Privacy Policy | Duty First Mortgages, Veteran-Owned Mortgage Broker 
Duty First Mortgages 0423 342 639

Legal

Privacy Policy

How we collect, use, store and disclose your personal information and credit information, explained in plain English.

Last updated 17-07-2026

Duty First Mortgages Pty Ltd takes your privacy seriously. As a mortgage broking business we handle some of the most sensitive information a person has, so protecting it is part of the job, not an afterthought. This policy explains what we collect, why we collect it, who we share it with and the choices you have. It is our privacy policy for the purposes of Australian Privacy Principle 1, and we manage personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles and the Privacy (Credit Reporting) Code.

1. Who we are

In this policy, "we", "us" and "our" mean Duty First Mortgages Pty Ltd ABN 47 682 598 803, Credit Representative Number 564786, authorised under Australian Credit Licence 486112 held by Purple Circle Financial Services Pty Ltd. We are a veteran-owned mortgage broking business, Queensland-based, lending Australia-wide.

You can contact us about anything in this policy:

2. The kinds of information we collect

The information we collect depends on how you deal with us. If you simply browse the website we collect very little (see the analytics section below). If you ask us to help you with a loan, we need a fuller picture. The kinds of personal information we may collect and hold include:

  • Identity information, such as your name, date of birth, and identity documents like a driver licence, passport or Medicare card used for identity verification.
  • Contact information, such as your address, email address and phone number.
  • Information about your financial situation, such as your employment and income, expenses, assets, liabilities, dependants, and your objectives and requirements for a loan. This can include payslips, tax documents, bank statements and superannuation details.
  • Credit information and credit eligibility information, such as your repayment history, existing loans and credit applications, defaults (if any), and information derived from credit reports provided by a credit reporting body.
  • Government identifiers where the law allows or requires it, for example where a lender requires them for identity verification. We do not use them as our own record identifiers.

We only collect sensitive information (for example, health information relevant to a hardship or insurance conversation) with your consent, and only where it is reasonably necessary.

3. How we collect it

Wherever it is reasonable and practicable, we collect information directly from you. That happens when you:

  • fill in a form on this website, such as the contact form or the mortgage health check;
  • email us, call us, message us on WhatsApp or social media, or meet with us;
  • give us documents as part of a loan application, or complete a fact find or needs analysis with us.

With your consent, we may also collect information about you from third parties where it is needed to provide our services, including from lenders, credit reporting bodies, your employer or accountant, income and expense verification services, property valuation providers, and our aggregator, Purple Circle Financial Services.

Our calculators do not collect your information. The calculators on this website run entirely in your web browser. The figures you type in, and the results, are not stored by us and are not transmitted to our server or to any third party. If you close the page, they are gone.

Our website uses privacy-focused, cookieless analytics, described in section 11 below.

4. Why we collect it

We collect, hold and use your personal information so we can:

  • respond to your enquiries and stay in touch about your loan or our services;
  • provide credit assistance: understanding your situation, assessing which loan options may be suitable and not unsuitable for you, and making recommendations;
  • prepare and submit loan applications to lenders on your behalf, and manage those applications through to settlement and beyond;
  • verify your identity, as required by law;
  • meet our legal and compliance obligations, including under the National Consumer Credit Protection Act 2009 (Cth), anti-money laundering laws and our aggregator and licensee requirements;
  • send you marketing we think is genuinely useful, but only where you have agreed (see section 10).

If you do not provide the information we ask for, we may not be able to provide credit assistance or submit an application for you.

5. Who we disclose it to

We do not sell your personal information to anyone. We usually disclose personal information to:

  • Lenders and their agents, so they can assess and process your loan application, including lenders' mortgage insurers and valuers where relevant;
  • Purple Circle Financial Services Pty Ltd, our aggregator and the holder of the Australian Credit Licence we operate under, for loan submission, compliance and audit purposes;
  • Credit reporting bodies such as Equifax, with your consent, to obtain your credit report as part of assessing your application (see section 6);
  • Service providers who support our business, such as our customer relationship management system, serviceability and loan research tools, income and expense verification services, identity verification providers, document signing platforms, and IT and email providers;
  • Professional advisers such as your solicitor, conveyancer or accountant, where you ask us to work with them;
  • Regulators, dispute resolution bodies and law enforcement, where the law requires or permits it.

Our service providers are only permitted to use your information for the purpose we engaged them for.

6. Credit reporting

This section covers "credit information" and "credit eligibility information" and applies alongside the Privacy (Credit Reporting) Code 2025.

As part of helping you with a loan, and with your consent, we may collect credit eligibility information about you from a credit reporting body and use it to assess which loan options may be suitable for you. Lenders you apply to may also exchange information about you with credit reporting bodies, including repayment history information, under their own credit reporting policies.

