Edgeview Finance Privacy Policy

Key Privacy Commitments

• We collect only what we need — Information necessary to provide and improve our services.
• Data stored in Microsoft 365 Australia — Some processing in the United States and the Philippines under safeguards.
• AI used responsibly — AI assists our people and does not replace their judgement. Your information is not used to train AI models.
• Secured with strong controls — MFA, encryption, and monitoring.
• You can access, correct or complain — Full compliance with Privacy Act 1988 (Cth) and APPs.

Information We Collect

Personal Information

• Name, address, email, phone
• Date of birth
• Employment and business details
• Identity verification documents

We collect identity and contact details that are reasonably necessary for our functions and activities. This information is collected directly from you or your authorised representatives, and from third parties where permitted by law.

Financial Information

• Income, expenses, assets, liabilities
• Bank statements and account details
• Tax returns and financial statements
• Finance eligibility information

Financial and application information is collected to assess eligibility for finance products or services you request. We only collect what's necessary to provide and administer the services you've requested.

Credit Information

• Credit reports (Equifax, Experian, Illion)
• Credit history and repayment records
• Website usage and interaction data
• Communications and service notes

We handle credit information under the Privacy Act and the Privacy (Credit Reporting) Code 2024. We generally do not collect sensitive information unless necessary. We do not use government identifiers like TFNs as our own identifiers.

What this means for you: If you choose not to provide requested information, we may be unable to assess your application, respond to your enquiry, or provide some or all services to you. Where lawful and practicable, you may interact with us anonymously or by using a pseudonym.

How We Use & Share Your Information

How We Use

Provide Services

Provide and administer services you request, including assessing eligibility and arranging finance.

Verify & Comply

Verify identity and meet legal obligations including AML/CTF, responsible lending and record-keeping.

Manage Relationship

Manage our relationship with you, including communications, customer support and account management.

Operate & Improve

Operate, secure and improve our websites, systems and services, including analytics and troubleshooting.

Who We Share With

Service Providers

Microsoft 365 and security/IT providers who help us operate, with appropriate contractual safeguards. Our service providers include providers of artificial-intelligence and cloud computing services, some of which process information in overseas locations, including the United States.

Credit Providers

Credit providers and intermediaries involved in arranging the finance you request.

Regulators & Law

Regulators and law enforcement where required or authorised by law.

Professional Advisers

Legal, accounting, compliance advisers and auditors on a confidential basis, or other parties with your consent.

Artificial Intelligence & Automated Processing

Edgeview Finance uses artificial intelligence (AI) systems to help us work efficiently and accurately. This section explains what that means for your personal information.

What our AI systems do

We use AI tools to assist with tasks such as organising and summarising loan documents, preparing financial summaries and serviceability workings, managing our deal pipeline, drafting documents and correspondence for human review, and general research. We also use an AI decision-support service that helps our brokers analyse a finance scenario and consider options; it supports our brokers' judgement and does not make credit decisions. We may also use AI voice tools that transcribe what our staff say, and read information back to them, while they work on your matter. In doing this work, AI systems may process personal information you have provided to us — for example your name, contact details, property details and financial information relevant to your application.

Human oversight

AI assists our people; it does not replace their judgement. Edgeview Finance acts as an intermediary between you and lenders: we provide credit assistance, and the lender you apply to makes its own credit decision. Neither Edgeview Finance nor any AI system we use makes that decision. All credit assistance we provide — including any assessments, recommendations and advice — is prepared, reviewed and approved by our licensed human brokers under our Australian Credit Licence. Client communications of substance are approved by a person before they are sent. Where a computer program substantially assists in preparing an assessment or recommendation that affects you, our human broker remains responsible for it, and you may ask us to explain how it was reached.

Protecting your information when we use AI

We apply data-minimisation rules to AI processing: our systems are designed to send only the information needed for the task, and Tax File Numbers, Medicare numbers and government-issued identification numbers are excluded from AI processing by policy. We do not allow your personal information to be used to train or improve AI models.

AI providers we use are commercial services engaged under terms that restrict their use of the data we send them. Some of them process information overseas, including in the United States (see "Overseas Disclosure" below), and we remain accountable for your personal information when they process it. Our AI decision-support provider hosts its services in the United States and has zero data retention in place for our account, so it does not keep the information we send it after processing.

AI working data is retained on a short rolling basis and is not our record of truth about you — your loan records are kept in our secure client systems.

Your choices and rights

Your rights of access, correction and complaint (set out elsewhere in this policy) apply equally to personal information processed with the assistance of AI. If you have questions or concerns about our use of AI in handling your matter, contact us using the details in this policy and a person will respond.

Overseas Disclosure

We primarily store your personal information in our Microsoft 365 tenant located in Australia. Some service providers and systems store or process information overseas. Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles, including through contractual data-protection terms.

United States

Email delivery, productivity tools and artificial-intelligence services — including our AI decision-support service and, where we use them, AI voice-transcription tools — may process information there under safeguards. We take reasonable steps, consistent with Australian Privacy Principle 8, to ensure these overseas recipients handle your personal information in accordance with Australian privacy law, and we remain accountable for those disclosures.

Philippines

A member of our team provides remote support and accesses information only as needed under confidentiality obligations.

We require overseas recipients to protect information consistently with the APPs, use it only for the agreed purpose, and notify us of a data breach. We update this policy when our overseas processing materially changes.

Your Privacy Rights

Access Your Data

You can request access to personal information we hold about you.

Correct Information

Request corrections if information is inaccurate, out of date, incomplete or misleading.

Opt Out Marketing

Opt out of direct marketing at any time using unsubscribe links or by contacting us.

Complain Process

Contact us first with complaints. If unsatisfied, escalate to OAIC.

We may need to verify your identity before responding to requests. Where lawful and practicable, you may interact with us anonymously or by using a pseudonym.

Data Security Measures

Identity & Access

Multi-factor authentication (MFA), Conditional Access, least-privilege access and regular access reviews.

Data Protection

Microsoft Purview sensitivity labels, Data Loss Prevention (DLP), and encryption in transit and at rest.

Breach Response

If an eligible data breach occurs, we will notify the OAIC and affected individuals as soon as practicable.

Secure Storage

Data primarily stored in our Microsoft 365 tenant in Australia. Some processing occurs in the United States and the Philippines under contractual safeguards.

Retention & Destruction

We keep personal information for as long as needed to provide services and meet legal requirements. Financial records and client files are retained for at least seven (7) years. When no longer required, we destroy or de-identify information unless required by law to retain it.

Third-party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites. We recommend you review their privacy policies before providing any personal information.

Changes to This Policy

We may update this policy from time to time. The updated version will be posted on our website with a new effective date. Material changes will be communicated where appropriate. Review cycle: Annual or on regulatory change.

Privacy Questions or Concerns?

Edgeview Mortgages Pty Ltd

• Email: privacy@edgeviewfinance.com.au
• Phone: 07 5241 1370
• Response: Within 30 days
• ACN: 167 233 712 | ACL: 459287
• Postal: PO BOX 3208, Helensvale QLD 4212

OAIC — Office of the Australian Information Commissioner

• Phone: 1300 363 992
• Website: oaic.gov.au

If you're not satisfied with our response, you may contact the OAIC for privacy-related complaints.