1. Who collects your information
My Mortgage Review is operated by KTB Finance Pty Ltd ACN 693 209 344 as trustee for the K Ebbesen Trust ABN 33 915 514 785. Mortgage broking and credit services are provided by Katrina Ebbesen, Credit Representative Number 437134, authorised under Australian Credit Licence Number 389328 held by Connective Credit Services Pty Ltd. In this policy, “we”, “us” and “our” refer to KTB Finance Pty Ltd ACN 693 209 344 as trustee for the K Ebbesen Trust ABN 33 915 514 785, operator of My Mortgage Review.
2. What we collect
When you submit a mortgage review request, we may collect:
- your name, email address and phone number;
- your postcode and preferred contact time;
- your stated loan purpose and optional estimates such as loan balance, property value, purchase budget and deposit saved;
- your consent choice, submission date, source page and technical security information; and
- information you later provide during a broker conversation.
The initial website form does not request identity documents, bank statements, account numbers, passwords, online banking credentials or tax file numbers.
3. Why we collect it
We collect this information to receive and manage your enquiry, make it available to Katrina Ebbesen so she can respond and, if you choose to continue, provide mortgage broking and credit assistance; record and manage your consent; maintain security; and comply with applicable legal and regulatory obligations. If you do not provide the required contact details and consent, we cannot arrange the requested call.
4. Who may receive it
We may disclose or provide access to your personal information to Katrina Ebbesen; Connective Credit Services Pty Ltd and relevant service providers where required under her credit representative arrangements; lenders and credit providers if you choose to proceed; Plus Five Five, Inc. (Resend), which delivers website enquiry emails; Nexigen Digital Pty Ltd (trading as VentraIP), which hosts our business email mailbox; Cloudflare, Inc. (Turnstile), which protects the form from bots and malicious activity; and our website hosting, security and other technology providers. We do not sell your personal information.
On submission, your form details and consent record are sent through Resend to hello@mymortgagereview.au and stored in the VentraIP-hosted mailbox. Resend processes email addresses, email metadata and message content in the United States and may use subprocessors in other locations identified in its current notices. VentraIP states that data in its hosted email service is stored in Australia. When you submit the form, our website hosting provider processes the form contents so the request can be validated and sent to Resend. The provider may process this information outside Australia. Website security and other technology providers may also process technical information outside Australia.
Approximate loan, property and deposit estimates, where provided, are included in the enquiry email. Do not provide identity documents, bank statements, account numbers, passwords, online banking details or tax file numbers through this form or by ordinary email.
We use Cloudflare Turnstile to protect our online forms from spam, bots and malicious activity. When Turnstile operates, Cloudflare processes technical information such as your IP address, browser and device signals, user-agent, the website origin and a verification token for security and bot-detection purposes, and to improve Turnstile. Cloudflare primarily stores information in the United States and European Economic Area and may process it in other countries where the Cloudflare group operates. For more information, see Cloudflare's Turnstile Privacy Addendum and Privacy Policy.
5. Contact consent
The required form consent permits contact about your mortgage review request by phone or email. Your details will be used to respond to that request and manage related service messages. It does not subscribe you to unrelated marketing.
6. If you choose to proceed
This Privacy Policy applies to the initial My Mortgage Review website enquiry. It does not replace the Credit Guide or the Connective-approved privacy disclosure and consent that applies if Katrina Ebbesen begins providing credit assistance.
Submitting this website enquiry does not involve a credit check and will not affect your credit score. If you choose to proceed and a credit report may be requested, the applicable privacy and credit-reporting notices and consents will be provided before that occurs.
If you proceed beyond the initial enquiry, Katrina Ebbesen may collect additional identification, employment, financial, credit-reporting and, where relevant, sensitive or vulnerability information reasonably necessary to assess and progress your request. This information is not requested through the website form. Before that stage, she will provide the applicable Connective-approved Credit Guide and privacy disclosure and consent, including details of relevant lenders, credit reporting bodies, insurers and service providers.
7. Security and retention
We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Website enquiries are stored in the business mailbox and may be available on authorised email clients and devices. Access is limited to people who need the information for the purposes described above. Provider operational logs and backup copies may be retained under the providers’ own retention arrangements.
Website enquiries that do not progress are retained for up to 12 months after the last meaningful contact, then securely deleted unless they are needed for an active complaint, security incident, legal requirement or documented requirement of the Australian Credit Licence holder. If you proceed with mortgage broking services, relevant records are transferred to and retained in the approved broking systems in accordance with applicable law and the record-retention requirements of the Australian Credit Licence holder.
8. Website analytics and cookies
The website does not currently use advertising pixels or general audience or marketing analytics. We use Turnstile and its security metrics only to protect the form, not for advertising or marketing, and its pre-clearance feature is disabled. Website enquiry emails are transactional only and are not used for marketing. If analytics or advertising tools are later added, this policy and any required consent controls will be updated. Form values will not be sent to analytics or advertising platforms.
9. Access, correction and complaints
You may request access to or correction of your personal information, or make a privacy complaint, by emailing hello@mymortgagereview.au. We will generally respond within 30 days and may need to verify your identity. If the matter remains unresolved, external complaint options are available through AFCA or the Office of the Australian Information Commissioner, where applicable.
10. Changes to this policy
We may update this policy when our service, suppliers or legal obligations change. The latest version and effective date will appear on this page.