When you trust Capify Australia PTY LIMITED (ABN 38 630 469 117) with your personal and credit-related information, we know you expect us to protect it and keep it safe.
This means that when we receive your personal and financial information:
This policy explains the main ways we collect, handle, disclose and protect your personal information and how we comply with the Privacy act 1988 (Cth) as amended from time to time (“Privacy Act”) and Australian Privacy Principles. It also describes the types of information we may collect from you, including your:
While the Privacy Act uses a variety of terms to refer to the information above, to make it easier to read this policy, we refer to it below collectively as “personal information”.
When you engage Capify to provide you with any products or services, apply or complete an application for commercial credit, communicate with Capify through email, by telephone, in writing, or use any of Capify’s other services, including the Capify website, you agree to the use and disclosure of your personal information in the manner described in this policy. Where applicable we may require you to confirm your express, explicit consent when collecting your personal information for the purposes of compliance with the Privacy Act and the regulations set out in the General Data Protection Regulation (EU) (‘GDPR’).
This policy is also relevant and applies to other individuals we deal with in connection with commercial credit we provide, such as guarantors and directors.
When this document refers to “we” or “us” we mean Capify.
You can contact us about this policy or our products and services by:
If practical, you can contact us without identifying yourself. However, if you don’t identify yourself, we may not be able to give you the information and services you would otherwise expect to receive.
Where you have applied for commercial credit or have agreed to be a guarantor under an application for commercial credit, we may also collect credit-related information, such as:
The Privacy Act places restrictions on collecting sensitive personal information about you (this includes information about your religious views, ethnicity, political opinions, criminal records, personal health information or sexual preferences). Generally, we won’t collect this sort of information unless it is specifically relevant and necessary for the purpose of Capify’s business functions and operations and your consent is first obtained.
We may at our sole discretion utilise one or more validation based services to undertake identity checks/validation on any of the information or documentation provided to us. Such checks may use official identifies to identity individuals. We undertake such checks to combat identity fraud and financial crime.
Personal information is collected so that we are able to reasonably perform our business operations and functions and provide you with quality customer service. We will collect, use, hold and discourse your personal information for the following purposes:
If it is reasonable and practical to do so, we collect personal information directly from you. We may do this through application forms, over the telephone, email, fax, the internet, or in person.
Where the Privacy Act permits, we may also collect personal information from other people or organisations. Sometimes this may happen without your direct involvement. Some examples of the people or organisations from which we may collect personal information about you are:
So that we can better tailor information and products to your needs, when we send you to email messages, we may use technology to identify you so that we can know when you have opened the email or clicked on a particular link in the email.
When you ring us, we may also monitor and/or record telephone calls for the purposes of staff training and to verify statements made during the phone call.
Capify takes reasonable steps to ensure that you are aware of:
Capify may disclose your personal information:
We may also share your personal information with other companies within the Capify Group.
Where the Privacy Act permits us, we may from time to time disclose your personal information to organisations outside the Capify Group. Generally, these are organisations that help us with our business functions and operations. These organisations may include:
We strive to limit the information we give these organisations to what they need to perform their services for us or to provide products or services to you. Where it is required by the Privacy Act we will seek your consent before disclosing to these organisations, otherwise, we will only disclose your personal information to these organisations where is it reasonable in the circumstances to do so.
Where the Privacy Act permits us to do so, we may also disclose your personal information to CRBs such as Veda or Dunn & Bradstreet, if you apply for commercial credit or request to increase in your commercial credit limit with Capify.
Where Capify collects personal information that we are likely to disclose to a CRBs, please note:
If Capify discloses your personal information to CRBs, we will provide you written notice prior to that disclosure as required by law well as the details of the CRBs.
Capify does not disclose your personal information for any secondary purposes unless your consent has been given or as required by law.
Capify will not sell or license any personal information that it collects from you.
