Privacy Policy

Banh & Co. Capital Pty Ltd ("Banh & Co. Capital", "we", "us", "our") is committed to protecting your personal information and complying with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Privacy (Credit Reporting) Code.

This Privacy Policy explains how we collect, hold, use, disclose, and protect personal information, and how you can access or correct that information or make a complaint.

Who We Are

Banh & Co. Capital Pty Ltd (ABN 41 695 694 494) is a mortgage brokerage operating as a credit representative under Connective Credit Services Pty Ltd, Australian Credit Licence 389328. Our credit representative number is 572405.

We are a member of the Finance Brokers Association of Australia (FBAA) and the Australian Financial Complaints Authority (AFCA, Member Number 121275).

The Kinds Of Personal Information We Collect

The personal information we collect depends on the service you are seeking. It typically includes:

• Your name, date of birth, contact details, and residential or business address
• Proof of identity documents, such as driver's licence, passport, or Medicare card
• Employment details, including employer name, income, and length of employment
• Financial information, including assets, liabilities, expenses, bank statements, tax returns, and credit card statements
• Information about your dependents and marital status
• Details of any property you own or intend to purchase
• Information about your existing loans, credit arrangements, and repayment history
• Your credit information, including information collected from credit reporting bodies
• Details about insurance, superannuation, and other financial products
• Information you provide in enquiry forms, emails, phone calls, and meetings

If you apply for a loan, we may also collect sensitive information where required (for example, health information relevant to income protection), but only with your consent.

How We Collect Personal Information

We collect personal information in a number of ways, including:

• Directly from you, when you complete enquiry forms, application forms, or identity verification forms, or when you communicate with us by phone, email, or in person
• From third parties authorised by you, such as your accountant, financial planner, solicitor, or employer
• From lenders, credit providers, and insurance providers
• From credit reporting bodies (see "Credit Reporting Information" below)
• From publicly available sources such as property databases and company registers
• From our website, including forms, cookies, and analytics tools such as Google Analytics

Where it is reasonably practical, we collect personal information directly from you. Where we collect information from a third party, we take reasonable steps to ensure you are aware of that collection.

Why We Collect, Hold, Use, And Disclose Personal Information

We collect, hold, use, and disclose your personal information to:

• Assess your needs, objectives, and financial situation
• Research and recommend suitable loan products
• Submit and manage your loan application with lenders
• Provide ongoing support and service after settlement, including annual reviews and refinancing assistance
• Comply with our legal and regulatory obligations, including the National Consumer Credit Protection Act 2009 (Cth), Anti-Money Laundering and Counter-Terrorism Financing laws, and taxation laws
• Verify your identity
• Manage our internal business operations, including record keeping, staff training, and quality control
• Respond to your enquiries and complaints
• Send you information about products or services that may interest you, where you have consented to receive marketing communications

If you do not provide the personal information we request, we may not be able to assist you with a loan application or other service.

Who We Disclose Personal Information To

We may disclose your personal information to:

• Lenders and credit providers to whom you are applying, or who we believe may be suitable for your circumstances
• Mortgage insurers and other insurers
• Connective Credit Services Pty Ltd, as the holder of our Australian Credit Licence
• Credit reporting bodies, including Equifax, illion, and Experian
• Your nominated professional advisers, such as your accountant, financial planner, or solicitor, with your consent
• Referrers, introducers, or parties who referred you to us, where relevant
• Valuers and property reporting services
• Government and regulatory bodies, including ASIC, the ATO, and AUSTRAC
• External dispute resolution schemes, including AFCA
• Our professional advisers, such as lawyers, auditors, and accountants
• Our service providers who assist us to operate our business, including IT and cloud storage providers
• Any other party, where required or authorised by law or with your consent

Credit Reporting Information

In assessing a loan application on your behalf, we may collect credit information about you from credit reporting bodies. We may also disclose your information to credit reporting bodies where permitted by the Privacy Act.

The credit reporting bodies we commonly deal with are:

• Equifax Australia Information Services and Solutions Pty Limited (www.equifax.com.au)
• illion Australia Pty Ltd (www.illion.com.au)
• Experian Australia Credit Services Pty Ltd (www.experian.com.au)

You have the right to request that a credit reporting body not use or disclose your credit information for a period if you believe you have been, or are likely to be, a victim of fraud. You also have the right to request access to, and correction of, your credit information held by a credit reporting body.

How We Hold And Protect Personal Information

We hold personal information in electronic and, occasionally, paper form. Electronic records are stored in secure cloud-based systems operated by our aggregator, lender portals, and reputable third-party service providers.

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. These steps include:

• Password-protected systems and encrypted file transfer
• Access controls that limit access to personal information on a need-to-know basis
• Secure document storage and disposal
• Staff training on privacy and information security obligations

When personal information is no longer required for the purpose for which it was collected, and we are not required by law to retain it, we take reasonable steps to destroy or de-identify it. We are generally required to retain loan application records for at least seven years.

Overseas Disclosure

Some of our third-party service providers may store or process personal information overseas. Countries where your personal information may be held include the United States and member states of the European Union, where cloud service providers operate data centres. We take reasonable steps to ensure overseas recipients handle your personal information in a way that is consistent with the Australian Privacy Principles.

Cookies, Analytics, And Our Website

Our website, bccapital.com.au, uses cookies and similar technologies to help us understand how visitors use the site and to improve your experience. We use Google Analytics 4 to collect anonymised usage data, including pages viewed, time on site, referring sources, and approximate location derived from IP address.

You can disable cookies in your browser settings, though some features of our website may not function correctly as a result.

Direct Marketing

We may, from time to time, send you information about products, services, or offers that we believe may interest you, where you have provided your contact details for that purpose or where permitted by law. Every marketing communication will contain an option to unsubscribe. You can also opt out at any time by contacting us at the details below.

Accessing And Correcting Your Personal Information

You have the right to request access to the personal information we hold about you, and to request that we correct it if it is inaccurate, out of date, incomplete, irrelevant, or misleading.

To make a request, contact us using the details below. We will respond within a reasonable time, generally within 30 days. We do not charge a fee for making a request, though a reasonable fee may apply to cover the cost of giving access in some circumstances.

If we refuse your request, we will provide written reasons and information about how you can complain.

How To Make A Privacy Complaint

If you believe we have breached the Privacy Act, the Australian Privacy Principles, or the Privacy (Credit Reporting) Code, you can make a complaint by contacting us using the details below. Please provide as much detail as possible so we can investigate promptly.

We will acknowledge your complaint within seven business days and aim to resolve it within 30 days. If we cannot resolve your complaint within 30 days, we will tell you why and when we expect to resolve it.

If you are not satisfied with our response, you can refer your complaint to:

Contact Us

For privacy enquiries, access or correction requests, or complaints, contact:

Updates To This Privacy Policy

We may update this Privacy Policy from time to time. The current version will always be available at bccapital.com.au/privacy-policy, with the "Last Updated" date shown at the top of the page.