PRIVACY POLICY

ALL ASSET FINANCE PTY LTD

Effective Date: 26-01-2026

1. Privacy Commitment Statement – All Asset Finance

1.1. ALL ASSET FINANCE PTY LTD (ABN 389527) is committed to respecting and protecting the privacy of your personal information.

1.2. This Privacy Policy explains how we collect, hold, use, disclose, and manage personal information, including credit information and credit eligibility information, and the steps we take to comply with our obligations under the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and applicable credit reporting laws.

1.3. In this Policy, the terms “we”, “us”, and “our” refer to:

1.4. ALL ASSET FINANCE PTY LTD, including its related entities, authorised representatives, and associated businesses that provide finance and credit assistance services.

2. Our Commitments to Protect Your Privacy

2.1. We understand how important it is to protect your personal information. This document sets out our privacy policy commitment in respect of personal information we hold about you and what we do with that information.

2.2. We recognise that any personal information we collect about you will only be used for the purposes we have collected or as allowed by law. It is important to us that you are confident that any personal information we hold about you will be treated in a way that ensures protection of your personal information.

2.3. Our commitment in respect of personal information is to abide by the Australian Privacy Principles for the protection of personal information, as set out in the Privacy Act 1988 (Privacy Act), the Privacy (Credit Reporting) Code 2014 (Credit Reporting Code) and any other relevant laws.

3. Personal Information

3.1. When we refer to personal information, we mean information or an opinion about an identified individual, or an individual who is reasonably identifiable.

3.2. The kinds of personal information we may collect about you include, but are not limited to, your name, date of birth, residential or postal address, email address, telephone number, occupation, account details, transaction history, and any other information necessary to identify you or provide our services.

3.3. Finance Applications
If you apply for finance through us, we may also collect additional personal information such as:

3.3.1. the number and ages of your dependants or cohabitants;

3.3.2. the length of time at your current address;

3.3.3. employment details, including employer name and position;

3.3.4. proof of income, earnings, and expenses; and

3.3.5. your Tax File Number (TFN) or tax residency status, where required by law.

4. What Information Do We Collect?

4.1. Technical and Usage Data

When you visit our websites or use our mobile apps, we may collect information about your location or activity, including your IP address, telephone number, whether you have accessed third party sites, the date and time of visits, the pages that you viewed, information about the device used, and other user location information. We collect some of this information using cookies.

4.1.1. IP Addresses

Your internet protocol address (or ‘IP address’) is the numerical identifier for your device when you are using the internet. It may be necessary for us to collect your IP address for your interaction with some parts of our website.

4.1.2. Links to Third Party Websites

4.1.2.1. Our website may contain links to the websites of third-party providers of goods and services (Third Party websites). If you have accessed Third Party websites through our website and if those third parties collect information about you, we may also collect or have access to that information as part of our arrangements with those third parties.

4.1.2.2. When you access a Third-Party website from our website, cookie information, information about your preferences or other information you have provided about yourself may be shared between us and the third party.

4.1.3. Advertising and Cookies

4.1.3.1. We use ‘cookies’ to provide you with better and more customised service and with a more effective website.

4.1.3.2. A ‘cookie’ is a small text file placed on your computer by our web page server. A cookie can later be retrieved by our webpage servers. Cookies are frequently used on websites and you can choose if and how a cookie will be accepted by configuring your preferences and options in your internet browser. We use cookies for different purposes such as:

a. to allocate a unique number to your internet browsers;
b. to customise our website and offers for you;
c. for statistical purposes;
d. to identify if you have accessed a third party provider’s website for goods and services; and
e. for security purposes.

4.1.3.3. Your IP address is the identifier for your computer when you are using the internet. It may be necessary for us to collect your IP address for your interaction with various parts of our website.

4.1.4. Web Beacons

4.1.4.1. A web beacon is typically a transparent graphic image invisible to the user that is placed on a website. The use of a web beacon allows the website to record the simple actions of the user (such as opening the page that contains the beacon) through a tracking pixel.