In providing this service to you we use a third-party service provider, Proviso. To provide this service Proviso uses your Banking Credentials solely for the purpose of retrieving banking data and returning it to us. By using this service you agree to the terms and conditions of the Proviso service (https://proviso.com.au/terms/
Your personal information may also be processed by, or disclosed to employees, representatives, or other third parties operating outside of Australia who work for, or are engaged by Capify in other countries, including the United States of America, United Kingdom of Great Britain and Northern Ireland, Canada and the Federal Republic of Germany. For example, Capify may use a server hosted overseas to store data, which may include your personal information or we may enter into contracts with organisations overseas who provide services to us or who provide products or services jointly with us.
These contracts require the organisation to:
Capify will take reasonable steps, in the circumstances, before your personal information is disclosed to an overseas recipient, to ensure that the overseas recipient does not breach privacy laws in relation to your personal information (‘the reasonable steps’).
The reasonable steps may not apply if you consent to the disclosure of your personal information to an overseas recipient and we reasonably believe that the overseas receipt is subject to laws that are suitability similar to privacy laws in Australia.
If you consent to the disclosure of your personal information to an overseas recipient, the overseas recipient may not be accountable under the Privacy Act, and you will not be able to seek redress for breaches under the Privacy Act.
Data Subject Rights
Where applicable under the GDPR, and in addition to the rights set out above, you have the following rights regarding your personal information stored with us:
Data Controller and Data Processor
You acknowledge that when using our website, you will be deemed to be the data controller in relation to any personal information that you collect and store and will be responsible for how such personal information is collected. You must ensure that you obtain consent and provide notice to any persons as required under the relevant privacy legislation in relation to the collection, storages and use of their personal information.
When you use our website, we act as a data processor only in relation to personal information and data entered, collected and stored by you. We will only access your data in accordance with written instructions given by you, or unless required to do so by the Privacy Act or GDPR.
We may use your personal information to offer you products and services we believe may interest you, but we will not do so if you tell us not to.
We will exchange your personal information between companies within the Capify Group so they can also market their products and services to you.
The Capify Group will only offer you products or services, where we reasonably believe that they could be of interest or benefit to you.
If you don’t want to receive marketing offers from Capify about Capify branded products and services, please let us know by calling 1300265986, or by writing to Capify at Level 7, 32 Phillip St, Parramatta NSW 2150.
Capify will act promptly on your request and will also ensure any electronic marketing material sent (e.g. by e-mail, SMS, MMS or iM) includes an easy method that enables you to tell us you do not want to receive future electronic marketing material.
Capify acknowledges that you have a general right of access to the information we hold concerning you, and to have any corrections to be made. You can request access to your personal information by contacting us by telephone on 1300265986. As permitted by the Australian Privacy Principals, we may not always be able to give you access to all the personal information we have about you. For instance, we may not be able to give you access to information that:
We maintain the quality of your personal information by taking reasonable steps to make sure that the information collected, used and disclosed is accurate, complete and up-to-date. We encourage you to help us by telling us immediately if you change your contact details (such as your phone number or address). You can contact us to change your details by telephoning 1300265986 or alternatively, via fax to 02 8088-7285.
Capify will correct information it has about you if it discovers, or you are able to show to a reasonable standard, the information is incorrect. If you seek correction and Capify disagrees that the information is incorrect, Capify will provide you with its reasons for taking that view.
We will use up-to-date techniques and processes, which meet current industry standards, to protect your personal information from misuse, loss and unauthorised access, modification or disclosure.
The only people who are allowed to handle or have access to your personal information are those employees of the Capify Group and those who perform services for us who need your personal information to do their jobs. All employees of the Capify Group are bound both by the Capify Code of Conduct and by confidentiality clauses in their employment agreements to not misuse your personal information. Those who perform services on our behalf are also bound by privacy and confidentiality agreements.
Paper documents are protected from unauthorised access or use through the various security systems that we have over our physical premises. We also maintain up-to-date computer and network security systems with appropriate firewalls, encryption technology and passwords to protect electronic copies of personal information.
If we no longer require your personal information, we will take reasonable steps to destroy it in a secure manner or remove identifying features from it. This is subject to any legal obligations we have to keep information for a certain period of time.
