What You Need to Know

• We will take reasonable steps to protect your personal information.

• We do not sell your personal information to a third party.

• We will comply with our notification obligations under the Privacy Act if your information is compromised.

• We use your information only to provide our services to you and to meet our legal obligations.

• If you have any concerns, contact us at info@limitlessfinance.com.au.

1. About This Privacy Policy

‘We’, ‘us’ and ‘our’ refer to Limitless Finance (ACN 682 763 695, Credit Representative No. 565607), a mobile mortgage broking business headquartered in Leppington, NSW, operating across Australia. We act as a credit representative of Australian Finance Group Ltd (AFG), which holds Australian Credit Licence (ACL) 389087, and we are a member of the Finance Brokers Association of Australia (FBAA).

This Privacy Policy (Policy) outlines how we collect, use, hold, disclose and protect your personal information in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs). Where we handle credit information, we are also bound by Division 3 of Part IIIA of the Privacy Act and the Privacy (Credit Reporting) Code 2014.

By using our website or engaging our services, you consent to the collection and handling of your personal information as described in this Policy.

2. Why We Collect Your Personal Information

We collect and hold your personal information for the following purposes:

Assessing your application for finance and managing that finance
Preparing and submitting credit proposals and loan applications to lenders on your behalf
Complying with our obligations under the National Consumer Credit Protection Act 2009 (NCCP Act) and other applicable legislation
Verifying your identity and the accuracy of information you provide
Managing our relationship with you and providing ongoing service
Letting you know about our products and services that may be of interest to you
Direct marketing (you may opt out at any time — see Section 8)
Complying with legal and regulatory obligations, including anti-money laundering and counter-terrorism financing laws, and credit reporting laws
Handling complaints and resolving disputes
Improving our services and website

3. What Personal Information We Collect

We collect information about you and your interactions with us. The type of personal information we may collect includes but is not limited to:

Personal and contact details — name, date of birth, phone number, residential or postal address, email address
Identity documents — certified copies of driver’s licence, passport, birth certificate, citizenship or marriage certificates
Government identifiers — Tax File Number (TFN), country of tax residency, and other relevant identifiers
Financial information — employment history and details, income, assets, liabilities, expenses, bank statements, tax returns
Loan and credit information — existing loans, repayment history, defaults, and credit reports obtained from credit reporting bodies
Property information — details of properties being purchased, refinanced, or used as security
Household information — number and ages of dependants, co-applicants, guarantors, and length of time at your current address
Bank account and payment details as required to facilitate our services
Any other information you provide in connection with a credit application or enquiry

We do not collect sensitive information (such as political or religious beliefs, ethnic background, or health information) unless it is directly relevant to a product or service you have requested and you have provided your consent.

4. How We Collect Your Personal Information

We collect your personal information primarily from you directly. We may also collect information from other sources, including:

Directly from you — via phone, email, online enquiry forms, in-person meetings, or documents you provide to us
Our website (limitlessfinance.com.au) — when you submit an enquiry, use our calculators, or interact with our digital services
Third parties — lenders, credit reporting bodies, real estate agents, accountants, solicitors, conveyancers, and other referral partners
Co-applicants, guarantors, or other parties to your finance application
Your employer or referee, where relevant to your application
Publicly available sources — such as public registers or social media

We will only collect personal information by lawful and fair means, and only where it is reasonably necessary for providing our services. Where a legal obligation requires us to collect specific information, we will inform you of that obligation and the consequences of not providing it.

If you provide us with personal information about another person (such as a co-applicant or guarantor), you confirm that person has consented to you providing their information to us and to us handling it in accordance with this Policy.

5. How We Use Your Personal Information

We use your personal information to:

Assess your eligibility for finance products and prepare credit proposals
Submit loan applications to lenders on your behalf
Verify your identity and the information you have provided
Communicate with you throughout your application and beyond
Manage our ongoing relationship with you
Comply with the NCCP Act, Privacy Act, AML/CTF legislation, and other applicable laws
Handle any complaints or disputes you raise
Conduct internal reporting, analysis, and business improvement activities
Send you relevant information about our services — subject to your marketing preferences (see Section 8)

6. Disclosure of Your Personal Information

6.1 Who We May Disclose To

We do not sell your personal information. We may disclose your personal information to the following types of organisations where necessary to provide our services or comply with our obligations:

Lenders and credit providers — as part of your loan application or referral
Australian Finance Group Ltd (AFG) — as our aggregator and licensor
Credit reporting bodies — such as Equifax, Illion, and Experian (see Section 7)
Valuers, solicitors, conveyancers, and other settlement professionals
Your employer or referees, where relevant to your application
Government agencies and regulators — including ASIC, AUSTRAC, and law enforcement, where required by law
Technology and cloud service providers who support our operations — subject to appropriate confidentiality arrangements
Any person you have authorised to act on your behalf, such as an accountant, lawyer, or financial adviser
Any successor in title to our business, including new business partners or owners

6.2 Overseas Disclosure

Some of our service providers — including cloud-based software platforms and technology tools — may store or process data outside of Australia. We take reasonable steps to ensure those providers comply with privacy standards consistent with the APPs. By providing your personal information to us, you consent to it being disclosed to overseas recipients where necessary in accordance with APP 8.

