Privacy and Credit Reporting Policy

1. Introduction

MoneyMe Limited ACN 636 747 414 and its related bodies corporate (including but not limited to
MoneyMe Financial Group Pty Ltd ACN 163 691 236, Australian Credit Licence Number 442218 and
SocietyOne Australia Pty Ltd ACN 151 627 977, Australian Credit Licence Number 423660)
(we, us or our) respect the privacy of all customers, third parties, suppliers and visitors (you, your or yours) and are committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) (Privacy Act), the Australian Privacy Principles and the Privacy (Credit Reporting) Code 2025 (Credit Reporting Code).

This Privacy Policy describes how we deal with information we collect and demonstrates our commitment to the protection of your privacy. This Privacy Policy is our policy about the management of personal information, credit information and credit eligibility information.

Any personal or credit-related information we collect about you will only be used for the purposes we have collected it for or as allowed under applicable law, including the Privacy Act. We comply with the Australian Privacy Principles, as set out in the Privacy Act, for the protection of personal information and we comply with the Credit Reporting Code.

2. What Kinds of Personal Information Do We Collect and Hold?

Personal Information

The Privacy Act defines personal information as information or an opinion about an identified individual, or an individual who is reasonably identifiable whether the information or opinion is true or not and whether the information or opinion is recorded in a material form or not.

The personal information we collect and hold may include your contact details, such as your name, address, telephone numbers and email address, your personal details, such as date of birth, your employment information, residential status and information about your financial position, including your income, expenses, savings and assets and any (other) credit arrangements, your reasons and objectives for applying for a product or service and where required other details such as the ages and number of your dependants, the length of time you have lived at your current address, and other information we consider relevant to assessment of your application for credit or any other service we provide. We also hold all records of your communications and other interactions with us.

Depending on the products and services you use, we may also collect and hold: identification information and documents, such as your driver licence, passport, Medicare card or other government-related identifiers; your identity document and your sensitive facial biometric information from a ‘selfie’ video, which our partner IDVerse uses to automatically verify your identity (see ‘Sensitive information’ below), bank account details and transaction information, including information you authorise us to obtain from your bank accounts through bank statement retrieval services, details of any vehicle being financed or offered as security, if you are a guarantor, broker, dealer, merchant, supplier or investor, the information reasonably necessary to deal with you in that capacity, and recordings of telephone calls, online chats and other interactions with us.

Credit-related information

Credit-related information means:

• Credit information, which is information about you of the kinds that may be exchanged with credit reporting bodies under the Privacy Act, namely: identification information, the fact that we or another credit provider have asked a credit reporting body for information about you in connection with an application for credit (an information request or credit enquiry), the type of consumer credit or commercial credit you have applied for or hold, and the terms and maximum amount of credit provided to you, including when that credit was provided and when it was repaid (consumer credit liability information), repayment history information, financial hardship information (that a repayment is affected by a financial hardship arrangement), default information (overdue payments of $150 or more that are at least 60 days overdue and in respect of which we have given you the notices required by law), payment information, new credit arrangement information, court proceedings information, personal insolvency information, publicly available information that relates to your credit worthiness, and if you have committed a serious credit infringement; and

• Credit eligibility information, which is credit reporting information supplied to us by a credit reporting body, and any information that we derive from it.

We use your credit-related information to assess your eligibility to be provided with finance. Usually, credit-related information is exchanged between credit and finance providers and credit reporting bodies. We only collect, hold, use and disclose credit-related information as permitted Privacy Act and the Credit Reporting Code. Credit-related information is held in electronic form on our secure systems and those of our service providers.

Other information

When you use our website, platforms and any mobile sites (Websites), applications, widgets and other mobile interactive features (collectively, our Apps), or our official social media pages that we control (our Social Media Pages) as well as through HTML-formatted email messages that we may send to you (collectively, including the Social Media Pages, Apps and Websites, the Sites), we may collect other information.