4.1.4.2. We may use web beacons (and cookies) for purposes such as site usage analytics, advertising auditing and reporting, as well as content and ‘advertising/marketing personalisation’. We may share any data collected from web beacon (and cookies) with third parties to provide you with relevant advertising when browsing Third Party Websites.

4.1.4.3. We also partner with Microsoft Clarity and Microsoft Advertising or Google to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimisation, fraud/security purposes, and advertising.

4.1.5. E-consent

By providing your email address and then clicking submit on any online form, calculator, tool or query, you consent to receiving notices and other documents from us by email to the email address provided, and you understand that if you give this consent: we may no longer send you paper copies of notices and other documents; you should regularly check your email account for documents; and you may withdraw your consent to receiving documents by email at any time. You also confirm that you have the facilities to print any notice or document that we send you by email, if required.

4.2. Credit-Related Information

4.2.1. The personal information we collect, hold, and use may also include credit-related information, which consists of:

4.2.2. Credit information, being personal information or an opinion about you that relates to credit that has been provided to you, or that you have applied for. This may include information about your identity, the type and terms of credit, credit limits, repayment history, defaults, payment information, hardship arrangements, serious credit infringements, court proceedings, insolvency information, and publicly available credit information.

4.2.3. Credit eligibility information, which is credit reporting information supplied to us by a credit reporting body, and any information derived from that information.

4.2.4. We use credit-related information to assess your eligibility for finance and to assist in arranging suitable credit products. Credit-related information is generally exchanged between credit providers, finance providers, and credit reporting bodies in accordance with applicable laws.

4.2.5. Payments, Employment, and Other Applications

4.2.5.1. If you make payments to us or receive payments from us, we may collect relevant payment and banking details.

4.2.5.2. If you apply for employment with us, we will collect information about your work history, qualifications, and may contact your referees.

4.3. Sensitive Information

We will only collect sensitive information about you with your consent. Sensitive information is personal information that includes information relating to your racial or ethnic origin, political persuasion, memberships in trade or professional associations or trade unions, sexual preferences, criminal record, or health and may include any information you tell us about any vulnerability you may have.

5. How Do We Collect Your Personal Information?

Where reasonable and practical we will collect your personal information directly from you. We may also collect information about you that is publicly available, such as from public registers or social media, or made available by third parties. We may also collect your personal information from credit reporting bodies, finance brokers, employers and other people such as accountants, lawyers and referees.

6. Do We Disclose Your Personal Information?

We may disclose your personal information to third parties where it is reasonably necessary to provide our services, to assess and arrange finance, to manage our business operations, or where required or permitted by law.

7. Who We May Disclose Your Information To

Your personal information may be disclosed to:

7.1. existing or prospective lenders, funders, or finance providers, and other intermediaries, in connection with your finance requirements;

7.2. borrowers, co-borrowers, guarantors, and security providers, where more than one party is involved in a finance arrangement;

7.3. valuers, surveyors, insurers, lender’s mortgage insurers, trade insurers, recovery firms, debt collectors, lawyers, and credit reporting bodies involved in managing or administering your finance;

7.4. agents, contractors, and external service providers engaged by us to perform outsourced functions such as information technology support, data storage, document production, mailing services, call centre services, and debt recovery;

7.5. business partners or related entities with whom we have a commercial relationship and who may offer products or services that may be of interest to you (subject to applicable marketing and consent requirements);

7.6. technology, data, and infrastructure providers that support our business systems and operations;

7.7. your authorised representatives, including finance brokers, lawyers, accountants, guardians, or persons holding a power of attorney;

7.8. any person or organisation where you have provided your consent;

7.9. our auditors, professional advisers, insurers, and reinsurers;

7.10. claims-related service providers, including assessors and investigators, where applicable;

7.11. government agencies, regulators, courts, or law enforcement bodies, where we are required or authorised by law to do so, including under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) or pursuant to a court order, subpoena, or summons;

7.12. entities involved in our funding or business arrangements, including trustees, warehouse funders, investors, rating agencies, agents, auditors, and advisers;

7.13. other financial institutions, for example, to process or investigate a mistaken or disputed payment;

7.14. organisations that provide products or services used or marketed by us; and

7.15. your current or former employer, referees, or identity verification service providers, where relevant.

