Privacy Policy
Last updated 14 September 2026
Regatta Capital is an Australian non-bank lender and private capital group. This policy explains what personal information we collect through this website and in the course of our lending and investment business, what we do with it, and what we do not do with it.
It is written from what this website actually does. Where we say we do not collect something, the site does not collect it.
Who we are
Regatta Capital Management Australia, of Level 38, Riparian Plaza, 71 Eagle Street, Brisbane QLD 4000. Our national line is 1300 992 662 and enquiries reach us at brisbane@regattacapital.com.au.
We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
What you send us
Three forms on this site collect information, and each one tells you what it is asking for as you fill it in:
- Funding applications. Your name, company, email, phone, and the project details you provide — location, facility sought, gross realisable value, pre-sales position and any description you write.
- Wholesale investor registrations. Your name, entity or fund, email, phone, the investor classification you select, and anything you write about target allocation.
- General enquiries. Your name, email, phone, company and your message.
What we record alongside a submission
When you submit any of those forms we also record your IP address and the browser identification string your device sends. We keep them to identify and limit automated abuse of the forms, and because a funding application is a commercial approach whose origin we may need to establish later.
An IP address is personal information under the Australian Privacy Principles. We are telling you plainly because most websites collect this and say nothing.
This is the only place on this site where an IP address is recorded. Simply reading these pages does not create one — see the next section.
What we do not collect when you browse
We count how the public pages are used, and we do it on our own servers rather than handing it to anybody else. For each visit we record which pages were opened and how far down them somebody read, how long the tab was actually being used, and the kind of device — phone, tablet or desktop.
What is deliberately not recorded matters as much as what is:
- No IP address for ordinary browsing.
- No cookie. The identifier that links one page of your visit to the next lives in your browser tab and is destroyed when you close it. It is not linked to a previous visit, to anything you later send us, or to you.
- No browser or device identification string, no screen dimensions, no language or time zone.
- No cross-site tracking, no fingerprinting, and no advertising or analytics network — no Google Analytics, no Meta pixel, nothing of that kind.
Photographs are loaded from a third party
The photographs on this site are currently served from Unsplash, an external image library. Your browser fetches them directly, which means Unsplash receives your IP address and the address of the page you are viewing, on every page that carries an image. We receive nothing from them and have no agreement with them about it.
This is a temporary arrangement while the client's own photography is prepared, and this section will be removed when the images are served from our own domain.
Information we collect in the course of business
If a funding application or investment enquiry progresses, we will collect considerably more than a web form holds — financial statements, identification documents, corporate and trust records, valuations, quantity surveyor reports and credit information.
As a lender we have obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) to identify and verify our customers and their beneficial owners. Where those obligations apply we must collect that information, and we cannot proceed with a transaction if it is not provided.
For wholesale investors, Section 708 and Section 761G of the Corporations Act 2001 (Cth) require evidence of eligibility — typically an accountant's certificate. We collect and retain that evidence because the law requires us to hold it.
Why we collect it, and what we do with it
We do not sell personal information. We do not disclose it for anybody else's marketing. We do not use the contents of your enquiry to train anything.
- To assess, structure, document and administer loan facilities and investments.
- To verify identity and eligibility where the law requires it.
- To communicate with you about a transaction or an enquiry you have made.
- To meet our obligations to regulators, auditors and courts.
Who else sees it
Only where it is necessary for the purpose you gave it to us for:
- Wholesale and institutional investors who co-fund or participate in a facility, where a transaction requires it.
- Independent valuers and quantity surveyors on our accredited panel, who assess a project's costs and values.
- Lawyers, accountants and auditors advising on or documenting a transaction.
- Service providers who host this website and relay its email. They act on our instructions and cannot use the information for their own purposes.
- Regulators and law enforcement where we are required or authorised by law to disclose.
Information going overseas
Some of our capital partners are located outside Australia. Where a transaction involves an overseas investor, information about the borrower and the project may be disclosed to them in the ordinary course of syndicating or participating in a facility.
The email that notifies us of a form submission is relayed through a mail provider that may process it outside Australia.
Where we disclose personal information overseas we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles.
How long we keep it
Some of these periods are enforced automatically by this website. The rest are our practice, and we review them.
What How long Page counts for the public site Deleted automatically after 24 months. These hold no name, no address and no identifier that outlives your visit — what remains after that is a count of pages rather than a record of anybody. Enquiries and applications that do not proceed For as long as the conversation is live, and for a reasonable period afterwards in case it resumes. Reviewed periodically and deleted when no longer relevant. Records of executed transactions For at least seven years after the facility ends, which is what our obligations under the AML/CTF Act and Australian tax and corporations law require. Wholesale investor eligibility evidence For as long as we deal with you as a wholesale client, and for seven years afterwards. Cookies
This site sets no advertising or analytics cookies, so there is no consent banner to dismiss.
One thing is stored on your device that is not a cookie, and describing the cookies while staying quiet about it would be a technicality rather than an answer: the page counting described above keeps a random identifier in your browser tab's own short-term storage. It is not a cookie, it is never sent with ordinary requests, no other site can read it, and the moment you close the tab it is gone for good.
If you sign in to our administration console — which is for our staff, not for clients — that sets a session cookie which is strictly necessary for signing in.
Keeping it safe
Information submitted through this site is transmitted over an encrypted connection and stored in a database that is not reachable from the public internet. Access to our administration console requires an individual account and a password, and every action taken in it is logged against the person who took it. Stored credentials are encrypted at rest.
No system is perfect. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.
Accessing and correcting your information
You may ask us what personal information we hold about you and ask us to correct it. Write to brisbane@regattacapital.com.au or call 1300 992 662. We will respond within a reasonable period, and ordinarily within 30 days.
There are circumstances in which we may refuse access — where the law requires us to, or where giving access would unreasonably affect somebody else's privacy. If we refuse we will tell you why.
Complaints
If you think we have mishandled your personal information, tell us first: brisbane@regattacapital.com.au, marked for the attention of the Privacy Officer. We will investigate and respond.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner — oaic.gov.au, or 1300 363 992.
Changes to this policy
We will update this page when what we do changes. The date at the top is when it last changed. If a change materially affects how we handle information you have already given us, we will tell you directly rather than relying on you to notice.