Privacy Policy

Last updated: 27 January 2025

1. Introduction

ATOZ Lending ("we", "our", or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, visit our website, or interact with us in any way.

This policy complies with:

• Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs)
• Privacy and Personal Information Protection Act 1998 (NSW)
• Health Records and Information Privacy Act 2002 (NSW)
• General Data Protection Regulation (GDPR) where applicable
• National Consumer Credit Protection Act 2009 (NCCP)
• Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (AML/CTF)

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Identity Information: Name, date of birth, driver's licence number, passport details
• Contact Information: Email address, phone number, residential address, postal address
• Financial Information: Income details, employment information, bank account details, credit history
• Business Information: Company name, ABN/ACN, business address, financial statements
• Loan Information: Loan purpose, requested amount, repayment capacity
• Technical Information: IP address, browser type, device information, cookies

2.2 Sensitive Information

We may collect sensitive information including:

• Financial hardship information
• Health information (for medical finance applications)
• Criminal record information (where required by law)
• Membership of professional associations

3. How We Collect Information

We collect information through various means:

• Direct Collection: When you complete forms, contact us, or apply for services
• Third Parties: Credit reporting bodies, lenders, brokers, and service providers
• Public Sources: ASIC, company registers, property records
• Technology: Website analytics, cookies, and tracking technologies

4. Purpose of Collection

We collect and use your information for the following purposes:

• Assessing loan applications and creditworthiness
• Providing financial services and products
• Complying with legal and regulatory obligations
• Preventing fraud and money laundering
• Marketing and promotional activities (with consent)
• Improving our services and customer experience
• Resolving disputes and complaints

5. Disclosure of Information

5.1 Third Parties

We may disclose your information to:

• Lenders and Financial Institutions: To facilitate loan applications
• Credit Reporting Bodies: To obtain credit reports and history
• Service Providers: IT services, legal advisors, accountants
• Regulatory Bodies: ASIC, AFCA, OAIC, NSW Privacy Commissioner
• Law Enforcement: When required by law or court order

5.2 Cross-Border Disclosure

Some of our service providers may be located overseas. We ensure appropriate safeguards are in place to protect your information when disclosed internationally.

6. Data Security

We implement comprehensive security measures to protect your information:

• Encryption of data in transit and at rest
• Secure data centres with physical and logical access controls
• Regular security audits and penetration testing
• Employee training on privacy and security
• Incident response and breach notification procedures

7. Your Rights and Choices

7.1 Access and Correction

You have the right to:

• Access your personal information
• Request correction of inaccurate information
• Request deletion of your information (subject to legal obligations)
• Withdraw consent for marketing communications

7.2 Opt-Out Options

You can opt out of:

• Marketing communications
• Credit pre-screening
• Direct marketing
• Third-party data sharing (where permitted)

8. Credit Reporting

As a credit provider, we may:

• Obtain credit reports from credit reporting bodies
• Report credit information to credit reporting bodies
• Share information with other credit providers
• Use credit information for credit assessment

9. Retention and Destruction

We retain your information for:

• Active Customers: Duration of relationship plus 7 years
• Inactive Customers: 7 years from last interaction
• Legal Requirements: As required by law or regulation
• Dispute Resolution: Until resolution plus 2 years

10. Cookies and Tracking

Our website uses cookies and similar technologies to:

• Remember your preferences
• Analyse website usage
• Improve user experience
• Provide personalised content

11. Children's Privacy

We do not knowingly collect personal information from children under 18 without parental consent. If you believe we have collected such information, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes through our website or direct communication. Continued use of our services constitutes acceptance of the updated policy.

13. Complaints and Contact

13.1 Making a Complaint

If you have concerns about how we handle your information, you can:

1. Contact us directly at hello@atozlending.com.au
2. Submit a complaint through our website
3. Contact the NSW Privacy Commissioner
4. Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

13.2 Contact Information

ATOZ Lending
Email: hello@atozlending.com.au
Phone: 1300 000 000
Address: Bella Vista, NSW 2153
ABN: 00 000 000 000

13.3 Regulatory Bodies

• NSW Privacy Commissioner: www.ipc.nsw.gov.au
• OAIC: www.oaic.gov.au
• AFCA: www.afca.org.au

14. NSW-Specific Provisions

14.1 Privacy and Personal Information Protection Act 1998 (NSW)

As a NSW-based business, we comply with NSW privacy laws including:

• Information Protection Principles (IPPs)
• NSW Privacy Commissioner oversight
• Local government information access
• Health records protection

14.2 NSW Consumer Protection

We adhere to NSW consumer protection laws including:

• Fair Trading Act 1987 (NSW)
• Consumer Claims Act 1998 (NSW)
• NSW Civil and Administrative Tribunal (NCAT) jurisdiction

15. Legal Basis for Processing

We process your information based on:

• Contract Performance: To provide requested services
• Legal Obligation: To comply with laws and regulations
• Legitimate Interest: To improve services and prevent fraud
• Consent: For marketing and optional services

16. International Transfers

If we transfer your information internationally, we ensure:

• Adequate protection measures are in place
• Recipient countries have adequate privacy laws
• Appropriate contractual safeguards exist
• Your rights are protected

This Privacy Policy is effective as of 27 January 2025 and supersedes all previous versions.