Overseas recipients may not be subject to privacy obligations equivalent to those under the Privacy Act and could be required to disclose information under foreign law.

7. Credit Information

Credit information is a subset of personal information used to assess your eligibility for finance. It may include any loans you have outstanding, your repayment history, opened and closed dates, and any defaults. We handle all credit information in accordance with Part IIIA of the Privacy Act and the Privacy (Credit Reporting) Code 2014.

We may obtain a credit report from a credit reporting body (CRB) such as Equifax, Illion, or Experian as part of assessing your application. If you proceed with a loan application through us, the relevant lender may perform their own credit report search, which will leave a record on your credit file.

We may disclose credit information to joint applicants, co-borrowers, and lenders as part of the application process. We do not provide credit reporting information to CRBs.

You have the right to request access to the credit information we hold about you and to request that a CRB correct inaccurate information. If you believe you may have been a victim of fraud, you may contact a CRB directly — they must not use or disclose that information for 21 days following notification.

You can review the privacy policies of each credit reporting body directly on their websites:

Equifax — www.equifax.com.au
Illion — www.illion.com.au
Experian — www.experian.com.au

8. Direct Marketing

From time to time, we may use your personal information to contact you about our products, services, and relevant finance industry updates that we believe may be of interest to you. We may do so by mail, telephone, email, SMS, or other electronic means.

You can opt out of direct marketing communications at any time by:

Emailing us at info@limitlessfinance.com.au
Using the unsubscribe function in any email we send you
Calling us on 0499 788 777

We will not charge you for giving effect to your opt-out request and will action it as promptly as possible.

9. Security of Your Personal Information

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Our security measures include:

Secure storage of physical and electronic documents
Password-protected systems and encrypted communications
Restricting access to personal information to authorised personnel only
Regular review of our data handling practices and security procedures

While we take all reasonable precautions, no data transmission over the internet is entirely secure. If you believe your personal information has been compromised, please contact us immediately using the details in Section 12.

10. Notifiable Data Breaches

We are required by the Privacy Act to notify you and the Office of the Australian Information Commissioner (OAIC) if we become aware of a data breach that is likely to result in serious harm to you. We have procedures in place to detect, contain, and respond to suspected data breaches promptly.

If you believe your personal information held by us has been the subject of a data breach, please contact us immediately using the details in Section 12.

11. Your Rights

11.1 Access and Correction

You have the right to request access to the personal information we hold about you and to request that we correct any information that is inaccurate, incomplete, out of date, irrelevant, or misleading. We will respond to your request within 30 calendar days. There is no charge for making a request, however we may charge a reasonable fee to cover costs of providing access to more complex information.

If we decline your request, we will provide you with written reasons and information about how to escalate your complaint.

11.2 Anonymity

In general, you can visit our website without identifying yourself. However, if you wish to engage our services or submit an enquiry, we will need to collect personal information from you. Where we are legally required to deal with identified individuals, we will notify you of this.

Where you have provided consent to the use of your personal information, you may withdraw that consent at any time by contacting us. Note that withdrawal of consent may affect our ability to provide our services to you.

12. Retention of Personal Information

We retain your personal information for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Credit and loan application records are typically retained for a minimum of 7 years in accordance with regulatory requirements under the NCCP Act and related legislation.

When we no longer require your personal information, we will take reasonable steps to destroy, delete, or de-identify it in a secure manner.

13. Website and Cookies

Our website (limitlessfinance.com.au) may automatically collect non-personal information such as your IP address, browser type, pages visited, and time spent on the site for analytics purposes. We may use cookies — small text files placed on your device — to improve your browsing experience and understand how visitors use our site.

By continuing to use our website, you consent to our use of cookies and similar tracking technologies as described in this Policy.

You can configure your browser to refuse cookies or delete existing cookies at any time. Disabling cookies may limit access to, or functionality of, certain parts of our website.

14. Complaints

If you have a question or complaint about how we have handled your personal information, please contact us in the first instance:

Limitless Finance

Email: info@limitlessfinance.com.au

Phone: 0499 788 777

Address: Leppington, NSW, Australia

We will acknowledge receipt of your complaint as promptly as possible and will endeavour to investigate and resolve it within 30 calendar days. If you are not satisfied with our response, you may escalate your complaint to:

Office of the Australian Information Commissioner (OAIC) — oaic.gov.au — 1300 363 992 — enquiries@oaic.gov.au — GPO Box 5218, Sydney NSW 2001
Australian Financial Complaints Authority (AFCA) — afca.org.au — 1800 931 678

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or regulatory requirements. The current version will always be available on our website at limitlessfinance.com.au. We encourage you to review this Policy periodically. Material changes will be published on our website.

If you would like a copy of this Policy in another format (such as paper), please contact us and we will take reasonable steps to accommodate your request.

16. Contact Us

For any privacy-related questions, requests, or concerns:

Limitless Finance — Privacy Enquiries