The Sites collect other information that may or may not be personal information. Other information includes browser and device information (such as device identifiers, IP address and browser type), server log file information, App usage data, demographic information, location information, information collected through cookies, software development kits, tracking pixels and similar technologies (including third-party analytics and advertising tools on our Sites), and aggregated information. When you download and use an App, we and our service providers may track and collect App usage data, such as the date and time the App on your device accesses our servers and what information and files have been downloaded to the App based on your device number. Cookies allow a web server to transfer data to a computer or device for recordkeeping and other purposes. If you do not want information collected through the use of cookies, there is a simple procedure in most browsers that allows you to decline the use of cookies.

Where other information is not personal information, we may use and disclose it for our business purposes. However, online identifiers such as device identifiers, cookie identifiers, IP addresses, hashed contact details and location data can be personal information where they can reasonably be linked to you or used to single you out, and where that is the case we treat them as personal information and handle them in accordance with this Privacy Policy, including the ‘Direct Marketing’ section below. In some instances, we may combine other information with personal information. If other information can be combined with personal information or can be used to build a profile of an individual (in a way which could be reasonably used to identify that individual), such other information will be treated by us as personal information.

3. How We Collect Your Personal Information

We collect personal information about you when it is reasonably necessary for one or more of our activities or functions. This personal information is collected in a number of ways, including through the Sites. For example, we may collect your personal information:

• from the Sites, such as when you visit, use or register on our Websites, Apps or Social Media Pages;

• directly from you when you contact, do business or interact with us by phone or email;

• from other sources, such as public databases, marketing lists we may acquire from third parties (where permitted), professional and other credit bodies (for example under reciprocal arrangements), your employer, regulators and government and statutory bodies; or

• credit reporting bodies (for your credit report if you apply for credit or offer to act as a guarantor), mortgage and finance brokers, dealers, merchants and referral partners through whom you apply, joint applicants and guarantors, identity verification, fraud prevention and bank statement retrieval service providers, employers, and other people such as accountants and lawyers.

Where it is reasonable and practicable to do so, we collect personal information directly from you. If we collect personal information about you from someone other than you (for example, from a broker, a joint applicant or a guarantor), we will take reasonable steps to make sure you are aware of the matters set out in this Privacy Policy. If you give us personal information about another person (such as a spouse or partner, dependant, referee or proposed guarantor), you must be authorised to do so and should tell that person that you have done so and refer them to this Privacy Policy.

4. If We Do Not Collect Your Personal Information

The provision of your personal information is voluntary. However, if you cannot, or will not, provide us with the personal or credit-related information we reasonably require, we may not be able to confirm your identify, assess your application for a product or service, manage our relationship with you, contact you or otherwise interact with you, perform our statutory functions, or provide you with some or all of our credit products and services.

Note: where it is lawful and practicable to do so, we will offer you the opportunity of doing business with us without providing us with personal information (for example, if you make general inquiries about interest rates or current promotional offers).

5. How We Use Your Personal Information

We will not collect or use your personal information or credit-related information unless it is lawful for us to do so. We collect and use personal and credit-related information for the following purposes:

• considering any application made by you for products or services offered by us, including credit and other services and applications;

• maintaining, reviewing and developing our business systems, procedures and infrastructure, including our Sites;

• establishing your identity and meeting our customer due diligence obligations;

• exchanging credit-related information with credit reporting bodies for the purpose of assessing and managing your application for products and services, and disclosing repayment history information, financial hardship information, default information and other credit information to credit reporting bodies as permitted by the Privacy Act;

• dealing with our partners in financial transactions, including financial institutions, merchants and payment organisations;

• working with fraud prevention services, debt collection agencies and other organisations involved in our normal business practices;

• fulfilling orders or requests for information, products or services (with your consent, if required);

• fulfilling our role as a credit provider, including maintaining customer records and providing information on our services, products and benefits;

• for investors in the SocietyOne Personal Loans Trust, fulfilling our role as investment manager of the Trust;

• for promotional and marketing purposes, including communicating information about our products and services, and those of our related companies or third party partners (in accordance with the ‘Direct Marketing’ section below);

