July 2024
CLFC Group (including carloans.com.au Pty Ltd (in its own right and trading as OnlineAuto), CLFC Media Holdings Pty Ltd and CLFC Pty Ltd) offers a range offers a range of financial products and services across Australia.
Our Privacy Policy is designed to provide you with general information about how we collect, store, use and disclose your personal information. We understand that the details you provide to us are private and personal.
We will collect, use and disclose your personal information in accordance with the Australian Privacy Act 1988 and all other relevant laws, regulations and codes (Privacy Law) and this Privacy Policy. When you decide to purchase or acquire a product or service from us we may provide you with further information about privacy in the form of a Privacy Statement or other form of privacy disclosure (Privacy Statement).
The Privacy Statement will give you specific information about how we will handle the personal information you have given to us. We may also seek your specific consent in relation to the collection, use or disclosure of your personal information.
Personal information means any details about you, from which your identity is apparent or can be uncovered. The kinds of personal information we may collect about you include your name, date of birth, address, account details, occupation and any other information we made need to identify you. We may also collect the ages and number of your dependants and cohabitants, the length of time at your current address, your employment details and proof of earnings and expenses.
"Sensitive information" is a subcategory of personal information which includes information about your health. We may be required to collect sensitive information about your health in certain circumstances. We will only collect sensitive information about you with your consent.
We may collect the following kinds of credit information and exchange this information with credit reporting bodies and other entities:
We also use the term ‘credit information’ to refer to credit eligibility information, which is credit reporting information supplied to us by a credit reporting body, and any information that we derive from it.
We collect personal and credit information for the purposes of assessing your application for finance and managing that finance. We may also collect your personal information for the purposes of direct marketing and managing our relationship with you. From time to time we may offer you other products and services.
If we can, we collect your personal information from you. You give us your personal information in a number of ways such as completing an application form or other website form, requesting a product or service over the phone or Internet, or by visiting an office in person. We also collect personal information at other times during the course of our relationship with you.
Sometimes we collect your personal information from other sources. Examples of where we may receive personal information about you from another source and why this may happen are:
The parties to whom we may disclose your personal information to and receive personal information from will depend on what product or service you receive from us. Some examples of the parties to whom we may disclose your personal information to and receive personal information from are:
We will not sell, rent or trade your information. We will only disclose your personal information to and receive personal information from these parties for the purposes we have told you in this Privacy Policy and our Privacy Statements and in compliance with the Privacy Law. In the course of operating our business we may disclose your personal information to service providers who assist us in our business. Examples of these types of services and service providers are:
These service providers provide us with a wide range of back office, administrative and business management services. Where we do disclose your personal information to these service providers we have either entered into contractual arrangements with them to protect your personal information, or they are subject to strict privacy rules and must also comply with our Privacy Policy and the Privacy Law.
Some of the parties with which we exchange your personal information, including our service providers and other third parties listed above, may be located outside Australia in countries including the Philippines, the US and the EU.
If we have provided you with a financial product or service, we exchange your credit information with credit reporting bodies. We use the credit information that we exchange with the credit reporting body to assess your creditworthiness, assess your application for finance and manage your finance.
If you fail to meet your payment obligations in relation to any finance that we have provided or arranged or you have committed a serious credit infringement then we may disclose this information to a credit reporting body.
You have the right to request access to the credit information that we hold about you and make a request for us to correct that credit information if needed. Please see the heading “How do you access and correct your personal information?” below.
Sometimes your credit information will be used by credit reporting bodies for the purposes of ‘pre-screening’ direct marketing on the request of other credit providers. You can contact the credit reporting body at any time to request that your credit information is not used in this way.
You may contact the credit reporting body to advise them that you believe that you may have been a victim of fraud. In Australia, you can ask a CRB not to use or disclose your credit-related personal information for a period of 21 days without your consent if you believe on reasonable grounds that you are, or are likely to be, a victim of fraud, including identity fraud.
The credit reporting body we use is Equifax Pty Limited. You can contact Equifax on 13 83 32 and download a copy of their privacy policy at https://www.equifax.com.au/privacy.
It is important that the information we hold is accurate and up to date. In this, we ask that you contact us whenever there are any changes to your personal details, so that we can update our records.
The information we hold about you is yours to access and correct, and as such we can provide you with general information, such as your name, address and contact details quite easily. More detailed information may take longer and involve a fee to cover the costs of retrieving and supplying the details you want. If you need to access your detailed information, write to us at the contact address below.
If any of the personal or credit information we hold about you is incorrect, inaccurate or out of date you may request that we correct the information. If appropriate we will correct the personal information at the time of the request, otherwise we will provide an initial response to you within seven days of receiving your request. Where reasonable, and after our investigation, we will provide you with details about whether we have corrected the personal or credit information within 30 days.
If we request personal information about you and you do not provide it, we may not be able to provide you with the financial product or service that you request. In addition, if we are required to comply with certain legislation to provide you with the products and services you choose, then collection of certain personal information will be mandatory.
We take great care with the information we hold about you. Our aim is to ensure that any details are securely protected from misuse, loss, unauthorised access, modification or disclosure. We will take reasonable care to make sure that we keep your information in an accurate, complete and up to date manner. When that information is no longer required to be held by law or needed, it will be permanently destroyed or de-identified.
We maintain industry standard technology and procedures in respect to our information management and provision of online services, encryption techniques, virus protection and fire wall settings. If you make a transaction involving the submission of personal information over the Internet to us using one of our online forms then we employ encryption technology to ensure the security of that personal information transmission. User identifiers, passwords or other access codes may also be used to control access to your personal information. Once we have received your personal information, it is stored and protected by a range of security controls, including firewalls, user identification requirements and audit trails.
While browsing our websites, our server may automatically collect navigational data by placing "cookies" in your browser file on your hard drive. Cookies do not capture or track any personal information and cannot identify you as an individual. You may elect to not accept cookies on your browser. We may use third-parties to serve ads on our website. These companies may employ cookies and action tags (also known as single pixel gifs or web beacons) to measure advertising effectiveness. Any information that these third parties collect via cookies and action tags is recorded on an anonymous basis. Information regarding opting out of interest-based advertising is available at https://optout.networkadvertising.org/?c=1.
If you have a complaint about the handling, use or disclosure of your personal information, write to the our Privacy Officer at the contact address below. We will investigate your complaint, and advise you of the outcome as soon as possible. If the matter is not resolved to your satisfaction and you are located in Australia, you can then refer your complaint to the AFCA scheme, which can be contacted by phone on 1800 931 678, by email at info@afca.org.au, or in writing to GPO Box 3, Melbourne VIC 3001, or the Office of the Australian Information Commissioner, who can be contacted at Office of the Australian Information Commissioner, GPO Box 5218, Sydney NSW 2001, website: www.oaic.gov.au.
You can request further information about the way we manage the personal information that we hold, or make a complaint, by writing to:
Privacy Officer
CLFC Group
GPO Box 7001
Brisbane QLD 4000
or email the CLFC Privacy Officer at: customerrelations@carloans.com.au
We review our policies, statements and procedures to keep up to date with changes in the law, technology and market practice. As a result we may update and change this Privacy Policy from time to time.