Privacy Policy

1. About this Policy

This Privacy Policy (“Policy”) explains how Melbourne Property Assets Co (“MPAC”, “we”, “us”, “our”) collects, holds, uses and discloses personal information, in accordance with the Privacy Act 1988 (Cth) (“the Act”) and the 13 Australian Privacy Principles (“APPs”) set out in that Act.

This Policy covers, among other things, our referral of clients to Lending Partners for a preliminary loan assessment, and our use of offshore-based administrative support (see sections 2, 7 and 8, below). Where we need your specific consent to a use or disclosure of your personal information — for example, referral to a Lending Partner, or disclosure to an offshore administrative support provider — we will ask you to provide that consent separately, as part of our client engagement and onboarding documentation. If anything in this Policy is unclear, please contact us using the details in section 13.

2. About Melbourne Property Assets Co

MPAC provides property investment advisory and property consultation services to help clients understand and pursue their property investment goals.

Any credit assistance, formal pre-approval, loan product recommendation, or credit advice is provided directly by the relevant Lending Partner, who is separately responsible for their own regulatory and disclosure obligations — including under their own Australian Credit Licence (or as a credit representative of an ACL holder) — and will issue you with their own privacy policy and credit guide. MPAC does not access or use your credit report or other credit reporting information (as defined under Part IIIA of the Act); where you proceed with a Lending Partner, that Lending Partner may access this information directly, under its own credit reporting policy. MPAC may receive a referral fee or commission from a Lending Partner in connection with a successful referral.

3. What personal information we collect

Depending on the services you engage us for, we may collect the following kinds of personal information about you (and, where applicable, a co-applicant):

• Identity information — title, full name, date of birth, gender
• Contact information — residential and mailing address, email, phone numbers
• Employment information — employer, occupation, employment status, income
• Financial information — income, assets (including property, vehicles, savings, shares and superannuation), liabilities (including mortgages, personal loans, credit cards, BNPL and lease accounts), and living expenses
• Credit history information you choose to provide directly to us — for example, whether you have had a default, judgement or legal proceeding, or difficulty meeting financial commitments
• Investment goals, objectives and property preferences
• Personal insurance information you choose to share with us — for example, current cover types and whether you would like a referral for insurance advice
• Signature and, where relevant, identity verification documents
• Any other information you choose to provide to us

We do not set out to collect “sensitive information” as specifically defined in the Act (for example, health information, racial or ethnic origin, or criminal record). If sensitive information is volunteered by you — for example, in the course of an insurance discussion — we will only collect, use and hold it with your consent, or as otherwise permitted by the Act.

4. How we collect personal information

We generally collect personal information directly from you — for example, through our Fact Find Form, in meetings, or by phone, email or our website. We may also collect personal information from a third party where you have provided your consent or authority for us to do so — for example, from a Lending Partner you have been referred to, or from your accountant or solicitor where you have asked them to liaise with us on your behalf. We may also use publicly available sources for general property and market research purposes.

5. Why we collect, use and disclose your personal information

We collect, hold, use and disclose your personal information for the following primary purposes:

• To provide property investment advisory and consultation services, and to assess your circumstances, objectives and goals
• To prepare property investment reports, analysis and recommendations
• With your consent, to refer you to one or more Lending Partners for the purpose of a preliminary loan assessment
• With your consent, to refer you for personal insurance advice and quotes, where you have indicated you would like this
• To manage and administer our relationship with you, including responding to your enquiries
• For internal record-keeping, quality assurance, and general business administration (including offshore administrative support — see section 8)
• To comply with our legal and regulatory obligations

We will not use or disclose your personal information for a secondary purpose unless: you would reasonably expect us to use or disclose it for that purpose; you have consented; or the use or disclosure is otherwise required or authorised by law.

6. Direct marketing

From time to time, MPAC may use your contact details to send you information about property investment services, market updates, insights or events that we consider may be of interest to you, consistent with APP 7. You can opt out of receiving these communications at any time, free of charge, by contacting us using the details in section 13 or using the unsubscribe option provided in the communication itself. We will not send you direct marketing if you ask us not to.

7. Who we may disclose your personal information to

We may disclose your personal information to:

• Lending Partners, with your consent, for the purpose of a preliminary loan assessment
• Insurance providers, with your consent, where you have asked to be referred for a quote
• Professional advisers who assist us in operating our business — for example, our IT, software and cloud storage providers, and our accountants or auditors — who are subject to confidentiality obligations
• Our administration and support service providers, including those located overseas (see section 8, below)
• Government or regulatory bodies, where required or authorised by law
• Any other person or organisation you direct us to disclose your information to, or otherwise consent to

We do not sell your personal information to third parties.

8. Overseas disclosure of personal information

Before we disclose your personal information to an Offshore Support Provider, we take reasonable steps to ensure that provider handles your information consistently with the APPs — including through contractual confidentiality, security and data-handling obligations, and by limiting the information provided to what is reasonably necessary for the relevant administrative task.

Where you provide consent to this disclosure (including through our client engagement and consent documentation), you acknowledge and agree that:

• Offshore Support Providers may not be subject to the Act or the APPs, and the privacy laws (if any) of the country in which they are located may offer less protection than Australian law;
• once you provide this consent, MPAC is not required to take the steps under APP 8.1 to ensure the overseas recipient complies with the APPs, and MPAC will not be accountable under section 16C of the Act for that Offshore Support Provider’s handling of your information, to the extent this consent applies; and
• you may withdraw this consent at any time by contacting us using the details in section 13, noting that this may affect our ability to provide services to you as efficiently.

9. Data security and storage

We store your personal information electronically (including in secure cloud-based systems and databases) and, where relevant, in physical form. We take reasonable technical and organisational steps to protect your personal information from misuse, interference, loss, and from unauthorised access, modification or disclosure, consistent with APP 11 — including access controls, encryption where appropriate, and staff confidentiality obligations.

We retain your personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, or as required by law, after which it is securely destroyed or de-identified.

If we experience a data breach that is likely to result in serious harm to you, we will comply with our obligations under the Notifiable Data Breaches scheme in Part IIIC of the Act, including notifying the Office of the Australian Information Commissioner (OAIC) and affected individuals as required.

10. Access to, and correction of, your personal information

You may request access to the personal information MPAC holds about you, and request correction of any information you believe is inaccurate, out of date, incomplete, irrelevant or misleading, consistent with APPs 12 and 13. To make a request, contact us using the details in section 13. We will respond within a reasonable period (generally within 30 days) and may need to verify your identity first. In some circumstances permitted under the Act, we may need to refuse a request — if this occurs, we will explain why.

11. Complaints

If you believe MPAC has breached your privacy or the APPs, please contact us first using the details in section 13 so that we can investigate and respond. We will aim to acknowledge your complaint promptly and resolve it within a reasonable timeframe.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: oaic.gov.au
• Phone: 1300 363 992
• Mail: GPO Box 5218, Sydney NSW 2001

12. Changes to this Policy

MPAC may update this Policy from time to time to reflect changes in the law or our business practices. The current version will always be available on this page. This Policy was last updated in August 2026.

13. Contact us

If you have a question, wish to access or correct your information, withdraw a consent, or make a complaint, please contact us:

↑ Back to top