Privacy policy

Suffice Finance Pty Ltd (ABN 41 654 196 040) ("Suffice", "we", "us") is committed to handling your personal information openly and carefully, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

What we collect

The kinds of personal information we collect and hold depend on how you deal with us, and may include:

• identity details: name, date of birth, contact details, identification documents;
• financial details: income, expenses, employment, assets, liabilities and bank statements provided during an application;
• credit-related information, as described in our credit reporting policy;
• records of your communications with us; and
• technical information when you use this website (see "Cookies and analytics").

How we collect it

We collect information directly from you (through enquiries and applications) and, where you authorise it or the law permits, from third parties such as credit reporting bodies, your employer (to verify employment), banks (through statement services you authorise), and service providers who help us verify identity.

Why we collect it

• to respond to your enquiries, assess your applications and provide loan offers;
• to assess applications for credit, including meeting our responsible lending obligations;
• to manage loans and our ongoing relationship with you;
• to verify your identity, as the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) requires before we provide credit;
• to meet our other legal and regulatory obligations, including under the National Consumer Credit Protection Act 2009 (Cth);
• to improve our products, services and website; and
• with your consent, to send you marketing; every marketing message we send includes a working unsubscribe, and you can opt out at any time by using it or by contacting us.

Anonymity

You can deal with us anonymously, or under a pseudonym, for general enquiries where that is practicable. To assess an application for credit we must know who you are; the law requires us to verify your identity.

Who we disclose it to

We may disclose personal information, on a confidential basis and only for the purposes described above, to: credit reporting bodies; our funders, assignees and prospective assignees of our loans; service providers who support our operations, including identity verification, bank-statement retrieval, document management, loan origination and servicing platforms, IT hosting and communications providers; our professional advisers; debt collection agencies where an account is in default; courts, regulators and law-enforcement bodies where required or authorised by law; and any person you have authorised us to deal with. We require our service providers to protect your information and use it only for the services they perform for us.

Overseas disclosure

We do not routinely disclose personal information to recipients located overseas. Some of our technology providers may store or process data in secure overseas facilities; where that occurs we take reasonable steps to ensure the recipient handles your information consistently with the Australian Privacy Principles. If our practices change, we will update this policy and name the relevant countries where practicable.

Automated decision-making

We use computer programs to assist our assessment of credit applications: for example, to verify identity, categorise bank statement transactions and calculate serviceability. These programs substantially assist decisions about whether credit is offered and on what terms, using the identity, income, expense and credit-related information described in this policy. A person reviews the outcome of every declined application on request, and you can ask us to explain any decision that affects you.

Cookies and analytics

Our website uses cookies and similar technologies that are necessary for it to function, together with basic, privacy-respecting analytics that help us understand how the site is used in aggregate. We do not use analytics to build advertising profiles of identified visitors. You can control or delete cookies through your browser settings; the site remains usable with cookies disabled.

Security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. Our measures include encryption of data in transit, access controls that restrict information to staff who need it, multi-factor authentication on our systems, and staff confidentiality and privacy training. We retain personal information only for as long as it is needed for the purposes described in this policy or required by law, and then take reasonable steps to destroy or de-identify it. See our security statement for more detail.

Data breaches

If a data breach involving your personal information occurs that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme in the Privacy Act requires, and tell you what we recommend you do in response.

Access and correction

You may request access to, or correction of, the personal information we hold about you at any time by contacting our Privacy Officer using the details below. We will respond within a reasonable period and will not charge you for making a request.

Complaints

If you believe we have mishandled your personal information, contact our Privacy Officer. We will acknowledge your complaint and respond through our complaints process. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC):

• Online: oaic.gov.au (online privacy complaint form)
• Phone: 1300 363 992
• Post: GPO Box 5288, Sydney NSW 2001

Contact

Privacy Officer, Suffice Finance Pty Ltd
Unit 70/13 Jusfrute Dr, West Gosford NSW 2250
Phone: 0451 248 745
Email: info@suffice.com.au (mark your message "Attention: Privacy Officer")