Company:	Capital & Centric Funding Pty Ltd
ACN:	649 644 397
ACL:	532474
Date Updated:	8th December 2021

SECTION A – INTRODUCTION

1. INTRODUCTION
   1. This document is the Privacy Statement of Capital & Centric Funding Pty Ltd ABN: 51 649 644 397  (“Capital & Centric Funding, we or us”).
   2. The purpose of this Privacy Statement is to tell you how we collect, use, hold, disclose and protect your Personal Information.
   3. Please refer to Capital & Centric Funding’s Credit Reporting Statement for information about how we manage your Personal Information collected in connection with a credit application or facility.
   4. We will act to protect your Personal Information in accordance with the Australian Privacy Principles (“APP”) and the Privacy Act 1988 (Cth) (together “Privacy Laws”).
   5. Please always check the privacy policy page on our website regularly at the following link for amendments and updates to our Privacy Statement and Credit Reporting Statement: www.ccfunding.com.au/privacypolicy
   6. This Privacy Statement does not cover information that you submit on other websites, even if we communicate with you on those sites. For example, if contact us via Instagram, Facebook, Pinterest, Twitter, or YouTube, that information is governed by the privacy policies on those websites and is not governed by this Privacy Statement.

SECTION B – INFORMATION WE MAY COLLECT

2. WHAT IS PERSONAL INFORMATION?
   1. Personal Information is any information or opinion about you that is capable, or reasonably capable, of identifying you, whether the information or opinion is true or not and is recorded in material form or not. Personal Information includes Sensitive Information.
   2. Sensitive Information includes such things as your racial or ethnic origin, political opinions or membership of political associations, religious or philosophical beliefs, membership of a professional or trade association or trade union, sexual orientation or criminal record, that is also personal information. Your health, genetic and biometric information and biometric templates are also Sensitive Information. 
   3. We will only collect Sensitive Information about you if we obtain prior consent to the collection of the information or if the collection is required or authorised by law. 
   4. WHAT KIND OF PERSONAL INFORMATION DO WE COLLECT AND HOLD?
   5. The Personal Information we collect and hold generally includes or consists of:
      1. identification information such as your name, postal or email address, telephone numbers and date of birth;
      2. other contact details such as social media handles;
      3. your tax file number and tax residency status;
      4. financial and transactional information;
      5. health and biometric information (where permitted);
      6. information about how you interact with us when you use our website (such as device information – which browser you use and your operating system language, your location or activity including IP address and geolocation data based on the GPS of your mobile device (when accessing our services) and whether you’ve accessed third party sites); and
      7. other information we think is necessary.
   6. Over the course of our relationship with you, we may collect and hold additional pieces of Personal Information about you, including transactional information, account or policy information, complaint or enquiries about your product or service.
   7. We are required by law to identify you if you are opening a new account or adding a new signatory to an existing account. The Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) and Anti-Money Laundering and Counter-Terrorism Financing Rules Instrument 2007 (No. 1) (“Anti-Money Laundering Laws”) require us to sight and record details of certain documents (i.e. photographic and non-photographic documents) in order to meet the standards set under those laws. 
   8. You may interact with us anonymously or by using a pseudonym if the interaction is general in nature. However, if the interaction is specific to an account or relates to your Personal Information, we will need to identify you before we can engage in further discussions and correspondence.

SECTION C – CONSENT

3. CONSENT
   1. In most cases, before or at the time of collecting your Personal Information, we will obtain your consent for the purposes for which we intend to use and disclose your Personal Information. 
   2. If you don’t give us consent, we may not be able to provide you with the products or services you want. This is because we are required to collect this Personal Information to provide you with the products or services.
4. WITHDRAWING CONSENT
   1. Having provided consent, you are able to withdraw it at any time. To withdraw consent, please contact us. Please note that withdrawing your consent may lead to us no longer being able to provide you with the product or service you enjoy given that, as mentioned above, it is impracticable for us to treat some customers differently. 

SECTION D – WHEN AND HOW WE COLLECT PERSONAL INFORMATION

5. HOW DO WE COLLECT PERSONAL INFORMATION?
   1. We collect most Personal Information about you directly from you whether in person, over the phone or electronically. For example:
      1. when you apply for, register your interest in or enquire about a product or service;
      2. when you provide us with feedback or make a complaint;
      3. when you visit our website;
      4. when you talk to us or do business with us; 
      5. when you subscribe to our newsletter;

(f)      when you interact with us via social media channels. 

