Privacy Policy
Last updated: 2 October 2026
This Privacy Policy is issued by JCF Capital Pty Ltd ABN 51 657 626 947 trading as Settled With Joe, Credit Representative Number 496121 of YBR Aggregation Pty Ltd, Australian Credit Licence 390261 (“Settled With Joe”, “we”, “us”, “our”).
We are a finance broker and mortgage broker. We arrange home loans, personal loans, car and equipment finance, and commercial and business loans, and we introduce clients to private lenders. We are based in Sydney and work with clients across Australia. We do not lend money, and we do not arrange or advise on insurance.
We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy explains what personal information we collect, how we collect and hold it, why we collect it, who we share it with, whether it goes overseas, and how you can access it, correct it or make a complaint.
1. WHAT PERSONAL INFORMATION WE COLLECT
Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable. Depending on what you ask us to do, we may collect:
- identity information, such as your name, date of birth, current and previous addresses, and identification documents such as a driver’s licence or passport;
- contact details, such as your phone number, email address and postal address;
- financial information, such as your income, expenses, assets, liabilities, bank statements, tax returns and business financial statements;
- employment and business information, such as your occupation, employer, business name, ABN and trading history;
- information about the finance you want, such as the purpose, amount and timeframe, and the property or asset involved;
- credit-related information, explained in section 6;
- your tax file number, where it appears on documents you give us, explained in section 7;
- information about other people you tell us about, such as co-borrowers, guarantors or company directors (please let them know you have shared it and refer them to this policy); and
- website information, explained in section 10.
2. SENSITIVE INFORMATION
Sensitive information includes health information and information about racial or ethnic origin or criminal record. We do not ask for it as a routine part of our service. Some finance requests involve it, for example when a loan is for medical, dental, fertility or funeral costs, or when you tell us about hardship caused by illness.
We only collect sensitive information with your consent and where it is reasonably necessary to arrange the finance you have asked for, or where the law requires or authorises it. Please only include health details in our website enquiry form if they are needed to explain your request.
3. HOW WE COLLECT PERSONAL INFORMATION
We collect most personal information directly from you, for example when you complete the enquiry form on our website, call, email or message us, meet with us, or give us documents to support a loan application.
Our website enquiry form. The form asks for the type of finance, the amount, a description of your situation, your timeframe, and your name, email, phone number and company. A short notice on the form links to this policy. When you submit the form, your details are sent to us by email through a form service and saved in our client records system.
Partly completed forms. If you reach the last step of the form (your contact details) and then leave the page without submitting it, the details you have entered in the form at that point are sent to our website server so we can follow up your enquiry. This can include your name, email, phone number, company, the type of finance, the amount, your description and your timeframe, together with the address of the page you were on. These details are kept in the server logs of our website hosting provider, Vercel, which are hosted in the United States.
With your authority, or where the law allows, we may also collect information about you from:
- lenders you hold credit with or have applied to, including private lenders;
- YBR Aggregation Pty Ltd, our licensee and aggregator;
- co-applicants, guarantors and your employer;
- your accountant, solicitor, conveyancer, real estate agent or other adviser;
- valuers and other parties involved in assessing a loan;
- identity verification service providers; and
- public sources such as the ASIC, ABN and land title registers.
4. WHY WE COLLECT, USE AND DISCLOSE PERSONAL INFORMATION
We collect, hold, use and disclose personal information to:
- understand your requirements, objectives and financial situation;
- identify finance options and provide credit assistance;
- prepare loan applications and submit them to lenders on your behalf;
- verify your identity, as lenders require;
- meet our obligations under the National Consumer Credit Protection Act 2009 (Cth), including responsible lending conduct and the best interests duty, and keep the records the law requires;
- communicate with you about your enquiry, application or loan;
- handle complaints and disputes; and
- run and improve our business and website.
For consumer credit, the National Consumer Credit Protection Act 2009 (Cth) requires us to make reasonable inquiries about your requirements, objectives and financial situation before we provide credit assistance.
5. WHO WE DISCLOSE PERSONAL INFORMATION TO
We may disclose personal information to:
- lenders you apply to, or that we approach on your behalf, including banks, non-bank lenders and private lenders;
- YBR Aggregation Pty Ltd, our licensee and aggregator, which oversees our credit activities and processes applications through its systems;
- valuers, solicitors, conveyancers, accountants and other parties involved in your application, with your authority;
- co-applicants and guarantors, where this is needed for the application;
- identity verification service providers;
- our service providers, including those listed in section 11;
- the Australian Financial Complaints Authority (AFCA), if you take a complaint to it; and
- government agencies, regulators, courts and law enforcement bodies where the law requires or authorises it.
We do not sell personal information.
6. CREDIT-RELATED INFORMATION
When we help you apply for credit, we collect information from you about your existing loans and credit cards, your repayment history and any defaults, court judgments or insolvency, so we can work out which lenders and products may suit you. We include this information in the applications we submit to lenders and share it with YBR.
We do not obtain credit reports from credit reporting bodies, and we do not give information to credit reporting bodies. A lender you apply to may obtain your credit report from a credit reporting body with your consent. The lender’s own privacy and credit reporting policies explain how it handles that information.
7. TAX FILE NUMBERS
We do not ask you to tell us your tax file number (TFN). Lenders often require documents such as tax returns and ATO notices of assessment, which show your TFN. No law requires you to give us your TFN, and you can remove or blank it out on documents before you send them to us. If a document you give us shows your TFN, we use that document only for your loan application.