8. Safeguards Before Disclosure

8.1. Before disclosing your personal information to another person or organisation, we take reasonable steps to ensure that:

8.2. the recipient has appropriate safeguards in place to protect your personal information at a standard comparable to our own; or

8.3. you have consented to the disclosure.

9. Use of Data Analytics and Aggregated Information

9.1. We may use new technologies and data analytics tools to combine information we hold about you with other information sources, including publicly available data (such as information from government or statistical sources). This helps us better understand customer needs, improve our products and services, and enhance business operations.

9.2. Any information shared with third parties for analytics or insights will be aggregated or de-identified, and we will not disclose personal information about you unless required or permitted by law.

10. Credit-Related Information

10.1. We collect, use, and exchange credit-related information for the purposes of assessing your application for finance, assisting you to obtain suitable credit products, and managing any finance arranged through us.

10.2. If you propose to act as a guarantor, we may obtain and assess a credit report about you as part of our evaluation process.

11. Storage of Credit-Related Information

The credit-related information we hold about you may be stored:

11.1. electronically on our secure IT systems and cloud-based servers; and

11.2. in paper or hard-copy form, where required.

11.3. We use reputable cloud storage and information technology service providers to store personal and credit-related information. These systems and servers may be located outside Australia.

12. Information Obtained from Credit Reporting Bodies

When we obtain credit eligibility information about you from a credit reporting body, we may also collect:

12.1. publicly available information; and

12.2. information relating to any serious credit infringement, where permitted by law.

This information is used solely for lawful credit assessment, verification, and compliance purposes.

13. Overseas Disclosure

13.1. We may disclose your credit-related information to overseas service providers that assist us with operational and support functions, including information technology, data processing, and administrative services.

13.2. These overseas recipients may be located in countries including, but not limited to, the United States, Canada, Malaysia, India, Ireland, the United Kingdom, and the Philippines.

13.3. Where we disclose credit-related information overseas, we take reasonable steps to ensure that appropriate data protection, confidentiality, and security arrangements are in place in accordance with Australian privacy and credit reporting laws. You may contact us for further information about these overseas disclosures.

14. Notifiable Matters

14.1. We are required by law to inform you about how your credit-related information may be collected, used, and disclosed. You may request that this information and this Privacy Policy be provided to you in an alternative format at any time.

14.2. We exchange your credit-related information with credit reporting bodies for the purposes of verifying your identity, assessing your creditworthiness, considering your application for finance, and managing any finance provided or arranged by us.

14.3. Credit reporting bodies may disclose the information we provide about you to other credit providers to assist them in assessing your creditworthiness. We may also obtain credit-related information from credit reporting bodies that has been provided by other credit providers for the purpose of assessing your creditworthiness.

14.4. The credit-related information we may exchange includes identification details, information about the types of credit or loans you hold, the amount of credit obtained, your repayment history, and details of any serious credit infringement, including fraud.

14.5. If you fail to meet your repayment obligations in relation to any finance provided or arranged by us, or if you commit a serious credit infringement, we may disclose this information to a credit reporting body.

14.6. You may request access to, and correction of, the credit-related information we hold about you in accordance with applicable law. Further details are set out under the section titled “Access and correction to your personal and credit-related information.”

14.7. Credit reporting bodies may use your credit-related information for the purpose of pre-screening credit offers at the request of other credit providers. You may contact the relevant credit reporting body at any time to request that your credit-related information not be used for this purpose.

14.8. If you believe you have been a victim of fraud, you may notify a credit reporting body. For a period of 21 days after receiving your notification, the credit reporting body must not use or disclose your credit-related information.