2. We may collect Personal Information about you from others, such as from:
   1. service providers;
   2. agents;
   3. advisors; 
   4. employers; or 
   5. family members.
3. We may take steps to verify the information we collect for example, a birth certificate provided as identification may be verified with records held by the Registry of Births, Deaths and Marriages to protect against impersonation, or we may verify with an employer that employment and remuneration information provided in an application for credit is accurate.

6. DO WE COLLECT INFORMATION ELECTRONICALLY?
   1. We may collect information from you electronically through internet browsing on our websites. 
   2. Each time you visit our websites, we may collect information about you which may include Personal Information (which will be de- identified) and may include the following: 
      1. the date and time of visits; 
      2. the pages viewed and your browsing behaviour; 
      3. how you navigate through the site and interact with pages (including fields completed in forms and applications completed); 
      4. general location information; 
      5. information about the device used to visit our website (including your tablet or mobile device) such as device IDs; and 
      6. IP addresses. 
   3. We collect information using cookies when you use our website. Cookies are small pieces of information stored on your hard drive or in memory. One of the reasons for using cookies is to offer you increased security. They can also record information about your visit to our websites, allowing us to remember you the next time you visit and provide a more meaningful experience. 
   4. We may also collect information from third party websites, applications or platforms containing our interactive content or that interface with our own website such as Google Analytics. 
   5. We may collect Personal Information about you from social media platforms if you publicly comment. We will NEVER ask you to supply Personal Information publicly over any social media platforms that we use. We may invite you to send your details to us via private messaging, for example, to answer a question about your account. You may also be invited to share your Personal Information through secure channels to participate in other activities, such as online competitions. 
7. HOW DO WE DEAL WITH UNSOLICITED PERSONAL INFORMATION?
   1. If we receive Personal Information that is not solicited by us, we will only retain it, if we determine that it is reasonably necessary for one or more of our functions or activities and that you have consented to the information being collected or given the absence of your consent that it was impracticable or unreasonable for us to obtain it under the circumstances. 
   2. If these conditions are not met, we will destroy or de-identify the information. 
   3. If such unsolicited information is Sensitive Information, we will obtain your consent to retain it regardless of what the circumstances are.

SECTION E – PURPOSES FOR COLLECTING, USING AND DISCLOSING PERSONAL INFORMATION

8. WHY DO WE COLLECT, USE AND DISCLOSE YOUR PERSONAL INFORMATION?
   1. We collect, use and disclose your Personal Information so we can:
      1. consider your request for products and services, including your eligibility;
      2. process your application and provide you with the products and services;
      3. provide information on other products and services offered by or through us; 
      4. confirm your identity;
      5. manage our relationship with you;
      6. complying with our legal obligations; 
      7. monitor and evaluate products and services; 
      8. gather and aggregate information for statistical, prudential, actuarial and research purposes; 
      9. assist you with queries; 
      10. take measures to detect and prevent fraud;
      11. refer your application to a third-party marketplace. 
   2. We may not be able to provide you with the products or services you are seeking if you provide incomplete or inaccurate information. 

