Finance that gets you moving.

This Privacy Policy sets out how Acquired Financial Services Pty Ltd aims to protect the privacy of your personal information, your rights in relation to your personal information managed by us, and the way in which we collect, hold, use and disclose your personal information.

In handling your personal information, Acquired Financial Services Pty Ltd will comply with the Australian Privacy Act 1988 (including the 13 Australian Privacy Principles) and/or the New Zealand Privacy Act 1993 (including the 12 New Zealand Privacy Principles, where relevant), and all other relevant laws, regulations and codes relating to privacy and personal information ("Privacy Law").

Unless stated otherwise, this Privacy Policy is relevant to the personal information of individuals who are our current or former customers, as well as any other individuals we may deal with (for example, our customers' guarantors, directors and shareholders or individuals we deal with in other capacities as part of our business).

This Privacy Policy may be updated from time to time. You should review it periodically so that you are aware of any changes.

What kind of personal information do we collect?

Personal information is information or an opinion about an identified, or reasonably identifiable, individual. The kinds of personal information we collect and hold vary according to the specific product or service being provided and may include, but is not limited to, your:

1. contact and identification information, such as your name, address, email address, telephone number and date of birth;
2. information about your assets, occupation and income, account balances, account activities, payment history and transactions with us or third parties;
3. government identifiers and related information, such as your driver's licence, passport and visa particulars obtained, for example, to verify your identity or eligibility at the time you request a product or service;
4. other details relating to your relationship with us, including if we deal with you in a capacity other than a customer (for example, information about agreements or other arrangements or transactions you may have with us); and
5. any other information lawfully obtainable under relevant Privacy Law.

How do we collect your personal information?

Where practicable we aim to collect your personal information directly from you. The circumstances in which we may do so will vary depending on the context in which we are dealing with you, but can include, for example, when you are:

• registering or logging in to use our website;
• submitting applications and other forms through our online services and/or in hard copy;
• subscribing to receive alerts/e-brochures and filling in surveys or research, or participating in promotions and competitions we offer;
• contacting us for any reason including, but not limited to, reporting a problem with one of our services or website, requesting further services or otherwise seeking our assistance;
• using our services and any credit provided by us in connection with those.

There may be occasions when we collect your personal information from other sources, such as from:

• a public or commercial information services provider (such as providers of government, business or credit information);
• a third party assisting us to process an application or other transaction, confirming information in an application or other request or assisting us to locate or communicate with you;
• vehicle dealers and other businesses involved in dealings with you and us;
• your employer, such as where we are providing a novated lease.

Generally, we will only collect your personal information from sources other than you if it is unreasonable or impracticable to collect the personal information from you, and the collection of that personal information complies with all relevant Privacy Law.

How we use your personal information

We collect, hold, use and disclose your personal information where it is reasonably necessary for the purposes of providing our products and services, for our other business purposes and for any necessary related purposes. These purposes include, but are not limited to:

1. provision of commercial and consumer vehicle leasing arrangements;
2. processing a product application or service request;
3. managing our products and services or other relationships and arrangements;
4. processing receipts, invoices and payments and servicing customer accounts;
5. responding to customer enquiries about applications, accounts, products or services;
6. understanding customer needs and offering products and services to meet those needs;
7. assessing, processing and investigating insurance risks or claims;
8. accounting, billing and other internal administrative purposes;
9. identifying and informing customers of products and services that may be of interest;
10. notifying you about changes to our products and services;
11. any other legal and regulatory requirements (see below);
12. enforcing our rights, including undertaking debt collection activities and legal proceedings; and
13. undertaking business funding and development activities.

Australian legal requirements

In Australia such laws include the Anti-Money Laundering and Counter-Terrorism Financing Act (for example, to comply with identity verification requirements), the Personal Property Securities Act and State and Territory real property and security interests laws, the National Consumer Credit Protection Act (for example, to comply with responsible lending requirements), the Financial Sector (Collection of Data) Act, the Corporations Act and other regulatory legislation (for example, requiring us to maintain client and transaction records, or to make reports and provide other information to regulators such as ASIC) and the Taxation Administration Act, the Income Tax Assessment Act and other taxation laws.

