Privacy Policy

Ellann Finance Pty Ltd ACN [120 809 592] is committed to protecting your personal information. We are bound by the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Privacy (Credit Reporting) Code 2025. This policy explains how we collect, use, store and disclose your personal and credit information in connection with our finance broking services.

Collection of Personal Information

What we collect

To assess and arrange finance on your behalf, we collect personal information including:

  • Full name, date of birth, residential address and contact details
  • Employment details, income, assets, liabilities and expenses
  • Identification documents (driver’s licence, passport)
  • Tax file number (where required and authorised by law)
  • Details of any existing finance, loans or credit facilities
  • Information about the asset or property being financed

How we collect it

We collect information directly from you — by phone, email, in person, or through our website enquiry forms. In some cases, with your consent, we may also collect information from third parties such as employers, accountants, real estate agents, or other financial institutions.

Why we collect it

We collect and use your personal information to:

  • Assess your finance requirements and identify suitable products
  • Prepare, lodge and manage your finance applications
  • Communicate with you about your application and ongoing matters
  • Meet our legal and regulatory obligations under the National Consumer Credit Protection Act 2009 and the Australian Securities and Investments Commission Act 2001
  • Manage our relationship with you as a client
You do not have to provide us with your personal information. However, if you choose not to, we may not be able to assess or arrange finance on your behalf.

Credit Information

As a finance broker, we handle credit information as defined under Part IIIA of the Privacy Act 1988 (Cth) and the Privacy (Credit Reporting) Code 2025. Credit information includes:

  • Credit enquires and credit applications you have made
  • Details of current and previous credit accounts and facilities
  • Repayment history information
  • Default information and series credit infringements (where applicable)
  • Court judgements or bankruptcy information
  • Credit scores and assessments provided by credit reporting bodies

How your credit information is used

We use credit information solely to assess your eligibility for finance products and to match you with suitable lenders. We do not use credit information for any other purpose, and we do not disclose it to any party that is not directly involved in processing your application.

Credit Reporting Bodies

Lenders we work with may access your credit report from one or more credit reporting bodies, including Equifax, Experian or illion (formerly Dun & Bradstreet). Each of these bodies has its own privacy policy and you have the right to contact them directly to access or correct information they hold about you.

Sharing Information with Lenders & Third Parties

We will only share your personal and credit information with third parties where it is necessary to arrange your finance, required by law, or where you have consented.

Who we may share your information with

  • Lenders and credit providers — banks, non-bank lenders, and other credit providers to whom we submit applications on your behalf
  • Mortgage insurers — where lender mortgage insurance is required on your application
  • Aggregators and industry platforms — our finance aggregator and any platform used to lodge or process your application (e.g. Nexus, Podium, Loanapp or similar)
  • Valuers and property professionals — where a property valuation is required as part of your application
  • Accountants or financial advisers — only where you have expressly authorised us to liaise with them
  • Legal and regulatory bodies — ASIC, AFCA, or other bodies where disclosure is required by law
  • IT and cloud service providers — who assist us in operating our business and who are bound by confidentiality and data security obligations

Overseas disclosure

Some of our service providers, including cloud storage and software platforms, may store data on servers located overseas (including in the United States and European Union). Where this occurs, we take reasonable steps to ensure those providers maintain privacy standards consistent with Australian law. By engaging our services, you consent to your information being held in these jurisdictions where applicable.

We do not sell, rent or trade your personal information to any third party for marketing purposes.

Data Storage & Security

We take the security of your personal information seriously and implement reasonable measures to protect it from misuse, interference, loss, and unauthorised access, modification or disclosure.

How we store your information

  • Client files and documentation are stored in secure, password-protected cloud-based systems with access restricted to authorised staff only
  • Physical documents are stored securely and disposed of by secure shredding when no longer required
  • Electronic communications are conducted over encrypted channels where available

How long we retain your information

We retain your personal information for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with our obligations under the National Consumer Credit Protection Act 2009, which requires credit licensees to retain records for a minimum of 7 years. After this period, information is securely destroyed.

Data breaches

In the event of a data breach that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

Cookies & Website Tracking

Our website uses cookies and similar tracking technologies to improve your browsing experience and to help us understand how visitors use our site.

What are cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to remember your preferences and gather anonymous analytical data about site usage.

What cookies do we use?

  • Essential cookies — required for the website to function correctly (e.g. form submissions, session management)
  • Analytics cookies — tools such as Google Analytics that collect anonymised data about how visitors navigate the site, which pages are visited and how long users stay. This data does not identify you personally
  • Marketing cookies — if we run retargeting or digital advertising campaigns, we may use cookies from platforms such as Google Ads or Meta to serve relevant advertising. You can opt out of these at any time

Managing cookies

You can control and delete cookies through your browser settings at any time. Disabling cookies may affect the functionality of some parts of our website. For more information on managing cookies, visit www.allaboutcookies.org.

We do not use cookies to collect personally identifiable information without your knowledge, and we do not share cookie data with unrelated third parties.

Your Rights

Under the Australian Privacy Principles, you have the following rights in relation to the personal information we hold about you:

  • Access — you may request access to the personal information we hold about you at any time
  • Correction — if information we hold is inaccurate, out of date, incomplete or misleading, you may request that we correct it
  • Anonymity — where lawful and practicable, you may deal with us anonymously or using a pseudonym
  • Opt-out of marketing — you may opt out of receiving marketing communications from us at any time by contacting us or using the unsubscribe function in any marketing email

Privacy Complaints

If you believe we have handled your personal or credit information in a way that breaches the Australian Privacy Principles or the Privacy (Credit Reporting) Code 2025, you have the right to make a complaint.

Step 1 – Contact us first

We ask that you raise your concern with us directly in the first instance. Please contact our Privacy Officer in writing (see below). We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If we require additional time, we will notify you.

Step 2 – External escalaction

If you are not satisfied with our response, or if we have not resolved your complaint within 30 days, you may escalate your complaint to:

Australian Financial Complaints Authority (AFCA) — for complaints related to our credit activities
Website: www.afca.org.au  ·  Phone: 1800 931 678

  • Office of the Australian Information Commissioner (OAIC)
  • Website: www.oaic.gov.au  ·  Phone: 1300 363 992