SECTION F – INTEGRITY OF YOUR INFORMATION

9. QUALITY OF INFORMATION
   1. We ensure that the Personal Information we collect, use or disclose is accurate, up to date, complete and relevant. 
   2. Please contact us if any of the details you have provided to us change or if you believe that the information we have about you is not accurate or up to date. 
   3. We may also take steps to update information we hold, for example, an address, by collecting Personal Information from publicly available sources such as telephone directories or electoral rolls. 
10. HOW DO WE PROTECT AND HOLD YOUR PERSONAL INFORMATION?
    1. We are committed to ensuring that we protect any Personal Information we hold from misuse, interference, loss, unauthorised access, modification and disclosure. 
    2. For this purpose, we have a range of practices and policies in place to provide a robust security environment. We ensure the on-going adequacy of these measures by regularly reviewing them.  
    3. We have the following security measures in place to protect against misuse, loss and alteration of Personal Information under our control. Our security measures include, but are not limited to:
       1. educating our staff as to their obligations with regard to your personal information; 
       2. requiring our staff to use passwords when accessing our systems; 
       3. encrypting data sent from your computer to our systems during Internet transactions and customer access codes transmitted across networks; 
       4. employing firewalls, intrusion detection systems and virus scanning tools to protect against unauthorised persons and viruses from entering our systems; 
       5. using dedicated secure networks or encryption when we transmit electronic data for purposes of outsourcing; 
       6. providing secure storage for physical records; and
       7. employing physical and electronic means such as alarms, cameras and guards (as required) to protect against unauthorised access to buildings. 
    4. Where Personal Information we hold is identified as no longer needed for any purpose, we ensure it is effectively and securely destroyed, for example, by shredding or pulping in the case of paper records or by degaussing (demagnetise of the medium using alternating electric currents) and other means in the case of electronic records and equipment. 
    5. The Personal Information retained by us could include transactional and financial information along with contact details. The Personal Information does include the records that have been stored on the secure server. Where we retain adequate records for legal and accounting purposes, the Personal Information will be stored and held securely in controlled facilities.

SECTION G – DISCLOSURE OF PERSONAL INFORMATION

11. WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?
    1. We may share your Personal Information with third parties to help deliver or support the provision of products or services to you.
    2. In all circumstances where your Personal Information may become known to our contractors, agents and outsourced service providers, there are confidentiality arrangements in place. Contractors, agents and outsourced service providers are not able to use or disclose Personal Information for any purposes other than our own. 
    3. We take our obligations to protect your Personal Information very seriously we make every effort to deal only with parties who share and demonstrate the same attitude. 
    4. Depending on the product or service you have, the entities we exchange your Personal Information with include but are not limited to:
       1. brokers and agents; 
       2. affiliated product and service providers and external product and service providers for whom we act as agent (so that they may provide you with the product or service you seek or in which you have expressed an interest); 
       3. auditors we appoint to ensure the integrity of our operations; 
       4. any person acting on your behalf, including your solicitor, settlement agent, accountant, executor, administrator, trustee or guardian; 
       5. your referee (to confirm details about you); 
       6. if required or authorised to do so, regulatory bodies and government agencies; 
       7. credit reporting bodies;
       8. debt collectors;
       9. insurers, including proposed insurers and insurance reference agencies (where we are considering whether to accept a proposal of insurance from you and, if so, on what terms); 
       10. medical practitioners (to verify or clarify, if necessary, any health information you may provide); 
       11. other financial institutions and organisations at their request if you seek credit from them (so that they may assess whether to offer you credit); 
       12. investors, advisers, trustees and ratings agencies where credit facilities and receivables are pooled and sold (securitised); 
       13. other organisations who in conjunction with us provide products and services (so that they may provide their products and services to you); and 
       14. professional associations or organisations with whom we conduct an affinity relationship (to verify your membership of those associations or organisations). 
    5. We may also disclose your Personal Information to others where: 
       1. we are required to disclose information by law e.g. under court orders or statutory notices pursuant to taxation or social security laws or under laws relating to sanctions, anti-money laundering or counter-terrorism financing;
       2. you may have expressly consented to the disclosure or your consent may be reasonably inferred from the circumstances; or 
       3. we are otherwise permitted to disclose the information under applicable Privacy Laws. 
12. DO WE DISCLOSE YOUR PERSONAL INFORMATION OVERSEAS?
    1. We may utilise overseas service providers for some of our activities. These service providers may be located in:
       1. Australia

(b)     China

2. We will only disclose your Personal Information when permitted to do so by the Privacy Act and after we ensure that:
   1. the overseas recipient does not breach the APPs; or 
   2. you will be able to take action to enforce the protection of a law or binding scheme that has the effect of protecting the information in a way that is at least substantially similar to the way in which the APPs protect the information; or 
   3. you have consented to the disclosure after we expressly informed you that there is no guarantee that the overseas recipient will not breach the APPs; or 
   4. the disclosure of the information is required or authorised by or under an Australian law or a court/tribunal order.
3. We may store your Personal Information in cloud-based software or other types of networked or electronic systems. As electronic or networked systems can be accessed from various countries via an internet connection, it’s not always practicable to know in which country your Personal Information may be held. If your Personal Information is stored in this way, disclosures may occur in countries other than those listed.
4. Overseas organisations may be required to disclose information we share with them under a foreign law. In those instances, we will not be responsible for that disclosure.
5. DO WE USE OR DISCLOSE YOUR PERSONAL INFORMATION FOR DIRECT MARKETING?
   1. We will only use or disclose the Personal information we hold about you for the purpose of direct marketing if we have received the Personal Information from you and you have not requested not to receive such information.
   2. Direct marketing includes, but is not limited to, contacting our clients to provide you with information on our products and services that may interest you. 
   3. If you wish to opt-out of receiving marketing information altogether, you can:
      1. call us on 1300 888 223 or
      2. write to us at [email protected]
   4. In direct marketing communication we always inform you of your right to opt out of receiving direct marketing communications.

