We respect your personal information, and this Privacy Policy explains how we handle it. We are grateful for the trust and confidence you have in us to safeguard your privacy.
The policy covers National Australia Bank Limited ACN 004 044 937, AFSH Nominees Pty Ltd ACN 143 937 437 (AFSH) and Advantedge Financial Services Pty Ltd ACN 130 012 930 (Advantedge Financial Services). AFSH and Advantedge Financial Services are wholly owned subsidiaries of NAB and are part of the NAB group of companies (Group).
By providing personal information to us, you consent to the collection, use and disclosure of your information in accordance with this Policy and any other arrangements that apply between us. As some of our related companies may have specific legal requirements, they may have separate, but consistent policies. View these if they are more relevant to your relationship with the Group.
Also, this policy covers some Challenger Group entities (each a Challenger Group entity) for whom Advantedge Financial Services supplies administration functions relating to loans funded by a Challenger residential loan programme. Those Challenger Group entities are Challenger Mortgage Management Pty Ltd ACN 087 271 109, Challenger Non-Conforming Finance Pty Ltd ACN 107 725 486 and Challenger Special Servicing Pty Ltd ACN 107 707 415.
This Policy also includes our credit reporting policy, that is, it covers additional information on how we manage your personal information collected in connection with a credit application, or a credit facility. We refer to this credit-related information below as credit information.
On this page:
The types of information we collect and hold about you could include:
Over the course of our relationship with you, we may collect and hold additional personal information about you, including transactional information, and complaints or enquiries about your product or service.
When we’re checking your credit worthiness and at other times, we might exchange information about you with credit reporting bodies. This information can include the following.
A record of a lender asking a credit reporting body for information about a credit application, including the type and amount of credit applied for.
A record of your consumer credit1 payments being overdue.
A record of when a lender reasonably believes that there has been a fraud relating to your consumer credit, or that you have avoided paying your consumer credit payments and the credit provider can’t find you.
A record relating to your bankruptcy or your entry into a debt agreement or personal insolvency agreement.
An Australian court judgment relating to your credit.
A record relating to your activities in Australia and your credit worthiness.
Certain details relating to your consumer credit, such as:
A record of if you’ve made monthly consumer credit payments and when they were paid.2
Information from 1 July 2022 about whether you were provided with a permanent or temporary arrangement due to hardship. If so, also whether you met the requirements of such an arrangement.
If a lender gave a credit reporting body default information about you and the overdue amount is paid, a statement that the payment has been made.
If a lender gave a credit reporting body default information about you, and your consumer credit contract is varied or replaced, a statement about this.
We base some things on the information we get from credit reporting bodies, such as:
Such information is known as credit eligibility information.
Sometimes we need to collect sensitive information3 about you. This can include for insurance applications we do on behalf of others. Sensitive information can be:
Unless required by law, we will only collect sensitive information with your consent.
We may collect information about you because we are required or authorised by law to collect it.
There are laws that affect financial institutions, including company and tax law, which require us to collect personal information. For example, we require personal information to verify your identity under Commonwealth Anti-Money Laundering law.
When you use our websites and mobile applications, we may collect information about your location or activity. This including IP address, phone number and whether you’ve accessed a third party site.
If you use our online services, we monitor your use of those online interactions. This is done to:
If you start but don’t submit an online application, we can contact you using any of the contact details you’ve supplied, or other contact details we have for you, to offer help (unless the application states your use is anonymous). The information in applications will be kept temporarily then destroyed if the application is not completed.
We also know that some customers like to engage with us through social media channels. We may collect information about you when you interact with us through these channels. However for all confidential matters, we’ll ensure we interact with you via a secure forum.
To improve our services and products, we sometimes collect de-identified information from web users. That information could include IP addresses or geographical information to ensure your use of online services is secure.
We also collect de-identified information if you use one of our calculators or other programs. Although the information collected does not identify an individual, it does provide us with useful statistics so that we can analyse and improve our online services.
Some of this website or applications information is collected using cookies.
We also collect de-identified information from the online interactions of people, who are not customers, that use our online services. Much of this data collection is done using cookies. This helps improve our services and enhance users online experience with us. For example, website statistics does not identify individual customers but does identify internet browser.
Where we do identify you (such as where customers are logged onto our online services), we treat any use or disclosure in accordance with this policy.
There are many ways we seek information from you.
We might collect your information when you:
When you use our website or mobile applications, we may also collect information about your IP address, location or activity. We find using electronic means, such as email and SMS, a convenient way to communicate with you and to verify your details, including doing e-verification of identity (e-Know Your Customer). However, we’ll never ask you for your security details in this way. If you’re ever unsure, contact us.