The credit reporting body we usually deal with is:

Equifax Australia Information Services and Solutions Pty Ltd
Website: www.equifax.com.au
Phone: 13 83 32

Equifax publishes its own policy explaining how it manages credit-related personal information, available on its website.

You have important rights in relation to your credit information:

  • Access. You can request a copy of the credit information we hold about you, and you can obtain a free copy of your credit report from a credit reporting body (currently once every 3 months, or after a correction or a refused application).
  • Correction. If you believe any credit information we or a credit reporting body holds about you is inaccurate, out of date, incomplete, irrelevant or misleading, you can ask for it to be corrected. There is no charge for making a correction request.
  • No pre-screening. You can ask a credit reporting body not to use your credit reporting information for "pre-screening", which is the pre-selection of consumers for direct marketing by credit providers.
  • Ban periods for fraud. If you believe on reasonable grounds that you have been, or are likely to be, a victim of fraud, including identity fraud, you can ask a credit reporting body to place a ban period on your credit reporting information. During a ban period the body must not use or disclose that information without your consent, and bans can be extended.
  • Complaints. You can complain to us, to the credit reporting body, or to the external bodies listed in section 13 about how your credit information has been handled.

7. Overseas disclosure

We do not routinely disclose personal information to overseas recipients, and we will not send your information overseas as part of ordinary loan processing. Some of the technology platforms we use, such as email, messaging and cloud storage services, may store data on servers located outside Australia. Where that is the case, we take reasonable steps to ensure your information is handled consistently with the Australian Privacy Principles.

8. How we hold and protect it

Your information is held in secure, access-controlled electronic systems, including our customer relationship management platform and encrypted cloud storage. We use measures such as multi-factor authentication, encryption in transit, and access limited to the people who need it. Paper documents, where they exist, are stored securely and digitised where practical.

We keep personal information for as long as we need it to provide our services and to meet our legal record-keeping obligations, which for credit assistance records is generally 7 years. When information is no longer needed, we take reasonable steps to destroy or de-identify it.

If a data breach occurs that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner in line with the Notifiable Data Breaches scheme.

9. Access and correction

You can ask for access to the personal information we hold about you at any time by contacting us using the details in section 1. We will respond within a reasonable time, usually within 30 days. There is no charge for making a request, and we will not charge you for access to your credit eligibility information. In limited circumstances the law allows us to refuse access, and if that happens we will tell you why in writing.

If any information we hold about you is wrong, please tell us and we will take reasonable steps to correct it. Keeping your details accurate helps your loan application too.

10. Marketing and how to opt out

From time to time we may send you information about loan reviews, rate movements in general terms, or services we think are relevant to you, but only where you have consented or would reasonably expect it, consistent with the Spam Act 2003 (Cth). Every marketing email we send includes a working unsubscribe link, and you can opt out of all marketing at any time by using that link or contacting us at jason@dfmortgages.com.au. Opting out of marketing never affects the service you receive on your loan.

We do not use or disclose your credit eligibility information for direct marketing. That is prohibited, and we would not do it anyway.

11. Website analytics and cookies

This website uses Cloudflare Web Analytics, a privacy-first measurement tool. It is cookieless: it does not set cookies, does not fingerprint your device and does not track you across other websites. It gives us only aggregated information such as how many people visited a page and which country they came from. We do not run advertising trackers or social media pixels on this site.

12. Automated decision making

We do not use computer programs to make decisions that significantly affect you without human involvement. Every recommendation and credit assistance decision at Duty First Mortgages is made by a person, your broker, based on your circumstances. If we ever introduce automated decision making that uses your personal information, we will update this policy to explain what is decided that way and how it works.

13. Complaints

If you have a concern about how we have handled your personal information or credit information, please tell us first so we can put it right:

We will acknowledge your complaint promptly, look into it properly and respond to you, usually within 30 days. If you are not satisfied with our response, you can take your complaint further, at no cost to you:

  • Australian Financial Complaints Authority (AFCA), the external dispute resolution scheme for credit and financial services complaints, including credit reporting complaints. Website: afca.org.au. Phone: 1800 931 678 (free call). Post: GPO Box 3, Melbourne VIC 3001.
  • Office of the Australian Information Commissioner (OAIC) for privacy complaints. Website: oaic.gov.au. Phone: 1300 363 992.

More detail about our complaints process is on our complaints page.

14. Changes to this policy

We review this policy regularly and may update it from time to time, for example when the law or our systems change. The current version will always be published on this page with its "last updated" date. This policy was last updated on 17-07-2026.