New Zealand legal requirements

In New Zealand such laws include the Anti-Money Laundering and Countering Financing of Terrorism Act 2013, the Tax Administration Act 1993 and, to the extent necessary, the Credit Contracts and Consumer Finance Act 2003.

Where personal information is used and disclosed, we take steps reasonable in the circumstances to ensure the personal information is relevant to the purposes for which it is to be used and disclosed. You are under no obligation to provide your personal information to us. However, without certain information from you, we may not be able to provide our services to you or any other relevant customer.

Disclosures of your personal information

We may disclose your personal information for purposes such as those listed above and we will always do so consistently with our privacy obligations. Third parties to whom we may disclose your personal information include:

1. our related entities in Australia, New Zealand and overseas;
2. administrative services providers, such as mailing houses, printers and call centre operators;
3. legal, settlement and valuation service providers;
4. data processing and market research service providers;
5. regulatory bodies, law enforcement authorities and toll operators in New Zealand, Australia and overseas;
6. financial and other advisors;
7. other participants in financial and payment systems, such as other banks, credit providers, clearing entities and credit card associations;
8. insurers, assessors and underwriters;
9. brokers and other distributors;
10. your guarantors and security providers;
11. debt collectors; and
12. credit reporting bodies and other information providers.

Credit reporting

We comply with all Privacy Law that applies to the collection, use and disclosure of credit information, including the Australian Credit Reporting Privacy Code and the New Zealand Credit Reporting Privacy Code 2004 (as applicable) in our handling of your credit-related personal information.

Credit-related personal information is a type of personal information which includes information:

1. about your credit history or creditworthiness;
2. about your past experiences with us and other lenders;
3. about the kinds of credit products you have had or sought;
4. about how you have managed your obligations;
5. contained in a credit report about you which is obtained by us from a credit reporting body (CRB); and
6. about your creditworthiness that has been derived by us from such a credit report about you.

Credit-related personal information we collect and hold

Credit-related personal information that we may collect and hold includes:

• your name, address and date of birth, occupation (including the name of your employer or organisation and any previous employers) and your driver's licence number;
• your banking or credit card details and certain financial information about you including a statement of your assets and liabilities;
• the fact that you have applied for consumer credit, or you are a guarantor in respect of that credit application and we have accessed your credit report to assess that application;
• the fact that your organisation has applied for commercial credit, or you are a guarantor in respect of that credit application, and we have accessed your credit report to assess that credit application;
• the fact that we provide goods and services on credit terms to your organisation;
• certain publicly available information that relates to your activities in Australia and New Zealand, and your creditworthiness;
• information that, in our opinion, you have committed a serious credit infringement or credit non-compliance action;
• insolvency information, including adjudications, discharges, suspensions of discharges and annulments of bankruptcy, and entry into, and termination and discharge from, the no asset procedure;
• assessments, evaluations, scores, ratings, summaries and other information relating to your creditworthiness which is derived by a CRB or us, wholly or partly based on the above; and
• administrative information relating to credit provided by us.

We collect your credit-related personal information through your dealings with us or from those acting on your behalf. We may also obtain credit-related personal information from CRBs, who may include this information in reports provided to credit providers to assist them to assess your creditworthiness.

Use and disclosure of credit-related personal information

We collect, hold, use and disclose your credit-related personal information as reasonably necessary for our business purposes and as permitted by law, including:

1. to assess, complete and process your application for credit that you make or for which you are a guarantor;
2. to derive assessments, evaluations, scores, ratings, summaries relating to your creditworthiness that we use in our decision-making processes;
3. for account review and management;
4. to participate in the credit reporting system;
5. to undertake debt recovery and enforcement activities; or
6. to deal with serious credit infringements.

We may disclose your credit-related personal information to Equifax (formerly Veda Advantage) and other CRBs, other credit providers, our affiliates and related entities in New Zealand, Australia and overseas, current or prospective guarantors or security providers, your agents, referees, employer, executors, administrators, trustees, guardians or attorneys, your and our professional advisers, organisations involved in securitisation arrangements or debt assignments, and administrative service providers.

