Gracelands Privacy Policy

At Gracelands Drive we think just like mortgages, privacy shouldn’t be complicated. The team at Gracelands Drive treat your privacy with the utmost respect and to the standard we’d treat our mother’s privacy. We comply with Australian privacy legislation, specifically the Privacy Act 1988 (Cth). 

Information you provide us is solely used for the purpose described in collecting it. Before we send your personal information to prospective lenders we seek your approval. 

Our Privacy Policy In Detail

Effective Date: 2026

At Gracelands Drive (referred to as “we”, “us”, or “our”), we understand that your financial privacy is paramount. This Privacy Policy explains how we collect, use, hold, and disclose your personal and credit-related information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using our website, engaging our mortgage broking services, or providing us with your information, you agree to the practices described in this policy.

1. The Types of Information We Collect

To provide tailored mortgage broking services and help you secure finance, we must collect detailed personal and financial information. This includes:

  • Identity and Contact Data: Your full name, date of birth, residential address, email address, phone number, and government-issued identification (such as your driver’s licence or passport).

  • Financial and Employment Data: Details of your income, employment status, history, assets, liabilities, living expenses, bank statements, and tax file numbers (TFNs).

  • Credit Information: Credit reports, credit scores, repayment histories, and details of any past defaults or bankruptcies obtained from credit reporting bodies.

2. How We Collect Your Information

We collect information directly from you through various digital and physical channels, including:

  • Our Website: When you fill out contact forms, calculators, or loan assessment queries.

  • Direct Consultations: During phone calls, emails, video meetings, or face-to-face appointments.

  • Third Parties: With your explicit consent, we may collect information from credit reporting bureaus (such as Equifax or Illion), your accountant, financial planners, employers, or real estate agents.

  • Digital Cookies: Our website uses cookies to monitor traffic patterns and improve your browsing experience. Cookies do not identify you personally unless you submit a form.

3. Why We Collect and Use Your Data

We collect your personal and credit information for specific, legally compliant purposes:

  • Loan Assessment: To evaluate your financial position and identify suitable credit products.

  • Application Lodgement: To assist you in preparing and submitting finance applications to banks and lenders.

  • Relationship Management: To manage your ongoing requirements, update you on loan progress, and offer regular reviews.

  • Legal and Regulatory Compliance: To verify your identity and meet our statutory obligations under the National Consumer Credit Protection Act 2009 (Cth) and Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth).

 
4. Who We Share Your Information With
We do not sell your personal data. We only disclose your information to external parties necessary to secure your finance, including:
  • Banks and Lenders: Credit providers to whom we submit your loan applications.
  • Our Aggregator Network: The overarching licencing or software network that facilitates our access to lender panels.
  • Credit Reporting Bodies: To obtain your credit history reports during the assessment phase.
  • Professional Advisers: Your solicitor, conveyancer, accountant, or financial planner, where authorised by you.
  • Verification Services: Third-party providers used to legally verify your identity documents or securely scrape bank statements.

     

5. Offshore Disclosure

To manage our administrative workflows and cloud infrastructure efficiently, we may disclose your information to trusted and compliant third-party service providers, who may use upon disclosure to Gracelands Drive offshore team members located outside of Australia. When data is shared internationally, we ensure robust contractual safeguards are in place to keep your information secure and private.

6. How We Store and Protect Your Data

We take data security seriously. Your information is protected through a combination of physical and digital security measures:

  • Encryption: All electronic data is stored on highly secure, password-protected CRM systems and encrypted cloud servers.

  • Access Control: Only authorised employees who require the data to process your loan are granted access.

  • Retention: We securely retain your records for a minimum of 7 years to satisfy financial and legal compliance laws. Once this period expires and the data is no longer required, it is destroyed or permanently de-identified.

7. Your Rights: Access and Correction

You have a legal right to request access to the personal or credit information we hold about you. You can also request that we correct any inaccuracies.

To make a request, please contact our Privacy Officer using the details below. We will respond to your request within 30 days. In rare circumstances allowed by law, we may deny access, but we will always provide you with a written explanation if we do.

 
8. Making a Privacy Complaint

If you believe we have breached the Australian Privacy Principles or mishandled your data, please contact our Privacy Officer at info@gracelandsdrive.com.au. We take all complaints seriously and will investigate and respond to you within 30 days (typically in less than 10 days). If you are not satisfied with our internal resolution, you can escalate your complaint to an independent external body:

  • Our EDR Scheme: The Australian Financial Complaints Authority (AFCA) via www.afca.org.au or by calling 1800 931 678.
  • The Federal Regulator: The Office of the Australian Information Commissioner (OAIC) via www.oaic.gov.au.