At STAC® (including STAC Capital Pty Ltd, STAC Home Finance Pty Ltd, STAC Capital Advisory Services Pty Ltd), we are committed to protecting your privacy in accordance with the Privacy Act 1998 (Cth). This Privacy Policy describes our current policies and practices in relation to the handling and use of personal information.

What information do we collect and how do we use it?

We will ask you for personal information when we assist you with your finance. We use the information you provide to advise about and assist with your credit needs. We only provide your information to the companies with whom you choose to deal (and their representatives).

We also use your information to send you requested product information and to enable us to manage your ongoing relationship with us e.g. invoicing, client surveys etc. We may do so by mail or electronically unless you tell us that you do not wish to receive electronic communications.

We may occasionally notify you about promotions, new services and special offers, events or articles we think will be of interest to you. We may send you regular updates by email or by post. If you would rather not receive this information, email or write to us.

We may also use your information internally to help us improve our services and help resolve any problems.

What if you don’t provide some information to us?

If you don’t provide us with full information, we can’t properly advise or assist you with your credit needs.

How do we hold and protect your information?

We strive to maintain the reliability, accuracy, completeness and currency of the personal information we hold and to protect its privacy and security. We keep personal information only for as long as is reasonably necessary for the purpose for which it was collected or to comply with any applicable legal or ethical reporting or document retention requirements.

We hold the information we collect from you electronically on secure cloud storage; paper documents are stored safely within our offices, or scanned and saved on secure cloud storage with the original paper version then destroyed. We take all reasonable steps to protect your personal information from misuse, loss and unauthorised access.

We ensure that your information is safe by applying appropriate security measures and procedures, including requiring all staff to maintain strict confidentiality of client information, computer and mobile device passwords, as well as remote device-wipe capabilities.

Will we disclose the information we collect to anyone?

We do not sell, trade, or rent your personal information to others.

We may need to provide your information to our credit licensee (e.g. for administration and supervision activities), contractors who supply services to us (e.g. to handle mailings on our behalf), artificial intelligence service providers for business automation and communication processing, offshore administrative staff in secure controlled environments, or to other companies in the event of a corporate sale, merger, re-organisation, dissolution or similar event. However, we will do our best to ensure that they protect your information in the same way that we do.

We may also provide your information to others if we are required to do so by law or under some unusual other circumstances which the Privacy Act permits.

Artificial Intelligence-Powered Business Systems

We use artificial intelligence (AI) systems to improve our service delivery and operational efficiency. These AI tools may process your personal information for:

• Email management and automated response drafting
• Meeting transcription and note-taking services
• Document analysis and administrative tasks
• Customer relationship management and workflow automation

AI systems process your information on servers located overseas, primarily in the United States, United Kingdom, European Union and Australia. We select AI providers with strong security certifications and contractual privacy protections, however we cannot guarantee that overseas AI processing meets the same privacy protection standards as Australian law.

You can opt out of AI processing of your information by contacting us. This may affect the speed of our services but will not impact the quality of any advice provided.

Communication Recording and AI Processing

We may record telephone calls, video conferences, and meetings for quality assurance, training, compliance monitoring, and accurate documentation. Recordings may be processed using AI systems to create summaries, extract key information, and assist with follow-up tasks.

We will inform you when communications are being recorded and obtain your consent. You can opt out of recording or AI processing of your communications at any time.

International Data Transfers

Your personal information may be transferred to and processed in countries outside Australia, including:

Philippines: Administrative support staff who can access information only through secure virtual desktop environments hosted in Australia. These staff are prohibited from downloading, copying, or transferring data outside our secure systems.

United States, United Kingdom, European Union: AI service providers for email management, meeting transcription, and business automation systems.

For all overseas data transfers, we implement:

• Contractual privacy protections requiring overseas recipients to protect your information
• Technical security measures including encryption and access controls
• Regular monitoring and compliance reviews
• Audit trails and access logging

However, we cannot guarantee that overseas processing will provide the same level of privacy protection as Australian privacy laws require.

How can you check, update or change the information we are holding?

Upon receipt of your written request and enough information to allow us to identify the information, we will disclose to you the personal information we hold about you. We will also correct, amend or delete any personal information that we agree is inaccurate.

If you wish to access or correct your personal information please write to Mark Trayner, Managing Director, at [email protected]

We do not charge for receiving a request for access to personal information or for complying with a correction request. We do not charge for providing access to personal information.

Your additional rights for Artificial Intelligence (AI) and overseas processing:

You may instruct us in writing to comply with any of the following, however in doing so you understand and acknowledge that the quality and timeliness of the services we provide to you may be adversely impacted:

• Opt out of all Artificial Intelligence processing of your personal information
• Request human-only handling of your communications and documentation
• Exclude specific types of information from AI processing
• Request information about which AI systems process your data
• Request deletion of your information from AI systems (where technically possible)
• Opt out of offshore administrative processing

Your consent

By asking us to assist with your credit needs, you consent to the collection and use of the information you have provided to us for the purposes described above, including AI processing and overseas data transfers as outlined in this policy.

You can withdraw or modify your consent for AI processing or overseas transfers at any time by contacting us.

Tell us what you think

We welcome your questions and comments about privacy. If you have any concerns or complaints, please contact Mark Trayner, Managing Director, on 1300 00STAC (7822) or at [email protected].

Complaints

INTERNAL DISPUTE RESOLUTION

If you do have a complaint, please let us know by email, because if we don’t know about it we can’t fix it. You may also contact us by email addressed to: 

The Complaints Officer
[email protected]

Please make sure you include as much information as you can. You should explain the details of your complaint as clearly as you can. You must do this in writing. When we receive a complaint, we will attempt to resolve it promptly.

Website Cookies

STAC Capital uses cookies that are used to collect and analyse data through the use of Google Analytics. For further information on how Google uses this data, please visit www.google.com/policies/privacy/partners

This Privacy Policy was last updated on 21 July 2025. We may update this policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on our website with an updated effective date.