14.9. You may contact the following credit reporting bodies for further information: [WHO ARE THE Credit Reporting Bodies]

15. Notifiable Data Breaches

15.1. The Privacy Act includes a Notifiable Data Breaches (NDB) scheme which requires us to notify you and the Office of the Australian Information Commissioner (OAIC) of certain data breaches and recommend steps you can take to limit the impacts of a breach (for example, a password change).

15.2. The NDB scheme requires us to notify about a data breach that is likely to result in serious harm to affected individuals. There are exceptions where notification is not required. For example, where we have already taken appropriate remedial action that removes the risk of serious harm to any individuals.

15.3. If we believe there has been a data breach that impacts your personal information and creates a likely risk of serious harm, we will notify you and the OAIC as soon as practicable and keep in close contact with you about the nature of the breach, the steps we are taking and what you can do to reduce the impacts to your privacy. If you believe that any personal information we hold about you has been impacted by a data breach, you can contact us at [EMAIL]

16. Collecting Third Party Personal Information

If you give us personal information about another person, you represent that you are authorised to do so and confirm that you have obtained consent from that person for us to use and disclose their personal information. They may access any personal information we hold about them.

17. Direct Marketing

17.1. From time to time we may use your personal information to provide you with current information about finance offers you may find of interest, changes to our organisation, or new products or services being offered by us or any company with whom we are associated.

17.2. If you do not wish to receive marketing information, you may at any time decline to receive such information by emailing us at [EMAIL ADDRESS]. If the direct marketing is by email you may also use the unsubscribe function. We will not charge you for giving effect to your request and will take all reasonable steps to meet your request within a reasonable timeframe.

18. Unsolicited Information

18.1. Sometimes people share information (including sensitive information) with us which we have not requested.

18.2. If we receive unsolicited personal information (including credit-related information) about you, we will determine whether we would have been permitted to collect that information. If yes, then we will handle this information the same way we do with other information that we seek from you or in the manner described in this policy. If not, then we will destroy or de-identify it as soon as practicable, but only if it is lawful and reasonable to do so.

18.3. Often, it is not possible for us to neatly unbundle this information then destroy or de-identify only certain sections or parts of it, and we may need to store this information to assess future applications by you.

19. Financiers

For more information on how the Financiers collect, hold, use and disclose your information, you should see their privacy policies (many of which are accessible via the websites listed in the table below), which include how you can access and correct the information that these Financiers hold about you and how you can complain about their treatment of your information.

20. Access and Correction of Your Personal Information

20.1. You may request access to any of the personal information we hold about you at any time. We will respond to you within seven days of receiving your request. We may need to properly investigate your request. We will provide you with the outcome of our investigation within 30 days. We may need to consult with finance providers or credit reporting bodies or entities as part of our investigation.

20.2. To access personal information that we hold about you, use the contact details specified below. We may charge a fee for our reasonable costs in retrieving and supplying the information to you.

20.3. There may be situations where we are not required to provide you with access to your personal information, for example, if the information relates to existing or anticipated legal proceedings or if your request is vexatious.

20.4. An explanation will be provided to you if we deny you access to the personal information we hold about you.

20.5. If you ask us to correct the personal information we hold about you, if appropriate, we will correct the personal information at the time of the request. Otherwise, we will provide an initial response to you within seven days of receiving your request and will provide you with details about whether we have corrected the personal information within 30 days.

20.6. If we refuse to correct personal information, we will provide you with our reasons for not correcting the information.

21. Business Without Identifying You

In most circumstances, it will be necessary for us to identify you to successfully do business with you. However, where it is lawful and practicable to do so, we will offer you the opportunity of doing business with us without providing us with personal information – for example, if you make general inquiries about interest rates or current promotional offers.

22. Security of Your Personal Information

22.1. We will take reasonable steps to protect your personal information from misuse, loss, unauthorised access, modification or disclosure.

22.2. If we no longer need to hold your personal information, it is securely destroyed or permanently de-identified.

23. Business Sale, Merger or Restructure

23.1. We may disclose personal information and credit-related information in connection with a proposed or actual business sale, merger, restructure, reorganisation, assignment, transfer of assets, or similar transaction involving all or part of our business.

