Privacy Policy
Effective Date: 13/08/2025
At VestaFi (Maison Brown Financial Pty Ltd), we take your privacy seriously. Whether you’re applying for a home loan, exploring your options, or using our client tools, this Privacy Policy outlines how we collect, use, store and protect your personal information. It complies with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and all applicable credit reporting laws.
This policy also explains how we manage your credit-related information in our role as a Credit Representative (No. 500463) under Australian Credit Licence 384704 held by Finsure Finance and Insurance Pty Ltd.
Who We Are
Business name: Maison Brown Financial Pty Ltd Trading as: VestaFi
ABN: 61 687 946 934
Credit Representative Number: 500463
Licensee: Finsure Finance and Insurance Pty Ltd (ABN 72 068 153 926 | ACL 384704)
Head Office: Apt 508, 5 Birdwood Ave, Lane Cove NSW 2066
Email: hello@vestafi.com.au
Phone: 0416 936 099
Website: www.vestafi.com.au
What Information We Collect
We collect personal and credit information required to provide lending and financial services. This may include:
-
Your name, contact details, date of birth, and identification documents
-
Loan application details and credit-related data from lenders or credit reporting bodies
-
Any details submitted via pre-assessment or enquiry forms (via Fillout)
-
Information you provide when you use our mobile app, calculators, or client portal
We do not collect or store tax file numbers, payslips, or trust deeds unless legally required.
How We Collect Information
We may collect information:
-
Directly from you (forms, calls, meetings, email, or online tools)
-
Through smart form providers such as Fillout
-
From your interactions with our client portal or mobile app
-
From our credit platform providers (Mercury, Trail, BrokerEngine)
-
From our aggregator (Finsure) or lender partners
-
From service providers you authorise, such as conveyancers or valuers
We do not currently use cookies, web beacons, analytics tools or ad pixels to collect tracking data.
Why We Collect Your Information
We collect and use your information to:
Provide mortgage broking and credit assistance
Submit loan applications on your behalf
Verify your identity (AML/CTF obligations)
Provide access to our tools, calculators, or mobile app
Communicate with you regarding your loan, updates, or reminders
Comply with legal or regulatory obligations
Support initiatives like FundEd (our donation-linked loan program)
We may also send you relevant updates, newsletters, or product offers. You can opt out at any time.
Storage and Security
We store your personal and credit information securely through platforms including Microsoft 365, Google Drive, Salesforce, and Infynity. All systems are protected by secure logins and data encryption.
Where we use third-party service providers, we require those providers to handle your data securely and in line with applicable privacy standards. Some data may be stored on servers located outside Australia.
Retention
We retain your information for a minimum of seven (7) years after the completion of our services, in accordance with our legal and regulatory obligations.
Marketing and Communication
We may contact you about relevant services, refinancing opportunities, or industry updates via email or phone. You can opt out of direct marketing at any time by contacting us or using the unsubscribe link in our emails.
We do not sell your personal information. We may share it with partners or service providers where relevant to your enquiry or loan strategy, with your consent.
Disclosure of Personal and Credit Information
Your data may be shared with:
Lenders and mortgage insurers to support your application
Our aggregator and associated credit platforms
Credit reporting bodies
Service providers such as identity verification, valuation or document storage firms
Government or regulatory agencies (e.g. ASIC, ATO) as required
Referral partners (with your consent)
Our school-donation partner FundEd if you choose to participate
Some data may be stored in cloud platforms accessible from overseas. While specific server locations may vary, all providers are contractually required to maintain appropriate safeguards.
Access and Correction
You have the right to access and correct the information we hold about you. To request this, contact us by email or phone. We aim to respond within 30 days.
If we cannot provide access or correct your information, we will explain why in writing and let you know your options to escalate.
Complaints and Dispute Resolution
If you have a concern or complaint about how your personal or credit information has been handled, please contact:
Privacy Contact: Ben Brown
Email: hello@vestafi.com.au
Phone: 0416 936 099
If you are unsatisfied with our response, you can contact:
Office of the Australian Information Commissioner (OAIC)
Website: www.oaic.gov.au
Phone: 1300 363 992
Mail: GPO Box 5218, Sydney NSW 2001
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The most recent version will always be available at www.vestafi.com.au.
Last updated: 13/08/2025