1.1. Credit Collection Services Group Pty Ltd (ACN 116 256 967) (CCSG, we, us, our) recognise the importance of protecting the privacy and the rights of individuals in relation to their personal information.
1.3. We respect your rights to privacy under the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles, and we manage the collection and disclosure of your personal information in accordance with these requirements.
1.4. We also uphold your rights to privacy if you are based in the European Union, in accordance with the General Data Protection Regulation (EU) (GDPR). Your rights under the GDPR are listed in clause 12.
1.5. If you do not wish to provide personal information to us, then you do not have to do so. However, this may affect your use of this Site or any services offered on it.
What is your personal information?
2.2 In general terms, it is any information that can be used to personally identify you. This may include your name, address, telephone number, email address and profession or occupation.
2.3 If the information we collect personally identifies you, or you are reasonably identifiable from it, the information will be considered personal information.
2.4 We may also collect some information that is not personal information because it does not identify you or anyone else. For example, we may collect anonymous answers to surveys or aggregated information about how users use our website.
What information may we collect from you?
3.1 We may collect the following personal information from you:
B. date of birth;
C. billing, mailing and/or residential address;
D. the length of time at your current address;
E. email address, telephone number and other contact details;
F. banking, credit card, or other online payment details;
G. financial status;
H. your salary or wage details;
I. your employment details;
J. proof of earning and expenses;
K. loan details;
I. credit information;
M. any finance that you have outstanding, your repayment history in respect of those loans and any defaults;
N. information to comply with the Financial Transactions Reports Act 1988 (Cth);
O. information obtained from government databases and credit reporting agencies;
P. the ages and number of your dependants and cohabitants;
Q. business management information;
R. Australian Business Numbers (ABN) and Australian Company Numbers (ACN).
3.2 We collect personal information about you so that we can perform our business activities and functions and to provide best possible quality of customer service. We collect, hold, use and disclose your personal information for the following purposes:
A. to provide our services to you;
B. to buy and recover defaulted, cancelled and/or terminated credit facilities from banks and other credit creditors;
C. to act as an agent for our clients and customers to recover defaulted, cancelled and/or terminated credit facilities;
D. to provide accounts receivable management services for our clients;
E. to monitor, develop, improve and market our products and services;
F. to conduct internal record keeping;
G. to identify and understand user needs;
H. to send communications requested by you;
I. to answer enquiries and provide information or advice about existing and new services;
J. to comply with any law, rule, regulation, lawful and binding determination, decision or direction of a regulator, or in cooperation with any governmental authority; and
K. for other related functions and activities.
How do we collect your personal information?
4.1 We collect your personal information directly from you unless it is unreasonable or impracticable to do so. When collecting personal information about you, we may collect in ways including:
A. when you access and use of services and facilities available on our Site;
B. when we purchase a defaulted, cancelled and/or terminated credit facility from your creditors;
C. when we act on your creditor’s behalf as their agent;
D. when we are engaged by your creditors to manage or recover a debt;
E. when we collect information from credit reporting bodies or other information providers;
F. when you make an enquiry about our services;
G. when you fill in any of our online forms, including when downloading free publications or making online bookings;
H. through your access and use of our website, including when you register as a member;
I. during conversations between you and our representatives;
J. when you ask to be placed on one of our subscription/mailing lists;
K. when you become a client or customer of ours or otherwise use our services;
L. when you visit any links shared via our online posts, emails or other landing pages;
M. through government databases or credit reporting agencies.
Site User Tracking Experience
6.1 We may use tracking software to review and improve your experience of our Site, Surveys and landing pages. In particular, we may use Facebook Pixels, ActiveCampaign, InfusionSoft, MailChimp, Survey Monkey, Hot Jar and Google Analytics Advertising products: Remarketing with Google Analytics and Google Analytics Demographics and Interest Reporting
6.2 Google Analytics collects data about our Site traffic via Google Advertising cookies and anonymous identifiers.
6.3Data collected via these Google products is not linked with any personally identifiable information you submit while on our Site. If you wish to opt out of the Google Analytics data collection, you may do so on Google’s Site at tools.google.com/dlpage/gaoptout.
6.4When you access our Site, we may send a “cookie” (which is a small summary file containing a unique ID number) to your computer. This enables us to recognise your computer and greet you each time you visit our website without bothering you with a request to register. It also enables us to keep track of services you view so that, if you consent, we can send you news about those services.
6.6 We use this to research our users’ habits so that we can improve our online services. Our cookies do not collect personal information. If you do not wish to receive cookies, you can set your browser so that your computer does not accept them. We may log IP addresses (that is, the electronic addresses of computers connected to the Internet) to analyse trends, administer the website, track users’ movements, and gather broad demographic information.
