This policy sets out how ALTX Ventures Holdings Pty Limited ACN 619 131 449, AHC Finance Pty Limited ACN 161 006 846 Australian Credit Licence 448165, AltX Pty Limited ACN 618 796 115, Assetline Capital Pty Ltd ACN 160 443 443 and our related businesses (we/us/our) as well as Generate Homes Pty Ltd ACN 660 011 692, collect, use and disclose the personal information (including credit‑related information) we hold about you.

1. Our commitment to protect your privacy

We recognise that any personal information we collect about you will only be used for the purposes we have collected it for or as allowed under the law. We are committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) (Privacy Act), including the Australian Privacy Principles (APPs), the Privacy (Credit Reporting) Code 2025 (CR Code) and any other relevant law.

2. What this Policy covers

This Policy outlines how we handle:

• Personal information (information that identifies or could reasonably identify you); and
• Credit-related information (including credit information, credit eligibility information and CP derived information as defined in the Privacy Act),

in accordance with our obligations in the Privacy Act and the CR Code.

3. Types of information we collect

3.1 Personal Information

When we refer to personal information, we mean information from which your identity is reasonably apparent. This may include information or an opinion that relates to you. The personal information we hold that relates to you may also include credit-related information, and sensitive information (including health information) which may include any information you tell us about any vulnerability you may have.

The types of personal information we collect may include:

3.2 Credit-related Information

The types of credit-related information we collect may include:

We use your credit-related information to assess your eligibility to be provided with finance. Usually, credit-related information is exchanged between credit and finance providers and CRBs.

If you apply for finance or providing a guarantee, we may also collect details about dependants, cohabitant, length of residence, employment details, and proof of earnings and expenses.

If you apply for any insurance product through us, we may collect information about what is being insured, the beneficiaries, and your health information. We will only collect health information from you with your consent.

We exchange credit-related information for the purposes of assessing your application for finance and managing that finance. If you propose to be a guarantor, one of our checks may involve obtaining a credit report through a CRB about you.

When we obtain credit eligibility information from a CRB about you, we may also seek publicly available information and information about any serious credit infringement that you may have committed.

4. Why we collect your personal and credit-related information

We collect personal and credit-related information to:

• Assess your application for finance and manage that finance.
• Establish your identity and manage risk, including for compliance with AML/CTF obligations.
• Communicate with you about your account and our services.
• Comply with our legal and regulatory obligations.

5. How we collect your personal and credit-related information

We collect information:

• Directly from you (applications, calls, emails, forms);
• From third parties (CRBs, brokers, advisers, service providers, and/or other third parties or publicly available sources); and
• Through electronic identity verification using government services such as the Document Verification Service (DVS) and other providers with your express consent (see section 13).

6. Disclosing your personal and/or credit-related information

We may disclose your personal and/or credit-related information to:

• prospective funders, assignees or other intermediaries in relation to your finance requirements;
• another of lender who is making a loan to you (for example a lender who may be a first or second mortgagee to you);
• other organisations that are involved in managing or administering your finance, such as third party suppliers, printing and postal services, call centres, lenders, mortgage insurers, trade insurers and CRBs;
• associated businesses that may want to market products to you;
• companies that provide information and infrastructure systems to us;
• our agents, contractors or external service providers to outsource certain functions, for example, statement production, debt recovery and information technology support;
• any person who represents you, such as finance brokers, lawyers, mortgage brokers, guardians, persons holding power of attorney and accountants;
• anyone where you have provided us consent;
• other guarantors or borrowers (if more than one);
• borrowers or prospective borrowers, including in relation to any credit you guarantee or propose to guarantee;
• our auditors, insurers, re-insurers and health care providers;
• claims related providers, such as assessors and investigators who help us with claims;
• government and law enforcement agencies or regulators where we are required to do so by law, such as under the Anti-Money Laundering and Counter Terrorism Financing Act 2006 (Cth);
• investors, agents or advisers, trustees, rating agencies or any entity that has an interest in your finance or our business;
• other financial institutions, for example to process a claim for mistaken payment;
• service providers for the purposes of verifying your identity, including the DVS.
• organisations that provide products or services used or marketed by us; or
• your employer, former employer, referees.

