Privacy Policy

1. What personal information we collect

The types of personal information we may collect include:

• Contact information — name, email address, phone number, mailing address
• Identity information — date of birth, where required for verification purposes
• Financial information — income, expenses, assets, liabilities, and credit-related information provided in connection with a lending application or referral
• Employment information — employer details and employment status
• Interaction data — information about how individuals engage with Looksi or our partner platforms
• Technical data — IP address, browser type, and usage data collected through our website

We collect personal information only where it is reasonably necessary for our functions or activities. Where practicable, we collect personal information directly from the individual concerned.

2. How we collect personal information

We may collect personal information:

• Directly from individuals through our platform or partner-embedded flows
• From financial institution partners who refer customer applications to us, where that individual has consented to the referral
• From brokers or lenders involved in facilitating a lending outcome
• Through our website via cookies or analytics tools (see section 9 below)

3. How we use personal information

We use personal information to:

• Facilitate lending-related workflows, including assessing and referring applications
• Connect individuals with licensed brokers or lenders who may be able to assist
• Communicate with individuals about the status of their application or referral
• Comply with our obligations as a credit representative, including responsible lending obligations
• Manage and improve our platform and partner integrations
• Comply with applicable laws and regulatory requirements

We only use personal information for the purpose for which it was collected, or a directly related purpose, or where otherwise permitted or required by law.

We do not use personal information to train generative AI models, and we do not sell personal information to any third party.

4. Disclosure of personal information

We may disclose personal information to:

• Licensed mortgage brokers engaged to assist with a referral or application
• Lenders or credit providers involved in assessing or funding a lending outcome
• Purple Circle Financial Services Pty Ltd, in our capacity as their credit representative
• Technology and infrastructure service providers who assist in operating our platform
• Professional advisers including legal, accounting, and compliance advisers, under obligations of confidentiality
• Regulatory bodies or law enforcement agencies where required or authorised by law

We do not disclose personal information to third parties for their own marketing purposes.

5. Overseas disclosure

Some of our technology infrastructure and service providers may be located outside Australia, including in the United States and the European Union. Where we disclose personal information to overseas recipients, we take reasonable steps to ensure those recipients handle information in a way that is consistent with the Australian Privacy Principles, in accordance with APP 8.

By providing personal information to us, individuals acknowledge that their information may be transferred to and processed in countries outside Australia.

6. Data retention

We retain personal information for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable law — including the record-keeping obligations that apply to credit representatives under the National Consumer Credit Protection Act 2009 (Cth).

When personal information is no longer required, we take reasonable steps to destroy or de-identify it securely.

7. Security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Our security measures include access controls, encryption in transit, and limiting access to personal information to personnel who need it to perform their functions.

If we become aware of a data breach that is likely to result in serious harm, we will comply with our obligations under the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth).

8. Access and correction

Individuals have the right to request access to personal information we hold about them, and to request that inaccurate, incomplete, or outdated information be corrected. Requests can be made by contacting us at the address below.

We will respond to access and correction requests within a reasonable time. In some circumstances, we may be unable to provide access — for example, where doing so would unreasonably impact the privacy of another person, or where an exemption applies under the Privacy Act. We will explain any refusal in writing.

9. Cookies and website analytics

Our website may use cookies and third-party analytics tools to collect non-personally identifying information about how visitors use the site. This information is used to improve the website and understand traffic patterns. We do not use cookies to identify individuals without their consent.

You can configure your browser to refuse cookies, though doing so may affect some functionality of the site.

10. Complaints

If you have a complaint about how we have handled your personal information, please contact us at [email protected]. We will acknowledge your complaint promptly and aim to resolve it within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be available on our website. We encourage you to review it periodically.

12. Contact us

For privacy-related enquiries, access requests, or complaints, please contact: