Who are we?
‘We’, ‘us’ and ‘our’ refer to Yellow Brick Road Holdings Pty Limited (ACN 119 436 083), our related bodies corporates and credit representatives.
Our commitment to protect your privacy
We understand how important it is to protect your personal information. This document sets out our privacy policy commitment in respect of personal information we hold about you and what we do with that information.
We recognise that any personal information we collect about you will only be used for the purposes we have collected it, or as allowed under the relevant law. It is important to us that you are confident that any personal information we hold about you will be treated in a way which ensures protection of your personal information.
Our commitment in respect of personal information is to abide by the Australian Privacy Principles for the protection of personal information, as set out in the Privacy Act and any other relevant law.
Personal information
When we refer to personal information we mean information from which your identity is reasonably apparent. This information may include information or an opinion about you. The personal information we hold about you may also include credit information.
The kinds of personal information we may collect about you include your name, date of birth, address, account details, occupation, and any other information we may need to identify you.
Credit information is information which is used to assess your eligibility to be provided with finance and may include any finance that you may have outstanding, your repayment history in respect of those loans, and any defaults. Usually, credit information is exchanged between credit and finance providers and credit reporting bodies.
Registration information is the information you provide in the course of registering for or acquiring a service, for example, to create an account, become a subscriber or enter a competition. Registration information may include name, email address, address details, gender and date of birth. It includes additional information which you provide in the course of that relationship.
If you are applying for finance we may also collect the ages and number of your dependents and cohabitants, the length of time at your current address, your employment details and proof of earnings and expenses.
Why we collect your personal information
We collect personal information for the purposes of assessing your application for finance and managing of that finance. We may also collect your personal information for the purposes of direct marketing and managing our relationship with you. From time to time we may offer you other products and services.
To enable us to maintain a successful business relationship with you, we may disclose your personal information to other organisations that provide products or services used or marketed by us. We may also disclose your personal information to any other organisation that may have or is considering having an interest in your finance, or in our business.
How do we collect your personal information?
Where reasonable and practical we will collect your personal information directly from you. We may also collect your personal information from finance brokers and other people such as accountants and lawyers.
Do we disclose your personal information?
We may disclose your personal information:
• to prospective funders or other intermediaries in relation to your finance requirements;
• to other organisations that are involved in managing or administering your finance such as third party suppliers, printing and postal services, call centres;
• to associated businesses that may want to market products to you;
• to companies that provide information and infrastructure systems to us;
• to anybody who represents you, such as finance brokers, lawyers and accountants;
• to anyone, where you have provided us with consent;
• where we are required to do so by law, such as under the Anti-Money or Laundering and Counter Terrorism Financing Act 2006 (Cth);
• to investors, agents or advisers, or any entity that has an interest in our business; or
• to your employer, referees or identity verification services.
• to provide you with targeted advertising based on your online activities.
Prior to disclosing any of your personal information to another person or organisation, we will take all reasonable steps to satisfy ourselves that:
a) the person or organisation has a commitment to protecting your personal information at least equal to our commitment, or
b) you have consented to us in making the disclosure.
We may use cloud storage to store the personal information we hold about you. The cloud storage and the IT servers may be located outside Australia.
We may disclose your personal information to our overseas service provider located in the United States of America. You may obtain more information about these entities by contacting us.
Direct marketing
From time to time we may use your personal information to provide you with current information about finance, offers you may find of interest, changes to our organisation, or new products or services being offered by us or any company with whom we are associated.
If you do not wish to receive marketing information, you may at any time decline to receive such information by telephoning us on 1800 927 927 or by writing to us at privacy@ybr.com.au. If the direct marketing is by email you may also use the unsubscribe function. We will not charge you for giving effect to your request and will take all reasonable steps to meet your request at the earliest possible opportunity.
Updating your personal information
It is important to us that the personal information we hold about you is accurate and up to date. During the course of our relationship with you we may ask you to inform us if any of your personal information has changed.
If you wish to make any changes to your personal information, you may contact us. We will generally rely on you to ensure the information we hold about you is accurate or complete.
Access and correction to your personal information
We will provide you with access to the personal information we hold about you. You may request access to any of the personal information we hold about you at any time.
