Credit Reporting Policy

The Affordable Car Leasing Pty Ltd Group of companies (ACL Group*) (“we” / “us”/ “our”) take our obligations to protect personal information about individuals, including credit information and credit eligibility information, seriously. We are bound by the Credit Reporting Privacy Code, the Privacy Act 1988 (Cth) and the Australian Privacy Principles (“APPs”) (together, “the Privacy Act”).

We recommend you read the ACL Group Credit Reporting Policy in conjunction with the ACL Group Privacy Policy. A copy of the Policy can be obtained on our website or telephoning 1300 782 226. We encourage you to check our websites regularly for any updates to our Credit Reporting Policy.

The Privacy Act defines the following terms:

Credit eligibility information is your credit file and credit score, and any further information a credit provider derives from your credit reporting information

Credit information is a type of personal information about an individual that Part IIIA of the Privacy Act covers. It includes information that identifies you, about the amount you have borrowed, about repayments and about defaults.

About this Credit Reporting Policy

This ACL Group Credit Reporting Policy sets out how your credit information and credit eligibility information are managed by us.

The Privacy Act contains a variety of detailed definitions describing these types of information. To make it easier for you to read this policy we have included only some general explanations above but if you would like to refer to the full provisions in the Act and or the Credit Reporting Privacy Code they are available on the website of the Office of the Australian Information Commissioner at www.oaic.gov.au.

This Policy applies to any individual in relation to whom we hold credit information or credit eligibility information no matter how they interact with us (e.g. on-line, in person, via a third party, or over the phone).

The kinds of credit information that ACL Group collects and holds, and how ACL Group collects and holds that information

We collect and hold various kinds of credit related information which may include:

• identification information including your current and any prior names and addresses, any known alias you may have, your date of birth, your drivers licence number (if applicable) and your current or last known employer;
• details of consumer credit or commercial credit (including the name of each relevant credit provider) that you have applied for, the type and amount of that credit and the fact that a credit provider, mortgage insurer or trade insurer has sought information about you from a credit reporting body in relation to an application;
• consumer credit liability information, being information about consumer credit accounts you hold, or have held, with us, such as the type of account, the date the account was opened and closed, the maximum amount of credit approved for that account and some specific terms and conditions relating to the repayment of credit under that account;
• repayment history information, which includes whether in relation to your consumer credit facilities you have made payments when due and, if not, when overdue payments have been made;
• default information, being information about a payment owed by you as a borrower or guarantor in connection with consumer credit that remains overdue for more than 60 days and which we can disclose to a credit reporting body if certain requirements under the Privacy Act are met;
• payment information, which includes details of the date on which you have paid overdue amounts that were previously recorded as default information with a credit reporting body;
• whether in our or another credit provider’s opinion you have committed a serious credit infringement;
• new arrangement information which outlines that you have entered into certain types of arrangements with us in relation to consumer credit where you have been overdue in making a payment and we have provided default information to a credit reporting body. New arrangement information is either that the terms and conditions of that consumer credit have been varied as a result of you being overdue or that you have been provided with new credit relating to the original amount of credit;
• court proceedings information, which includes information about a judgement against you in proceedings that relate to any credit that has been provided to, or applied for, by you;
• personal insolvency information;
• certain publicly available information;
• scores, ratings, summaries, evaluations and other information relating to your credit worthiness which is derived by us or by credit reporting bodies wholly or partly on the basis of the information above;
• certain administrative information relating to credit, such as account and customer numbers.

Credit information may be collected by ACL Group in a number of ways including:

• by using written forms;
• through contact over the telephone, your mobile or other messaging technology;
• via the internet; and
• in person.

We may collect credit information:

• directly from you or from persons or organisations acting on your behalf;
• from credit reporting bodies and other credit providers;
• from publicly available sources of information; and
• from information derived by us from your conduct.

The kinds of credit eligibility information that ACL Group holds, and how ACL Group holds that information

We use credit reporting information acquired from credit reporting bodies to derive other information that assists us in assessing your creditworthiness, for example credit risk ratings and credit scores.

The kinds of Credit Provider derived information that ACL Group usually derives from credit reporting information disclosed to ACL Group by a Credit Reporting Body

We may obtain credit reporting information about you from a credit reporting body. Credit reporting information includes:

• credit information of the kinds listed under “What kinds of credit information do we collect and hold?” but relating primarily to your dealings with other credit providers (such as about credit applications you have made or credit that you hold with other credit providers). This information will typically have been provided by other credit providers or other third parties; and
• credit worthiness information about you that credit reporting bodies derive from the information above, such as credit scores, risk ratings and other evaluations about you.

We may disclose your credit information to credit reporting bodies where the Privacy Act permits us to do so.

For example, if you fail to meet your payment obligations in relation to consumer credit provided by us or if you commit a serious credit infringement, we may be entitled to disclose this to a credit reporting body.

Credit reporting bodies may include credit related information provided by us in reports provided to other credit providers to assist them to assess your credit worthiness.

We currently disclose credit information to Equifax Pty Ltd (Equifax). Their contact details are:

Equifax
Post: PO Box 964, North Sydney NSW 2059
Telephone: 13 83 32
Website: www.equifax.com.au

Equifax is required to have a policy which explains how they will manage your credit-related personal information. If you would like to read Equifax’s policy, visit their website and follow the “Privacy” link, or you can contact them directly for further information.