6.7 The website may contain content and sharing tools embedded from various social networks, such as Facebook. These suppliers may use and place cookies on your device. We do not have access to, and cannot control, these cookies or the personal data and information that they may collect. You, therefore, need to check the websites of these suppliers to get further information on how they manage cookies and what information their cookies collect.
6.8As our website is linked to the Internet, and the Internet is inherently insecure, we cannot provide any assurance regarding the security of transmission of information you communicate to us online.
6.9 We also cannot guarantee that the information you supply will not be intercepted while being transmitted over the Internet. Accordingly, any personal information or other information which you transmit to us online is transmitted at your own risk.
6.10 As our website is linked to the Internet, and the Internet is inherently insecure, we cannot provide any assurance regarding the security of transmission of information you communicate to us online.
6.11 We also cannot guarantee that the information you supply will not be intercepted while being transmitted over the Internet. Accordingly, any personal information or other information which you transmit to us online is transmitted at your own risk.
Who do we disclose your information to?
7.1 We may disclose your personal information to:
A. our directors, agents, contractors or service providers for the purposes of operating our website or our business, fulfilling requests by you, and to otherwise provide services to you including, without limitation, web hosting providers, IT systems administrators, mailing houses, couriers, payment processors, data entry service providers, electronic network administrators, debt collectors, and professional advisors such as accountants, solicitors, business advisors and consultants;
B. our employees including permanent, temporary, casual or agency staff and contractors and consultants working for us or on our behalf;
C. suppliers and other 3rd parties with whom we have commercial relationships, for business, marketing, and related purposes, which may include overseas parties;
D. credit reporting agencies and courts, tribunals, regulatory authorities where customers fail to pay for goods or services provided by us to them, and other law enforcement officers as required by Law;
E. where we are required to do so by law, such as under the Anti-Money or Laundering and Courter Terrorism Financing Act 2006 (Cth) or in accordance with a subpoena or summons issued by a court;
F. professional advisers such as solicitors, accountants; ; that have or may have an interest in your debt; government agencies such as those which administer land titles and revenue or (where applicable) foreign investments; credit reporting agencies and mercantile agents; external auditors;
G. organisations to which we outsource functions, such as mailing and printing houses or IT providers;
H. other organisations that are involved in managing or administering your finances such as 3rd party suppliers, printing and postal services, call centres, and credit reporting bodies;
I. associated businesses that may want to market products to you;
J. companies that provide information and infrastructure systems to us;
K. anybody who represents you, such as lawyers and accountants, financial counsellors, financial advisors, community workers, guardians or carers;
L. anyone, where you have provided us consent;
M. investors, agents or advisers, or any entity that has an interest in our business;
N. your employer, referees or identity verification services;
7.3 If there is any change or potential change to the control of our business pursuant to the sale, assignment or transfer of the business, or business assets, its assets and/or liabilities, we reserve the right to sell, assign and/or transfer our user databases, together with any personal information and non-personal information contained in those databases to the extent permitted by law. In that event, your personal information may be disclosed to a potential purchaser, assignee or transferee, however any disclosures will only be made in good faith and where confidentiality is maintained.
7.4 You agree that we may give a credit reporting agency personal or commercial information about you. The information may include identity particulars; notice of assignment of the debt to us and status changes, such as, default listings and removal of default listings when debt repaid.
7.5 We may collect the following kinds of credit information and exchange this information with credit reporting bodies and other entities:
A. credit liability information being information about your existing finance which includes the name of the credit provider, whether the credit provider holds an Australian Credit Licence, the type of finance, the day the finance is entered into, the terms and conditions of the finance, the maximum amount of finance available, and the day on which the finance was terminated;
B. repayment history information which is information about whether you meet your repayments on time;
C. default and payment information;
D. court proceedings information.
8.1 You have the right to request access to the credit information that we hold about you and make a request for us to correct that credit information if needed. Please see clause 13 below in relation to access and correction to your personal and credit information.
8.2 Sometimes your credit information will be used by credit reporting bodies for the purposes of ‘pre-screening’ credit offers on the request of other credit providers. You can contact the credit reporting body at any time to request that your credit information is not used in this way.
8.3 You may contact the credit reporting body to advise them that you believe that you may have been a victim of fraud. For a period of 21 days after the credit reporting body receives your notification the credit reporting body must not use or disclose that credit information. You can contact any of the following credit reporting bodies for more information:
2. www.illlion.com.au; or
Direct marketing materials
9.1 We may send you direct marketing communications and information about our services that we consider may be of interest to you. These communications may be sent in various forms, including mail, SMS and email, in accordance with applicable marketing laws, such as the Spam Act 2003 (Cth).