SECTION H – ACCESS TO AND CORRECTION OF YOUR PERSONAL INFORMATION

14. HOW CAN YOU ACCESS YOUR PERSONAL INFORMATION?
    1. You can request us to provide you with access to the Personal Information we hold about you.
    2. Requests for access to limited amounts of Personal Information, such as checking to see what address or telephone number we have recorded, can generally be handled over the telephone. 
    3. If you would like to request access to more substantial amounts of Personal Information such as details of what is recorded in your account file, we will require you to request this via email to [email protected] 
    4. Following receipt of your request, we will provide you with an estimate of the access charge and confirm that you want to proceed. 
    5. We will not charge you for making the request for access, however access charges may apply to cover our costs in locating, collating and explaining the information you requested. The charges are based on a rate of $25 per 30min increment. 
    6. We will respond to your request as soon as possible and in the manner requested by you. We will endeavour to comply with your request within fourteen (14) days of its receipt but, if that deadline cannot be met owing to exceptional circumstances, your request will be dealt with within thirty (30) days. It will help us provide access if you can tell us what you are looking for.
    7. Your identity will be confirmed before access is provided.  
15. CAN WE REFUSE TO GIVE ACCESS?
    1. In particular circumstances we are permitted by law to deny your request for access or limit the access we provide. We will let you know why your request is denied or limited if this is the case. For example, we are not required to give you access where giving you access to your Personal Information would pose a serious threat to any person’s life, health or safety or giving access would be unlawful or where we reasonably conclude your request to be frivolous or vexatious.
    2. If we refuse to give access to the Personal Information or to give access in the manner requested by you, we will give you a written notice setting out the reasons for the refusal, the mechanisms available to complain and any other relevant matter. 
16. CORRECTION
    1. We are committed to and will take all reasonable steps in respect of maintaining accurate, timely, relevant, complete and appropriate information about our clients, website users and other people that we deal with in our business
    2. We will correct all Personal information that we believe to be inaccurate, out of date, incomplete, irrelevant or misleading given the purpose for which that information is held or if you request us to correct the information.
    3. If we correct your Personal Information that we previously disclosed to another APP entity you can request us to notify the other APP entity of the correction. Following such a request, we will give that notification unless it is impracticable or unlawful to do so. 
    4. We will respond to any requests for correction within a reasonable time of receipt of the request. A reasonable time period will be no longer than thirty (30) days after the request being received.
17. REFUSAL TO CORRECT INFORMATION
    1. If we refuse to correct the Personal Information as requested by you, we will give you a written notice setting out the reasons for the refusal. Such reason will set out the grounds for refusal, the mechanisms available to complain and any other relevant matter. 
18. REQUEST TO ASSOCIATE A STATEMENT
    1. If we refuse to correct the Personal Information as requested by you, you can request us to associate with the information a statement that the information is inaccurate, out of date, incomplete, irrelevant or misleading. We will then associate the statement in such a way that will make the statement apparent to users of the information. 

SECTION I – NOTIFIABLE DATA BREACHES

19. NOTIFIABLE DATA BREACHES SCHEME
    1. From February 2018, the Privacy Act includes a new Notifiable Data Breaches (“NDB”) scheme which requires us to notify you and the Office of the Australian Information Commissioner (“OAIC”) of certain data breaches that is likely to result in serious harm to affected individuals and provide recommendations of steps you can take to limit the impacts of the breach.
    2. If we believe there has been a data breach that impacts your Personal Information and creates a likely risk of serious harm, we will notify you and the OAIC as soon as practicable and keep in close contact with you about the nature of the breach, the steps we are taking and what you can do to reduce the impacts to your privacy.
    3. If you believe that any Personal Information we hold about you has been impacted by a data breach, you can contact us using the contact details set out as per clause 21 below.

