Gateway Finance  ·  www.gatewayfinance.com.au  ·  Last updated: 6 August 2026

1. About this policy

Gateway Finance, and its related entities, together “Gateway Finance”, “we”, “us” or “our”) provides credit assistance services. We are finance and mortgage brokers: we help you find, compare, apply for and obtain loans and other credit products from a panel of third-party lenders. We are not a lender and we do not provide credit ourselves.

This policy explains how we collect, hold, use and disclose your personal information, including credit information and credit eligibility information, in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), Part IIIA of the Privacy Act and the Privacy (Credit Reporting) Code. It applies to our websites (including www.gatewayfinance.com.au and related pages), our offices, our phone and email interactions, our social media pages, and our advertising (including lead forms on platforms such as Facebook and Instagram).

By providing your personal information to us, or by using our website and services, you consent to the collection, use, storage and disclosure of your personal information as described in this policy.

2. What information we collect

The information we collect depends on the service you ask us for. It may include:

We generally do not seek sensitive information (such as health information). Where it is reasonably necessary (for example, hardship or insurance-related matters) we will only collect it with your consent.

If you do not provide information

You can deal with us anonymously or using a pseudonym for general enquiries. However, if you do not provide the information we request, we may be unable to provide credit assistance, assess suitable products, or submit applications to lenders on your behalf.

3. How we collect information

4. Why we collect, hold and use your information

5. Credit reporting

In providing credit assistance we may collect credit eligibility information about you from credit reporting bodies (CRBs), with your consent. We use this information to assess your position and the products likely to be suitable for you, and we may disclose it to lenders on our panel as part of your application, as permitted by the Privacy Act.

The CRBs we (or the lenders we submit applications to) may deal with include Equifax (equifax.com.au), Experian (experian.com.au) and illion (illion.com.au). Each CRB has a policy explaining how it manages credit information, available on its website. You have the right to access your credit information held by a CRB, request corrections, request that a CRB not use your information for pre-screening of direct marketing by credit providers, and place a ban period on your file if you believe you have been or may be a victim of fraud.

6. Who we disclose your information to

We disclose personal information only for the purposes described in this policy, and we require third parties who handle information for us to protect it. Depending on your circumstances, we may disclose your information to:

We do not sell your personal information.

7. Direct marketing

We may use your contact details to send you information about products, services, offers, market updates and events that may be relevant to you, by email, SMS, phone, post or through online platforms, where permitted by law (including the Spam Act 2003 (Cth) and the Do Not Call Register Act 2006 (Cth)).

We may also use limited information (such as a hashed version of your email address or phone number) to deliver or measure advertising through platforms such as Meta (Facebook and Instagram) and Google, for example to show our ads to audiences similar to our clients, or to exclude existing clients from advertising. These platforms do not receive your information in readable form and are contractually restricted in how they may use it.

You may opt out of direct marketing at any time by using the unsubscribe link in our emails, replying STOP to an SMS, or contacting us using the details in section 13. Opting out of marketing does not affect communications we are required to send you about your loan or application.

8. Cookies, analytics and advertising technologies

Our website uses cookies and similar technologies, including Google Analytics, Google Tag Manager and the Meta Pixel, to understand how visitors use the site, measure the performance of our advertising, and show relevant ads to people who have visited our site. These tools may collect your IP address, device information and browsing behaviour on our site. You can manage cookies through your browser settings, and manage your ad preferences through Google and Meta’s ad settings. Disabling cookies may affect parts of the website.

If you submit a lead form on Facebook, Instagram or Google, the platform also handles your information under its own privacy policy in addition to ours.

9. Overseas disclosure

Some of the parties we use to operate our business are located, or store information, outside Australia. In particular:

Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles.

10. How we hold and protect your information

We hold information in secure electronic systems (including our CRM, document management and loan lodgement platforms) and, in limited cases, in paper files at our offices. We protect it using measures appropriate to its sensitivity, including access controls and user permissions, password and multi-factor authentication, encryption in transit, staff confidentiality obligations and training, and secure destruction or de-identification when information is no longer required.

We retain information for as long as needed to provide our services and to meet our legal obligations (which for credit assistance records is generally at least seven years). No system is completely secure. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

11. Access and correction

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. We will respond within a reasonable period (usually 30 days). We do not charge for making a request, though we may charge our reasonable costs of providing access in some cases. If we refuse access or correction, we will tell you why in writing and how you may complain about that decision.

12. Complaints

If you have a concern about how we have handled your personal information, please contact us first using the details below. We will acknowledge your complaint and aim to resolve it within 30 days. If you are not satisfied with our response, you may complain to:

13. Contact us

Privacy Officer, Gateway Finance

14. Changes to this policy

We may update this policy from time to time. The current version will always be published at www.gatewayfinance.com.au/privacy-policy with the date of the last update. Significant changes will be notified on our website.