CREDIT INFORMATION (PRIVACY) MANAGEMENT POLICY
LOAN BARN PTY LTD (hereafter referred to as Loan Barn)
Australian Credit Licence No. 384030
Please read this document BEFORE you provide Loan Barn with ANY personal information in connection with applying for a loan from us. If you provide us with this personal information, we will assume that you have followed this instruction and that you have read and understood this Policy.
This policy has been developed to appropriately acknowledge the importance of, and assist in providing a framework for, the appropriate level of protection for consumer identification and credit information protection. The policy represents Loan Barn’ commitment to compliance with the privacy laws and privacy code obligations.
Concerning the collection, holding, use and disclosure of credit related personal information
We (Loan Barn) provide this policy in accordance with the Privacy Amendment (Enhancing Privacy Protection) Act 2012, hereafter referred to as the Privacy Act, detailing the lawful approach we take in the collection of information in our role as credit providers and in regard to the management and use of all information collected from our potential customers and actual customers, and all subsequent dealings with customer/consumer representatives, credit reporting bodies, and other entities listed in this policy.
Our collection of information may start with a credit suitability or affordability process to establish your credit status, or credit worthiness, and will include enquiries and reasonable steps to verify the identity and credit information we collect from you and from other sources. Enquiries may include obtaining a credit report about you from a credit reporting or reference body, such as Equifax, the body with which we have a contract. Verification will include seeking access to and reviewing bank statements.
In the course of our business, we provide consumer credit, as defined in Section 6(1) of the Privacy Act. This credit being provided wholly or primarily for personal, family, or household purposes. From time to time we may also offer business loans.
In the course of our business we seek to establish your credit worthiness. That means:
- your eligibility to be provided with credit;
- your history in relation to credit; and
- your capacity to repay an amount of credit.
The kinds of credit information we collect and hold
In accordance with the industry’s mandatory Credit Reporting Privacy Code, Obligation 5.1, we collect and hold credit reporting information, credit identification information, credit capacity information and personal information collected and held under Part 111A of the Privacy Act.
In accordance with Section 6 of the Privacy Act, we may collect and hold the following personal information that may be considered confidential:
- identification information;
- credit liability information;
- repayment history information;
- a statement that an information request has been made to a credit reporting body, by a credit provider, in relation to your application for credit;
- the type of personal or commercial credit, and the amount of credit sought in an application that you have made to a credit provider, in connection with which that credit provider has made an information request concerning you;
- overdue and default information concerning your current and/or previous personal and/or business loans;
- payment information about you, including information concerning late payments;
- information about new arrangements you may have made involving an existing credit contract;
- court proceedings (civil) information about you;
- personal insolvency information about you, as included on the National Personal Insolvency Index, which relates to bankruptcy, debt agreements, personal insolvency agreements and Sections 50 and/or 188 Bankruptcy Act directions and/or authorities;
- insolvency information associated with your company or companies seeking loans;
- publicly available information concerning your activities in Australia and your credit worthiness, including information recorded on the National Personal Insolvency Index;
- any opinion that we might reach that you have committed a serious credit infringement in relation to consumer credit we have provided to you, with the circumstances specified on the file;
- any opinion that we might reach that you have committed a serious credit infringement in relation to business or commercial credit we have provided to you, with the circumstances specified on the file;
- unsolicited information that we may deem relevant to keep on file; and
- other relevant information in the circumstances.
Explanation of some of the key elements listed above is as follows.
Identification information about you
During the credit suitability assessment process, required under Sections 128-131 of the National Consumer Credit Protection Act, to assist in protecting you against identity theft and to assist in reducing the opportunity for fraud, we may ask you for some or all of the following identification information:
- your full name;
- any alias or previous name/s;
- date of birth;
- current address;
- 2 previous addresses (if any);
- name of current employer; or
- name of last known employer; and
- driver’s licence number.
To assist with business or commercial loan applications, we may ask you for:
- a copy of the company’s Constitution and associated documentation;
- a copy of documents identifying the company directors;
- financial statements; and
- other documents.
Consumer and business credit liability information
We collect and hold consumer and/or business credit liability information, including:
- the name of the credit provider;
- whether or not the credit provider holds an Australian Credit Licence;
- the type of consumer credit;
- the day on which the consumer credit was entered into;
- the terms or conditions of the consumer credit which relate to the repayment of that credit and anything that may be prescribed by regulation;
- the maximum amount available under the consumer credit; and
- the day on which the consumer credit is terminated, or otherwise ceases to be in force.
