Privacy Policy

MortgageBricks Pty Ltd ("we", "us", "our", "MortgageBricks") is a credit representative of AFG (Australian Credit Licence 389087). We are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information in accordance with the Privacy Act 1988 (Cth) ("Privacy Act") and the Australian Privacy Principles (APPs). This policy applies to all personal information collected through: • Our website at mortgagebricks.com.au • Our mobile application (available on the Apple App Store and Google Play Store) • In-person consultations, telephone, and email communications • Any other services we provide By using our website, mobile app, or services, you consent to the collection and use of your personal information as described in this policy.

We collect personal information that is necessary to provide our mortgage broking services. This includes: Identity Information: • Full legal name, date of birth, and gender • Government-issued identification (driver's licence, passport) • Tax File Number (where required for loan applications) Contact Information: • Residential and mailing address • Phone numbers (mobile and landline) • Email address Financial Information: • Employment details and income (salary, business income, rental income) • Assets (savings, property, vehicles, investments, superannuation) • Liabilities (existing loans, credit cards, HECS/HELP debt) • Living expenses and financial commitments • Credit history and credit score (with your consent) • Bank statements and payslips Property Information: • Property address and type • Purchase price or estimated value • Intended use (owner-occupier or investment) Mobile App Specific Information: • Device information (device type, operating system, unique device identifiers) • App usage data and interaction logs • Push notification preferences • Camera and document upload permissions (only when you choose to upload documents) • Location data (only if you enable this feature) We do not collect sensitive information (such as health, racial, or religious information) unless it is directly relevant to your loan application.

We collect your personal information in the following ways: Directly from you: • When you complete enquiry forms on our website or mobile app • When you submit our Fact Find questionnaire • During telephone, video, or in-person consultations • When you upload documents via our Vault portal or mobile app • When you book a consultation or contact us by email Automatically through our digital services: • Website cookies and analytics tools (e.g. Google Analytics) • Mobile app usage data and crash reports • IP address and browser/device information From third parties (with your consent): • Credit bureaus (e.g. Equifax, Illion) for credit history • Lenders and financial institutions • Real estate agents or conveyancers where relevant • Accountants or financial advisers acting on your behalf

We use your personal information for the following purposes: Primary purposes: • Assessing your borrowing capacity and home loan eligibility • Preparing and submitting loan applications to lenders on your behalf • Comparing loan products across our panel of 40+ lenders • Providing ongoing support throughout the loan process (pre-approval through to settlement) • Complying with our legal, regulatory, and licensing obligations under NCCP Act and ASIC requirements Secondary purposes (with your consent where required): • Sending you information about our services, market updates, and property insights • Improving our website, mobile app, and service delivery • Conducting internal analysis and research • Responding to your enquiries and feedback Mobile App Specific: • Sending you push notifications about your loan status and updates (you can opt out at any time in app settings) • Enabling secure document uploads to your loan file • Providing a seamless digital experience for tracking your application progress

We may share your personal information with the following parties, only to the extent necessary: Lenders and Financial Institutions: • Banks, credit unions, and non-bank lenders on our panel when submitting loan applications Service Providers: • Our aggregator, AFG (Australian Finance Group) • Mortgage insurers (e.g. Helia, QBE LMI) where applicable • Conveyancers, solicitors, and real estate agents involved in your transaction • Document storage and cloud service providers (subject to confidentiality agreements) • IT service providers and software platforms used to manage our business Regulatory Bodies: • ASIC, AFCA, or other regulators where legally required • Law enforcement agencies where required by law We do not sell, rent, or trade your personal information to third parties for marketing purposes. Overseas Disclosure: Some of our service providers may store data on servers located overseas (including the United States and European Union). We take steps to ensure overseas recipients handle your information in accordance with Australian privacy standards.

