White Alpaca Finance — Privacy Policy

1. About this policy

Your privacy matters to us. This policy explains, in plain English, what personal information we collect, why we need it, who we share it with, and how you stay in control of it.

"We", "us" and "our" means White Alpaca Pty Ltd (ABN 69 647 253 272), trading as White Alpaca Finance. We are a mortgage and finance broker. We arrange credit as an authorised credit representative (Credit Representative No. 561038) of Loan Market Group Pty Ltd, Australian Credit Licence 517192. We are a member of the Finance Brokers Association of Australia (FBAA membership M-357632) and the Australian Financial Complaints Authority (AFCA membership 123863).

We follow the Privacy Act 1988 (Cth), the Australian Privacy Principles, and the credit reporting rules in Part IIIA of that Act and the Credit Reporting Code.

This policy covers our website, whitealpaca.com.au, and everything we do for you as a broker: phone calls, emails, meetings, applications and ongoing service.

We may update this policy from time to time. The latest version will always be on our website, with the date it was last updated.

2. What we collect

We only ask for what we need to help you. Depending on what you need, that may include:

• Who you are: name, date of birth, address, phone, email, and ID documents such as a driver licence or passport.
• Your money and work: income, employment or business details, ABN, tax returns, BAS, accountant letters, bank statements, assets, debts and living expenses.
• Credit information: your credit history, credit score, existing loans and repayment history.
• Property details: the property you're buying, refinancing or borrowing against.
• Your goals: what you need the loan to do and any changes coming up in your life or business.
• Website data: pages visited, device and browser type, and how you found us.

We will never ask for more sensitive information (such as health details) unless it's needed for your application and you agree. One example is a hardship request.

You can talk to us without giving your name for general questions. We can't arrange a loan without knowing who you are.

3. How we collect it

Most information comes straight from you: over the phone, in person, by email, or through forms on our website, such as Submit Your Scenario or a callback request.

With your consent, we may also get information from:

• your accountant or bookkeeper
• lenders, mortgage insurers and valuers
• credit reporting bodies
• your employer, real estate agent, conveyancer or solicitor
• public records, such as the ABN Lookup or property title searches.

If someone refers you to us, they may pass on your name and contact details. We'll only contact you if you've agreed to it.

4. Why we use it

We use your information to:

• understand your situation and find loan options that may suit you
• check that a loan is not unsuitable for you, as the National Consumer Credit Protection Act 2009 requires
• prepare and lodge applications and manage them through to settlement
• verify your identity, as anti-money laundering laws require
• keep in touch about your loan, including reviews down the track
• send you updates or offers, but only if you've agreed (see section 9)
• improve our website and service
• meet our legal and licensing obligations.

5. Credit reporting

To help with a loan application, we and the lenders we work with may get credit information about you from a credit reporting body. We may also share information with them. That includes whether you've applied for credit and whether you've paid on time.

The credit reporting bodies we may deal with are:

Each one has its own policy on how it handles credit information. You can contact them directly to:

• get a free copy of your credit report
• ask them not to use your information for pre-screening of direct marketing
• ask for a ban period if you think you've been, or are at risk of being, a victim of fraud.

6. Who we share it with

We share only what's needed, and only to help with your loan or to meet the law. This may include:

• lenders and their agents
• our credit licensee, Loan Market Group Pty Ltd, for compliance and audit
• credit reporting bodies (see section 5)
• mortgage insurers, valuers, conveyancers and solicitors
• your accountant, financial adviser or anyone else you authorise
• service providers who help us run the business, such as our CRM, email, document storage and website hosting
• regulators, courts and dispute resolution bodies when the law requires it, such as ASIC, AUSTRAC and AFCA.

We use some software tools, including AI-assisted tools, to help with research, drafting and admin. These tools don't make lending decisions, and Sam reviews everything before it reaches you.

We never sell your personal information.

7. Information sent overseas

Some of our service providers may store or process information outside Australia, for example on secure cloud servers. When this happens, we take reasonable steps to make sure the provider protects your information in line with Australian privacy law.

We don't send your credit information overseas unless the law allows it.

8. Our website and cookies

Our website uses cookies. Cookies are small files saved by your browser. We use them to:

• make the site work properly
• understand which pages are useful, using tools such as Google Analytics
• measure our advertising, using tools such as the Meta Pixel and Google Ads.

This data is mostly anonymous. It doesn't tell us who you are unless you fill in a form.

You can block or delete cookies in your browser settings. Some parts of the site may not work as well if you do.

9. Marketing

We'll only send you newsletters, offers or loan review reminders if you've agreed to receive them.

Every marketing email or SMS has an easy way to opt out. You can also just tell us. We'll stop within 5 business days.

We won't stop sending messages you need about your loan or application.

10. Keeping it safe

We take reasonable steps to protect your information from misuse, loss and unauthorised access. That includes password-protected systems, two-factor login where available, secure document upload, and limiting access to people who need it.

No system is 100% secure. If a data breach is likely to cause you serious harm, we'll tell you and the Office of the Australian Information Commissioner (OAIC), as the Notifiable Data Breaches scheme requires.

11. How long we keep it

When we no longer need information, we securely delete it or de-identify it.

12. Seeing and correcting your information

You can ask for a copy of the personal or credit information we hold about you. You can also ask us to fix anything that's wrong, out of date or incomplete.

Just contact us (see section 14). We'll reply within 30 days. There's no charge to ask. If a request takes a lot of work, we may charge a reasonable fee for providing the copy, and we'll tell you first.

If we can't give you access or make a correction, we'll explain why in writing and tell you how to complain.

13. Complaints

If you're unhappy with how we've handled your information, please tell us first. We want the chance to fix it.

• Contact us (section 14). We'll acknowledge your complaint within 7 days and aim to resolve it within 30 days.
• Not resolved? You can contact the Australian Financial Complaints Authority (AFCA), a free and independent service. Our AFCA membership number is 123863. Visit afca.org.au, email info@afca.org.au or call 1800 931 678.
• Privacy matters can also go to the OAIC. Visit oaic.gov.au or call 1300 363 992.

14. Contact us

Privacy Officer: Sadaqat (Sam) Siddiq, Director

• Phone: 0410 433 893
• Email: admin@whitealpaca.com.au
• Post: 50a Richards Loop, Oran Park NSW 2570