Repayment history information
If and when we provide consumer credit to you, the following information about you as a consumer may be collected and held:
- whether or not you have met monthly repayment obligations, including any defaults;
- the date on which the monthly payment is due and payable; and
- if you make payments after the due and payable day, the day on which you actually made the payment.
Thereafter this information may be provided to a credit reporting or reference body.
Overdue and Default information
We collect and hold information about any payment that is overdue and, under Section 88 of the National Credit Code, Regulation 86 of the National Consumer Credit Protection Regulations 2010 and Section 6Q of the Privacy Act, that:
- you are overdue in making the payment;
- you have received a written notice from us advising you of the overdue amount and requesting payment of the amount;
- the Statute of Limitations does not prevent us from recovering the amount; and
- where the amount overdue is $150 or more, it is sufficient to list on your file with a credit reporting body. Any amount will be listed on the file we maintain concerning your identification and credit information.
We may collect and hold information that is given or made against you in civil court proceedings that relate to any credit that has been provided to you, or for which you have applied.
How we collect credit information
We collect credit information from 6 possible sources:
- from you;
- from the documentation we request and you provide;
- from credit reporting bodies;
- from people or organisations you permit us to contact, to verify your credit relevant details;
- from other credit providers;
- from the External Dispute Resolution scheme (AFCA); and
- from information about you publicly available, including court and tribunal reports and decisions.
Please note, depending on circumstances, we may choose not to seek information from all these sources to assess your credit application.
How we hold credit information securely
In all circumstances, we take reasonable steps to protect your information from misuse, loss, interference, unauthorised access, modification or unauthorised disclosure. We choose not to provide further detail, for security reasons. Further protection detail can be provided to you verbally, on request.
The kinds of credit eligibility information that we hold
This is credit reporting information and information about you that may be disclosed to us by a credit reporting body, under Division 2 of Part 111A of the Privacy Act.
How we hold credit eligibility information
Hard copies are held in a locked environment, with other security protection after business hours and electronic copies are held in a secure environment, with the application of appropriate passwords and other computer and software security techniques.
The credit reporting body
We provide information to and request information from Equifax, a credit reporting body. You may contact Equifax if:
- you believe that the information they have on their file about you needs amendment or correction; and/or
- you want the body to hold off disclosing any information from the their file about you because, on reasonable grounds, you believe that you have been, or are likely to be, a victim of fraud; and/or
- you do not want the body to use their credit reporting information for the purposes of pre-screening for direct marketing by a credit provider and/or
The contact details for Equifax are:
Telephone: 13 8332
Process when collecting information from a credit reporting body
To obtain a credit report of some kind about you, we are required to provide certain information which Equifax will note on your credit file, along with the fact that we made an enquiry.
In accordance with Equifax polices, this information will probably appear on your credit report and will be accessible by credit providers who are customers of Equifax, when you are applying for a loan at some time in the future.
This identity and credit information and these listings could adversely impact on your future applications for credit, if the relevant future credit provider’s application approval policies and processes include consideration of the number of past inquires as being indicative of something adverse or negative about you as a borrower.
We have no control over or input into Equifax’s policies with regard to the content of their credit reports. If you proceed to applying for a loan with us, you will be provided with a Privacy Consent Agreement which includes further detail from the company concerning privacy for borrowers. When you indicate your consent or acceptance of that agreement, you will be agreeing to the possibility that the current or future information on your credit report may prevent you from obtaining the loan you are currently seeking, or some future loan.
Information provided by credit reporting or reference bodies
Subject to conditions, Part 111A of the Privacy Act permits credit reporting bodies, such as Equifax, the company we use, to collect from us, other credit providers and from elsewhere, the following information about you which may be included on your credit file held by Equifax, This information will be available to us and to any other client of the credit reporting body who makes a credit inquiry, seeking a credit report of some sort from that body.
This information is limited to personal credit information, credit reporting information, credit ID information and credit capacity information, and includes:
- identification information;
- consumer credit liability information;
- repayment history information;
- a statement that an information request has been made by us, another credit provider, broker, mortgage insurer or trade insurer, or other client of the credit reporting body;
- the type of consumer credit or commercial credit;
- default information;
- serious credit infringement information;
- payment information;
- new arrangement information, including changes in the terms and conditions of your credit contract;
- court proceeding information;
- personal insolvency information;
- publicly available information as to your credit worthiness (subject to some exceptions); and/or
- a credit provider’s opinion that you have committed a serious credit infringement in relation to the consumer credit which credit provider has provided to you; and/or
- the total indebtedness and any accumulation of such due to defaults in payment and associated fees and interest charges before, during and after the issuing of the Privacy Act’s Section 6Q and Section 21D Notices.
Some of this information may be collected from us, some from other clients of the credit reporting body and some from other sources, as specifically indicated, or by implication indicated above.