We handle TFN information only as the Privacy (Tax File Number) Rule 2015 allows. We take reasonable steps to keep it secure, and we securely destroy or de-identify it when it is no longer needed.
8. IF YOU DO NOT GIVE US INFORMATION
You do not have to give us personal information. If you do not, we may not be able to provide credit assistance, work out which products may suit you, or submit an application for you. You can make a general enquiry without giving your name, but we will need to identify you before we can provide credit assistance.
9. MARKETING
We do not send marketing emails or SMS messages without your consent. If you agree to receive marketing from us, each message will identify us and include a way to unsubscribe, and we will act on an unsubscribe request within 5 business days at no charge.
You can ask us at any time not to use your information for marketing, and ask us where we obtained your information, by calling 0401 222 353 or emailing joseph@settledwithjoe.com.au.
10. OUR WEBSITE, COOKIES AND ANALYTICS
Google Analytics. We use Google Analytics, provided by Google, to understand how visitors use our website. It sets cookies and records the pages you view (including the full page address), your device and browser type, your approximate location, the website that referred you, and actions such as moving through or submitting the enquiry form, or tapping our phone number or email address. After you submit the enquiry form, the address of our thank-you page includes your first name, so Google Analytics may record your first name. Google processes this information on servers outside Australia, including in the United States. You can block cookies in your browser settings, or install Google’s opt-out browser add-on at tools.google.com/dlpage/gaoptout.
Reviews and Instagram widgets. Our Google reviews and Instagram feed are displayed using Elfsight, a third-party widget service. When a page with one of these widgets loads, your browser connects to Elfsight, which receives technical information such as your IP address, browser type and the page you are on, and may set cookies. Elfsight is based in Armenia and uses cloud hosting outside Australia.
Campaign links. If you arrive through a link that contains campaign tags (for example “utm_source”), the page address, including those tags, is recorded with any enquiry you submit so we know how you found us.
Hosting. Our website is hosted by Vercel, whose servers process standard request information, such as IP addresses, to deliver the website.
We do not use advertising or retargeting cookies.
11. STORAGE, SECURITY AND OVERSEAS DISCLOSURE
We hold personal information in electronic systems run by us and our service providers, and in paper files where needed. We take reasonable steps to protect it from misuse, interference, loss and unauthorised access, modification or disclosure, including encrypted connections, access controls and multi-factor authentication on our client records system.
Some of our service providers store or process personal information outside Australia, so it is likely that personal information will be disclosed overseas. Our main service providers are:
- Web3Forms (form-to-email service), which handles website enquiry details: United States;
- Google Analytics, which handles website usage information: United States and other countries where Google operates;
- Elfsight (website widgets), which handles technical information from page visits: Armenia and its cloud hosting locations;
- Vercel (website hosting), which handles website requests, server logs and partly completed form details: our website functions run in Sydney, and server logs are hosted in the United States;
- Supabase (client records system), which holds enquiries and notes: Sydney, Australia; and
- Microsoft 365, which provides our email.
The countries where overseas recipients are likely to be located are the United States and Armenia, and other countries where these providers operate. Before we disclose personal information to an overseas recipient, we take reasonable steps to ensure it handles the information consistently with the Australian Privacy Principles.
We keep personal information for as long as we need it for the purposes in this policy and to meet our legal record-keeping obligations. When we no longer need it, we take reasonable steps to destroy it or de-identify it.
12. AUTOMATED DECISION-MAKING
We do not use computer programs to make decisions about individuals that could reasonably be expected to significantly affect their rights or interests, or to do things substantially and directly related to making such decisions. Decisions about which finance options to put to you, and whether to submit an application, are made by people. Lenders you apply to may use automated systems in their own credit assessment, and their privacy policies explain this.
13. ACCESSING AND CORRECTING YOUR INFORMATION
You can ask for access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Contact us using the details in section 16. We will respond within 30 days.
There is no charge for making a request or for correcting your information. If giving you access involves significant cost, we may charge a reasonable fee for giving access and will tell you the amount before we proceed. If we refuse access or correction, we will tell you why in writing and how to complain.
14. DATA BREACHES
If a data breach involving your personal information is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) as the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth) requires.
15. COMPLAINTS
If you have a complaint about how we have handled your personal information, please contact us first using the details in section 16. We will acknowledge your complaint within 1 business day, look into it, and give you a written response within 30 calendar days. If we need more time, we will tell you why before the 30 days end.
If you are not satisfied with our response, or we have not responded within 30 days, you can contact:
- Australian Financial Complaints Authority (AFCA), our external dispute resolution scheme, which can deal with privacy complaints about us. Website: www.afca.org.au. Phone: 1800 931 678 (free call). Time limits may apply to complaints to AFCA.
- Office of the Australian Information Commissioner (OAIC). Website: www.oaic.gov.au. Phone: 1300 363 992. Mail: GPO Box 5288, Sydney NSW 2001.
16. CONTACT US
Privacy enquiries: Joseph Farhat, Director
JCF Capital Pty Ltd ABN 51 657 626 947 trading as Settled With Joe
Credit Representative Number 496121 of YBR Aggregation Pty Ltd, Australian Credit Licence 390261
Email: joseph@settledwithjoe.com.au
Phone: 0401 222 353
You can ask us for a copy of this policy in another form, and we will take reasonable steps to provide it.
17. CHANGES TO THIS POLICY
We may update this policy. The current version is always on this page, with the date it was last updated.
