Privacy Policy
Last reviewed: pending finalisation by Barry Rahme and legal counsel.
The published Privacy Policy will describe how LoanGenius collects, holds, uses and discloses your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and how that handling intersects with our obligations under the NCCP Act 2009.
Content to be finalised by licensed broker Barry Rahme and legal counsel. Until then, please email barry@loangenius.com.au with any privacy queries or to request access to or correction of your information.
What we collect (APP 1 & 3). To sign you in we collect your email address and authentication metadata — the time you sign in, your IP address and basic device/browser information. We use it only to authenticate you and secure your account (APP 6), never for marketing. Your name and borrower profile are optional.
Email delivery — overseas disclosure (APP 8). We send sign-in links through Postmark, a transactional email provider that processes your email address and delivery metadata on servers in the United States. This is a cross-border disclosure of personal information; we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.
How we protect it (APP 11). Sign-in links are single-use, expire after 15 minutes, and are stored only as a hashed value — never in plain text. Connections use HTTPS and you can revoke sessions by signing out. As an APP entity we are covered by the Notifiable Data Breaches scheme and will notify you and the OAIC of any eligible breach.
Signing in is not identity verification. Clicking a sign-in link confirms control of your email address only. Verifying your identity for a credit application is a separate step that licensed broker Barry Rahme conducts directly as part of your file.
This is general information only. Final suitability assessed by licensed broker Barry Rahme.