Prior to disclosing any of your personal information to another person or organisation, we will take all reasonable steps to satisfy ourselves that:

• the person or organisation has a commitment to protecting your personal information at least equal to our commitment; or
• you have consented to us making the disclosure.

7. Notifiable matters

The law requires us to advise you of 'notifiable matters' in relation to how we may use your credit-related information. You may request to have these notifiable matters (and this policy) provided to you in an alternative form.

We exchange your credit-related information with CRBs. We use the credit-related information that we exchange with CRBs to confirm your identity, assess your creditworthiness, assess your application for finance or your capacity to be a guarantor, and manage your finance.

The information we may exchange with CRBs includes your identification details, what type of loans you have, how much you have borrowed, whether or not you have met your loan payment obligations, whether you have entered into a financial hardship arrangement (either with us or some other third party), and if you have committed a serious credit infringement (such as fraud).

If we seek information about you from a CRB in connection with an application for finance made by you (known as a ‘credit enquiry’), your consent to the credit enquiry is not required. A record of the credit enquiry may be used and, as relevant, disclosed for the purposes of the CRB or a credit provider assessing your credit worthiness, including calculation of a credit score or credit rating (subject to any other use or disclosure limitations under the Privacy Act or CR Code).

Credit enquiries on your credit report may impact your credit score or credit rating (for example, if multiple credit enquiries have been recorded over a short period of time, that may lower your credit score). The impact on your credit score or credit rating will depend on the type and amount of finance you apply for, the frequency of credit enquiries and your credit history.

If you fail to meet your payment obligations in relation to any finance that we have provided or arranged, or if you have committed a serious credit infringement, we may disclose this information to a CRB.

You have the right to request access to the credit-related information that we hold about you and make a request for us to correct that credit-related information if needed. See ‘Accuracy of and access to your personal and/or credit information’ below for further information. You also have the right to make a complaint to us in relation the handling of credit-related your information. See ‘Complaints’ below for further information.

Sometimes your credit-related information will be used by CRBs for the purposes of ‘pre-screening’ credit offers on the request of other credit providers. You can contact the CRBs at any time to request that your credit-related information is not used in this way.

You may contact the CRBs to advise them that you believe that you may have been a victim of fraud. CRBs must not use or disclose your credit-related information for a period of 21 days after you notify them that you may have been a victim of fraud. You can contact the following CRB for more information:

• Equifax Pty Limited – www.equifax.com.au – contact on 13 83 32; see privacy policy at www.equifax.com.au/privacy;

8. Direct marketing

We may use your personal information from time to time to provide you with current information about finance, offers you may find of interest, changes to our organisation, or new products or services being offered by us or any company with which we are associated.

You may at any time opt out of receiving marketing information by phoning us on 1800 225 462 or by writing to us at privacy@altx.com.au. If we are sending you direct marketing by email, you may also use the unsubscribe function. We will not charge you for giving effect to your request and will take all reasonable steps to meet your request at the earliest possible opportunity.

9. Security and Overseas disclosure

Your personal and credit-related information may be stored electronically on servers or in paper form. We may use cloud storage, and some servers or service providers may be located outside Australia. We may also disclose your personal and credit-related information to overseas entities that provide support functions to us or to other entities located overseas. The countries in which these recipients may be located may include the United States and the Philippines.

Prior to disclosing your personal and/or credit information to an overseas recipient, we will take reasonable steps to ensure that:

• The overseas recipient does not breach the APPs; or
• The overseas recipient is subject to a law or binding scheme that provides a level of protection substantially similar to the APPs and offers accessible enforcement mechanisms; or
• You have consented to us making the disclosure. Acceptance of any of our services via an application in writing, orally, or by electronic means will be deemed as giving consent to the disclosures detailed in this document.

While we take steps to select and secure reputable offshore service providers and implement measures to protect your information from misuse, loss, unauthorised access, modification, or disclosure, you should be aware that overseas entities may be required to disclose your information to foreign authorities under local laws.

We maintain physical security over our paper and electronic data stores and premises, by means such as locks and security systems, and we also maintain computer and network security.

10. Accuracy of and access to your personal and/or credit information

We will take reasonable steps to ensure that personal and/or credit information is accurate, complete, and up to date, whenever is used, collected, or disclosed. You are entitled to access your personal and/or credit information if you wish and request correction if required.

