Privacy Policy

Evcorp Commercial Pty Ltd (Evcorp, we, us, our; ACL 437989) is bound by the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Privacy (Credit Reporting) Code (CR Code). This Policy explains how we collect, hold, use and disclose your personal and credit information, and how you can access or correct it.

1. What information we collect

The kinds of personal information we collect depend on your dealings with us. Typically we collect:

• Identity information — your name, date of birth, residential and business addresses, country of citizenship, and government-issued identification (driver licence, passport) where required for AML/CTF or lender due diligence.
• Contact information — email addresses, telephone numbers, and the contact details of any directors, guarantors, advisors or other related parties to a transaction.
• Financial information — assets, liabilities, income, expenses, tax returns, accountant-prepared statements, bank statements, rental schedules, and corporate financials.
• Transaction information — the nature of the property or project, sponsor experience, proposed capital structure, target lenders and pricing, and supporting documents (contracts of sale, valuations, planning approvals, builder contracts, pre-sales).
• Credit information — credit reports, credit history, repayment history, defaults, court proceedings and other credit-related information regulated under Part IIIA of the Privacy Act.
• Technical information — IP address, device, browser, referring URL, and pages visited on our Site. See our Cookie Policy.

We do not generally collect sensitive information (within the meaning of the Privacy Act). Where we need to (for example, health information relevant to a serviceability assessment) we will obtain your consent first.

2. How we collect it

We collect information directly from you wherever practical — through enquiry forms, in person, by phone, by email, through video calls, or via secure document portals. We may also collect information from:

• your authorised representatives (accountants, lawyers, financial planners, brokers);
• lenders and prospective lenders;
• credit reporting bodies (CRBs) such as Equifax, illion and Experian;
• valuers, quantity surveyors, builders, real-estate agents and other transaction parties;
• public registers (ASIC, ABN Lookup, PPSR, land titles offices); and
• publicly available sources, including media reports and professional networking sites.

If we collect personal information about you from a third party, we will, where reasonable, take steps to notify you that we have done so.

3. Why we collect it

We collect, hold, use and disclose personal information to:

• assess and structure your finance application and prepare it for submission to lenders;
• verify your identity and meet our obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006;
• manage our ongoing relationship with you, including post-settlement administration, refinances and variations;
• respond to enquiries and provide market information you have requested;
• comply with our obligations under the National Consumer Credit Protection Act 2009, the Privacy Act, and other applicable laws;
• perform internal business functions such as accounting, audit, risk management and dispute resolution.

If you do not provide the information we ask for, we may not be able to assess your application or provide our services to you.

4. How we use and disclose it

We disclose personal information to:

• Lenders on our panel (banks, non-bank lenders, private credit funds, family offices and other capital providers) for the purpose of assessing your application;
• Service providers who assist us in our business, including IT and cloud-hosting providers, document-management providers, professional advisors, mailing houses and marketing platforms (each engaged under confidentiality obligations);
• Credit reporting bodies, in the manner described in section 5;
• Related entities and referral partners, where relevant to the transaction and with your consent;
• Regulators and authorities where we are required by law to do so (for example AUSTRAC, ASIC, ATO, courts, AFCA).

5. Credit reporting

Where we obtain a credit report about you, we deal with CRBs in accordance with Part IIIA of the Privacy Act and the CR Code. Information we may receive from, or disclose to, CRBs includes identity information, credit liability information, repayment history, default information, court proceedings information and personal insolvency information.

Each CRB has its own credit reporting policy explaining how it manages credit reporting information, including how you can request a free copy of your credit report, dispute information on your file, and request that a CRB not use your information for direct marketing pre-screening or in cases of fraud:

• Equifax — equifax.com.au/privacy
• illion — illion.com.au/privacy-policy
• Experian — experian.com.au/legal/privacy

6. Direct marketing

From time to time we may use your contact details to send you market commentary, research notes, indicative rates updates, event invitations or information about new services. You can opt out at any time by replying with "unsubscribe" to any marketing email or by emailing info@evcorp.com.au. We will not use credit reporting information for our own direct-marketing purposes.

7. Overseas disclosure

Some of our cloud-based service providers store data in data centres located outside Australia (for example in the United States, the European Union, the United Kingdom or Singapore). Where personal information is disclosed to an overseas recipient, we take reasonable steps to ensure that the recipient handles it consistently with the APPs.

8. Storage and security

We hold personal information in a combination of secure cloud-hosted systems and access-controlled physical files. We use commercially reasonable safeguards — including encryption in transit, multi-factor authentication, role-based access controls, and periodic staff training — to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. Where personal information is no longer needed for any purpose for which it may lawfully be used or disclosed, and we are not otherwise required by law to retain it, we will destroy or de-identify it.

9. Access and correction

You may request access to the personal information we hold about you, or ask us to correct it, by contacting us at info@evcorp.com.au. We will respond within a reasonable period (and within 30 days for credit information requests). We do not charge a fee for the request itself; however, a reasonable fee may apply for the work involved in retrieving and providing the information.

10. Complaints

If you believe we have not complied with our obligations under the Privacy Act, the APPs or the CR Code, please contact us first by emailing info@evcorp.com.au with the heading "Privacy Complaint". We will acknowledge your complaint within five business days and aim to provide a written response within 30 days.

If you are not satisfied with our response, you may refer your complaint to:

• Australian Financial Complaints Authority (AFCA) — afca.org.au · 1800 931 678 · GPO Box 3, Melbourne VIC 3001
• Office of the Australian Information Commissioner (OAIC) — oaic.gov.au · 1300 363 992

11. Changes to this policy

We may update this Policy from time to time to reflect changes in our practices, the law or our service offerings. The current version is the one published on this page at the date set out at the top.

12. Contact us

For any privacy-related question or request, please contact our Privacy Officer:

• Email: info@evcorp.com.au (subject line: "Privacy")
• Post: The Privacy Officer, Evcorp Commercial Pty Ltd, Melbourne, Victoria, Australia