Privacy policy guide

Redrock handles personal and credit-related information to provide credit assistance, administer broker and customer relationships, meet legal obligations and operate its services. This guide explains the main privacy themes in clear language. For the current legal wording, read Redrock’s original privacy policy.

Information that may be collected

Depending on the enquiry or service, information can include identity and contact details, financial position, income, expenses, assets, liabilities, employment, credit history, property details, requirements and objectives. Sensitive information is collected only where it is relevant and permitted. Website interactions may also generate technical information such as IP address, browser data and cookie activity.

Why information is used

Information may be used to respond to enquiries, assess borrowing needs, provide credit assistance, verify circumstances, compare loan options, prepare and progress applications, manage ongoing relationships, meet regulatory duties, prevent fraud and improve service delivery. Redrock should use information only for the purpose for which it was collected or another permitted purpose.

How information is collected

Information may be collected directly through conversations, forms, document uploads and applications. It may also come from authorised representatives, employers, accountants, credit reporting bodies, lenders, valuers, insurers, government registers and other parties involved in an application. The collection method depends on the service and the permissions given.

Disclosure and service providers

To provide credit assistance, information may need to be disclosed to prospective lenders and other parties that assess or support an application. It may also be shared with service providers for identity checks, credit reporting, document processing, technology, storage, legal or compliance services. Any disclosure should be connected to the purpose of the service or required by law.

Credit information

Credit-related information can include identification details, credit applications, repayment history, defaults and information supplied by credit reporting bodies. The handling of this material is subject to additional rules. People may have rights to access or correct credit information and to complain about its handling.

Direct marketing and choices

Redrock may use contact details for marketing where permitted. Recipients can ask to stop receiving marketing communications. Opting out of marketing does not prevent necessary service messages about an active enquiry, application or account.

Access, correction and complaints

Individuals can request access to personal information held about them and ask for inaccurate or incomplete information to be corrected. Redrock may need to verify identity before responding. Privacy concerns should first be raised through Redrock’s complaint process; external options may also be available depending on the issue.

Security and retention

Reasonable safeguards are used to protect information from misuse, interference, loss and unauthorised access, modification or disclosure. No online system is completely risk-free. Information is retained for operational and legal periods, then securely destroyed or de-identified when it is no longer required.

Before sharing documents

• Confirm that you are using the intended Redrock or broker channel.
• Provide only the documents requested for the stated purpose.
• Ask how sensitive material will be transferred if the channel is unclear.
• Report an unexpected request or suspected privacy incident promptly.
• Keep your own copies of documents and consents.

See contact options, website terms, the broker overview and calculator guidance for related information.

This page is a plain-language guide. The original policy and applicable law govern if there is any inconsistency.

How to use this page

Privacy Policy should be read with the wider Redrock operating context. Begin with about Redrock and the broker pathway hub, then follow the links most relevant to the decision or action you are considering.

Information quality and currency

Material facts that affect eligibility, cost, timing, responsibility, privacy or contractual rights should be checked against current Redrock documents and the applicable law. Public guides explain the framework; they do not replace a signed agreement, lender decision or personalised professional advice.

Related pages

• Broker FAQs
• Our approach
• Privacy guide
• Terms of use
• Contact pathways
• Calculators and planning tools

A practical privacy checklist

Privacy decisions begin before information is collected. Identify why each item is needed, who will use it, how it will be transmitted and when it can be deleted or retained. Credit enquiries can involve identity, income, expenses, liabilities, property, employment and other sensitive financial records, so unnecessary collection increases risk.

Before sharing documents

• Confirm the recipient and purpose.
• Use the secure channel specified by Redrock rather than an unrequested email attachment.
• Remove information that is not required for the stated purpose.
• Check that every named person has the necessary notice or consent.
• Keep a record of what was supplied and when.

During a broker application

Prospective brokers may be asked for identity, qualification, experience, business and professional information. Ask which entity collects it, which checks are performed, who receives it and how long records are retained. Use the application upload guide for safe preparation.

During a credit enquiry

A broker should explain the collection and use of information, verify relevant facts and use documents only for authorised purposes. Lenders, verification providers and other service providers may need information to assess or process an application. The applicable privacy notice and consent documents should identify the current arrangements.

Access, correction and concerns

Keep enough detail to identify the record when requesting access or correction. State the information believed to be wrong and provide supporting evidence where appropriate. If information may have been sent to the wrong place, exposed or accessed without authority, contact the relevant Redrock channel promptly and preserve the facts of what occurred.

Data questions for prospective brokers

Ask where client data is stored, which systems and providers can access it, how permissions are managed, what exports are available and what happens during migration or termination. Confirm these matters in the applicable technology, privacy and agreement documents. Review marketing services, aggregation, terms and contact pathways alongside this guide.

This mirror page is a navigation and interpretation aid. Use Redrock’s current original privacy policy for the authoritative wording that applies when information is collected.

Final review before relying on this information

Work through the page as a checklist. Identify the action being considered, the facts already known, the missing evidence and the person or document that can resolve each gap. Give every material item a status such as confirmed, awaiting evidence, assumption or not applicable.

Separate information by authority

Public website guidance explains concepts and navigation. A current Redrock policy or schedule can confirm an operating process. An agreement records formal commercial rights and obligations. A lender determines a credit application. A government authority confirms its current program or rule. A qualified adviser addresses matters within their professional scope. Keeping these roles separate prevents a useful guide from being treated as authority for a decision it cannot make.

Check identity, date and scope

Before supplying information or relying on a statement, confirm which Redrock entity, team, service or pathway it concerns. Record the document date and whether it applies nationally or to a particular state, applicant type or program. Where a page links to another source, check that the destination and publisher match the intended task.

Keep a short decision record

Record the question, answer, source, date and remaining condition. For submissions, also keep the reference and next expected step. For privacy or security matters, record only the details needed to identify what occurred and use the current secure contact route.

Review the connected information

Read about Redrock, broker pathways, broker FAQs, privacy, terms, contact, the calculator hub and application preparation as relevant. Current formal documents and applicable law remain the reference points for material decisions.

When information appears incomplete, note the exact missing fact rather than filling the gap with an assumption. Ask for the current document, responsible team and effective date. This makes later review faster and reduces the chance that details from different services or time periods are combined incorrectly.