We take the security of your personal information seriously and implement industry-standard safeguards: • All data is stored using encrypted, secure cloud infrastructure • Our website and mobile app use SSL/TLS encryption for data in transit • Access to client records is restricted to authorised staff only • We use multi-factor authentication for internal systems • Regular security assessments and audits are conducted • Document uploads are stored in secure, access-controlled repositories Mobile App Security: • Biometric authentication (Face ID / Touch ID) is supported where available • Session timeouts are enforced to protect your account • App data is encrypted at rest on your device Despite these measures, no method of electronic transmission or storage is 100% secure. In the event of a data breach that is likely to cause serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.

Our MortgageBricks mobile application is available on the Apple App Store and Google Play Store. The following additional terms apply to your use of our mobile app: Permissions We May Request: • Camera — to photograph and upload loan documents (e.g. payslips, ID) • Photo Library / Files — to select and upload documents from your device • Notifications — to send you loan status updates and reminders • Face ID / Touch ID — for secure app login (biometrics are stored on your device only and never sent to our servers) We will always ask for your explicit permission before accessing any device features. Data Collected by the App: • App usage analytics (pages viewed, features used) — used to improve the app experience • Crash reports and error logs — used to fix bugs and improve stability • Device type and OS version — used for compatibility purposes Third-Party SDKs: Our app may use third-party software development kits (SDKs) for analytics and crash reporting. These providers have their own privacy policies and we encourage you to review them. Children's Privacy: Our mobile app is not intended for use by children under 18 years of age. We do not knowingly collect personal information from minors. App Store / Google Play: Downloading our app through the Apple App Store or Google Play Store is subject to those platforms' own terms and privacy policies. MortgageBricks is not responsible for data collected directly by Apple or Google in relation to your use of their platforms.

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Types of cookies we use: • Essential cookies — required for the website to function (e.g. session management) • Analytics cookies — help us understand how visitors use our site (e.g. Google Analytics) • Preference cookies — remember your settings and preferences You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website. Google Analytics: We use Google Analytics to collect anonymised data about website traffic and user behaviour. This data is aggregated and does not personally identify you. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

Under the Australian Privacy Principles, you have the following rights: Right to Access: You may request access to the personal information we hold about you at any time. We will respond within 30 days. In some cases, a fee may apply to cover the cost of providing access. Right to Correction: If you believe any information we hold about you is inaccurate, incomplete, or outdated, you have the right to request correction. We will update your records promptly. Right to Opt Out of Marketing: You can unsubscribe from our marketing communications at any time by clicking "unsubscribe" in any email we send, or by contacting us directly. You can also disable push notifications in your mobile app settings. Right to Withdraw Consent: Where we rely on your consent to process your personal information, you may withdraw that consent at any time. This will not affect any processing already carried out. To exercise any of these rights, please contact us using the details in Section 11.

We retain your personal information for as long as necessary to: • Provide our services and fulfil the purposes described in this policy • Comply with our legal obligations (ASIC requires mortgage brokers to retain records for 7 years) • Resolve disputes and enforce our agreements When your personal information is no longer required, we will securely destroy or de-identify it.

If you have a concern about how we have handled your personal information, we encourage you to contact us first so we can address the issue directly. Step 1 — Contact Us: Email: ranjit@mortgagebricks.com.au Phone: 0428 033 000 Address: Fairway Drive, Norwest NSW 2153 We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. Step 2 — AFCA: If your complaint relates to a credit matter, you may also contact the Australian Financial Complaints Authority (AFCA): Website: www.afca.org.au | Phone: 1800 931 678 Step 3 — OAIC: If you are not satisfied with our response regarding a privacy matter, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC): Website: www.oaic.gov.au | Phone: 1300 363 992

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will: • Update the "Last Updated" date at the top of this policy • Post a notice on our website and/or mobile app • Notify you by email if the changes significantly affect how we handle your information We encourage you to review this policy periodically. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

For any privacy-related enquiries, requests, or complaints, please contact: MortgageBricks Pty Ltd Fairway Drive, Norwest NSW 2153 Email: ranjit@mortgagebricks.com.au Phone: 0428 033 000 Website: www.mortgagebricks.com.au Credit Representative of AFG — Australian Credit Licence 389087 MFAA Member