We may charge a fee for our costs of retrieving and supplying the information to you.
Depending on the type of request that you make we may respond to your request immediately, otherwise we usually respond to you within seven days of receiving your request. We may need to contact other entities to properly investigate your request.
There may be situations where we are not required to provide you with access to your personal information, for example, if the information relates to existing or anticipated legal proceedings, or if your request is vexatious.
An explanation will be provided to you if we deny you access to the personal information we hold about you.
If any of the personal information we hold about you is incorrect, inaccurate or out of date you may request that we correct the information. If appropriate we will correct the personal information at the time of the request otherwise, we will provide an initial response to you within seven days of receiving your request. Where reasonable, and after our investigation, we will provide you with details about whether we have corrected the personal information within 30 days. We may need to consult with other entities as part of our investigation.
If we refuse to correct personal information we will provide you with our reasons for not correcting the information.
Using government identifiers
If we collect government identifiers, such as your tax file number, we do not use or disclose this information other than required by law. We will never use a government identifier in order to identify you.
Business without identifying you
In most circumstances it will be necessary for us to identify you in order to successfully do business with you, however, where it is lawful and practicable to do so, we will offer you the opportunity of doing business with us without having to provide us with personal information, for example, if you make general inquiries about interest rates or current promotional offers.
Sensitive information
We will only collect sensitive information about you with your consent. Sensitive information is personal information that includes information relating to your racial or ethnic origin, political persuasion, memberships in trade or professional associations or trade unions, sexual preferences, criminal record, or health.
How safe and secure is your personal information that we hold?
We will take reasonable steps to protect your personal information by storing it in a secure environment. We may store your personal information in paper and electronic form. We will also take reasonable steps to protect any personal information from misuse, loss and unauthorised access, modification or disclosure.
Using online services
When you access and interact with our services, we may collect certain information about those visits. For example, in order to permit your connection to our services, our servers receive and record information about your computer, device, and browser, including potentially your IP address, browser type, and other software or hardware information.
If you access our services from a mobile or other device, we may collect a unique device identifier assigned to that device, geolocation data, or other transactional information from that device.
Cookies and other tracking technologies (such as browser cookies and local storage) are comprised of small bits of data or code that often include a de-identified or anonymous unique identifier. Websites, apps and other services send this data to your browser when you first request a web page and then store the data on your computer so that such websites, apps and other services can access information when you make subsequent requests for pages from that service. These technologies may also be used to collect and store information such as pages you have visited, content you have viewed, search queries you have run and advertisements you have viewed in relation to your usage of our services and other websites you have visited.
Third parties that support our services such as allowing you to share content may also use these technologies to collect similar information. We do not control these third-party technologies and their use is governed by the privacy policies of those third parties.
Most browsers are initially set to accept cookies, but you can change your settings to notify you when a cookie is being set or updated, or to block cookies altogether.
For more information, consult the “Settings” or “Help” section of your browser. Please note that by blocking any or all cookies you may not have access to certain features or content available on certain sites.
Information disclosure for merger or sale of assets
If we sell all or part of our business or makes a sale or transfer of our assets or are otherwise involved in a merger or transfer of all or a material part of our business, we may transfer or disclose your information to the party/ parties involved in the transaction as part of that transaction and as part of any due diligence processes which take place in contemplation of a potential transaction.
Complaints
If you are dissatisfied with how we have dealt with your personal information, or you have a complaint about our compliance with the Privacy Act, you may contact our Complaints Manager on complaints@ybr.com.au.
We will acknowledge your complaint within seven days. We will provide you with a decision on your complaint within 45 days.
If you are dissatisfied with the response of our Complaints Manager you may make a complaint to the Privacy Commissioner who can be contacted via the Office of the Australian Information Commissioner website (www.oaic.gov.au) or on 1300 363 992.
Further information
You may request further information about the way we manage your personal information by contacting us.
Change in our privacy policy
We are constantly reviewing all of our policies and attempt to keep up to date with market expectations. Technology is constantly changing, as is the law and market place practices.
As a consequence we may change this privacy policy from time to time or as the need arises. You may request this privacy policy in an alternative form. This Privacy Policy came into existence on 19 September 2016.