WCB is a Credit Provider for the purposes of the Privacy Act 1988 (Cth) and is bound by the Credit Reporting Code registered under that Act. This policy outlines how WCB manages your credit-related information in accordance with the Act.
Finance and Sales & Marketing Departments
PURPOSE OF THIS POLICY
We are a ‘Credit Provider’ for the purposes of the Privacy Act 1988 (Cth), are bound by the credit reporting provisions in the Privacy Act, and are subject to the Credit Reporting Code registered under that Act.
This Credit Reporting Policy provides you with information about how we collect, use, disclose and manage your Personal Credit Information, Credit Reporting Information and Credit Eligibility Information (Credit-Related Information). This Policy does not apply to the collection or use of Credit-Related Information about corporations.
TYPES OF CREDIT-RELATED INFORMATION COLLECTED
We collect and hold the following types of Credit-Related Information:
- identification information, such as age, date or birth, tax file number;
- the type and amount of credit you have obtained and the terms upon which it was obtained;
- repayment history information and default information;
- whether in our or another credit provider’s opinion you have committed a serious credit infringement;
- personal insolvency information;
- certain administrative information relating to credit;
- evaluations such as scores, ratings and summaries and other personal information relating to your credit worthiness.
COLLECTION AND USE OF CREDIT-RELATED INFORMATION
We collect, use and hold Credit-Related Information about you only by lawful means, in order to assess your creditworthiness and determine payment terms for the goods that we will provide to you. It may also be necessary to collect, use and hold your Credit-Related Information for the day to day administration of your account or to satisfy our legal obligations.
Credit-Related Information you Provide
We generally collect Credit-Related Information about you in the normal course of our business dealings with you, for example, from forms you fill out, discussions we have with you, as well as through any emails or letters you send to us.
Collection as Required by Law
If we are required by law to collect Credit-Related Information about you, we will inform you that the collection is required, including details of the relevant law requiring the collection.
Credit-Related Information Obtained Through Other Sources
We may collect Credit-Related Information from Credit Reporting Bodies in order to assess your credit worthiness and eligibility for credit.
We may also collect publicly available information in relation to your activities in Australia and your credit worthiness.
INTEGRITY AND STORAGE OF CREDIT-RELATED PERSONAL INFORMATION
We take all reasonable steps to protect the security of the Credit-Related Information that we hold from misuse, loss, unauthorised access and disclosure. This includes taking appropriate measures to protect electronic materials and materials stored and generated in hard copy.
The steps which we take include:
- if the Credit-Related Information is in hard copy, in locked filing cabinets or locked storage facilities;
- if the Credit-Related Information is in soft copy, on WCB’s electronic filing systems, with access restricted by various security methods and controls including fully managed firewalls, anti-virus and intrusion detection, user access restrictions/role based permissions, penetration and vulnerability testing and restricted access facilities.
DISCLOSURE OF CREDIT-RELATED INFORMATION
We may disclose Credit-Related information about you to Credit Reporting Bodies and debt collection companies, where you are in payment default. We will only make a disclosure in these circumstances if we have given you written notice of our intention to disclose and at least 14 days has passed since giving such notice.
The types of Credit-Related Information that we may disclose to Credit Reporting Bodies include:
- identification information, such as your name, address, date of birth and driver's licence number; and
- information that you have defaulted on a payment due to us and the amount of the default.
Subject to the above, we will not disclose Credit-Related Information about you except where it is:
- in accordance with the law; or
- in accordance with an agreement with you or consent granted by you.
ACCESSING CREDIT-RELATED INFORMATION
You are entitled to access your Credit-Related Information held by us by making a request for access with our Credit Controller. Our Credit Controller can be contacted on 03 5565 3100 or by email on firstname.lastname@example.org.
We may charge a fee to cover our reasonable costs in meeting an access request.
Where you request access to Credit-Related Information about you that we have, you will be provided with access to the information within 30 days of the date of the request (unless unusual circumstances apply).
We are not required to give you access to this information if:
- to do so would be unlawful; or
- to do so would likely prejudice one or more enforcement related activities conducted by or on behalf of an enforcement body; or
- denying access is required or authorised by law.
If we do not give you access to the Credit-Related Information requested you will receive written notice that explains the reason for the refusal.
CORRECTING CREDIT-RELATED INFORMATION
We aim to ensure that Credit-Related Information we hold is accurate, up-to-date and complete.
You may request that we correct Credit-Related Information that we hold about you by contacting our Credit Controller on 03 5565 3100 or by email on email@example.com.
If we are satisfied that the Credit-Related Information is inaccurate, out-of-date, incomplete, irrelevant or misleading, then reasonable steps will be taken to correct the information within 30 days, or a longer period as we agree with you in writing. If we determine that the correction is not required, we will provide you with written notice stating the reasons why the correction was not made.
There is no charge for a correction.
As long as it is reasonable to do so, if we correct Credit-Related Information which we have disclosed to third parties, we will give each recipient of the information written notice of the correction within a reasonable period.
Complaints about breaches of the Credit Reporting Privacy obligations by us, including the Credit Reporting Code, may be made by contacting our Credit Controller on 03 5565 3100 or by email on firstname.lastname@example.org.
If you do not consider that your complaint has been adequately dealt with by us, you may make a further complaint to the Office of the Australian Information Commissioner, which has complaint handling responsibilities under the Privacy Act.