Equifax contact details

Equifax's policy about the management of credit-related personal information for Australia can be found at equifax.com.au/credit-reporting-policy or for New Zealand at equifax.co.nz.

Fraud protection

In Australia you can ask a CRB not to use or disclose your credit-related personal information for a period of 21 days without your consent if you believe on reasonable grounds that you are, or are likely to be, a victim of fraud, including identity fraud. In New Zealand, the equivalent period is 10 working days. CRBs may use credit-related personal information they hold to respond to requests from us or other credit providers to "pre-screen" you for direct marketing. You can ask a CRB not to do this.

Overseas disclosures

We may disclose your personal information (including your credit-related personal information) to overseas recipients in order to provide our services and products and for administrative, data storage or other business management purposes. It is not practicable to list all of the countries to which your information may be transmitted from time to time, but we transfer information between Australia and New Zealand, and it is likely that other such countries will include the United States of America, Japan, Singapore and Hong Kong.

Before disclosing any personal information to an overseas recipient, we take steps reasonable in the circumstances to ensure the overseas recipient complies with relevant Privacy Laws or is bound by a substantially similar privacy scheme to that which is in place in New Zealand and Australia, unless you specifically consent to the overseas disclosure or the disclosure is otherwise required or permitted by law.

Direct marketing

We may use and disclose your personal information in order to inform you of products and services that may be of interest to you. In the event that you do not wish to receive such communications, you can opt out by following the instructions for doing so in the communications we send to you.

Security of your personal information

We may hold your personal information (including your credit-related personal information) in physical form or in electronic form on our systems or the systems of our service providers. We take steps reasonable in the circumstances to ensure that the personal information we hold is protected from misuse, interference and loss and from unauthorised access, modification or disclosure. We hold personal information in both hard copy and electronic forms in secure databases on secure premises, accessible only by authorised staff, and follow procedural safeguards that meet or exceed the relevant Privacy Law.

We require third parties handling personal information on our behalf to follow equally compliant standards of security and confidentiality. We will destroy or de-identify personal information in circumstances where it is no longer required, unless we are otherwise required or authorised by law to retain the information.

Access and correction

We take steps reasonable in the circumstances to ensure that personal information we hold is accurate, up-to-date, complete, relevant and not misleading. You have a right to access and seek correction of your personal information (including your credit-related personal information) that is collected and held by us, subject to some exceptions specified in the Privacy Act 1988 (Cth) (Australia), and the Privacy Act 1993 (New Zealand).

If at any time you would like to access or amend the personal information we hold about you, or you would like more information on our approach to privacy, please contact our Privacy Officer in accordance with the contact details below.

To obtain access to your personal information:

1. you will have to provide proof of identity;
2. we request that you be reasonably specific about the information you require; and
3. we may charge you a reasonable administration fee which reflects the cost to us for providing access in accordance with your request. We will not charge you for making the request.

If we refuse your request to access or correct your personal information, we will provide you with written reasons for the refusal and details of the ways in which you can make a complaint. If you are dissatisfied with a refusal, you may make a complaint to the Australian Information Commissioner / New Zealand Privacy Commissioner or to an applicable external dispute resolution scheme.

Complaints and disputes

If you wish to complain about the way in which we collect or handle your personal information, including your credit-related personal information, or if you believe we have breached any Privacy Law, you can contact our Privacy Officer using the details below. Following a complaint, our Privacy Officer will commence an investigation and you will be informed of the outcome. At all times, privacy complaints:

1. will be treated seriously;
2. will be dealt with promptly;
3. will be dealt with in a confidential manner; and
4. will not affect your existing obligations or impact on the commercial arrangements between you and us.

If you are dissatisfied with the outcome of your complaint, you may refer the complaint to the Australian Information Commissioner / New Zealand Privacy Commissioner or an applicable external dispute resolution scheme.

How to contact us