Privacy policy
How we handle personal information, what we collect when you contact us, and how to reach us about it.
Last updated 26 September 2026.
Who this covers
This policy applies to Borderless and to borderless.credit, including every form on it.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the thirteen Australian Privacy Principles in Schedule 1 to that Act.
What we collect, and why
We only collect what we need to respond to you. Sending us an enquiry does not commit you to anything.
| You give us | Your name and email address, and your organisation if you give it. Depending on the form, whether you are an originator or an investor, what your business lends against, the facility size you are looking for, and any message you add. |
|---|---|
| We record automatically | The IP address and browser identifier the form was submitted from. We keep these to detect automated submissions. We also record the website measurements described below. |
| Why we need it | To reply to you, and to understand what you are looking for. |
If you do not give us this information we may not be able to respond to you.
Website analytics choices
We use PostHog to understand visits, sessions, page views, referring sources, campaign parameters, approximate geography, broad browser and device types, and whether one of our enquiry forms was successfully submitted. We do not send PostHog the information entered into a form.
On your first visit, the analytics panel gives you two equal choices. If you accept analytics, PostHog uses a first-party cookie to recognise repeat visits. We also use link and button interaction capture, heatmaps, performance and error measurement, and privacy-masked session replay. All form fields are masked and excluded from automatic capture. You can reopen Cookie settings at any time and change your choice.
If you continue without analytics, PostHog uses cookieless measurement. It receives the request's IP address and user-agent string and turns them into an irreversible identifier using a salt that changes each day. The IP address is removed before location enrichment. This provides anonymous daily counts without following you across days.
The site keeps your entry page, the referring website's name if supplied, and any campaign tags in your browser tab's session storage until you make a choice. Nothing is sent before you choose. Your first measured page view carries them, and they are then removed; closing the tab also clears them.
A link sent from our investor relationship system may contain an opaque link identifier. It contains no name or email address. Until you choose, it stays in the address and follows links to other pages on this site only; it is not saved in browser storage. After your choice it is removed from those links. If you accept analytics, our system records which link was used in that session and associates it with its intended recipient in our records. It does not use the link as your browser identity. Because a link can be forwarded, this is evidence that the attributed link was used, not proof that a particular person visited. Do Not Track or Global Privacy Control disables PostHog and removes the link identifier from the address and navigation.
Who we share it with
We do not sell personal information, and we do not disclose it for marketing. We share it only where it is needed to respond to you or where the law requires it:
- Our professional advisers, being legal, accounting and compliance advisers, where they need it to advise us.
- Our technology providers, who host this site and the database that holds submissions, and who may access it only to keep those services running.
- PostHog, which processes the website measurements described above on our behalf, including a link and investor record identifier for an attributed visit, and does not receive the contents of our forms.
- A regulator, court or other authority where we are required or authorised by law to disclose it.
Where it is held
Form submissions are stored in a database hosted in Sydney, Australia. Some of our technology providers are companies based in the United States. Website measurements are processed in PostHog's United States cloud, and provider personnel may be able to access information held for us in the course of supporting those services. Before disclosing personal information to an overseas recipient we take the steps required by Australian Privacy Principle 8 to ensure it is handled consistently with the Australian Privacy Principles.
Keeping it secure, and how long we keep it
Access to submissions is restricted to the people at Borderless who need it, and is authenticated. Information is transmitted over an encrypted connection.
We keep an enquiry for as long as we are in contact with you about it, and then for as long as we are required to keep records. When information is no longer needed and we are not required to keep it, we destroy it or de-identify it.
Getting access, or correcting it
You may ask us for a copy of the personal information we hold about you, and you may ask us to correct it if it is wrong. Write to the address below. We will respond within a reasonable period, normally 30 days. There is no charge for making a request. If we cannot give you access we will tell you why in writing.
If you are not happy with how we handled it
Tell us first, using the contact details below, and we will investigate and respond in writing. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner, which is the regulator for privacy in Australia.
Office of the Australian Information Commissioner
oaic.gov.au · 1300 363 992
· GPO Box 5218, Sydney NSW 2001
Contact us
- Privacy enquiries
- hello@borderless.credit
Changes
If we change this policy we will publish the revised version here and update the date at the top. The version on this page is the current one.