 8 of this Policy for further details.

• Maintaining our business records, financial accounts, and regulatory reporting
• Training, quality assurance, and performance management of our team
• Managing IT systems, data security, and operational risk
• Engaging professional advisers including legal counsel, auditors, and insurers

• Banks, non-bank lenders, specialist lenders, and other credit providers to whom loan applications are submitted
• Mortgage aggregators and loan distribution platforms through which applications are lodged
• Lenders' mortgage insurers (LMI providers) where applicable

We may exchange credit-related information with the following credit reporting bodies for the purposes of credit assessment and identity verification:

You may contact any of these credit reporting bodies directly to access your credit report, request corrections, or to place a ban on your credit file if you believe you have been a victim of fraud.

• Solicitors and conveyancers acting in connection with a property purchase or refinance
• Property valuers and quantity surveyors
• Financial planners, accountants, and tax advisers (where you have authorised this)
• Insurance providers including life insurers, income protection insurers, and building and contents insurers

We use a range of technology platforms to operate our business efficiently and securely. These providers may process your personal information as part of their service delivery and are bound by contractual obligations to handle your data responsibly. Our key platforms include:

• Zoho One — integrated CRM, email marketing, workflow automation, and client management
• Go High Level — lead management, marketing automation, and client communication
• Infinity CRM — client relationship and loan pipeline tracking
• Trello — internal task and workflow management
• Finconnex Internal CRM — proprietary client data management and loan tracking system
• Google Workspace — email, document storage, and internal collaboration
• Cloud storage and document management services utilised within our secured environment

• ASIC, APRA, and the OAIC, where required by law or in response to regulatory enquiries
• Australian Federal Police or other law enforcement agencies, where required by law
• AUSTRAC, in connection with our AML/CTF compliance obligations
• Courts and tribunals, in connection with legal proceedings

• Any person or organisation you specifically authorise us to disclose your information to (e.g., a family member, your accountant, or a power of attorney)
• Guarantors in connection with a loan application, where relevant
• Our professional indemnity insurers and legal advisers
• Purchasers of our business or assets, in connection with a business sale or restructure

Prior to disclosing your personal information to any third party, we take reasonable steps to ensure that the recipient is bound by privacy obligations at least equivalent to our own, or that you have provided informed consent.