Privacy Policy
EdFin Privacy Policy
EdFin Pty Ltd ACN 627 221 292, Australian Credit Licence No. 549 660 (EdFin) offers credit products and services. We are subject to the operation of the Privacy Act 1988 (Cth) (Privacy Act). This Policy explains how we handle personal information relating to individuals, whether they are customers or not, to ensure we meet our obligations under the Act.
In this Policy the expressions “we”, “us” and “our” are a reference to EdFin, and its related bodies corporate. The expressions “you” and “your” refer to each and every individual whose personal information we may collect, use or disclose from time to time.
The expression “personal information” is used in this Policy to refer to any information or an opinion about an identified, or reasonably identifiable, individual whether that information or opinion is true or not and whether it is recorded in material form or not.
Any reference to us assuming an obligation under the Privacy Act or other privacy legislation can be interpreted as a reference to us also procuring our subcontractors to undertake a reciprocal obligation to the extent relevant.
Consent to give notices electronically
You consent to EdFin giving you notices and other documents in connection with your loan electronically at your last known address or number. You warrant that you can save and print any electronic correspondence from us. In giving this consent, you acknowledge and understand that:
- we may not provide you with paper documents;
- you must regularly check your electronic communications for EdFin notices or correspondence;
- you may withdraw this consent at any time by contacting us; and
- you must keep us informed of any changes to your email address and mobile phone number.
Types of information collected
We only collect personal information to the extent that this is reasonably necessary for one or more of our functions or activities.
This includes the following kinds of information:
- current and past name(s);
- contact details such as your address, your email address, your telephone number, and other contact details;
- age or date of birth;
- information we require to carry out a credit suitability assessment such as your marital status, number of dependants, your income & employment history and current or previous credit information;
- information about your education course and enrolment;
- details of the products and services we have provided to you or that you have enquired about, including any additional information necessary to deliver those products and services and respond to your enquiries;
- any additional information relating to you that you provide to us directly through our website or app or indirectly through your use of our website or app or online presence or through other websites or accounts from which you permit us to collect information;
- information you provide to us through customer surveys; and
- any other personal information that may be required to facilitate your dealings with us.
How we Collect Personal Information
We generally collect personal information about you directly from you unless it is unreasonable or impracticable for us to do so.
Information will generally be collected from the following sources:
- from you through our website;
- from or through correspondence, chats, email, or when you share information with us from other social applications, services, or websites;
- from your education provider;
- Banks and bank statement analysis companies and
- from Credit Reporting Bodies.
Why we collect personal information
Purposes for which we may use and disclose your personal information include, but are not limited to:
- to enable you to access and use our financial products and services;
- to identify you and verify that your information is correct;
- to identify and inform you about a product or service that we think may be of interest to you.
- to operate, protect, improve, and optimise our website, app, business, and our users’ experience, such as to perform analytics, conduct research and for advertising and marketing;
- to send you service, support and administrative messages, reminders, technical notices, updates, security alerts, and information requested by you;
- to send you marketing and promotional messages and other information that may be of interest to you, including information sent by, or on behalf of, our business partners that we think you may find interesting;
- to administer rewards, surveys, contests, or other promotional activities or events sponsored or managed by us or our business partners; and
- to comply with our legal obligations, resolve any disputes that we may have with any of our users, and enforce our agreements with third parties.
Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth)
Before EdFin provides a product or service to you, or to a person connected with you, we may (where you are an individual) be required to collect your personal information to comply with our customer identification obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) (AML/CTF Act).
The personal information we collect for this purpose typically includes identification information, such as name, residential address, and date of birth. In some cases, we may need to collect information about the political activities and opinions of individuals to determine whether they are politically exposed persons for the purposes of the AML/CTF Act. If we ask for this information, and you provide it to us, we will infer your consent to use and disclose the information for this purpose.
In certain circumstances, we may need to clarify and/or update the personal information we previously collected for identity verification purposes, and/or collect further information, including financial information about individuals. Where this is necessary, we will collect the information directly from you and/or from third party sources.
As a part of our AML/CTF verification processes we may need to take copies of your personal identification documents to verify your identity in accordance with the requirements of that Act.
The information obtained used by EdFin for an information match request to a relevant Official Record Holder and that a corresponding information match result will be provided via the use of third-party systems, and you provide EdFin with express consent to do so.
We may also disclose your full name, residential address, and date of birth to a credit reporting body for the purpose of providing an assessment of whether this identification information matches (wholly or in partly) personal information held by the credit reporting body. The credit reporting body may compare your details with personal information held by the body (being the names, residential address, and dates of birth of other individuals) for the purposes of making this assessment.
