Privacy Policy

1. About this policy

This Privacy Policy applies to NBS Home Loans Pty Ltd (ABN 73 617 230 618) trading as NBS Aggregation Group, holder of Australian Credit Licence 580020 (NBS, we, us). We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

It explains how we handle personal information about mortgage and finance brokers who enquire about or apply to join NBS, our members and credit representatives, referees, and visitors to nbsbrokers.com.au.

2. What personal information we collect

Expression of interest form

When you complete the expression of interest form on our Join NBS page, we collect your name, email address, phone number, current aggregator or licence details, the plan you’re interested in and any message you include. Please don’t include passwords, identification numbers, bank or other financial details in this form.

Broker application and onboarding

If you’re invited to apply, we collect the information in our Broker Application and Representative Reference Consent Form through the secure members area. This can include:

• contact, business and entity details (including company, director, partnership and trust details, ABN and ACN)
• Australian Credit Licence and credit representative details, and your current and previous aggregators
• date and place of birth, which are required for credit representative appointment and reference checks
• identification documents, qualifications, AML/CTF training records, professional indemnity insurance, MFAA or FBAA membership and AFCA membership details
• your work history and business referees
• bank account details for commission and other payments
• your answers to our declarations, including about licensing, disciplinary, insolvency and court matters
• reference information from your current and former licensees and aggregators (see section 3)

Some of this, such as information about criminal proceedings or professional memberships, may be sensitive information under the Privacy Act. We only collect it with your consent and where it’s reasonably necessary to assess your application.

Website visitors

When you use our website, we may collect technical information such as your IP address, browser type and pages visited (see section 7).

3. How we collect personal information

We collect most personal information directly from you, through our website forms, the members area, email and phone. With your consent, we also collect information from third parties, including:

• your current and former licensees and mortgage aggregators, under the ASIC reference checking and information sharing protocol in ASIC Corporations and Credit (Reference Checking and Information Sharing Protocol) Instrument 2024/647
• the business referees you nominate
• public registers, such as those kept by ASIC, and industry associations
• providers of probity and background checks

You can contact us without identifying yourself for general enquiries. However, we can’t assess an application or appoint you as a credit representative without identifying you.

4. Why we collect, use and hold it

We use personal information to:

• respond to your expression of interest and enquiries
• assess your application, including reference, probity and identity checks
• appoint you as a credit representative under ACL 580020 and notify ASIC
• provide membership services, including members area access, and pay commissions where applicable
• meet our obligations as a credit licensee, including compliance monitoring, record-keeping and breach reporting
• operate, secure and improve our website
• send you information about NBS. You can opt out of marketing messages at any time.

If you don’t provide the information we ask for, we may not be able to respond to your enquiry or process your application.

5. Who we disclose it to

We may disclose personal information to:

• ASIC and other regulators, including for credit representative appointments
• licensees and mortgage aggregators that request or give references under the ASIC reference checking protocol
• the Australian Financial Complaints Authority (AFCA)
• lenders and other credit providers, for accreditation once loan writing becomes available
• service providers who help us run our business, such as website hosting, CRM, secure document storage, IT and compliance providers
• our professional advisers, such as lawyers, accountants and auditors
• anyone else where you consent or where it’s required or authorised by law

We don’t sell personal information. We aim to keep personal information in Australia. If one of our service providers stores or processes information outside Australia, we take reasonable steps to make sure it is handled consistently with the APPs.

6. The members area and how we protect your information

To protect our brokers’ and their clients’ data, our Broker Application, Representative Reference Consent Form and supporting documents are completed and uploaded only through the secure NBS members area. Access is by invitation and requires a login.

• Documents are encrypted in transit and stored in encrypted form.
• Access is limited to authorised NBS staff who need it for onboarding and compliance.
• Please don’t send identification, bank details or other personal documents by email. Our email address is for questions only.

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. If a data breach is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

7. Cookies and website data

Our website uses cookies, which are small files stored on your device. We use essential cookies to keep the website and members area working, including keeping you signed in, and may use analytics cookies to understand how the site is used. You can block or delete cookies in your browser settings, but some features, such as signing in to the members area, may not work without them.

8. How long we keep it

We keep personal information only for as long as we need it for the purposes above or as required by law. Reference information collected under the ASIC reference checking protocol is stored for 5 years in accordance with the protocol. When we no longer need personal information, we take reasonable steps to destroy or de-identify it.

9. Access and correction

You can ask to access or correct the personal information we hold about you by contacting us (see section 11). We’ll respond within a reasonable time, usually 30 days. If we refuse a request, we’ll explain why in writing and tell you how to complain.

10. Complaints

If you have a concern about how we’ve handled your personal information, please contact us first so we can try to resolve it. We’ll acknowledge your complaint and aim to respond within 30 days.

If you’re not satisfied with our response, you can contact:

11. Contact us

12. Changes to this policy

We may update this policy from time to time. The current version will always be available on this page.