Privacy Policy

1 INTRODUCTION

Last updated: 15 August 2025

Promptli Pty Ltd (“Promptli”, “we”, “us”, or “our”) respects your privacy and is committed to protecting personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and other applicable laws.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information. By providing personal information to us, you consent to the handling of your information in accordance with this Privacy Policy.

We may update this Privacy Policy from time to time to reflect changes in our operations, laws, or regulatory guidance. Updates will be posted on our website, and we encourage you to review this Policy regularly.

2 TYPES OF PERSONAL INFORMATION WE COLLECT

We may collect:

• Name, mailing/street address, email address, telephone number, date of birth
• Business, personal, and financial information relevant to credit assessment and loan processing
• Payment and billing information
• Information provided in forms, surveys, or communications with us
• Device and browser details, IP address, geolocation, website usage analytics
• Information about third parties relevant to your application or service request

3 HOW WE COLLECT PERSONAL INFORMATION

We collect personal information directly from you or from third parties, including when you:

• Engage a broker who uses Promptli’s services
• Submit a loan application or related documents
• Communicate with us via phone, email, SMS, Slack, or other digital platforms
• Interact with our website, forms, or marketing campaigns
• Use services integrated with our systems (e.g., Broker CRM, Apply Online)

We may also use cookies, analytics tools (including Google Analytics), and similar technologies to improve our services. You can disable cookies in your browser settings, though some features may not work as intended.

4 HOW WE USE YOUR PERSONAL INFORMATION

We use your personal information to:

• Provide our services, including credit assessment and loan application processing
• Communicate with you and/or your broker
• Store, organise, and manage deal-related information
• Comply with legal and regulatory obligations
• Improve service delivery, security, and customer experience
• Send you administrative updates and notifications
• Conduct internal reporting, audits, and quality assurance

We will not sell your personal information.

5 DISCLOSURE OF PERSONAL INFORMATION

We may share personal information with:

• Brokers and their authorised representatives
• Service providers and contractors (including secure cloud collaboration and storage platforms)
• Credit assessment and loan processing platforms
• IT security, analytics, and infrastructure providers

Overseas Transfers

Your personal information may be stored or processed in:

• Australia (primary operations)
• Philippines (offshore operational support)
• United States/EU (where certain cloud infrastructure is hosted)

We take reasonable steps to ensure overseas recipients handle your information in accordance with the APPs, including through contractual obligations and secure transmission protocols.

We may de-identify or aggregate personal information for research, analytics, benchmarking, and to improve our services, and may use and disclose such information in that form without further notice to you.

6 DATA SECURITY

Promptli applies a layered security model aligned with the NIST Cybersecurity Framework 2.0. Measures include:

• Encryption of data in transit and at rest
• Multi-factor authentication for all staff accounts
• Role-based access control and activity logging
• Regular security audits and vulnerability testing
• Staff training in data protection and privacy compliance

7 YOUR RIGHTS

You may request to:

• Access the personal information we hold about you
• Correct inaccurate, out-of-date, or incomplete information
• Request deletion of your personal information where permitted by law
• Withdraw consent for certain types of processing
• Lodge a complaint about our handling of your information

Requests can be made by contacting us (see Section 9). We may need to verify your identity before processing your request.

8 DATA BREACHES

If we become aware of a data breach likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches (NDB) Scheme.

If we become aware of a data breach involving your information, or you become aware of a breach involving information you have provided to us, we will cooperate with you to investigate, manage, and where required, notify affected parties and regulators.

9 CONTACT US

For questions, requests, or complaints about this Privacy Policy:

Email: support@promptli.com.au

We aim to respond to all queries within a reasonable timeframe.

Our privacy policy was last updated on 15 August 2025.