CREDOLEAP FINANCE PTY LTD — PRIVACY POLICY

CREDOLEAP FINANCE

LENDING STRATEGY STUDIO  |  COMPREHENSIVE PRIVACY POLICY

1. Corporate Identity and Regulatory Framework

Credoleap Finance Pty Ltd (ABN 31 615 978 234 / ACN 615 978 234), operating under the primary brand asset Credoleap (Lending Strategy Studio), is dedicated to protecting the privacy and integrity of your sensitive personal and financial datasets. Credoleap Finance Pty Ltd is an formally Authorised Credit Representative of Australian Finance Group Ltd (AFG), Australian Credit Licence 389087. Our designated Credit Representative Number is 573512, issued under the regulatory guidelines of the National Consumer Credit Protection Act 2009 (NCCP).

This Privacy Policy forms our public commitment to transparent handling of consumer data. It strictly governs how we manage, collect, hold, utilize, and disclose personal information, credit information, and credit eligibility information in rigorous alignment with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Privacy (Credit Reporting) Code 2014.

2. Standard Definitions and Types of Datasets Collected

To structure precise lending options and complete end-to-end file structures, we require a comprehensive understanding of your financial position. We collect and hold several layers of personal and credit-related attributes:

·        Identity and Contact Information: Full name, formal title, residential address history, date of birth, age, gender, and multi-channel contact paths (private mobile, secure electronic email).

·        Statutory Verification Attributes: Primary documentation collected under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth), including clear records of your Driver's Licence, Passport, and visa or permanent residency indicators.

·        Employment and Income Parameters: Full parameters of PAYG full-time or part-time/casual status, employer names, duration in current role, historical career movements, or extensive financial reports, ABN status, company tax structures, and pre-tax net profits for self-employed entities.

·        Quantitative Financial Profiles: Itemised asset descriptions (owner-occupied properties, investment portfolios, liquid deposit accounts, superannuation balances, and vehicles) coupled with complete liability definitions (lender limits, running balances, monthly repayments, and specific clearout intentions for personal loans, credit cards, HECS/HELP debts, and Buy-Now-Pay-Later facilities).

·        Responsible Lending Metrics: Granular monthly living expenses across supermarkets, utilities, transport, education, childcare, insurances, and discretionary recreation, validated explicitly against your 3 most recent months of primary bank transaction statements.

·        Credit Reporting Profiles: Comprehensive data files sourced via Credit Reporting Bodies (CRBs), containing consumer and commercial credit scores, active credit accounts, historical repayment timelines, default files, payment flags, or formal hardship arrangements.

3. Core Objectives of Information Collection

We gather, use, and process these datasets to execute our primary professional function as independent lending strategists. The primary operational objectives include:

·        Conducting strategic credit analysis, structuring custom portfolio roadmaps, and determining your true consumer borrowing limits.

·        Formulating compliant Credit Proposals and submitting file structures to accredited panel lenders through our aggregator platform infrastructure, Australian Finance Group Ltd (AFG).

·        Fulfilling our mandatory Responsible Lending obligations under the NCCP Act by ensuring recommended financial options are not unsuitable for your unique circumstances.

·        Verifying individual consumer identities to prevent fraud, identity theft, or financial non-compliance.

·        Maintaining direct communication streams to distribute macroeconomic shifting trends, portfolio metrics, competitive interest modifications, or tailored marketing notices. You possess an unconditional right to opt out of marketing communications at any point.

4. Sourcing Methods for Personal Information

Where practical, we extract personal information directly from your proactive inputs. This encompasses physical or digital Client Fact Finds, face-to-face consultations, secure email channels, phone strategy sessions, or integrated customer portal uploads.

We also capture information from verified third-party channels, including credit reporting bodies, your dedicated professional network (corporate accountants, commercial lawyers, financial advisors, real estate buyers' agents), employers verifying history, or public property databases and land title search registries.

5. Disclosure Protocols and External Transmissions

To progress loan files and obtain approvals, we disclose relevant data attributes to specific external entities, strictly within the scope of your credit objectives:

·        Our aggregator network, Australian Finance Group Ltd (AFG), via proprietary file management software systems.

·        Accredited financial institutions and commercial lenders selected on your panel proposal for underwriting assessment.

