Privacy Policy

Our Commitment to Privacy

myBFA Pty Ltd ACN 696 722 335 (“myBFA”, “we”, “us”, “our”) is committed to protecting the privacy and confidentiality of personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

myBFA is a technology platform and is not a law firm. We do not provide legal, financial, taxation or other professional advice. This Privacy Policy explains how we collect, use, disclose and manage your personal information in connection with the myBFA platform and website.

Personal Information We Collect

myBFA may collect personal information from users of the platform and website, including:

• contact details such as name, email address, phone number and postal address
• account registration details
• information you provide when creating a Binding Financial Agreement, which may include financial and property information, relationship details and other personal information
• payment information (processed by third-party payment providers; we do not store full card details)
• device and usage information collected automatically when you visit our Website (see Cookies and Tracking below)
• communications you send to us, including support enquiries and feedback

We only collect personal information that is reasonably necessary for the operation of the platform and for the purposes described in this Policy.

How We Collect Personal Information

We collect personal information directly from you when you:

• create an account on the myBFA platform
• complete or submit a Binding Financial Agreement or other document through the platform
• make a payment
• contact us by email, phone or through our Website
• subscribe to our mailing list or marketing communications

We also collect certain information automatically when you visit our Website, through cookies, analytics tools and tracking technologies. See the section on Cookies and Tracking below for more detail.

Why We Collect and Use Personal Information

We collect and use personal information for the following purposes:

• to provide you with access to and use of the myBFA platform
• to enable you to create, complete and manage Binding Financial Agreements
• to process payments and manage your account
• to send you transactional communications such as receipts, account notifications and document access links
• to send you marketing and promotional communications where you have consented to receive them
• to connect you with lawyers or legal professionals where you request such assistance
• to improve the functionality and user experience of the platform
• to comply with our legal obligations

We only use personal information for the purpose for which it was collected, or for a related purpose that would reasonably be expected, unless otherwise required or permitted by law.

Disclosure of Personal Information

Third-Party Service Providers

We may disclose personal information to third-party service providers who assist us in operating the platform. These include:

• Payment Processors — we use eWay (and/or other payment processors) to handle payment transactions. Your payment details are provided directly to and processed by these providers. myBFA does not store your full card details.
• Email Service Providers — we use Resend (and/or other email service providers) to send transactional and marketing emails. Your name and email address are shared with these providers for this purpose.
• Cloud Hosting and Infrastructure Providers — we use third-party cloud hosting and infrastructure services to store and process data. These providers operate under data processing agreements with us.
• Third-Party Contractors and Technology Providers — we may engage third-party contractors to assist us in developing, maintaining and improving the platform and its features. We also use third-party artificial intelligence tools, including Claude (provided by Anthropic), to provide AI chatbot and support functionality. Where these contractors or providers handle personal information on our behalf, they do so under confidentiality and data processing arrangements consistent with this Policy and the Australian Privacy Principles.

Analytics and Tracking Providers

We use the following third-party analytics and tracking services, which may collect or receive personal information or device identifiers in connection with your use of our Website:

• Google — we use various Google services (such as Google Analytics, Google Search Console, Google Ads and similar tools) to collect data about website traffic, user behaviour, search performance and advertising effectiveness. Data is processed in accordance with Google’s privacy policy.
• Meta Pixel (Facebook/Instagram) — used for advertising measurement and audience analytics. Data is processed in accordance with Meta’s data policy.
• Hotjar — records user sessions, heatmaps and interactions on our Website. This may include visual recordings of your activity on our Website. Data is processed in accordance with Hotjar’s privacy policy.

Lawyers and Legal Professionals

If you request assistance from a lawyer through the myBFA platform, or if you are matched with or connected to a lawyer via our referral functionality, we may share your name, contact details, relevant details about your BFA and a copy of your BFA application (including the information contained within it) with that lawyer or law firm. You will generally be informed when such sharing occurs.

Please note that myBFA may receive a financial referral fee or commission in connection with such referrals. See our Website Terms of Use for more information.

Legal Requirements

We may also disclose personal information where required or authorised by law, including to regulatory authorities, courts or law enforcement agencies.

Cookies and Website Tracking

Our Website uses cookies and similar tracking technologies to improve functionality and user experience. Cookies are small text files stored on your device. We use:

• Essential cookies — necessary for the Website to function
• Analytics cookies — to understand how users interact with the Website (via Google Analytics and similar tools)
• Marketing and tracking pixels — to measure advertising effectiveness (via Meta Pixel and similar tools)
• Session recording tools — to analyse user behaviour on the Website (via Hotjar and similar tools)

You can manage or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of the Website.

Marketing Communications

By creating an account or purchasing a service through myBFA, you are automatically opted in to receive marketing and promotional communications from us by email.

You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email, or by contacting us directly. Please note that opting out of marketing emails will not affect the delivery of transactional or service-related communications.

Data Security and Storage

We take reasonable steps to protect personal information from misuse, loss and unauthorised access. These steps include secure electronic systems, restricted access controls, encryption of sensitive data in transit, and confidentiality obligations for staff and contractors.

However, no data transmission or storage system can be guaranteed as completely secure. You access the platform and transmit personal information at your own risk.

Where personal information is no longer required, it is securely destroyed or de-identified where lawful and appropriate. Please note that personal information may continue to exist in our backup, archival or disaster-recovery systems for a period of time after it has been deleted from our active systems. Such information is isolated from ongoing use and will be securely destroyed or overwritten in the ordinary course as those backups expire or are cycled.

Data Breaches

In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with our obligations under the Notifiable Data Breaches scheme.

Please note that myBFA will not be liable for data breaches or unauthorised access that arise from your own actions or errors, including providing incorrect email addresses, sharing your login credentials, or otherwise failing to take reasonable precautions to protect your account. See our Website Terms of Use for further detail.

Access and Correction

You may request access to the personal information we hold about you, or request that we correct information that is inaccurate, incomplete or out of date. Requests should be made in writing to the contact details provided on the Website. We will respond in accordance with the Privacy Act 1988 (Cth).

In some circumstances we may decline to provide access, or may provide access to only part of the information. This includes, for example, where doing so would interfere with the privacy of another person, where the information is subject to legal professional privilege or confidentiality obligations, where the information consists of notes, opinions or records created by a lawyer or legal professional about a client, or where providing access would be unlawful. Where we decline a request in whole or in part, we will explain the reason.

International Disclosure

Some of our third-party service providers (including analytics providers, email service providers and cloud hosting providers) may be located overseas or may process data on servers located outside of Australia. By using the myBFA platform, you consent to your personal information being transferred to and processed in countries outside Australia, which may have different privacy laws to those in Australia.

We take reasonable steps to ensure that overseas recipients of your personal information handle it in a manner consistent with the Australian Privacy Principles.

Complaints

If you have a complaint about the way we have handled your personal information, please contact us in writing using the details on our Website. We will investigate your complaint and respond within a reasonable time.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in our practices or legal obligations. The current version will always be available on our Website. Continued use of the platform after any update constitutes your acceptance of the revised Policy.