Privacy Policy

What kinds of personal information do we collect and hold?

When you apply for our products or services we may ask for identification information. This could includes you name, address, contact details and date of birth. We may also collect your tax file number if we are authorised to collect it and if you choose to supply it.

Throughout the life of your product or service, we may collect and hold additional personal information about you.

The collection of sensitive information is restricted by the Privacy Act. This includes information about your religion, racial or ethnic origin, political options, criminal record, and sexual orientation. It also includes health information and biometric information.

Generally, we only collect this sort of information if it is necessary to provide you with a specfic product or service and you have consented to that collection.

For what purpose do we collect, hold, use and disclose personal information?

The main reason we collect, use, hold and disclose personal information is to provide you with products and services. This includes:

• checking whether you are eligible for the product or service;
• assisting you where online applications are not completed;
• providing the product or service; and
• helping manage the product or service.

We may also use your information to comply with legislative or regulatory requirements in any jurisdiction, prevent fraud, crime or other activity that may cause harm in relation to our products or services and to help us run our business. We may also use your information to tell you about products or services we think may interest you.

How do we collect personal information?

We collect most personal information directly from you. For example, we will collect your personal information when you apply for or use a product or service or talk to us in person or on the phone.

We also collect information from you electronically. For instance, when you visit our website or whenever you apply for or access our products and services electronically.

Sometimes we collect personal information bout you from other people or organisations. This may happen without your direct involvement. For instance, we may collect personal information about you from:

• publicly available sources on information, such as public registers;
• your representatives (including your legal adviser, conveyancer, financial planner / adviser, executor, administrator, guardian, trustee or lawyer);
• your employer;
• other organisations, who jointly with us, provide products or services to you;
• commercial information service providers, such as companies that provide fraud prevention reports.

What laws require or authorise us to collect personal information?

We are required or authorised to collect:

• certain identification information about you by the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) and Anti-Money Laundering and Counter-Terrorism Financing Rules Instrument 2007 (No. 1);
• your Tax File Number, if you choose to provide it, by the Income Tax Assessment Act 1936 (Cth);
• if you hae applied for credit or provide a guarantee, certain information about your financial position under the National Consumer Credit Protection Act 2009 (Cth), and if you give us a mortgage security, certain identification information under property laws in some states and territories.

How do we hold personal information?

Much of the information we hold about you will be stored electronically in secure data centres which are located in Australia and owned by external service providers. Some information we hold about you will be stored in paper files. We use a range of physical and electronic security measures to protect the security of the information we hold. For example:

• access to information systems is controlled through identity and access management;
• employees are bound by internal information security policies and are required to keep information secure;
• all employees are required to complete training about information security;
• we regularly monitor and review our compliance with internal policies and industry best practice;
• we take reasonable steps to destroy or permanently de-identify any personal information after it can no longer be used.

Who do we disclose your personal information to, any why?

We may share your personal information with other companies with whom we engage to provide products and services to you. To protect personal information, we enter into contracts with our service providers that require them to comply with the Privacy Act. These contracts oblige them to only use the personal information we disclose to them for the specific role we ask them to preform.

Generally, we disclose personal information to organisations that help us with our business. These may include:

• our agents, contractors and external service providers;
• authorised representatives and credit representatives who sell products and services on our behalf;
• insurers, re-insurers and health care providers;
• payment systems operators
• other organisations who jointly with us, provide products or services to you;
• other financial services organisations, including banks, superannuation funds, stockbrokers, custodians, funds managers and portfolio service providers;
• your financial advisers, legal advisers or auditors;
• your representatives (including your legal adviser, accountant, financial adviser, executor, administrator, guardian, trustee);
• fraud bureaus or other organisations to identify, investigate or prevent fraud or other misconduct;
• external dispute resolution schemes; and
  regulatory bodies, government agencies and law enforcement bodies in any jurisdiction.

We may also disclose your personal information to others where:

• we are required or authorised by law or where we have a public duty to do so;
• you may have expressly consented to the disclosure or the consent may be reasonable inferred from the circumstances; or
• we are otherwise permitted to disclose the information under the Privacy Act.

Do we disclose personal information overseas?

We may disclose your personal information to a recipient which is located outside Australia. The countries we disclose your information to will depend on the details of the transaction you ask us to carry out.

Do we use other parties to collect and hold personal information?

No. Other parties are not authorised to collect personal information on our behalf.

Do we use or disclose personal information for marketing?

We will use your personal information to offer you products and services we believe may interest you, but we will not do so if you tell us not to. We may offer you products and services by various means, including by mail, telephony, email, SMS or other electronic means, such as through social media or targeted advertising.

If you don’t want to receive marketing offers from us, please contact us.

Do we collect personal information electronically?

We will collect information from you electronically, for instance through internet browsing, mobile or tablet applications. Each time you visit the MDM Finance Solutions website, we collect information about your use of the website, which may include the following:

• the date and time of visits;
• which pages are viewed;
• how users navigate through the site and interact with pages (including fields completed in forms and applications completed);
• location information about users;
• information about the device used to visit the website.

We won’t ask you to supply personal information publicly over Facebook, Twitter or any other social media platform that we use. Sometimes we may invite you to send your details to us via private messaging, for example, to answer a question about your account. You may also be invited to share your personal information through secure channels to participate in other activities, such as competitions.

You can request access to the personal information we hold about you at any time. You can also ask for corrections to be made. To do so, please contact us.

Resolving your privacy concerns and complaints – your rights

If you are concerned about how your personal information is being handled or if you have a complaint about a breach by us of the Australian Privacy Principles, please contact us.

We will acknowledge your complaint as soon as we can after receipt of your complaint. We will let you know if we need any further information for you to resolve your complaint.

We aim to resolve complaints as quickly as possible. We strive to resolve complains within five business days however some complaints take longer to resolve. If you complaint is taking longer, we will let you know what is happening and a date by which you can reasonably expect a response.

If you are unhappy with our response, there are other bodies you can go to including the Australian Financial Complaints Authority (AFCA) who can consider complaints about your credit information involving providers of financial services.