Privacy Policy

Privacy Policy

Privacy Policy Statement

This Privacy Policy explains how CreditSource Pty Ltd and its Affiliates (collectively “CreditSource” “we” or “us”) may collect, and process your personal information. This Privacy Policy applies to our website www.creditsource.com.au and other CreditSource related sites, apps and services (the “Services”). We reserve the right to amend the Privacy Policy at any time. The date of the last revision to the Privacy Policy will be indicated by the “Effective Date” date at the bottom of this page.

In handling your personal information, CreditSoucer will comply with the Australian Privacy Act 1988 , and/or the New Zealand Privacy Act 2020 (as applicable), and all other relevant laws, regulations and codes relating to privacy and personal information (‘Privacy Law’).

How to Contact Us

If you have any questions about our Privacy Policy or handling of your Personal Data, please contact the us by email at operations@creditsource.com.au.

Or by mail at: CreditSource, Attn: Data Protection Officer, 40, River Boulevard, Richmond, Victoria 3121.

Where We Collect Your Data From

We may collect Data in the following ways:

• interact with us electronically or in person;
• access our website www.creditsource.com.au or enter personal information into our website;
• provide our services to you;
• provide feedback to us;
• provide information about your personal or business affairs;
• change your content or email preference;
• respond to surveys and/or promotions;
• provide financial or credit card information;
• communicate with our customer support; or
• enter personal information into our website, provide to us directly or give to us in other forms.

Examples of how our website collects data includes:

• When you come to our website we may collect certain information such as browser type, operating system, website visited immediately before coming to our site, etc. This information is used in an aggregated manner to analyse how people use our site, such that we can improve our service.
• We use cookies on our website and in our applications. Cookies are very small files which a website uses to identify you when you come back to the site and to store details about your use of the site.  Cookies are not malicious programs that access or damage your computer. Most web browsers automatically accept cookies but you can choose to reject cookies by changing your browser settings.  However, this may prevent you from taking full advantage of our website.
• Our website may from time to time use cookies to analyses website traffic and help us provide a better website visitor experience. In addition, cookies may be used to serve relevant ads to website visitors through third party services such as Google Adwords. These ads may appear on this website or other websites you visit.
• Our website may from time to time have links to other websites not owned or controlled by us. These links are meant for your convenience only.

There may be occasions when CreditSource Pty Ltd collects your personal information from third party sources such as from an information services provider or a publicly maintained record. If we do, we will protect it as set out in this privacy policy.

Types of Information We Collect:

Personal Data: We may collect, use, store and transfer many kinds of Personal Data. which we have grouped together as follows:

Identity Data: name, company email address
Contact Data: company email address, company billing address, , company title or telephone number
Financial Data: payment card details (we use a third-party service to process payments)
Technical Data: internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our websites
Usage Data: information about how you use our products, services and website
Marketing and Communications Data: your preferences in receiving marketing from us and our third parties and your communication preferences

Aggregated Data: We may also collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your usage data to calculate the percentage of users accessing a specific website feature.

Special Categories of Personal Data: We will not collect, any categories of special categories of personal data about you including details about race or ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, trade union membership, information about your health, genetic and biometric data, and information about criminal convictions and offences.

How We Use Your Data

We collect, hold, use and disclose your personal information where it is reasonably necessary for the purposes of providing our products and services, for our other business purposes and for any necessary related purposes. These purposes include, but are not limited to:

• registering you to use one of our websites;
• processing a product application or service or purchase request;
• managing our products and services or other relationships and arrangements;
• processing receipts, invoices and payments and servicing customer accounts, including determining liability for payment;
• responding to customer enquiries about applications, accounts, products or services;
• understanding customer needs and offering products and services to meet those needs;
• accounting, billing and other internal administrative purposes;
• identifying and informing customers of products and services that may be of interest;
• notifying you about changes to our products and services;
• considering, and contacting you about, any application you make for a job with us;
• any other legal and regulatory requirements. Various laws may expressly require us to collect your personal information, or we may need to do so in order to be able to comply with other obligations under those laws
• enforcing our rights, including undertaking debt collection activities and legal proceedings; and
• undertaking business funding and development activities.