• for the purpose of referrals or lead generation (only with your consent), including through our related bodies corporate (in particular SocietyOne Australia Pty Ltd, Broker Services Pty Ltd and Price Enquiry Pty Ltd) or third parties;

• conducting, managing and reporting on quality assurance reviews and audits;

• managing complaints;

• managing our risks and complying with our legal obligations;

• providing information to Australian regulators, government and statutory bodies;

• providing products and services, or information relating to such products and services (with your consent, if required);

• managing, assessing or improving our products and services, as well as for training and quality purposes, including analysing customer profiles, and monitoring, recording and analysing online interactions and communications between you and us (see also ‘Automated decision-making’ below); and

• providing information to third parties as authorised or required by law or a court or tribunal.

These purposes are reasonably necessary for, or directly related to, our functions and activities as a credit provider and financial services business. In some cases, it will be lawful for us to collect and use your personal and credit-related information, for example where it is necessary as part of our, or a third party's statutory function or because the law permits or requires us to.

Automated decision-making

We use computer programs, including credit scoring models, rules-based decision engines and machine learning models, to help us make decisions quickly and consistently. The kinds of personal information used in these programs include your identification and contact details, the information in your application, your income, expenses, liabilities and bank transaction information, your credit-related information (including your credit report and credit score), information about your existing products with us and your repayment history, and information about your device and the way you interact with our Sites. Decisions made solely by these programs, without human involvement, include declining an application that does not meet our minimum eligibility criteria, assessing and approving an application, and setting the credit limit and interest rate, where the application falls within our approved lending parameters, verifying your identity through IDVerse’s automated identity verification, and blocking or holding a transaction or application that our fraud detection systems identify as high risk]. Decisions in which these programs do something substantially and directly related to the decision, but where a person makes the final decision, include assessing your capacity to repay and whether a product is suitable for you, referring an application for manual review, identifying customers who may be experiencing financial difficulty and assessing hardship requests, and prioritising and managing collections activity. You can ask us to explain a decision that affects you, and to have a decision that was made solely by a computer program reviewed by a person, by contacting us using the details in this Privacy Policy.

Our Sites may contain hyperlinks to websites operated by third parties. We are not responsible for the content of such websites, or the manner in which those websites handle any personal information you provide. In these cases, your personal information may be collected by that third party and not by us and will be subject to that third party's privacy policy, rather than this Privacy Policy. We have no control over, and are not responsible for, that third party's use or disclosure of your personal information.

6. Direct Marketing

We may use your personal information (other than sensitive information) to tell you about products, services and offers of ours, our related companies and selected third-party partners by telephone, mail, email, SMS, in-app message, push notification and online advertising (depending on your account, device and operating system settings). We will only do so where you would reasonably expect it, or where you have consented. If we have collected your information from someone other than you, or you would not reasonably expect us to market to you, we will only do so with your consent or where it is impracticable to obtain your consent, and each communication will remind you that you can opt out. We will not use or disclose sensitive information for direct marketing without your consent. We do not use or disclose credit eligibility information (including your credit report or credit score) for direct marketing. Credit reporting bodies may, at the request of credit providers, use the information they hold to ‘pre-screen’ individuals for direct marketing; we do not receive your credit information in that process, and you can ask a credit reporting body not to use your information in this way. You may opt out of direct marketing at any time, free of charge, by contacting us using the details in this Privacy Policy, by using the unsubscribe facility in any electronic marketing message we send you, or by adjusting your notification settings in our App. You may also ask us not to disclose your personal information to other organisations for their marketing purposes, and to tell you where we obtained your information. We will give effect to your request within a reasonable period and, in any case, within 10 business days, and will tell you the source of your information within a reasonable period unless it is impracticable or unreasonable to do so. Our electronic marketing also complies with the Spam Act 2003 (Cth) and the Do Not Call Register Act 2006 (Cth).