23.2. In these circumstances, personal information may be disclosed to prospective or actual purchasers, investors, financiers, advisers, or other third parties involved in the transaction, provided that reasonable steps are taken to ensure that the information is treated confidentially and in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

23.3. Where required by law, or where it is reasonable to do so, we will take steps to notify affected individuals of any material change in the ownership or control of their personal information.

24. Children and Minors’ Personal Information

24.1. Our services are intended for individuals who are 18 years of age or older. We do not knowingly collect personal information from children under the age of 18 unless the information is provided with the consent of a parent or legal guardian, or where collection is otherwise permitted or required by law.

24.2. If we collect personal information about a minor, including where a minor is involved as a dependant, guarantor, or beneficiary in a finance arrangement, we will handle that information in accordance with this Privacy Policy and applicable Australian privacy laws, and we will take reasonable steps to ensure that such information is used and disclosed only for lawful and necessary purposes.

24.3. If you believe that we have collected personal information about a child without appropriate consent, you may contact us using the details set out in this Privacy Policy, and we will take reasonable steps to investigate and address the matter.

25. Data Retention and Record-Keeping Periods

25.1. We retain personal information and credit-related information only for as long as it is reasonably necessary to fulfil the purposes for which it was collected, or as otherwise required or permitted by law.

25.2. In many cases, this means that personal information, credit-related information, identity verification records, transaction records, and finance application records are retained for a minimum period of seven (7) years after the end of our relationship with you or the completion of a relevant transaction, to comply with our legal, regulatory, taxation, accounting, audit, dispute resolution, and record-keeping obligations.

25.3. Certain types of information may be subject to shorter or longer retention periods in accordance with applicable laws, including the Privacy Act 1988 (Cth), the Privacy (Credit Reporting) Code 2014, and the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth).

25.4. Where personal information or credit-related information is no longer required for these purposes, and we are not otherwise required by law to retain it, we take reasonable steps to securely destroy the information or permanently de-identify it.

26. Anti-Money Laundering, Counter-Terrorism Financing and Identity Verification

26.1. We are required to comply with the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) and related rules. To meet these obligations, we may collect, use, and disclose your personal information, including identification information, to verify your identity, conduct customer due diligence (KYC checks), and monitor transactions.

26.2. This may include collecting information from you and from third parties such as credit reporting bodies, identity verification service providers, government databases, and other reporting entities for the purposes of confirming your identity, preventing fraud, and detecting or reporting suspicious matters.

26.3. Where required by law, we may disclose your personal information to the Australian Transaction Reports and Analysis Centre (AUSTRAC) and other regulatory or law enforcement agencies in connection with our AML/CTF obligations, including reporting suspicious matters, threshold transactions, or other reportable events.

26.4. If we are unable to verify your identity to the standard required by law, or if you do not provide the information requested for AML/CTF purposes, we may be unable to provide you with our services, may refuse or discontinue a finance application, or may be required to terminate our business relationship with you, in accordance with our legal obligations.

27. Contacting Us and Providing Feedback

27.1. You may request further information about the way we manage your personal information or lodge a complaint by contacting our Privacy Officer on the contact details below.

a. by telephone on +61 424 893 251
b. via email at kristy@allassetfinance.net.au
c. by post: 11 28-32 Lee Holm Rd St Marys NSW 2760 Australia

27.2. We will acknowledge your complaint within seven days and aim to resolve the complaint as quickly as possible. We will provide you with a decision on your complaint within 30 days. If you are dissatisfied with our response to your complaint, you may make a complaint to the Australian Financial Complaints Authority scheme, which can be contacted on either www.afca.org.au or 1800 931 678, or the Privacy Commissioner who can be contacted on either www.oaic.gov.au or 1300 363 992.

28. Changes to This Privacy Policy

28.1. We may amend this Policy from time to time to comply with new laws or codes of practice that may be implemented. We may also change this Policy to include any new products or services that we may provide from time to time.

28.2. You may request this policy in an alternate form by contacting the Privacy Officer on the above details.