9.2 If you indicate a preference for a method of communication, we will endeavour to use that method whenever practical to do so.
9.3 In addition, at any time you may opt-out of receiving marketing communications from us by contacting us (see the details below) or by using opt-out facilities provided in the marketing communications and we will then ensure that your name is removed from our subscription/mailing list.
9.4 We do not provide your personal information to other organisations for the purposes of direct marketing.
Security and data quality
10.1 We take reasonable steps to ensure your personal information is protected from misuse and loss and from unauthorised access, modification or disclosure.
10.2 We strive to ensure the security, integrity and privacy of personal information that you submit to us through our website. Unfortunately, no data transmission over the Internet can be guaranteed to be totally secure.
10.3 We endeavour to take all reasonable steps to protect the personal information you may transmit to us or from our online services. Once we do receive your transmission, we will also make our best efforts to ensure its security on our systems.
10.4 In addition, our employees and the contractors who provide services related to our information systems are obliged to respect the confidentiality of any personal information held by us.
10.5 We may hold your information in either electronic or hard copy form. Personal information is destroyed or de-identified when no longer needed or when we are no longer required by Law to retain it (whichever is the latter).
How long do we retain your personal data?
11.1 We will only keep your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
11.2 To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
11.3 By Law we have to keep basic information about our customers (including contact, identity, financial and transaction data) for five years for Australian tax law purposes.
11.4 In some circumstances you can ask us to delete your data; see your legal rights below for further information.
11. 5 In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
If I am based in the EU, what are my legal rights under the GDPR?
12.1 If the General Data Protection Regulation applies to you because you are in the European Union, you have rights under data protection laws in relation to your personal data:
A. The right to be informed – that’s an obligation on us to inform you how we use your personal data;
B. The right of access – that’s a right to make what’s known as a ‘data subject access request’ for copy of the personal data we hold about you;
C. The right to rectification – that’s a right to make us correct personal data about you that may be incomplete or inaccurate;
D. The right to erasure – that’s also known as the ‘right to be forgotten’ where in certain circumstances you can ask us to delete the personal data we have about you (unless there’s an overriding legal reason we need to keep it);
E. The right to restrict processing – that’s a right for you in certain circumstances to ask us to suspend processing personal data;
F. The right to data portability – that’s a right for you to ask us for a copy of your personal data in a common format (for example, a .csv file);
G. The right to object – that’s a right for you to object to us processing your personal data (for example, if you object to us processing your data for direct marketing); and
H. Rights in relation to automated decision making and profiling – that’s a right you have for us to be transparent about any profiling we do, or any automated decision making.
12.2 These rights are subject to certain rules around when you can exercise them.
12 3 If you wish to exercise any of the rights set out above, please contact us at email@example.com.
How can you access and correct your personal information?
13.1 You may request access to any personal information we hold about you at any time by contacting us (see the details below).
13.2 Where we hold information that you are entitled to access, we will try to provide you with suitable means of accessing it (for example, by mailing or emailing it to you).
13.3 An explanation may be provided to you if we deny you access to the personal information we hold about you.
13.4 We may charge you a reasonable fee to cover our administrative and other reasonable costs in providing the information to you.
13.5 We will not charge for simply making the request and will not charge for making any corrections to your personal information.
13.6 There may be instances where we cannot grant you access to the personal information we hold. For example, we may need to refuse access if granting access would interfere with the privacy of others or if it would result in a breach of confidentiality. If that happens, we will give you written reasons for any refusal.
13.7 If you believe that personal information we hold about you is incorrect, incomplete or inaccurate, then you may request us to amend it. We will consider if the information requires correction. If we do not agree that there are grounds for correction, then we will add a note to the personal information stating that you disagree with it.
What is the process for complaining about a breach of privacy?
15.1 If you believe that your privacy has been breached, please contact us using the contact information below and provide details of the incident so that we can investigate it.
15.2 We will treat your complaint confidentially, investigate your complaint, aim to ensure that we contact you and your complaint is resolved within a reasonable timeframe (and in any event within the time required by the Privacy Act and/or the GDPR, if applicable).
16.2 We will treat your requests or complaints confidentially.
16.3 Our representative will contact you within a reasonable time after receipt of your complaint to discuss your concerns and outline options regarding how they may be resolved.
16.4 We will aim to ensure that your complaint is resolved in a timely and appropriate manner.
Level 4 10 Park Road
Hurstville, NSW 2220
Phone 02 8568 6500
Facsimile 02 8568 6559
General Email firstname.lastname@example.org