7. Use and Disclosure of Personal Information

We do not use your personal or credit-related information or disclose it to another organisation unless it is reasonably necessary for one of the purposes described above, having regard to the nature of the information or the circumstances of collection we believe you would expect us to use the information or make the disclosure. For example, if it is required or authorised by law or court or tribunal, it is necessary to protect the rights, property, health or personal safety of a customer, the public or our interests, and it is unreasonable or impracticable to obtain your consent, the disclosure is necessary to assist any entity, body or person to locate a person who has been reported missing, we have reason to suspect that activity, or misconduct of a serious nature, that relates to our functions or activities has been, is being or may be engaged in, and we believe that the collection, use or disclosure is necessary in order for us to take appropriate action, it is necessary to obtain third party services, for example to carry out data analysis or provide information processing services (where use of your information by third parties is strictly controlled), it is for one of the purposes expressly permitted under applicable data protection and privacy laws or you have provided your consent.

We exchange credit-related information for the purposes of assessing your application for finance (or to act as a guarantor) and managing that finance. We only disclose credit information and credit eligibility information where the Privacy Act permits – for example, to credit reporting bodies, to another credit provider or a guarantor or prospective guarantor with your consent, to our related bodies corporate, to persons who process applications or manage credit on our behalf, to participants in our funding and securitisation arrangements, to mortgage or trade insurers, to debt collectors and persons to whom your debt is assigned, to our professional advisers, and where required or authorised by law. The list of recipients below applies to personal information generally; credit-related information is disclosed to those recipients only to the extent the Privacy Act permits.

For avoidance of doubt, we may disclose your personal information (and credit-related information, where permitted by the Privacy Act) to:

• any of our related and associated companies, affiliates and subsidiaries, including those established in the future;

• guarantors and prospective guarantors and security providers (with your consent where the Privacy Act requires it);

• credit reporting bodies;

• prospective funders or other intermediaries in relation to your finance requirements;

• other credit providers;

• any joint applicant or co-borrower in relation to the credit you apply for or hold together;

• dealers, merchants, brokers and referral partners through whom you applied for, or were introduced to, our products;

• any person who represents you, such as brokers, agents, financial advisors and people who act on your behalf;

• organisations involved in our funding arrangements (like loan purchasers and investors);

• other banks and financial institutions, including those you choose to use to make payments to us;

• organisations that help identify illegal activities and prevent fraud, any data processors processing your information on our behalf;

• third parties who provide related services or products in connection with our business such as our vendors;

• anyone where you have provided us consent;

• related or associated businesses that may want to market products to you (only in accordance with the ‘Direct Marketing’ section above);

• for the purpose of referrals or lead generation (only with your consent), including through our related bodies corporate (in particular SocietyOne Australia Pty Ltd, Broker Services Pty Ltd and Price Enquiry Pty Ltd) or third parties;

• any party assisting us in carrying out the purposes described above;

• parties which participate in joint marketing schemes with us (only in accordance with the ‘Direct Marketing’ section above);

• to claims related providers, such as assessors and investigators who help us with claims;

• any agent, contractor or service provider who provides verification of identity, income or employment, order processing, payment clearing, credit reference, debt collecting or other services necessary to the operation of our business, including to IDVerse (our automated identity verification partner, which uses your facial biometric information as described under ‘Sensitive information’ below) and to Equifax Verification Exchange® who may collect, use and disclose your personal information to your employer (or to payroll or other service providers who may act on behalf of your employer) to identify you and to collect and use your employment income, history and related information from such parties to allow you to verify such matters.

• any person to whom we are, in our belief in good faith, under an obligation to make disclosure as required by any applicable law;

• government agencies, statutory authorities and industry regulators;

• our auditors, consultants, accountants, lawyers or other financial or professional advisers and our sub-contractors or third party service or product providers as may be determined to be necessary or appropriate;

• organisations that provide products or services used or marketed by us; or

• organisations involved in a proposed or actual transfer, sale or financing of all or part of our business, assets or loan portfolios, and their advisers; or

• to your employer, former employer, referees or identity verification services.

