Privacy Policy

1. Who we are

This Privacy Policy explains how School of Home Ownership, (“we”, “us”, “our”), collects, holds, uses and discloses personal information. We are an Australian lead generation agency based in Western Australia, providing marketing and lead generation services to mortgage and asset finance brokers. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

This policy covers our website, our free resources and marketing, our services, and our recruitment. By using our website or providing us with your information, you consent to the practices described in this policy.

2. What we collect

Depending on how you interact with us, we may collect:

Identity and contact information: your name, email address, phone number, business name and role, collected when you download a resource, subscribe, make an enquiry, apply to work with us, apply for a job, or contact us.

Business information: information about your business that you provide during enquiries, applications, audits, onboarding and campaign work, including revenue figures, team structure, systems and goals. We treat this information as confidential in addition to our privacy obligations.

Information we handle for our clients: when we run lead generation campaigns for a broker client, we may collect and process contact details (such as name, email address and phone number) from people who respond to those campaigns, and we follow up and pass qualified enquiries to our client. We collect and handle this information on behalf of our client, who is responsible for it as the business the enquiry was made to. This is ordinary contact information, not sensitive information.

Payment information: we do not store full payment card details. Payments are processed by third-party payment providers, whose handling of your card details is governed by their own privacy policies and security standards.

Call and meeting records: calls and meetings with us are recorded for note-taking, quality and training purposes, including through AI-assisted transcription tools. You will be notified at the start of each call by an on-screen recording notice or prompt. By remaining on a call after that notice, you consent to the recording. If you do not wish to be recorded, tell us at the start of the call and we will accommodate you.

Recruitment information: if you apply for a role, your CV, work history and referee details.

Technical information: IP address, browser type, device information, pages visited and interactions with our website and emails, collected through cookies and similar technologies described in section 8.

We do not knowingly collect sensitive information (such as health or biometric information) and ask that you do not submit it to us. We do not knowingly collect personal information from anyone under 18.

3. How we collect it

We collect personal information directly from you: through forms on our website, applications, bookings, emails, calls and campaigns. We may also receive limited information from third parties such as advertising platforms (for example, that you clicked one of our ads) and publicly available sources (for example, your business website or LinkedIn profile when assessing an application).

If you provide us with personal information about someone else (for example, a team member), you must have their consent to do so and to us handling it under this policy.

4. Why we collect and use it

We collect, hold and use personal information to:

Deliver our services and resources, and manage our client relationships;

Assess enquiries and applications, and respond to them;

Run lead generation campaigns and follow-up on behalf of our clients;

Process payments and administer agreements;

Send you resources, articles and offers you have requested or opted into (see section 7);

Operate, improve and secure our website and services;

Measure and improve our marketing, including through the advertising tools in section 8;

Recruit and assess candidates; and

Comply with our legal obligations, and establish or defend legal claims, including responding to payment disputes.

5. Who we share it with

We do not sell personal information. We disclose it only to:

Our clients: where we run a campaign for a broker client, we pass enquiries and lead information to that client so they can follow up and provide their services.

Service providers who help us run the business, including website hosting, customer relationship management, email and SMS marketing, scheduling and booking, payment processing, video conferencing and transcription, analytics, and advertising platforms. These providers may only use your information to provide services to us.

Advertising platforms (including Meta) in hashed or aggregated form, to measure advertising performance and reach relevant audiences, as described in section 8.

Professional advisers such as lawyers, accountants and insurers, where reasonably necessary.

Government and regulatory bodies where required or authorised by law.

6. Overseas disclosure

Some of our service providers store or process information outside Australia, including in the United States. Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles, including through the contractual protections in our agreements with those providers.

7. Marketing communications

If you download a resource, subscribe or otherwise opt in, we will send you emails including articles, resources and information about our services. Every marketing email we send includes a working unsubscribe link, and we honour unsubscribe requests promptly in accordance with the Spam Act 2003 (Cth). Unsubscribing from marketing does not stop administrative emails we need to send you as a client (such as invoices or booking confirmations).

8. Cookies, pixels and tracking

Our website uses cookies and similar technologies, including:

Essential cookies required for the website to function;

Analytics tools that help us understand how the website is used; and

Advertising tools, including the Meta Pixel and Meta’s Conversions API, which collect information about your interactions with our website (such as pages viewed and forms submitted) and share it with Meta to measure our advertising and show you relevant ads. Meta’s handling of this information is described in Meta’s own privacy policy.

You can control cookies through your browser settings, and you can manage your ad preferences directly with the relevant advertising platforms. Disabling cookies may affect how parts of the website function.

9. AI and automated tools

We use AI-assisted tools in parts of our business, including call transcription and content and analysis workflows. These tools support our team; they do not make decisions that produce legal or similarly significant effects about you without human involvement. If this changes, we will update this policy to describe any automated decision-making that could significantly affect you.

10. Security

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These include access controls, reputable third-party providers, encryption in transit, and limiting access to team members who need it. No internet transmission is completely secure, and we cannot guarantee absolute security of information transmitted to us.

11. Retention

We keep personal information only as long as we need it for the purposes described in this policy or as required by law (for example, financial records we must retain under tax law). When we no longer need it, we take reasonable steps to destroy or de-identify it.

12. Access, correction and deletion

You may request access to the personal information we hold about you, ask us to correct it, or ask us to delete it, by contacting us at [email protected]. We will respond within a reasonable period. In limited circumstances the law allows or requires us to refuse a request; if we do, we will tell you why.

13. Data breaches

If a data breach occurs that is likely to result in serious harm, we will assess it and notify affected individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme.

14. Complaints

If you have a concern about how we have handled your personal information, contact us at [email protected] and we will investigate and respond within a reasonable period, usually 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992).

15. Visitors from the EU, UK and other regions

If you access our website from a jurisdiction with its own data protection laws (such as the EU or UK GDPR), we process your personal information on the basis that it is necessary for our legitimate interests in operating and marketing our business, to perform a contract with you, or with your consent (for marketing and non-essential cookies). You may have additional rights under those laws, including rights to object to processing, restrict processing, data portability, and to lodge a complaint with your local supervisory authority. To exercise any of these rights, contact us at [email protected].

16. Changes to this policy

We may update this policy from time to time. The current version will always be available on this page with its effective date. Material changes will be flagged on this page or notified to clients directly.

17. Contact

School of Home Ownership

Contact us: [email protected].