Brokerlab collects personal information from people who register interest in our course, enrol as students, and take part in our employer introduction pathway. This policy explains what we collect, why, who we share it with, and how you can access, correct or complain about it.
A note on how this policy applies. Brokerlab is a small business. Businesses with an annual turnover of $3 million or less are generally exempt from the Privacy Act 1988 (Cth), and at the time of writing we fall below that threshold. We have chosen to follow the Australian Privacy Principles anyway, because we ask people for detailed personal and career information and we think you are entitled to know how it is handled. Where this policy says we will do something, we mean it regardless of whether the Act compels us.
1. Who we are
Brokerlab is a practical training business for people entering the Australian mortgage broking industry. We operate from the Northern Rivers, NSW.
- Business name: Brokerlab
- ABN: 33 955 662 231
- Contact: james@brokerlab.com.au
- Postal address: 1/4 Lawson Street, Byron Bay NSW 2481
Brokerlab is not a registered training organisation, does not hold an Australian Credit Licence, and does not provide credit assistance, financial advice or migration advice. We are a training provider.
2. What we collect
The information we hold depends on how far you go with us.
If you register interest
- Your name, email address and phone number
- Your location
- Where you are up to in the broker pathway, for example whether you have started the Certificate IV
- Anything you choose to tell us in the notes field
If you enrol as a student
- The above, plus billing details needed to process your course fee. Card numbers are handled by our payment processor and are never stored by us.
- Your work history, current employment and qualifications, where relevant to the course or to an introduction
- Your work rights or visa status, but only where it is relevant to an employer introduction and only where you have told us you want one
- Your coursework, exercises and assessment results
If you ask us to introduce you to an employer
- A candidate profile, which may include your CV, your coursework performance and a short written summary from us
We do not deliberately collect sensitive information as the Privacy Act defines it, meaning things like health information, racial or ethnic origin, religious beliefs, or criminal record. Please do not include that kind of detail in the notes field or in your coursework. If you send it to us anyway, we will treat it in confidence and delete it where we can.
3. How we collect it
Almost always directly from you: through the registration form on this website, by email, in enrolment paperwork, or during live sessions. Occasionally we may receive your details from a third party who has referred you, such as a training provider or a migration agent. If that happens we will tell you where we got them the first time we contact you.
4. Why we collect it
- To answer your enquiry and tell you about upcoming cohorts
- To enrol you, take payment, and deliver the course
- To give you feedback on your exercises and capstone deal file
- To introduce you to potential employers, where you have asked us to
- To improve the course based on what students find difficult
- To send you occasional updates about Brokerlab, which you can stop at any time
- To meet our own record-keeping and tax obligations
If we ever want to use your information for a purpose that is not on this list, we will ask you first.
5. Who we share it with
Hiring partners
This is the part of our business that involves your information most directly, so we want to be plain about it.
We are paid a placement fee by employers when a graduate is hired. That means we have a commercial interest in introducing you to them. Because of that, we apply a firm rule:
We will never send your details to an employer without asking you first, every single time. Consent is given per introduction, not once at enrolment. You can tell us to stop at any point, you can ask us to exclude particular firms, and declining an introduction has no effect on your place in the course or your results.
When you do consent, the employer receives only what is needed to assess you for the role. They become responsible for your information once they hold it, under their own privacy obligations.
Service providers
We use ordinary business software to run the course. These providers can technically access data we store with them, and they are bound by their own terms and privacy obligations:
- Netlify, which hosts this website and receives registration form submissions
- Google Workspace, for email, documents and calendars
- Zoom, for live sessions
- A payment processor, for course fees
Referral partners
We work with training providers and migration agents who refer people to us. We do not pass your details back to a referrer, or to any other third party, unless you have asked us to or we are required to by law.
We do not sell your information
We do not sell, rent or trade personal information to anyone, and we do not supply it to advertisers or data brokers.
6. Information sent overseas
Several of the providers listed above store data outside Australia, principally in the United States, and may replicate it to other countries where they operate. By using this website or enrolling, you accept that your information may be handled overseas. We choose established providers with published security practices, but overseas handling means Australian privacy law may not apply to that data in the same way, and you may not be able to seek redress under the Privacy Act against an overseas recipient.
7. How we store and protect it
Your information is held in the accounts described above, protected by strong passwords and multi-factor authentication. Access is limited to people who need it to run the course. We keep the number of copies small on purpose.
No system is completely secure, and we will not pretend otherwise. If a breach happens that is likely to cause you serious harm, we will tell you and, where the law requires it, notify the Office of the Australian Information Commissioner.
8. How long we keep it
- Registration enquiries that go nowhere: deleted after about 24 months
- Student records: kept for 7 years after your cohort finishes, which covers our tax and record-keeping obligations and lets us confirm your completion if you need it later
- Candidate profiles sent to employers: kept while the introduction is live, then archived with your student record
You can ask us to delete your information sooner and we will do so unless we are legally required to keep it.
9. Marketing
If you register interest, we will email you about cohorts and course updates. Every email has an unsubscribe link, and you can also just reply and ask us to stop. Unsubscribing from marketing does not stop necessary emails about a course you are enrolled in.
10. Cookies and analytics
This website is a static page. It does not set advertising or tracking cookies, and it does not run third-party advertising pixels. Our host, Netlify, keeps standard server logs including IP addresses for security and performance reasons. If we add analytics later, we will update this policy before we turn it on.
11. Accessing and correcting your information
You can ask us what we hold about you and we will tell you, normally within 30 days and at no cost. If something is wrong, tell us and we will fix it.
Email james@brokerlab.com.au with "Privacy request" in the subject line. We may need to confirm your identity before we release anything. In the rare case we cannot give you access, we will explain why in writing.
12. Complaints
If you think we have mishandled your information, tell us first. Email james@brokerlab.com.au with "Privacy complaint" in the subject line. We will acknowledge it within 5 business days and give you a written answer within 30 days.
If you are not satisfied with our response, you can take it to the Office of the Australian Information Commissioner:
- Website: oaic.gov.au
- Phone: 1300 363 992
- Post: GPO Box 5218, Sydney NSW 2001
Because of the small business exemption described at the top of this policy, the Commissioner may not be able to investigate a complaint about us while that exemption applies. That does not change our own commitment to handle your complaint properly.
13. Changes to this policy
We will update this page when our practices change, and the date at the top will change with it. If a change materially affects how we handle information we already hold about you, we will email you rather than rely on you noticing.
14. Contact
Privacy questions of any kind: james@brokerlab.com.au
← Back to Brokerlab