We will try to collect personal information directly from you unless it’s unreasonable or impracticable. For this reason, it’s important that you keep your contact details up to date.
Sometimes we collect information about you from other sources. We may collect information about you that is publicly available. For example from public registers, social media or made available by third parties. We do this where:
We may use or disclose information about you to combine the information that we hold with information collected from or held by external sources. We do this to develop consumer insights about you so that we can serve you better. This includes being able to better:
Where those insights are provided to others, such insights are based on aggregated information and do not contain any information that identifies you. We may also use service providers to undertake the process of creating these consumer insights.
If you don’t provide your personal information to us, we may not be able to:
We will collect your credit information from details included in your application for credit (whether paper based, phone or electronic) and from the records we maintain about the products or services you receive from us. In addition to what we say above about collecting information from other sources, other main sources for collecting credit information are:
Sometimes people share information with us we haven’t asked for. Where this happens, we will check whether that information is reasonably necessary for our functions or activities. If it is, we’ll handle this information the same way we do with other information we seek from you. If not, we’ll ensure we do the right thing and destroy or de-identify it.
When we receive personal information from you, we’ll take reasonable steps to notify you how and why we collected your information, who we may disclose it to and outline how you can access it, seek correction of it or make a complaint.
Where we collect your personal information from third parties (and you’re not necessarily aware), if that information can be used to identify you, we will take reasonable steps to notify you of the circumstances of that collection.
We recommend our customers regularly review our website privacy policy for updates.
We store information in different ways, including in paper and electronic form. The security of your personal information is important to us, and we take reasonable steps to protect it from misuse, interference, loss, unauthorised access, modification or disclosure. Some of the ways we do this are:
We can store personal information physically or electronically with third party data storage providers. Where we do this, we use contractual arrangements to ensure those providers take appropriate measures to protect that information and restrict the uses to which they can put that information.
We’ll only keep your information for as long as we require it for our purposes. We’re also required to keep some of your information for certain periods of time under law, such as the Corporations Act, the Anti-Money Laundering & Counter-Terrorism Financing Act, and the Financial Transaction Reports Act.
When we no longer require your information, we’ll ensure that your information is destroyed or de-identified.
What are the main reasons we collect, hold and use your information?
Because we offer a range of services and products, collecting your personal information allows us to provide you with the products and services you’ve asked for. This means we can use your information to:
From time to time, we’d like to share what we know about our products and Group products with you.
We may use or disclose your personal information to let you know about products and services from across the Group that might be of interest to you.
We will not do this if you tell us not to. Unless you tell us not to, we may disclose your personal information to our related companies or to our trusted partners so they can tell you about their products and services.
We may conduct these marketing activities via email, telephone, SMS, iM, mail, or any other electronic means, including targeted advertising through NAB Group or non-Group websites.
We may also market our products to you through third party channels (such as social networking sites) or via other companies who assist us to market our products and services. If you don’t want to receive marketing offers in this way, contact us.
Where we market to prospective customers, we are happy to let them know how we obtained their information and will provide easy to follow opt-outs.
We may also disclose your personal information to companies outside the NAB Group who assist us to market our products and services to you. With your consent, we may disclose your personal information to third parties such as brokers or agents, or for the purpose of connecting you with other businesses or customers. You can ask us not to do this at any time. We won’t sell your personal information to any organisation outside of the Group.
You can let us know at any time if you no longer wish to receive direct marketing offers from the Group. Contact us and we will process your request as soon as possible.
We know that you may prefer to receive some types of messages over others, so where possible we will offer you a choice. You can always change your mind or update these choices too.
Where you have subscribed to something specific (like to hear from one of our sponsored organisations) then these subscriptions will be managed separately. If you no longer wish to receive these emails, select the unsubscribe link included in the footer of our emails.
This Policy lists some of the main reasons why we collect your information. In addition to these reasons, the other ways we use your personal information include:
In addition to the ways for using personal information mentioned above, we may also use your credit information to:
To make sure we can meet your specific needs and for the purposes described in How we use your personal information, we sometimes need to share your personal information with others. We may share your information with other organisations for any purposes for which we use your information.
We may share your personal information with other Group members. This could depend on the product or service you have applied for and the Group member you are dealing with. But this will not differ from those purposes outlined above.
Where appropriate we may integrate the information we hold across the NAB Group to provide us with a complete understanding of your product holdings and your needs.
We may need to share your personal information with:
We may disclose information about you to a credit reporting body if you are:
This may include information about the date you opened (and closed) a credit account, the account type, the credit limit, your repayment history and details relating to any defaults or serious credit infringements.
