Privacy Policy

Last updated: 20 May 2026

RyRo Loan Centre (ABN 52 149 977 202) takes your privacy seriously. This policy explains what personal information we collect, why we collect it, how we use it, who we share it with, and how you can access, correct, or delete it. It aligns with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. What we collect

1.1 Information you give us

When you fill in a contact, strategy call, or lead-magnet form, we collect:

  • Your first and last name.
  • Your email address and phone number.
  • The loan type or service you have asked about.
  • The message you write into the form.
  • Your consent to be contacted and your acceptance of this policy.
  • Any PDF guides you ask us to email you.
  • If you book a strategy call, the meeting details you share with our calendar provider.

1.2 Information collected automatically

When you visit the site, our hosting provider (Vercel) and our application automatically collect:

  • Your IP address.
  • Approximate country, region, and city derived from your IP.
  • Approximate latitude and longitude (city-level, never precise).
  • Time zone.
  • Browser, operating system, and device type.
  • Referrer (the page that linked to us).
  • UTM parameters and click IDs (gclid, fbclid, msclkid) on links you arrive from.
  • Pages you visit on our site, in what order, and how long you spend.
  • Time you spend filling out a form (used to detect bots).
  • Whether you have visited before, and how many sessions you have started.

We use this information to score lead quality, prioritise responses, attribute leads to marketing campaigns, and detect spam. Lead enrichment is performed by our own application; no third-party enrichment provider receives your personal information.

1.3 Information from third parties

When you apply for credit through us, lenders may share information back with us about your application status. We may also receive identity verification data from regulated third parties as part of the lending process.

2. Cookies and similar technologies

We use a small number of cookies. The categories are listed below. See the Cookie Policy for the full table of every cookie we use, its purpose, and how long it lasts.

  • Strictly necessary. The consent cookie itself and the cookieless Vercel Speed Insights and Analytics. Always on.
  • Functional. Remembers if you have visited before, your form progress, and PDF downloads. Lets us greet returning visitors.
  • Analytics. Ahrefs Analytics. Loaded only if you grant analytics consent.
  • Marketing. Click IDs from paid ad platforms (Google Ads, Meta, Bing), only with your marketing consent.

3. How we use your information

  • Respond to your enquiry by email, phone, or text.
  • Email you the lead-magnet PDFs you have requested.
  • Arrange and confirm your strategy call.
  • Assess your eligibility for credit and prepare loan applications.
  • Submit applications to a lender on your behalf, with your consent.
  • Send marketing emails only if you opted in. Every marketing email includes an unsubscribe link, per the Spam Act 2003 (Cth).
  • Detect spam, block bots, and protect the security of our systems.
  • Improve our content based on aggregate analytics.
  • Comply with the National Consumer Credit Protection Act, the Anti-Money Laundering and Counter-Terrorism Financing Act, and other applicable laws.

4. Who we share information with

We share personal information only where necessary to do business with you, or where the law requires it.

  • Lenders on our panel, when we submit or pre-qualify a loan application with your consent.
  • Resend Inc. (US), our transactional email provider.
  • Supabase (Sydney AU region), our database provider.
  • Vercel Inc. (US/EU), our hosting provider.
  • Ahrefs Pte. Ltd. (Singapore/EU), if you have granted analytics consent.
  • Our internal team at RyRo Loan Centre.
  • Regulators, courts, or law enforcement, where legally required.

We never sell your personal information. We never share your information with data brokers.

5. International transfers

Resend and Vercel are headquartered in the United States. Ahrefs operates globally. Supabase stores your data in its Sydney AU region. We take reasonable steps to ensure overseas recipients handle your data consistently with the Australian Privacy Principles.

6. How long we keep your information

  • Contact form submissions: 7 years, to meet credit broking record-keeping obligations.
  • Consent records: 7 years (audit trail).
  • Marketing email subscriptions: until you unsubscribe.
  • Functional cookies on your browser: 12 months unless you clear them sooner.

7. Security

We use HTTPS site-wide, role-based access controls on our database, and row-level security in Supabase. Service-role keys never leave the server. If we ever suffer a notifiable data breach, we will comply with the Notifiable Data Breaches scheme and notify you and the OAIC where required.

8. Your rights

Under the Australian Privacy Principles you can:

  • Request access to the personal information we hold about you.
  • Ask us to correct information that is out of date or wrong.
  • Ask us to delete information we no longer need.
  • Withdraw your consent to marketing communications at any time.
  • Change your cookie choices at any time, see Cookie Policy.
  • Make a complaint about how we handle your information.

Email contact@ryroloancentre.com.auwith the subject "Privacy request" and we will respond within 30 days.

9. Marketing emails

We send marketing emails only to people who opted in. Every email includes a working unsubscribe link and our business address, per the Spam Act 2003 (Cth). Unsubscribing takes effect within 5 business days.

10. Children

This site is not intended for people under 18. We do not knowingly collect personal information from children. If we discover we have collected information from a minor, we will delete it.

11. Complaints

If you are unhappy with how we have handled your personal information, email contact@ryroloancentre.com.au. If you are still not satisfied, you can make a complaint to the Office of the Australian Information Commissioner at www.oaic.gov.au or 1300 363 992.

12. Updates to this policy

We update this Privacy Policy when our practices change. The current version is always at /privacy. Material changes bump the cookie banner version and re-prompt you.

13. Contact

See also: Terms of Service, Cookie Policy.