8. Overseas Disclosures

Some of our service providers (including cloud hosting, technology development and support, customer service, collections, identity verification and analytics providers) store, access or process information from outside Australia. We are likely to disclose personal information to recipients located in the United States of America, the Philippines, the United Kingdom and Ireland. We may also disclose credit information and credit eligibility information to related bodies corporate or service providers located in those countries where Part IIIA of the Privacy Act permits. Before we disclose personal information to an overseas recipient, we take reasonable steps to ensure that the recipient handles it in accordance with the Australian Privacy Principles, including through contractual obligations of confidentiality, security and use limitation, unless an exception in Australian Privacy Principle 8 applies (for example, where you have expressly consented to the disclosure after we have told you that we will not be taking those steps, or where the recipient is subject to a law or binding scheme that protects the information in a way that is at least substantially similar to the Australian Privacy Principles). All service providers that have access to personal and credit-related information held by us are required to keep the information confidential and not to use it for any purpose other than providing services to us.

9. Notifiable Matters

The law requires us to advise you of ‘notifiable matters’ in relation to how we may use your credit-related information. You may request to have these notifiable matters (and this Privacy Policy) provided to you in an alternative form. This section is our statement of notifiable matters for the purposes of section 21C of the Privacy Act and paragraph 4 of the Credit Reporting Code. When we collect personal information that we are likely to disclose to a credit reporting body, we will tell you that this statement is available on our website.

We exchange your credit-related information with credit reporting bodies. We use the credit-related information that we exchange with credit reporting bodies to confirm your identity (including, with your consent, by asking a credit reporting body to assess whether the identification information you have given us matches information it holds, as permitted by the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth)), assess your creditworthiness, assess your application for finance or your capacity to be a guarantor, manage your finance and collect overdue payments.

The information we may exchange with credit reporting bodies includes your identification details, the fact that you have applied for credit and the type and amount of credit sought, what type of credit you have and how much you have borrowed, your repayment history information (whether or not you have made your repayments on time), financial hardship information (that a payment is affected by a financial hardship arrangement, either with us or with another credit provider), default information (overdue payments of $150 or more that are at least 60 days overdue, after we have given you the required notices), payment and new arrangement information, and if you have committed a serious credit infringement (such as fraud).

If you apply for credit with us, or ask us to increase your credit limit, we may ask a credit reporting body for information about you. Your consent to this is not required. The credit reporting body will record that we made this request. This record (a ‘credit enquiry’ or ‘information request’) may be included in your credit report and may be used or disclosed by the credit reporting body, or by other credit providers, to assess your creditworthiness, including in calculating your credit score or credit rating. A credit enquiry may affect your credit score – it may go up, down or stay the same depending on factors such as the type of credit sought and how many other enquiries have been made recently, and a large number of credit applications in a short period is more likely to lower your score. Credit reporting bodies may include the information we give them in reports provided to other credit providers to assist those credit providers to assess your creditworthiness.

If we agree to a financial hardship arrangement with you, or an arrangement to catch up overdue payments, we will tell you at that time what repayment history information and financial hardship information may be disclosed to credit reporting bodies as a result of the arrangement.

If you fail to meet your payment obligations in relation to any finance that we have provided or arranged, or if you have committed a serious credit infringement, we may disclose this information to a credit reporting body.

You have the right to request access to the credit-related information that we hold about you, to ask us to correct that credit-related information if it is inaccurate, out-of-date, incomplete, irrelevant or misleading, and to complain to us (and, if you are not satisfied, to the Australian Financial Complaints Authority or the Office of the Australian Information Commissioner) if you believe we have not complied with Part IIIA of the Privacy Act or the Credit Reporting Code. See ‘Access and Correction of Personal and Credit Information’ below for further information.

Sometimes your credit-related information will be used by credit reporting bodies for the purposes of ‘pre-screening’ credit offers on the request of other credit providers. You can contact the credit reporting bodies at any time to request that your credit-related information is not used in this way.

