Privacy Policy — ORLA Portal

Draft for review. This is a starting-point template based on the Australian Privacy Principles. Please review it — especially the company/ABN details, where data is stored (including any overseas hosting by our portal provider), and any third parties you use — and consider having it checked before publishing.

Last updated: 18 June 2026

1. Introduction

This Privacy Policy explains how ORLA Portal, a business of Melbourne Finance Brokers Pty Ltd (ABN 74 151 721 112) ("we", "us", "our"), handles your personal information. We are committed to protecting your privacy and complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. What information we collect

Depending on how you interact with us, we may collect:

Identity and contact details — such as your name, email address, phone number and postal address;
Account information — such as your login details and activity within the portal;
Content you provide — documents, messages and other information you upload or share with us; and
Technical information — such as device and browser information and basic usage data.

3. How we collect it

We collect personal information directly from you — for example when you are invited to the portal, set up your account, upload documents or contact us. Where it is reasonable and practicable, we will collect it directly from you.

4. Why we use your information

We use your personal information to: provide and administer the portal and our services; communicate with you; respond to your requests; maintain the security of the portal; and meet our legal and record-keeping obligations.

5. Disclosure of your information

We do not sell your personal information. We may share it with trusted third parties who help us deliver the Services — including the provider of the portal software that powers ORLA Portal — and with others where you have consented or where we are required or permitted by law.

6. Data storage and overseas recipients

Your information is stored using our portal provider's secure infrastructure, which may involve servers located outside Australia. Where information is disclosed to overseas recipients, we take reasonable steps to ensure it is handled in line with the Australian Privacy Principles. [Confirm with your provider where data is hosted and update this section.]

7. Security

We take reasonable steps to protect your personal information from misuse, loss and unauthorised access, including secure logins and access controls. No system is completely secure, but we work to keep your information safe.

8. Access and correction

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate or out of date. Contact us using the details below and we will respond within a reasonable time.

9. Cookies

Our website and portal may use cookies and similar technologies to keep you logged in and to understand how the site is used. You can manage cookies through your browser settings.

10. Complaints

If you have a concern about how we have handled your personal information, please contact us first and we will work to resolve it. If you are not satisfied, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be available on this page with a revised "last updated" date.

12. Contact us

For any privacy questions or requests, email us at admin@orlaportal.com.au.