In the event of a data breach, such as the unauthorised loss, use or disclosure of personal information, we will assess and respond in line with our applicable policies and procedures, which incorporate the requirements contained in the Privacy Act. Pursuant to our obligations under the Privacy Act, we will notify you where your personal information is involved in an eligible data breach that is likely to result in serious harm. Such notification will also include making recommendations about the steps you should take in response to the breach. Where required by law, the Australian Privacy and Information Commissioner will also be notified of an eligible data breach.
Capify takes all reasonable steps to ensure that all unsolicited information is destroyed or de-identified immediately.
As with most websites, when you visit the Capify website or use an application on the Capify website, Capify may record anonymous information such as IP address, time, date, referring URL, pages accessed and documents downloaded type of browser and operating system.
Capify also uses “cookies”. A cookie is a small file that stays on your computer until, depending on whether it is a sessional or persistent cookie, you turn your computer off or it expires. Cookies may collect and store your personal information. You may adjust your internet browser to disable cookies. If cookies are disabled you may still use the Capify website, but the website may be limited in the use of some of the features.
Although we are committed to keeping the promises set out in this document, we sometimes make mistakes. Fixing these mistakes and ensuring we deliver on our promises is very important to us.
We’ve put in place a way of dealing with issues you might raise quickly and fairly. Please talk to us first.
If you have reason to believe that we have not complied with our obligations relating to your personal information or your credit-related information under the Privacy Act, please refer any complaints or queries to our Privacy Officer (details below).
We will ensure your complaint is handled by our Privacy Officer in an appropriate and reasonable manner. Where necessary we may consult with a credit reporting body or another credit provider in order to deal with your complaint.
We aim to resolve your complaints at your first point of contact with us. This is our ‘Ask Once’ promise. So please raise your complaints with anyone handling your business. You can contact us anywhere in Australia, by contacting our Privacy Officer. If our Privacy Officer is unable to resolve your complaint, please contact our Internal Dispute Resolution Manager:
We aim to resolve all privacy complaints and disputes within 30 days of receiving your complaint.
If you’re not satisfied with the outcome, then you may contact the Office of the Australian Privacy Commissioner:
Office of the Australian Information Commissioner
Phone: 1300 363 992
How to contact Capify regarding privacy matters
Please contact us as set out below if you wish to find out what personal information Capify holds about you, to ask us to update the information or make corrections to it (if necessary) and if you have any concerns or complaints about our use of personal information or other privacy issues.
Please feel free to contact our Privacy Officer.
Email: [email protected]
Mail: Level 7, 32 Phillip St, Parramatta NSW 2150.
This policy may change or be updated from time to time. A current version of this policy will be published on Capify’s website or may be obtained free of charge upon request.
Capify uses secure firewalls to prevent unauthorized access to our internal systems. We have Internet firewalls designed to securely separate the Internet from our internal computer systems and databases. Data coming from customer computers via the Internet flows through a series of safety checkpoints on its way to our internal systems so that only authorized messages and transactions enter our computer systems.
Session cookies store information only for the length of time that you are connected to a website – they are not written onto your hard drive. Once you leave the website, the originator of the cookie no longer has the information that was contained on it. For example, when you log in to Capify and are authenticated through your login id and password, a cookie will store the identification number of your browser. Throughout your session, the session cookie acts as a type of digital signature to identify your current session to the Web Server.
The information stored in “persistent cookies” is written onto your hard drive and remains there until the expiry date of the cookie. Capify uses persistent cookies to store non-sensitive information that you are aware of and have agreed to. For example, if you choose the option on our login screen to remember your ID, the system will remember and automatically input your log-in id each time you use the service to improve the ease of use of this site.
Capify has the discretion to occasionally update this privacy statement. When we do, we will also revise the “updated” date at the top of this privacy statement. We encourage you to periodically review this privacy statement to stay informed about how we are helping to protect the personal information we collect. Your continued use of the service constitutes your agreement to this privacy statement and any updates.