SECTION J – MAKING A PRIVACY COMPLAINT

20. COMPLAINTS
    1. We offer a free internal complaint resolution scheme to all of our customers. Should you have a privacy complaint, please contact us to discuss your concerns. Our contact details set out as per clause 21 below.
    2. To assist us in helping you, we ask you to follow a simple three-step process:
       1. gather all supporting documents relating to the complaint; 
       2. contact us and we will review your situation and if possible, resolve your complaint immediately; and
       3. if the matter is not resolved to your satisfaction, please contact our Complaints Officer on 1300 333 223 or put your complaint in writing and send it to Capital & Centric Funding PO Box 246 Roselands NSW 2196
    3. We will rectify any breach if the complaint is justified and will take necessary steps to resolve the issue.
    4. In certain situations, to deal with a complaint it may be necessary to consult with third parties. However, please note any disclosure of Personal Information to third parties will be provided with your authority and consent.
    5. After a complaint has been received, we will send you a written notice of acknowledgement setting out the process. The complaint will be investigated, and the decision will be sent to you within thirty (30) days unless you have agreed to a longer time. If a complaint cannot be resolved within the agreed time frame or a decision could not be made within thirty (30) days of receipt, a notification will be sent out to you setting out the reasons and specifying a new date when you can expect a decision or resolution.
    6. If you are not satisfied with our internal privacy practices or the outcome in respect to complaint, you may approach the OAIC with your complaint:

Office of the Australian Information Commissioner

Address: GPO Box 5218, Sydney NSW 2001

Phone: 1300 363 992

Email: [email protected]

Website: oaic.gov.au

SECTION K – CONTACT US

21. CONTACT DETAILS
    1. If you have any questions or would like further information about our privacy, credit reporting and information handling practices, please contact us by:
       1. Email: [email protected]; or 
       2. Phone: 1300 888 223; or 
       3. Post: PO Box 246, Roselands, NSW, 2196

Referral disclaimer 

We may, from time to time, offer incentives to third parties to refer clients to us. Participation in this incentive program may require users to submit personal information about themselves and others, such as names and email addresses.

By participating in our program, users agree to receive communications from us with regard to participation in our program. The following terms shall apply to any referrer’s participation in our referral program. 

If you do not agree to the following terms and conditions in their entirety, you are not authorised to register as a referrer or to participate in our referral program.

1. Who can participate

Any referrer who meets the eligibility requirements is able to participate and refer potential clients to us. To be eligible, the referrer must:

1. refer the potential client through the referrer’s unique online referral link, as provided by us;

2. hold a current ABN and provide that to us; 

3. be operational; 

4. provide valid banking details to us for payment of any incentive; and

5. comply with our Reputation Risk Guide.

2. Commission

If the referred client is approved for credit, the referrer will receive the following: 

1. $10.00 for a SACC; or

2. $40.00 for a MACC; or

3. 20% of the net profit in circumstances where the application is declined but sold to another lender,

3. No fraudulent activity, or illegal participation

We reserve the right to void referrals and incentives if we suspect that they were made in a fraudulent manner, in a manner that violates these terms, or in a manner otherwise not intended by us in accordance with our Reputation Risk Guide. 

4. Liability

By participating in this program, you agree that we will have no liability and that you will indemnify and hold us harmless for any claim, action, liability, loss, injury, or damage to you or any other person or entity due in whole or in part, directly or indirectly, by reason of your participation in the program. You agree that we are not responsible for faulty referral links, any error, omission, interruption, defect or delay in transmission, order processing, or communication; technical or mechanical malfunctions; errors in these terms, in any program-related materials; human-processing error; failures of electronic equipment, computer hardware or software; damage to your equipment, computer hardware or software, or inaccurate information, whether caused by equipment, programming, human error, or otherwise.

5. Reservation

We reserve the right to change or cancel the terms of this program at any time, without notice. We reserve the right to modify or amend these guidelines and the methods through which incentives are earned. Any information collected from a user in this program will be subject to our privacy policy.