·        Auxiliary property evaluation networks, including independent property valuers, title surveyors, or Lenders Mortgage Insurers (LMIs).

·        Your designated advisory circle, including legal conveyancers, solicitors, accountants, or any party holding formal Power of Attorney.

·        Statutory regulatory networks or law enforcement agencies where mandated by explicit Australian legislation.

Overseas Data Flows: Cross-Border Transmissions: We utilize cloud infrastructure and remote tech storage models to secure our databases. Certain functional components or IT support layers may operate overseas, spanning destinations such as the USA, UK, India, New Zealand, or select European zones. Prior to utilizing cross-border storage infrastructures, we apply rigorous vetting to ensure the recipient entity conforms to strict data security standards.

6. Credit Reporting Bodies and Rights Protection

In evaluating credit viability, we exchange information with Credit Reporting Bodies (CRBs). This includes identity attributes, active credit account boundaries, default files, or late repayment behaviors. The primary CRBs utilized across Australian lending channels are:

·        Equifax Pty Ltd — www.equifax.com.au

·        Illion Australia Pty Ltd — www.illion.com.au

·        Experian Australia Pty Ltd — www.experian.com.au

You possess distinct statutory rights under the Privacy Act regarding your credit reporting files. You may request that a CRB refrain from utilizing your credit profile for pre-screening or direct marketing lists. Furthermore, if you reasonably suspect you have been or are likely to be a victim of identity theft or financial fraud, you have a legal right to request a CRB to place a temporary ban on your credit files at no cost.

7. Advanced Data Security and Storage Management

We take systemic actions to guard personal information against unauthorized access, destruction, exposure, or modifications. Our protective protocols encompass:

·        Enforcing multi-factor authentication (MFA) protocols and complex encrypted credentials across all broker software, customer management panels, and local communication endpoints.

·        Deploying active endpoint protection, commercial firewalls, and cloud transmission encryption across all corporate data portals.

·        Adhering to strict workspace hygiene and ensuring physical client documents are securely locked or digitized immediately.

·        Implementing secure, permanent shredding or permanent de-identification of data assets once statutory document-retention timeframes have concluded.

8. Information Access and Systematic Correction

Under the Privacy Act, you maintain an ongoing right to access the personal and credit records we hold. You also maintain an absolute right to demand immediate corrections if you discover that our datasets are inaccurate, out-of-date, incomplete, or misleading.

To execute your data access rights, please lodge a formal request with our Privacy Officer. We charge no fee for the submission of an access or correction query and will strive to issue a detailed formal response or correct files within 30 days. If statutory exemptions apply that restrict data access, we will provide a comprehensive written explanation outlining the justification.

9. Internal and External Dispute Resolution Framework

If you possess any concerns regarding our data collection methods, or suspect a breach of the APPs or Credit Reporting Code, you are encouraged to initiate an internal grievance review. We are committed to evaluating and resolving privacy complaints quickly and fairly.

Internal Escalation Contact: Privacy Officer / Complaints Manager — Credoleap Finance Pty Ltd

Electronic Mail Path: rajesh@credoleap.com.au

Physical/Postal Path: 16B Tallara Crescent, Munno Para, SA, 5115

We will acknowledge your contact immediately and conduct an extensive file review, delivering a binding written evaluation and resolution roadmap within 30 days. If you remain dissatisfied with our final internal response, you can escalate the privacy dispute to our independent external dispute bodies at no cost:

1. AFG Licensee Complaints System: Phone: 08 9420 1444  |  Web: www.afgonline.com.au

2. Australian Financial Complaints Authority (AFCA): GPO Box 3, Melbourne VIC 3001  |  Phone: 1800 931 678  |  Web: www.afca.org.au

3. Office of the Australian Information Commissioner (OAIC): GPO Box 5218, Sydney NSW 2001  |  Phone: 1300 363 992  |  Web: www.oaic.gov.au

10. Formal Corporate Acknowledgement and Contacts

For any ongoing privacy queries, updates to your files, or information regarding our data processing methods, please reach out directly to our principal officer:

Principal Officer: Rajesh Rauniyar (Director & Principal Lending Strategist)

Corporate Entity: Credoleap Finance Pty Ltd

Web Domain: https://www.credoleap.com.au/

Mobile Baseline: 0485-511-191