Please note that the credit reporting body has discretion as to what it will include in a credit report about you and there is no opportunity under the Privacy Act, or Credit Reporting Privacy Code, to complain if the body chooses not to list certain information it holds about you, including information we have provided.
Should you have any issues with the information that the credit reporting body holds and uses in their reports about you, the complaint should be made direct to the credit reporting body, because that body is the only authorised or recognised entity that can make and implement the decision to change the information it holds. Please note that you will be required to fully, accurately and honestly explain the reasons you seek a change to the information on your credit file or credit report (whatever called).
You are invited to visit the Equifax website at www.equifax.com.au to view the following information:
- How you can obtain Equifax’s privacy policies.
- Your right to access and correct information Equifax holds about you.
- How you may complain if you think Equifax has breached privacy and credit reporting laws that apply to you.
- Your right to request that Equifax not use any information held about you for purposes of pre-screening, for any company to undertake direct marketing that involves you.
- Your right to request that Equifax not use or provide to its clients any information about you if you believe that you are a victim of fraud.
This document contains all the notifiable matters, as specified in the Credit Reference Privacy Code, together with all matters specified in the Privacy Act that we are required to communicate to you. As such, it constitutes a Notifiable Matters Statement and a Credit Information (Privacy) Management Policy.
In this document and in the Privacy Consent Agreement, which you may receive later, we have chosen the option available by the wording in Code Obligations 4.2 of the Credit Reporting Privacy Code to present the information required in Code Obligations 4.1, as well as the information required for presentation under the Privacy Act in this document. This Credit Information (Privacy) Management Policy and the Privacy Consent Agreement, including the Notifiable Matters Statement, are provided with clear instructions to you to read both, before you make any attempt to provide us with personal information in conjunction with applying for a personal loan from us.
Transfer of information between us and Equifax, the credit reporting body
This information transfer is permitted under Division 2 of Part 111A of the Privacy Act. The information involved is the credit-related personal information that a credit reporting body may provide about you, to assist us to assess your credit worthiness. This information is relevant for use in establishing your eligibility for consumer credit.
Please note that the company may contract with Equifax to have part or all of this information provided, from time to time, in accordance with company policy. This information has been provided to Equifax by credit providers with whom you have had contact, and includes:
- information about you after you turned 18, except identification information;
- credit applied for and/or supplied in Australia;
- your repayment history; and
- any default information.
If we provide a loan to you and you fail to meet your repayment obligations, or commit a serious credit infringement, we may be entitled to disclose this to the credit reporting body and it will be included on the file they hold about you.
Regardless of any request from anywhere, including credit “repair” companies, we will not remove, or attempt to facilitate the removal of, this default information from either our files or Equifax’s files and credit reports, unless presented with clear and convincing evidence that the information is factually incorrect, the default has been repaired with full payment of the amount owing, or we have entered into a payment arrangement with the consumer that is the subject of an agreement between both parties.
Transfer of information between us and ASIC or AFCA
In accordance with our Australian Credit Licence conditions and a number of provisions in the Australian Securities and Investments, National Consumer Credit Protection and the Anti-Money Laundering and Counter Terrorism Finance (AUSTRAC) Acts, we may be required to give ASIC, AUSTRAC or AFCA copies of all or some part of your information.
The purposes for which we collect, hold, use and disclose credit information and credit eligibility information
The consumer credit-related purposes for which we collect, hold, use and disclose information are:
- to assess your application to us for consumer credit; and
- to collect payments that are overdue in relation to consumer credit we may have provided you; and
- to collect payments that are overdue in relation to consumer credit provided by another credit provider, under a credit contract that has been assigned to us by that other credit provider [in accordance with Sub-sections 6K(2) and (3)].
In accordance with section 21M, we will disclose relevant and permitted information to debt collectors.
Use of credit eligibility information
In accordance with Section 21G, we use credit eligibility information for the following purposes:
- credit related purposes involving you; or
- permitted reporting of information to a credit reporting body; or
- in connection with what we reasonably believe is a serious credit infringement that you may have committed; or
- for a use prescribed by a court, or tribunal, or regulations.
We will disclose this information to:
- credit bodies;
- a company related to us;
- a person responsible for processing your credit application; or
- a person who manages our credit contracts; or
- another credit provider, if we reasonably believe that you have committed a serious credit infringement; or
- the Australian Financial Complaints Authority (AFCA); or
- as authorised under Australian law, regulation, court or tribunal.
