Privacy policy

Last updated 11 October 2026. Privet is an education and information resource about property finance, operated from Melbourne, Victoria. This policy describes what the website actually collects and does. Contact us at enquiries@privet.com.au with any question.

Collection notice

You can read every page and use every calculator without giving us personal information. We collect personal information only when you choose to send an enquiry, make a privacy request, subscribe to education emails or email us. If you do not provide the information marked as required, we cannot pass on your enquiry.

What we collect

• Enquiry form: your name, email, mobile number, contact preference, state, borrower type and entity name; the loan, security property, exit plan, construction details and financial snapshot you choose to enter; which documents you have available; and your consent choices with the date, time and wording version.
• Privacy requests: your name, email, any enquiry reference and the details you provide.
• Education emails (optional): your email address and confirmation of your subscription.
• Technical information: our hosting providers process your IP address and request details to deliver pages, prevent abuse and rate-limit forms. Server logs are kept for about 30 days.

The enquiry form asks you not to enter tax file numbers, passwords or bank account details. Please do not send them by email either.

Why we collect it

• To receive and record your enquiry and reply to you.
• To pass your enquiry to finance providers or referral partners, only if you give that separate consent.
• To send education emails, only if you opt in. You can unsubscribe at any time.
• To respond to privacy requests and complaints.
• To keep the site secure, prevent spam and meet our legal obligations.

Sharing your enquiry with finance providers

We share an enquiry only with finance providers or referral partners when you tick the separate sharing consent on the enquiry form. We share it with providers that we have recorded as accepting that kind of enquiry, and we log each referral. Each provider handles your information under its own privacy policy and makes its own credit decision. You are never obliged to proceed.

Privet may receive a referral fee or commission from finance providers if an enquiry proceeds. This does not change the information shown on this site, and you are never obliged to proceed. How Privet is funded

Service providers that process information for us

These are the processors used by the code that runs this site:

• Supabase: database and authentication for enquiries, consent records, privacy requests and our administration area.
• Resend: sending transactional emails such as enquiry and request confirmations.
• Cloudflare: hosting, content delivery, security and optional anti-spam checks (Turnstile).
• Lovable: the platform we use to build and host the website.
• Automation webhook (if enabled): when our database is unavailable, an enquiry may be forwarded to a secure automation endpoint that we control so it is not lost.

Overseas disclosure

Some of these providers store or process information outside Australia, including in the United States and other countries where they or their sub-processors operate. We take reasonable steps, including contractual terms, to ensure they handle personal information consistently with the Australian Privacy Principles.

Cookies, analytics and browser storage

The site does not set advertising or tracking cookies and does not currently run third-party analytics. If we add privacy-friendly analytics that use cookies, we will ask for your consent first and update this policy.

The workspace, saved calculator scenarios, checklist progress, learning progress and your light or dark theme are stored only in your own browser (local storage). We cannot see them. An unfinished enquiry is kept in session storage in your browser until you close the tab. You can delete all workspace data from the workspace.

How long we keep information

• Enquiries: 24 months after our last contact with you, then deleted automatically unless a law requires us to keep them.
• Consent records: 7 years, as evidence of your choices.
• Privacy requests: 2 years after they are resolved.
• Administration audit logs: 7 years.
• Education email subscriptions: until you unsubscribe.

Security

Enquiry data is stored in a database protected by row-level security, so the public website can add records but cannot read them. Our administration area requires sign-in with multi-factor authentication, and every read or export of enquiry data is recorded in an audit log. Data is encrypted in transit.

Access, correction and deletion

You can ask to access or correct the personal information we hold about you, ask us to delete it, or withdraw a consent. Use the privacy request form or email enquiries@privet.com.au. We will confirm your identity before acting. If we have already passed your enquiry to a finance provider, we will tell you who, so you can contact them as well.

Complaints

If you have a privacy complaint, email enquiries@privet.com.au with the details. We will acknowledge it and aim to resolve it promptly. See our complaints process. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Data breaches

If a data breach is likely to result in serious harm, we will notify affected people and the OAIC as required by the Notifiable Data Breaches scheme in the Privacy Act.

Changes to this policy

We will update this page when our practices change and show the new date at the top.