Privacy Collection Notice Template
Build an editable privacy collection notice from your brokerage's collection purposes and handling facts, then review and copy it.
Organisation and collection
The role and contact details for privacy enquiries.
List categories such as income and expenses. Leave client answers out.
Name other sources and explain how collection occurs.
Purpose and sharing
State why you request this information for this service.
Name the law or order and its provision, where practicable.
State what happens when some or all information is withheld.
Name usual recipients, including lenders and aggregators where relevant.
Name likely overseas recipients and the circumstances of disclosure.
List the countries where likely recipients are located.
Explain why you cannot practicably specify the countries.
Privacy requests
A policy URL or instructions for obtaining a copy.
State how to request access or correction under your privacy policy.
State how to complain under your policy and how you handle complaints.
Delivery
For example, an online form, telephone call or paper form.
Describe where and when the person can read or hear the notice.
Your notice
14 form details to resolve.
Details to resolve
Select a detail to complete it.
- Organisation name
- Privacy contact details
- Information requested
- Collection source
- Collection purposes
- Legal collection requirement
- If information is withheld
- Usual recipients
- Overseas disclosure
- Privacy policy location
- Access and correction process
- Privacy complaint process
- Collection channel
- How the notice is available
Every form detail is filled. Review the notice against your collection process before using it.
The notice updates from the form. Empty details remain blank lines.
Review against your process
Review each item after the notice is complete.
What a Privacy Collection Notice Explains
A privacy collection notice explains what happens to the personal information requested in a particular collection. A privacy policy describes the organisation's broader handling practices. Consent is a separate question: generating or delivering a notice does not obtain it.
Where the Australian Privacy Principles apply, APP 5 requires reasonable steps to notify the individual or ensure awareness of relevant matters. Those matters cover the collecting organisation and its contact details, collection circumstances and purposes, applicable legal authority and consequences of withholding information. Usual recipients and likely overseas disclosures also belong in the notice. Include recipient countries where practicable and the policy's information about access, correction and complaint handling.
Coverage depends on your business and activities. The OAIC's small-business guidance explains the general exemption for businesses with turnover of $3 million or less and its exceptions. Turnover alone does not settle coverage. This generator assembles your statements without determining whether your business meets every privacy obligation.
Complete the Notice With Your Brokerage’s Facts
Enter the business that collects the information and a working privacy contact. Describe categories such as income and expenses, leaving actual client answers in the separate mortgage broker fact find template. Select who supplies the information and describe other sources when used.
State what each collection supports. For a loan request, describe the assessment and application work you actually perform. Identify any law or court order requiring or authorising collection, including its provision where practicable. “None identified” omits that clause. “Unconfirmed” keeps an unfinished line visible.
Explain what happens if the individual supplies only some information or supplies none. Name usual recipients and their roles, including lender and aggregator sharing that actually occurs. Confirm service-provider arrangements before stating whether overseas disclosure is likely.
Resolve a missing recipient or unknown destination with the person responsible for that arrangement before using the wording. If listing recipient countries is impracticable, record the reason. Convenience alone does not establish impracticability. The “Not practicable” option records your explanation without deciding whether it meets the rule.
Add the policy location and describe its access, correction and complaint processes. Finish with the collection channel and how the person will receive the notice. Details to resolve follows the form, including when you edit the notice directly. Direct edits pause automatic replacement until you choose “Discard edits and rebuild from the form”.
A Privacy Notice Example for a Client Information Request
“Load example” fills the tool with the fictional Example Harbour Brokerage. Its reserved .example address identifies hypothetical contact details. The example requests contact details, income, expenses, liabilities and supporting documents directly from the individual.
The example's purpose is to assess home loan needs and help prepare an application to the chosen lender. Its usual recipients are that lender and an aggregator for application processing and compliance support. Without the information needed for assessment, the brokerage cannot complete the assessment or prepare the application.
The hypothetical privacy officer receives access, correction and complaint requests. The example policy explains how the business handles them. The example states that overseas disclosure is not likely and identifies no collection law. These are fictional business facts to replace, not assumptions about your brokerage.
Change the purpose to “To arrange a refinance” and the recipients to “The selected refinance lender”. Both clauses in the preview change. If a support provider also receives the information, add that recipient and review the overseas fields before copying. The example shows the notice above the client information form before the person enters personal information.
Review and Use the Notice Before Collection
Review the generated notice against the actual collection before copying it into your form or call script. The checklist records your review and clears when you change the form or document.
- Compare the organisation, contact and information categories with the request. Resolve every unfinished line, including details left blank in edited text.
- Check each purpose and usual recipient against the actual workflow. Confirm identified laws and overseas arrangements with the responsible person.
- Open your privacy policy and confirm it explains access, correction and privacy complaints, including how complaints are handled.
- Check the person's collection channel and communication needs. Use clear wording and a prominent notice or accessible link on the form. For a telephone collection, prepare wording staff can explain.
- Read the final preview, including your edits. Copy, download and print use that displayed text. Retain the notice version and how it was supplied with your collection records.
The OAIC's APP 5 guidance places notification at or before collection. Where that is impracticable, take reasonable steps as soon as practicable afterwards and be able to justify the delay. A general policy link must cover the relevant collection matters to serve that purpose.
Review the notice again when a purpose, recipient or collection method changes. A previous notice does not give blanket permission for unrelated use. Privacy coverage, secure handling and incident responsibilities are explained in data security for mortgage brokers. The templates directory contains other brokerage documents.
This tool assembles text on your device and sends no entries for processing. It does not save your draft, so download or print it before leaving. A notice needing legal interpretation or additional credit-reporting wording needs review for that situation before use.