You have the right to request Equifax to exclude your credit reporting information from any permissible direct marketing activities ACL Group may request them to perform. You also have the right to request Equifax not to use or disclose your credit reporting information if you believe that you have been, or are likely to be, the victim of fraud (for example, you suspect someone is using your identity details to apply for credit). You must contact Equifax directly should this be the case.

The purposes for which ACL Group collects, holds, uses and discloses credit information and credit eligibility information

ACL Group collects, holds, uses and discloses credit information and credit eligibility information about you for purposes reasonably necessary for our business activities and consistently with the requirements in the Privacy Act as permitted by law. These purposes include:

• to assess applications for credit (including assessing any proposed guarantors);
• for the ongoing servicing and administration of our accounts and products;
• to assist with the management, including recovery, of outstanding debts;
• to assist you if we consider that you may be at risk of default;
• internal management purposes;
• for data analysis;
• to participate in the credit reporting system and provide information to credit reporting bodies as permitted by the Privacy Act;
• to undertake securitisation activities and debt assignments;
• to deal with complaints and legal proceedings;
• to meet our legal and regulatory requirements (such as reporting matters to regulators or enforcement bodies when authorised or required by law); and
• to assist other credit providers with such purposes in circumstances permitted by the Privacy Act (such as disclosing information to another credit provider with your consent or where you have committed a serious credit infringement).

Restrictions apply under the Privacy Act in relation to the circumstances and purposes for which such information may be used or disclosed and we comply with these restrictions. For example credit eligibility may not be disclosed to some types of overseas entities and restrictions apply on the use of credit eligibility information for direct marketing.

We store information in different ways, including in computer systems, electronic form, digital records, telephone recordings and/or in paper files. The security of your credit information and credit eligibility information is important to us and we take reasonable steps to protect it from misuse, interference, loss, unauthorised access, modification or disclosure. Some of the ways we do this are:

• confidentiality requirements of our employees;
• document storage security policies;
• security measures for access to our systems;
• only giving access to credit information to a person who is verified to be able to receive that information;
• control of access to our buildings; and
• electronic security systems, such as firewalls and data encryption on our websites.

We can store credit information and credit eligibility information physically or electronically with third party data storage providers. Where we do this, we use contractual arrangements to ensure those providers take appropriate measures to protect that information and restrict the uses to which they can put that information.

How an individual may access credit eligibility information about the individual that is held by ACL Group

You may access the credit eligibility information which we hold about you by contacting us on the details provided on our website. There is no charge for providing the information to you.

We will need to verify your identity before giving you access. We will usually provide the information requested within 21 days of receiving your request. If there is a reason we are unable to agree to a request for access to your credit eligibility information we will advise you of this in writing.

How an individual may seek the correction of credit information or credit eligibility information about the individual that is held by ACL Group

We aim to hold accurate and up-to-date credit information and credit eligibility information about you at all times. If you believe that any credit related information held by us about you is inaccurate, incomplete, irrelevant, out of date or misleading you have the right under the Privacy Act to request that we correct that credit related information.

To seek such a correction please contact us to discuss your query.

In certain situations, we may not agree to a request to correct information we hold about you. If this occurs, we will advise you of this and our reason for not agreeing to the correction request.

How an individual may complain about a failure of ACL Group to comply with the Credit Reporting Code or the Privacy Act and how ACL Group will deal with such a complaint

If you believe that we have failed to comply with the credit reporting requirements in Part IIIA of the Privacy Act or the Credit Reporting Privacy Code, please contact our Customer Care department and we will then follow our Internal Dispute Resolution (IDR) process. The “Contact Us” section of our website contains details of the ways you can contact Customer Care to discuss your concerns.

If the complaint remains unresolved you may refer the matter to our recognised External Dispute Resolution scheme (“EDR”). We are a member of the Australian Financial Complaints Authority (“AFCA”). AFCA independently and impartially resolves disputes between consumers and participating members on matters including privacy. You can contact AFCA on the following details:

Australian Financial Complaints Authority
Post: GPO Box 3, Melbourne VIC 3001
Telephone: 1800 931 678
Email: info@afca.org.au
Website: www.afca.org.au

Alternatively, you may refer the matter to the Office of the Australian Information Commissioner (the “OAIC”). You can contact OAIC on the following details:

The Office of the Australian Information Commissioner
Post: GPO Box 5218, Sydney NSW 2001
Telephone: 1300 363 992
Fax: 02 9284 9666
Website: www.oaic.gov.au

Whether ACL Group is likely to disclose credit information or credit eligibility information to such entities that do not have an Australian link – the countries in which these entities are likely to be located

The way we approve and manage credit involves a range of tasks. Some of these tasks are carried out for us by third party service providers, both in and outside Australia, including to the Asia-Pacific, European Union or the United States of America. In carrying out these tasks, service providers may have access to credit related personal information. To protect your credit information, the ACL Group enters in to contracts with the service providers that require them to comply with the Privacy Act. These contracts oblige them to only use the credit information we disclose to them for the specific role we ask them to perform.

Last updated: October 2020