Third Party Disclosures
We may disclose your personal information to:
- our related corporate bodies or entities;
- third party suppliers and service providers (including providers for the operation of our websites and/or our business or in connection with providing our products and services to you);
- professional advisers, dealers, and agents;
- your education institution to confirm your units and enrolment and integrate with their systems;
- payment systems operators (e.g., merchants receiving card payments);
- our existing or potential agents, business partners or partners;
- our sponsors or promoters of any competition that we conduct via our services;
- anyone to whom our assets or businesses (or any part of them) are proposed to be or are transferred;
- specific third parties authorised by you to receive information held by us; and/or
- other persons, including government agencies, regulatory bodies, and law enforcement agencies, or as required, authorised, or permitted by law.
Direct Marketing
We will not use or disclose personal information for the purposes of direct marketing to you unless:
- you have consented to receive direct marketing materials; or
- you would reasonably expect us to use your personal details for this purpose and you have not previously opted-out from receiving such marketing materials; or
- we believe you may be interested in the material, but it is impractical for us to obtain your consent and you have not previously opted-out from receiving such material.
In every instance, we will ensure that our direct marketing material incorporates an option for you to opt out of future marketing communications.
Please note also that even if you have requested not to receive further direct marketing communications, we will continue to provide you with information about changes to our terms and conditions, questionnaires and other service messages or factual, non-marketing information.
Overseas Disclosure of Personal Information
Generally, we do not disclose your personal information overseas.
There may be circumstances where we, or our subcontractors, use cloud storage technology that uses servers located outside of Australia for data storage.
It is not practicable for us to specify in advance the location of every service provider with whom we deal with.
It is possible that information will be transferred to a jurisdiction where you will not be able to seek redress under the Privacy Act and that does not have an equivalent level of data protection as Australia. We will not be accountable for how these overseas recipients handle your personal information. By providing your personal information to us, you consent to our disclosure of your personal information to these parties.
Employee Records
This Policy does not apply to our acts and practices directly related to personal information forming part of an employee held by us for the purpose of a current or former employment relationship between us and that employee.
If we disclose employee records offshore for any reason, we will comply with cross-border restrictions set out the xi which apply to the overseas disclosure of personal information.
Security of Personal Information
We will take reasonable steps to protect the personal information we hold from misuse, interference, or loss and from unauthorized access, modification, or disclosure. For example, we typically store personal information on a secure, encrypted serve located in Australia. We will destroy or de-identify personal information once we no longer require it for our business purposes.
When using our website, you should be aware that no data transmission over the Internet can be guaranteed as totally secure. Although we strive to protect such information, we do not warrant the security of any information that you transmit to us over the Internet, and you do so at your own risk.
Where your student profile is integrated with a third-party education institution system, we cannot control the security or data management procedures of that third party. We will take reasonable steps to require such a third party to comply with the Australian Privacy Principles.
Changes to this Policy
From time to time, we may change our Policy on how we handle personal information, or the types of personal information which we hold. Any changes to our Policy will be published on our website. You may obtain a copy of our current Policy from our website or by contacting us on the details.
It is your responsibility to check the website from time to time to determine whether there have been any changes.
Access, Correction and Further Information
We will take such steps as are reasonable to ensure that the personal information which we collect remains accurate, up to date and complete.
We will provide you with access to your personal information held by us unless we are permitted under the Privacy Act to refuse to provide you with such access. Please contact us via the details below if you:
- wish to have access to the personal information which we hold about you;
- consider that the personal information which we hold about you is not accurate, complete, or up to date; or
- require further information on our personal information handling practices.
There is no charge for requesting access to your personal information, but we may require you to meet our reasonable costs in providing you with access.
If you consider that the information which we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, we will take reasonable steps, consistent with our obligations under the Privacy Act, to correct that information if you so request.
We will respond to all requests for access and/or correction within a reasonable time.
Complaints
If you have a complaint about the way in which we have handled any privacy issue, including your request for access or correction of your personal information, you should advise us via our contact details below.
If you are not happy with the way in which we have handled a privacy issue, you can contact the Office of the Australian Information Commissioner or our external dispute resolution scheme, the Australian Financial Complaints Authority. We will provide our full cooperation if you elect to pursue either of these courses of action.
|
Office of the Australian Information Commissioner |
|
|
Address: |
GPO Box 5218 Sydney NSW 2001 |
|
Phone: |
1300 363 992 |
|
Email: |
enquiries@oaic.gov.au |
|
Online: |
|
Australian Financial Complaints Authority |
|
|
Phone: |
1800 931 678 |
|
Email: |
info@afca.org.au |
|
Online: |
https://www.afca.org.au/make-a-complaint |
Contact Us
For further information about our Policy or practices, or to access or correct your personal information, or make a complaint, please contact our Privacy Officer at customer.service@edfin.com.au
@j.kanahara77@gmail.com
_Assigned to j.kanahara77@gmail.com_