In accordance with Section 21N of the Privacy Act, we may disclose information to an approved entity seeking participation in an assignment of your debt, or purchase of our business. Should the transaction proceed, you will be informed in writing, in accordance with Obligation 13 in the Credit Reporting Privacy Code and all our rights will be transferred to the acquirer, in accordance with Section 6K of the Privacy Act.
How you may access credit eligibility information that we hold about you
First contact the company’s Privacy Compliance Manager on telephone: (07) 5313 4083, or post to: PO Box 650 Mooloolaba, QLD, 4557, or email firstname.lastname@example.org.
In accordance with Section 21T and Code Obligation 19, at your request, we will:
- give you access to any credit information we hold about you;
- respond to your request within a reasonable period and provide the access within 30 days of your request;
- provide the information in a clear manner and provide reasonable explanations and summaries of the information, to assist you to understand the impact of the information; and
- deny access, only if such would be unlawful, required under Australian law, or by a court or tribunal, or would prejudice an official enforcement body investigation.
Following your successful request, access will be provided by the Privacy Compliance Manager, who will facilitate the provision of a print out of your information stored in the company’s Specialist Lending System. Any denial of access will be in writing, with the reason/s explained and details of the company’s internal disputes resolution process, AFCA and the Office of the Australian Information Commission, to which you may lodge a complaint if not satisfied with the company’s explanation.
Facilitating any changes to information previously provided to Equifax
Where we have previously provided factually incorrect information to Equifax, or any other entity, we will contact them and inform them of the corrected information.
Should no correction be necessary because, after careful review, the Privacy Compliance Manager has determined the information kept on file by us is accurate, up-to-date, complete, relevant and not misleading, you will be informed of this and we will not make any attempt to encourage Equifax to change any information on its files that correctly reflects our information.
You are advised that to do so would be aiding and abetting Equifax to commit an offence under Sections 14 and Section 16A(4) of Privacy Principle 7 in the Privacy Act, which attracts fines of at least 37,000 and up to $370,000. It would also be a serious breach of our contract with Equifax, attract offences under the Corporations Act and, arguably, the Crimes Act.
Should the Privacy Manager agree that some information held by us and provided to Equifax is inaccurate, not up-to-date, incomplete, irrelevant or misleading, but that other information including information about defaults in previous and current loan repayments held by us, provided to Equifax and included in their credit reports is accurate, up-to-date, complete, relevant or not misleading, only the information that needs correction will be amended, or sought to be amended or removed from Equifax’s file and credit reports, as is appropriate. The accurate information will also not be amended or removed from our files, nor will any correct notation that a credit enquiry has occurred.
How you may seek the correction of credit information and credit eligibility information that we hold
Once you have inspected the personal credit information we hold on file about you, you may inform our Privacy Compliance Manager if you have discovered any information that is inaccurate, out-of-date, incomplete, irrelevant or misleading.
The Privacy Compliance Manager will be pleased to amend the file within 30 days but, in most cases, will require appropriate evidence from you to support your request. Please note that, in the exercise of this correction duty, the Privacy Compliance Manager is lawfully entitled to consult with a credit reporting body and/or another credit provider. You, and any entity consulted in the process, will be informed in writing of any correction.
How you may complain about our failure to comply with this Division, or the relevant registered CR code
There are 3 ways you may complain:
- Verbally, or in writing, to our Privacy Manager.
- If you are not satisfied with the Privacy Manager’s response, you can complain verbally or in writing to our Internal Dispute Resolution Manager.
- If you are not satisfied with the Internal Dispute Manager’s response you can lodge a complaint either with the Privacy Commissioner, at the Office of the Australian Information Commission.
Contact details –
Office of the Australian Information Commission
GPO Box 5218
Sydney NSW 2001
Phone: 02 9284 9753
Enquiries: 1300 363 992
With the external dispute resolution scheme of which we are a member, contact details:
Australian Financial Complaints Authority (AFCA)
GPO Box 3
Melbourne VIC 3001
Phone: 1800 931 678 (free call)
There is no charge for lodging a complaint.
How we will deal with such a complaint
We will write to you acknowledging receipt of the complaint. After appropriate investigation, the Privacy Manager will write to you as soon as practicable after a decision has been reached, outlining the decision and the reasons for reaching it.
We do not disclose credit information, or credit eligibility information, to entities that do not have an Australian link.
Obtaining a copy of this policy
You can obtain an emailed or posted copy of this Credit Information (Privacy) Management Policy by contacting the Privacy Compliance Manager on (phone/email/post).
Information from Loan Barn
From time to time you may receive messages from Loan Barn and/or related, connected and associated companies that include news, or service and product information.
You may opt out of receiving them at any time, in accordance with Section 2.1, Schedule 3 of the Privacy Act. This advice and the process to do so will be included with every message sent.