You may request that we correct the information by phoning us on 1800 225 462 or by writing to us at privacy@altx.com.au. We will respond to such requests in accordance with the Privacy Act and the CR Code. If you request access to your information, we may charge a fee for our costs of retrieving and supplying the information to you.

11. Sensitive information

We will only collect sensitive information about you with your consent. Sensitive information is personal information that includes information relating to your racial or ethnic origin, political persuasion, memberships in trade or professional associations or trade unions, sexual preferences, criminal record, or health.

12. Business without identifying you

In most circumstances, it will be necessary for us to identify you in order to successfully do business with you. However, where it is lawful and practicable to do so, we will offer you the opportunity of doing business with us without providing us with personal information (for example, if you make general inquiries about interest rates or current promotional offers).

We are required to collect your personal information to comply with our obligations under Australian law, including our obligation to verify your identity under the Anti-Money Laundering/ Counter-Terrorism Financing Act 2006 (Cth). We may verify your identity by using information held by a CRB. To do this we may disclose personal information such as your name, date of birth, and address to the CRB to obtain an assessment of whether that personal information matches information held by the CRB. The CRB may give us a report on that assessment and to do so may use personal information about you and other individuals in their files. Alternative means of verifying your identity are available on request. If we are unable to verify your identity using information held by a CRB we will provide you with a notice to that effect and give you the opportunity to contact the CRB to update your information held by them. Your information may also be used for screening against sanctions and Politically Exposed Persons (PEP) lists, and may be disclosed to regulators (e.g., AUSTRAC) where required by law.

13. Document Verification Service

To verify your identity, we may collect, use and disclose the information derived from your government issued documents (such as your Australian passport, state or territory driver licence, Medicare card, citizenship certificate or birth certificate) to the relevant government agency via the DVS, provided we have obtained your express consent to do so.

Our collection, use and disclosure of your information to the DVS to verify your identity is subject to compliance with our legal obligations under the Privacy Act and APPs and our DVS Business User Participation Agreement. Our use of the DVS may involve the use of third-party systems and services, including Equifax. The DVS verifies supplied information by checking it against information held by the government agency that originally issued that document. You may withdraw your consent at any time by contacting us at privacy@altx.com.au or by phoning us on 1800 225 462. Verification of your identity is necessary for us to perform our functions and activities and provide products and services to you. If you do not provide evidence of your identity, or your express consent for us to verify your identity using the DVS, we may be unable to verify your identity, and you may not be able to receive products and services from us as a result.

If you wish to make a complaint relating to the collection, use and disclosure of your information for the purposes of verifying your identity with the DVS, you may contact us by emailing us at complaints@assetline.com.au or calling us on 1800 225 462.

You can find more information about the DVS, including information about the operation and management of the DVS Hub by the Attorney-General’s Department, at www.dvs.gov.au.

We do not collect or retain facial images for identify verification purposes. If this changes, we will inform you how such images will be used, disposed of, and whether they will be retained for any purpose.

14. Complaints

If you are not satisfied with how we have dealt with your personal and/or credit-related information, or you have a complaint about our compliance with the Privacy Act or CR Code, you have the right to make a complaint. You may contact our complaints officer on 1800 225 462 or by writing to us at complaints@assetline.com.au or privacy@altx.com.au.

We will acknowledge your complaint within 7 days and aim to resolve the complaint as quickly as possible. We will provide you with a decision on your complaint within 30 days.

If you are not satisfied with the response of our complaints officer, you may make a complaint to:

The Australian Financial Complaints Authority:
GPO Box 3
Melbourne VIC 3001
Phone: 1800 931 678
Internet: www.afca.org.au
Email: info@afca.org.au

or

The Office of the Australian Information Commissioner:
GPP Box 5288
Sydney NSW 2001
Phone: 1300 363 992
TTY: 133 677 then ask for 1300 363 992
Internet: www.oaic.gov.au
Email: enquiries@oaic.gov.au

15. Further information

You may request further information about the way we manage your personal or credit-related information by contacting us.

16. Changes to our privacy and credit reporting policy

We may change this policy from time to time or as the need arises. We will publish any changes to this policy on our website.

You may request this policy in an alternative form by phoning us on 1800 225 462 or by writing to us at privacy@altx.com.au.

Last updated: 12 February 2026