On and from 1 July 2022, we may also share information about whether you were provided with a permanent or temporary arrangement due to hardship and, if so, whether you met the requirements of such an arrangement.
When we give your information to a credit reporting body, it may be included in reports that the credit reporting body gives other organisations (such as other lenders) to help them assess your credit worthiness.
Some of that information may reflect adversely on your credit worthiness, for example, if you fail to make payments or if you commit a serious credit infringement (like obtaining credit by fraud). That sort of information may affect your ability to get credit from other lenders.
We may share your personal information with third parties outside of the Group, including:
The Group runs its business in Australia and overseas.
NAB may need to share some of your information (including credit information) with organisations outside Australia. Sometimes, they may need to ask you before this happens. You can view where those overseas organisations are located at overseas countries list.
We may store your information in cloud or other types of networked or electronic storage. As electronic or networked storage can be accessed from various countries via an internet connection, it’s not always practicable to know in which country your information may be held. If your information is stored in this way, disclosures may occur in countries other than those listed.
Overseas organisations may be required to disclose information a Group member shares with them under a foreign law. In those instances, that Group member will not be responsible for that disclosure.
We will not share any of your credit information with a credit reporting body, unless it has a business operation in Australia. We are not likely to share credit information we obtain about you from a credit reporting body or that we derive from that information.
We‘ll always give you access to your personal information unless there are certain legal reasons why we can’t. You can ask us in writing to access your personal information that we hold. In some cases we may be able to deal with your request over the phone. Our contact details are at the end of this policy.
We will give you access to your information in the form you want it where it’s reasonable and practical (such as a copy of a phone call you may have had with us – we can put it on a disk for you). We may charge you a small fee to cover our costs when giving you access, but we’ll always check with you first.
If we can’t give you access, we will tell you why in writing. If you have concerns, you can submit a complaint through contact us.
Where you request access to your credit information that we’ve got from credit reporting bodies (or based on that information),we will:
This is to ensure it is accurate and up to date.
We are not required to give you access to this information if:
We may also restrict what we give you if it would harm the confidentiality of our commercial information.
If we can’t give you access, we will tell you why in writing. If you have concerns, you can complain to our external dispute resolution scheme, the Australian Financial Complaints Authority (AFCA) or the Office of the Australian Information Commissioner.
If you think there is something wrong with the information we hold about you, contact us.
Our contact details are also at the end of this policy.
If you are worried that we have given incorrect information to others, you can ask us to tell them about the correction. We’ll try and help where we can. If we can’t, then we’ll let you know in writing.
Whether we made the mistake or someone else made it, we are required to help you correct the information within 30 days. If we can’t make a correction in that timeframe, we will ask you for extra time. We also might need to talk to others in order to process your request.
The most efficient way for you to make a correction request is to ask the organisation which made the mistake.
Whether we’re able to correct the information or not, we’ll let you know within five business days of deciding to do this. If we can’t, we’ll provide reasons. We’ll also let the relevant third parties know as well as any others you tell us about.
If there are any instances where we can’t do this, then we’ll let you know in writing. If you have any concerns, you can access the Credit and Investments Ombudsman service or make a complaint to the Office of the Australian Information Commissioner.
If you have a complaint about how we handle your personal information, we want to hear from you. You are always welcome to give us your feedback.
You can also contact us by:
Email: customercare@advantedge.com.au
Phone: 1300 300 989
Mail:
Advantedge Financial Services
700 Bourke Street
Docklands VIC 3008
If you have contacted us by phone or in person and feel your issue still hasn’t been resolved, the next step is to contact our Customer Resolutions team.
Email: complaints@advantedge.com.au
Phone: 03 7035 7008
Mail:
Advantedge Complaints
Commercial Services
700 Bourke Street
Docklands VIC 3008
If you still feel that the issue has not been resolved to your satisfaction, you may contact:
We’ll let you know how we will deal with your complaint within seven days.
If we can’t fix things within 30 days, we’ll let you know why and how long we think it will take. We will also ask you for an extension of time to fix the matter. If you have any concerns, you may complain to the Credit and Investments Ombudsman or the Office of the Australian Information Commissioner.
If your complaint relates to how we handled your access and correction requests, you may take your complaint directly to the Credit and Investments Ombudsman or the Office of the Australian Information Commissioner. You are not required to let us try to fix it first.
Need more help?
Australian Financial Complaints Authority
Office of the Australian Information Commissioner
As outlined above, if you apply for credit or have a credit facility with us, we may give your personal information to one or more credit reporting bodies.
Each credit reporting body has a credit reporting policy about how they handle your information. You can find copies of these policies at their websites.
Equifax Australia Information Services and Solutions Pty Limited
Dun & