Privacy Act Collection Statement

1. Introduction and Our Commitment

Moneyspot Finance Pty Ltd (ACN 166 488 197, Australian Credit Licence 450305), trading as Moneyspot ("we", "us", "our"), is committed to protecting the privacy of your personal and credit information. This Privacy Policy outlines how we collect, use, disclose, store, secure and manage your personal information, credit information and credit eligibility information (together, "information") in accordance with the Privacy Act 1988 (Cth) (the Privacy Act), including the Australian Privacy Principles (APPs) and the Privacy (Credit Reporting) Code (the CR Code). It also sets out your rights in relation to your information.

This policy explains our general information-handling practices. Where we collect your personal information for a specific purpose — for example, a loan application — we will also give you a shorter notice at that time, setting out the specific matters relevant to that collection and referring you back to this policy for full detail (see the Appendix for an example).

2. What Information We Collect and Hold

The types of information we may collect and hold include:

Identification and contact details: name, date of birth, gender, address, email, phone numbers, driver's licence, passport, or Medicare details.
Financial and employment details: employment status, employer details, income, expenses, assets, liabilities, bank account and transaction information, and details of your financial objectives.
Credit information: information necessary to assess an application for credit, such as details of credit you have applied for, default information, repayment history, and serious credit infringements. This includes credit reporting information we obtain from credit reporting bodies (CRBs).
Transaction information: details of products and services you hold with us, including account balances and transaction history.
Technical data: when you visit our website, we may collect your IP address, device information, browser type, and usage data through cookies, session identifiers and similar technologies, including session-replay and heatmap analytics tools such as Microsoft Clarity (see Section 3 and Section 9).
Sensitive information: we will only collect sensitive information (e.g. health information) if it is necessary for providing our services, you have consented, or we are required or authorised by law.

3. How We Collect Information

We collect information directly from you when you:

apply for or use our products or services;
contact us via phone, email, website, or in person; or
participate in surveys or promotions.

We may also collect information from:

Third parties: such as CRBs (e.g. illion Australia), other credit providers, your referees, employers, public sources, and service providers (e.g. our identity verification service).
Your financial institutions: with your explicit consent, we may access your bank transaction data via a secure online service provider to assess applications, as described in our consent process.

Website analytics and session-recording tools

We also use analytics tools embedded in our website, including Microsoft Clarity, to understand how visitors use our site. These tools automatically collect technical data — such as mouse movements, clicks, scrolling behaviour, page navigation, and session recordings — using cookies and similar technologies. Where practical, we configure these tools to mask fields where you enter personal, financial or identifying information, so that this content isn't captured in a recorded session. See Section 8 for where this data is sent and processed.

4. Purposes for Collecting, Holding, Using and Disclosing Information

We collect, hold, use, and disclose your information for purposes including:

to assess your application for credit and your creditworthiness;
to provide, manage, and administer our products and services;
to verify your identity as required by laws such as the Anti-Money Laundering and Counter-Terrorism Financing Act 2006;
to communicate with you, manage our relationship, and handle complaints;
to comply with our legal obligations under the National Consumer Credit Protection Act 2009, the Privacy Act, and other laws;
for internal operations such as risk management, data analysis, auditing, training, and research;
to conduct marketing and promotional activities (you may opt out at any time — see Section 10);
to prevent, detect, and investigate fraud, unlawful activity, or misconduct; and
to manage any involvement in securitisation arrangements or potential business transfers.

What happens if you don't provide your information

If you don't provide us with some or all of the information we request, we may not be able to:

process or assess your application for credit;
verify your identity as required by law;
provide you with the product or service you have requested; or
meet our own legal or regulatory obligations in relation to your application.

In some cases this will mean we're unable to proceed with your application at all. Where practical, we'll tell you at the time of collection which specific items of information are mandatory for these purposes.

5. Credit Reporting and Credit Checks

5.1 What you should be aware of

Under the Privacy Act and the CR Code, we're required to notify you — or otherwise make sure you're aware — of certain matters before we disclose your credit information to a credit reporting body (CRB). This isn't something we ask your permission for: it's a notification, not a consent request. In applying for credit with us, you should be aware that:

we may disclose your credit information to a CRB, including the CRB named in Section 5.2 below;
the CRB may include that information in reports it provides to other credit providers, to help them assess your creditworthiness;
we may obtain credit reporting information about you from a CRB, and exchange your credit information with other credit providers for assessment purposes; and
if you fail to meet your payment obligations in relation to consumer credit, this may result in default information or, in more serious cases, serious credit infringement information about you being disclosed to a CRB, as permitted by law.

5.2 The credit reporting body we deal with

We currently disclose credit information to the following CRB. Their privacy policy explains how they manage credit-related personal information, including your rights to access and correct your data or make a complaint.

illion Australia Pty Ltd

Phone: 1300 734 806

PO Box 7405,

St Kilda Rd,

Melbourne VIC 3004

5.3 Your rights in relation to credit reporting

You have the right to:

request a copy of your credit report from a CRB;
request that a CRB not use your information for pre-screening for direct marketing;
request that a CRB not use or disclose your information if you believe you're a victim of fraud; and
seek correction of inaccurate information held by us or a CRB.

These are protections and rights you can exercise — they operate alongside, not instead of, the notification obligation described above.

6. Disclosure of Your Information

We may disclose your information to the following types of entities, where reasonable and necessary for the purposes outlined in Section 4:

our related entities, contractors, agents, and service providers (including IT, mailing, and audit services);
credit providers, referees, guarantors, or potential guarantors;
professional advisors (e.g. lawyers, accountants);
government, regulatory, or law enforcement bodies as required or authorised by law;
debt collection agencies;
participants in the payments system (e.g. banks);
other entities in connection with a business transfer, securitisation, or assignment of debts; and
any other party to whom you have consented to disclosure.

We also disclose technical and usage data collected through website analytics and session-recording tools (such as Microsoft Clarity) to the providers of those tools. See Section 8 for where this data is processed.

7. Automated Credit Decisions

We use an automated decision-making process to substantially assess most credit applications, the remainder of applications are directly assessed using an automated decision making process. This involves inputting the information you provide (including personal, financial, bank transaction and credit information obtained with appropriate notification from a CRB) into a programmed system, which assesses your application against our lending criteria to determine whether to provide credit, and on what terms. For those decisions made directly through the automated decision making process, you have the right to request that a human review an automated decision that adversely affects you.

8. Overseas Disclosure

We may disclose your information to overseas recipients, including:

our service provider personnel located in the Philippines, who assist with administrative and operational functions under strict confidentiality arrangements; and
cloud-based or IT service providers who may store data on servers located outside Australia and the Philippines.
Microsoft, in connection with the Microsoft Clarity analytics/session-recording tool used on our website. Clarity data is held on Microsoft's Azure cloud infrastructure United States.

We take reasonable steps to ensure overseas recipients do not breach the APPs, either through contractual obligations or by ensuring they are in a jurisdiction with substantially similar privacy laws.

9. Data Security and Eligible Data Breaches

9.1 Security measures

We take the security of your information seriously. We hold information both electronically and in hard copy, and implement a range of physical, electronic, and managerial security measures to protect it from misuse, interference, loss, unauthorised access, modification, or disclosure. These include secure systems, encryption, access controls, and staff training.

9.2 Data breach notification

We have procedures in place to identify, assess, and respond to suspected data breaches. If we have reasonable grounds to believe an "eligible data breach" (as defined in the Privacy Act) has occurred, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by law. Our notification will include recommendations for the steps you should take in response to the breach.

10. Direct Marketing

We may use your information to offer you products and services we believe may interest you. You can opt out of receiving direct marketing communications from us at any time by using the unsubscribe link in any email, contacting us using the details in Section 13, or updating your preferences. We will not use or disclose credit eligibility information for direct marketing.

11. Access, Correction, and Complaints

11.1 Access and correction

You have the right to request access to, or correction of, the information we hold about you. We will respond within a reasonable period and may charge a reasonable fee for providing access. To make a request, please contact us using the details below.

11.2 Complaints

If you believe we have breached the APPs, the CR Code, or mishandled your information, please contact our Complaints Officer first. We will investigate and respond within the timeframes required by law.

Contact for access, correction, and complaints:

Email: [email protected]

Phone: 1300 048 156 (toll-free)

Mail: Complaints Officer, Moneyspot,

PO Box 1006,

Strawberry Hills NSW 2012

If you're not satisfied with our response, you may lodge a complaint with the OAIC:

OAIC Website: www.oaic.gov.au Phone: 1300 363 992

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version will always be available on our website. We encourage you to review it periodically. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

For any questions about this Privacy Policy or our privacy practices, please contact us using the details in Section 11.2.

Appendix: Point-of-Collection Notice

Moneyspot Finance Pty Ltd (ACL 450305) collects your personal information to assess your application and provide our services. If you don't provide the requested information, we may be unable to process your application.

We're likely to disclose your credit information to illion Australia Pty Ltd, a credit reporting body. illion may include this information in reports it gives to other credit providers to help them assess your creditworthiness, and if you don't meet your payment obligations, default or serious credit infringement information about you may be disclosed to illion.

We may also disclose your information to other credit providers, our service providers (including some located overseas), and government or regulatory bodies as required by law.

Full details — including your rights to access and correct your information, complain, and manage credit reporting disclosures — are in our https://www.moneyspot.com.au/privacy-policy/