EFFECTIVE 9 MAY 2026
Privacy Policy
LAST REVIEWED 9 MAY 2026 · NEXT REVIEW 9 MAY 2027
1. Who we are
This Privacy Policy applies to Brilliant Finance Solutions Pty Ltd (ABN 95 895 154 224, “BFS”, “we”, “us”, “our”), a credit representative (Credit Representative Number 498730) of BLSSA Pty Ltd (ACN 117 651 760, Australian Credit Licence 391237). The principal mortgage broker is Wu Sun (Credit Representative Number 490418, FBAA Member M-333308).
We are bound by the Australian Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the National Consumer Credit Protection Act 2009 (Cth). We collect, use, store, and disclose your personal information only as described in this Policy.
2. What information we collect
Depending on how you interact with us, we may collect:
- Identification information: name, date of birth, residential address, citizenship/visa status
- Contact information: phone, email, postal address
- Financial information: income, employment, expenses, assets, liabilities, credit card limits, existing loans
- Loan-purpose information: property details, purchase intent, refinance reasons, investment goals
- Sensitive financial information: credit history (with your explicit consent at the point of credit check)
- Website analytics: Cloudflare Web Analytics aggregates anonymous data (no cookies, no personal identifiers)
We do not collect:
- Tax File Numbers (we are not a tax agent or accountant)
- Medicare numbers
- Health information beyond what is volunteered for hardship discussions
3. How we collect it
- Directly from you (forms, calculators, phone, email, in person)
- From your authorised representatives (your accountant, conveyancer, financial planner with your explicit authorisation)
- From lenders during the loan application and assessment process (with your explicit consent)
- From credit reporting bodies (Equifax, Illion, Experian) — only with your explicit written consent before any credit check
4. Why we collect it
- To respond to your enquiry
- To assess your loan options and prepare a Strategy Memo
- To submit your loan application to lenders you authorise us to approach
- To meet our obligations under the NCCP Act 2009, including the Best Interests Duty owed by mortgage brokers
- For compliance audit by our licensee (BLSSA) and aggregator (LMG)
- To provide ongoing service (annual loan reviews, refinance audits)
- For fraud prevention and identity verification
5. Who we share it with
We share your personal information with:
- BLSSA Pty Ltd (our licensee) — for compliance oversight and audit
- LMG (Loan Market Group) (our aggregator) — for compliance audit and lender connectivity
- Lenders you specifically authorise us to approach — for loan application and assessment
- Credit reporting bodies — only with your explicit consent at the point of credit enquiry
- Government authorities — where required by law (e.g. ASIC, AFCA, AUSTRAC, ATO)
- Professional service providers — accountants, conveyancers, lawyers acting on your matter, with your authorisation
We do not share your information with:
- Marketing companies
- Data brokers
- Social media platforms (we do not run pixel-based advertising)
- Any third party for any purpose other than those listed above
6. International data transfers
Your information is stored on Australian-hosted infrastructure (Cloudflare, Google Workspace Australia). Some lenders may process applications using systems outside Australia (e.g. group entities in New Zealand, Singapore, or the UK); where this occurs, we disclose the destination and your information remains protected by the Privacy Act and the lender’s equivalent obligations.
7. How we store and protect it
- All website forms, calculators, and chat data transmitted via HTTPS (TLS 1.3)
- Stored in encrypted-at-rest infrastructure (Cloudflare R2, Google Workspace)
- Access restricted to William Sun and (for compliance audit) BLSSA’s named compliance staff
- Retention: 7 years from end of advice relationship, in accordance with NCCP record-keeping obligations
- Hermes (our automated assistant) does not log raw client messages or PII; only anonymised conversation patterns for quality (per §01 §15.8.5)
8. Cookies and tracking
We use only essential cookies on this website:
bfs_lang(language preference, 90 days)bfs_csrf(form security, session)bfs_session(chat continuity, session)- Cloudflare bot management cookies (
cf_clearance,__cf_bm, 30 minutes)
We do not use:
- Google Analytics or other behavioural tracking
- Marketing pixels (Meta, LinkedIn, etc.)
- Third-party advertising
For the full cookie inventory, see §02 §10.1.
9. Your rights under the Australian Privacy Principles
You have the right to:
- Access the personal information we hold about you (APP 12)
- Correct any information that is inaccurate, out-of-date, incomplete, irrelevant, or misleading (APP 13)
- Request deletion of your information, subject to our legal record-keeping obligation (7 years for files where a loan was arranged, per the NCCP Act)
- Opt out of marketing at any time
- Withdraw consent for credit checks before they are performed
- Make a complaint about how we handle your information (see Complaints page)
To exercise these rights, email [email protected] or phone +61 426 263 391.
10. Complaints
If you believe we have breached your privacy:
- Contact us first — we aim to acknowledge within 1 business day and respond within 30 calendar days (per ASIC Regulatory Guide 271).
-
If you are not satisfied, escalate to the Office of the Australian Information Commissioner (OAIC):
- Phone: 1300 363 992
- Online: oaic.gov.au
-
You can also escalate to the Australian Financial Complaints Authority (AFCA):
- Phone: 1800 931 678
- Email: [email protected]
Full complaints process on our Complaints page.
11. Updates to this Policy
We review this Policy at least annually (per §01 §17.5 Annual Compliance Data Refresh) and whenever there is a material change to our practices or to applicable law. The “Effective date” and “Last reviewed” at the top of this page reflect the current version. Significant changes will be notified to existing clients by email.
12. Contact
Brilliant Finance Solutions Pty Ltd
ABN 95 895 154 224
Phone: +61 426 263 391
Email: [email protected]
Sydney + Australia-wide via remote