Where personal information is used and disclosed, we take steps reasonable in the circumstances to ensure the personal information is relevant to the purposes for which it is to be used and disclosed. You are under no obligation to provide your personal information to us. However, without certain information from you, we may not be able to provide our services to you or any other relevant customer.

How We Share Your Data

We may share Personal Data with the following for the purposes of providing the Services which you have requested from us:

• agents and advisers that we use such as tax auditors;
• our Affiliates;
• regulators or authorities if required by law;
• third party companies who help us manage our electronic communications to our customers
• third party companies that help us provide the Service to you. For example, we use vendors for our internal customer services management platform or to process payments. Additionally, we use third party companies that provide applications/functionality, data processing or IT services to us. For example, we use third parties to support us in providing our services and to help provide, run and manage our internal IT systems. These include providers of IT services, cloud-based software as a service providers, labour hire, website hosting and management, data analysis, data back-up, security and storage services.
• You can find details of how these third parties use your Personal Data by looking at their privacy policies.
• We request third parties who we share your information with to respect the security of your Personal Data and to treat it in accordance with the law. We only permit them to process your Personal Data for specified purposes and in accordance with our instructions.
• We may also share your Personal Data if we are under a duty to disclose or share that information in order to comply with any legal obligation, or in order to enforce or apply our terms of use, or to protect our rights, property, or safety, our clients, or others.

Data Security

We have put in place appropriate technical and organizational security measures to prevent your Personal Data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your Personal Data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Data Retention

We will keep your Personal Data for as long as you are our client.

After you stop being a client, we will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for one or more of the following reasons:

• To respond to any questions or complaints from you;
• To maintain our records;
• To comply with laws and rules applicable to us

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Your Rights

Certain Individuals may have rights which are set out in the law relating to your Personal Data. Such rights include:

Getting a copy of the information we hold

You can ask us for a copy of the Personal Data which we hold about you, by contacting us using the details set out above. This is known as a data subject access request. You will not have to pay a fee to access your personal data, unless we believe that your request is clearly unfounded, repetitive or excessive. In such circumstances we can charge a reasonable fee or refuse to comply with your request. We will try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month and in that case we will notify you and keep you updated.

Telling us if information we hold is incorrect

You have the right to question any information we hold about you that you think is wrong or incomplete. Please contact us using the details set out above if you want to do this and we will take reasonable steps to check its accuracy and, if necessary, correct it.

Telling us if you want us to stop using your personal information

You have the right to:

• object to our use of your personal information (known as the right to object); or
• ask us to delete the personal information (known as the right to erasure); or
• request the restriction of processing; or
• ask us to stop using it if there is no need for us to use it (known as the right to be forgotten)

There may be legal reasons why we need to keep or use your Personal Data, which we will tell you if you exercise one of the above rights. 

Withdrawal of your Consent

You have a right to withdraw your consent to us using your Personal Data at any time. Please contact us using the details set out above if you want to withdraw your consent. If you withdraw your consent, we may not be able to provide you with certain products or services.

Where we rely on our legitimate interest

In cases where we are processing your Personal Data on the basis of our legitimate interest, you can ask us to stop for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue processing your Personal Data.

Request a transfer of data

You may ask us to transfer your Personal Data to a third party. This right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

Complaints and Disputes

If you wish to complain about the way in which we collect or handle your personal information,  or if you believe we have breached any Privacy Law, you can contact our Privacy Officer using the details below.

Following a complaint, we will commence an investigation into your complaint. You will be informed of the outcome of your complaint following completion of the investigation. At all times, privacy complaints:

• will be treated seriously;
• will be dealt with promptly;
• will be dealt with in a confidential manner; and
• will not affect your existing obligations or impact on the commercial arrangements between you and us.

In the event you are dissatisfied with the outcome of your complaint, you may refer the complaint to the Office of the Australian Information or an applicable external dispute resolution scheme if relevant to the complaint.

Third party Links

Our Services may contain links to third-party websites which are not subject to this Privacy Policy. We provide these links solely for your convenience. We do not maintain these third-party websites and are not responsible for their privacy statements.

Effective Date

July 1, 2020
CreditSource 2020