You may contact the credit reporting bodies to advise them that you believe that you may have been a victim of fraud. Credit reporting bodies must not use or disclose your credit-related information for a period of 21 days after you notify them that you may have been a victim of fraud. Each credit reporting body has a policy about how it manages credit-related personal information, which you can obtain from its website or by contacting it. Contact details for the credit reporting bodies we deal with are as follows:

• Equifax Pty Limited – www.equifax.com.au – Telephone: 138 332;

• Experian Australia Credit Services Pty Ltd – www.experian.com.au – Telephone: 1300 783 684.

10. Updating Your Personal Information

It is important to us that the personal information we hold about you is accurate and up to date. During the course of our relationship with you, we may ask you to inform us if any of your personal information has changed.

If you wish to make any changes to your personal information, you may contact us. We will generally rely on you to ensure that the information we hold about you is accurate or complete.

11. Access and Correction of Personal and Credit Information

We will provide you with access to the personal and credit-related information we hold about you. You may request access to any of the personal and credit-related information we hold about you at any time. We will not charge you for making a request. We may charge a reasonable fee for our costs of retrieving and supplying personal information to you; any fee will not be excessive and we will tell you about it before it is incurred.

Depending on the type of request that you make, we may respond to your request immediately.
Otherwise, we will respond to your request within a reasonable period after it is made – usually within 7 days – and will give you access to credit-related information within 30 days. We may need to contact other entities to properly investigate your request.

There are limited situations in which the Privacy Act permits us to refuse access to personal information – for example, where giving access would be unlawful or would prejudice existing or anticipated legal proceedings or enforcement activities, where the request is frivolous or vexatious, or where the information would reveal commercially sensitive evaluative information. The grounds for refusing access to credit eligibility information are narrower: we may only refuse where giving access would be unlawful, where refusing access is required or authorised by law or by a court or tribunal order, or where giving access would be likely to prejudice enforcement-related activities.

If we deny you access to the personal or credit-related information we hold about you, we will give you written notice of our reasons (unless it would be unreasonable to do so) and of how you can complain about the refusal, including to the Australian Financial Complaints Authority and the Office of the Australian Information Commissioner.

If any of the personal or credit-related information we hold about you is incorrect, inaccurate or out-of-date, you may request that we correct the information by telephoning us on 1300 329 037 or by writing to us at privacy@moneyme.com.au.

If appropriate, we will correct the personal or credit-related information at the time of your request. Otherwise, we will provide an initial response to you within seven days of receiving your request. Where reasonable, and after our investigation, we will provide you with details about whether we have corrected your personal or credit-related information within 30 days of your request, or such longer period as you agree to in writing.

We may need to consult with other finance providers or credit reporting bodies or entities as part of our investigation.

If we refuse to correct personal or credit-related information, we will give you written notice of our reasons for not correcting the information and of how you can complain about that decision. You may also ask us to associate with the information a statement that you believe it is inaccurate, out-of-date, incomplete, irrelevant or misleading. If we correct credit-related information that we have previously disclosed to a credit reporting body or another credit provider, we will notify them of the correction where the Privacy Act requires us to do so.

12. How Long Do We Keep Your Personal Information?

We will only retain your personal and credit-related information for as long as is necessary for the purpose for which that personal information was collected and to the extent permitted by applicable laws. When we no longer need (or are otherwise obliged under any law) to use personal or credit-related information, we will remove it from our systems and records and/or take steps to anonymise it so you can no longer be identified from it. We are required by law to retain certain records for minimum periods – for example, under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth), the National Consumer Credit Protection Act 2009 (Cth) and the Corporations Act 2001 (Cth) – and we generally retain records relating to your products for at least seven years after your relationship with us ends. We destroy or de-identify credit eligibility information when we no longer need it for a purpose permitted under Part IIIA of the Privacy Act and are not required by law to retain it.

