This Policy also includes our credit reporting policy, that is, it covers additional information on how we manage your personal information collected in connection with a credit application, or a credit facility. We refer to this credit-related information below as credit information.
If you are in a country that is a member of the European Economic Area (EEA), the EU General Data Protection Regulation 2016/679 (‘GDPR’) governs the way we collect, use, hold, process and disclose your personal information. Under the GDPR, we are a data controller. We make decisions on how and why your personal information is processed.
What personal information do we collect and hold?
The types of information that we collect and hold about you could include:
ID information such as your name, postal or email address, telephone numbers, and date of birth;
other contact details such as social media handles;
financial details such as your tax file number; and
other information we think is necessary.
When the law authorises or requires us to collect information
We may collect information about you because we are required or authorised by law to collect it. There are laws which require us to collect personal information. For example, we require personal information to verify your identity under Australian Anti-Money Laundering law.
What do we collect via your website activity?
If you’re an internet customer of ours, we monitor your use of internet services to ensure we can verify you and can receive information from us, and to identify ways we can improve our services for you.
If you start but don’t submit an on-line application, we can contact you using any of the contact details you’ve supplied to offer help completing it. The information in applications will be kept temporarily then destroyed if the application is not completed.
We also know that some customers like to engage with us through social media channels. We may collect information about you when you interact with us through these channels. However, for all confidential matters, we’ll ensure we interact with you via a secure forum.
To improve our services and products, we sometimes collect de-identified information from web users. That information could include IP addresses or geographical information to ensure your use of our web applications is secure.