13. Security of Personal Information

We hold personal and credit-related information in electronic form in secure systems operated by us and by our service providers (including cloud-based systems, some of which are located outside Australia – see ‘Overseas Disclosures’ above) and, in limited cases, in hard copy. Access is restricted to personnel and service providers who need it to perform their roles. We use reasonable organisational, technical and administrative measures and security safeguards to protect, as is reasonable in the circumstances, the personal information we hold from misuse, loss, interference and/or unauthorised access, use, disclosure or alteration of information under our control. Where practicable, we implement measures to require organisations to whom disclosure is made to comply with applicable data protection and privacy laws. If a third party is given access to personal or credit-related information, we take reasonable steps to ensure that the information is held securely and used only for the purpose of providing the relevant service or activity. Unfortunately, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please immediately notify us of the problem. If a data breach involving your personal or credit-related information occurs and is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act.

14. Sensitive information

We will only collect sensitive information about you with your consent, unless the collection is required or authorised by law or another exception in the Privacy Act applies. Sensitive information is personal information about your racial or ethnic origin, political opinions or membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association or a trade union, sexual orientation or practices, or criminal record, as well as health information, genetic information, biometric information that is used for automated biometric verification or identification, and biometric templates.

We collect sensitive information only where it is reasonably necessary for a specific purpose. To verify your identity, we collect your personal information from your identity document and your sensitive facial biometric information from a ‘selfie’ video. Our partner, IDVerse, will use this data to automatically verify your identity and to help us prevent fraud. Your selfie video is matched to your identity document using your facial biometrics. IDVerse deletes your biometric data within seven days. For more information, refer to IDVerse’s Privacy Policy. If you do not want to consent to the automated identity verification and use of your biometric information then you will need to verify your identity another way. If you apply for financial hardship assistance, you may give us health information, which we use only to assess and manage your request. If you apply to finance a medical or surgical procedure, we may collect health information to assess your application and may disclose it to your treatment provider. We do not use or disclose sensitive information for direct marketing without your consent.

15. Privacy Concerns

If you would like any further information about our handling of personal information, or to make a complaint about our handling of your personal information, or you believe there has been a breach by us of the Privacy Act or of the Credit Reporting Code, please lodge a complaint addressed to our Privacy Officer at privacy@moneyme.com.au.

We will acknowledge your complaint promptly – generally within one business day of receiving it and in any event within seven 7 days – and aim to resolve the complaint as quickly as possible. We will investigate your complaint and, where it concerns credit-related information, we may need to consult a credit reporting body or another credit provider. We will give you a written decision on your complaint, with reasons, within 30 days. If we cannot resolve your complaint within 30 days, we will tell you why, when we expect to make a decision, and that you may take your complaint to the Australian Financial Complaints Authority or the Office of the Australian Information Commissioner.

If you are unsatisfied with the outcome of your complaint, you may contact us further to advise of your concerns and, if we are unable to reach a satisfactory resolution, there are other ways you can escalate your complaint.

You may complain to the Office of the Australian Information Commissioner (OAIC) if you have raised a complaint with us and you’re not happy with our response or have concerns about the way we handle your personal information. The contact details for the OAIC are:

Office of the Australian Information Commissioner
GPO Box 5288
Sydney NSW 2001
Phone: 1300 363 992
Online: www.oaic.gov.au
Online complaint form: www.oaic.gov.au/privacy/privacy-complaints

You can also contact our external dispute resolution scheme, the Australian Financial Complaints Authority (AFCA). AFCA provides a free and independent service to resolve complaints by consumers and small businesses about financial firms (e.g. banks), where that complaint falls within AFCA’s terms of reference. The contact details for AFCA are:

Australian Financial Complaints Authority

GPO Box 3
Melbourne VIC 3001
Phone: 1800 931 678 (free call)
Online: www.afca.org.au
Email: info@afca.org.au

16. Further Information

You may request further information about the way we manage your personal or credit-related information by telephoning us on 1300 329 037 or by writing to us at privacy@moneyme.com.au.

16. Variations to the Privacy Policy

We reserve the right to modify this Privacy Policy at any time by publishing an updated version of this Privacy Policy on our Website and taking any further action as required by law, and the updated version will apply from the date it is published. We will tell you about significant changes by notice on our Website or by contacting you directly.

You may request this policy in an alternative form by telephoning us on 1300 669 059 or by writing to us at privacy@moneyme.com.au.

This Privacy Policy was last updated in September 2026.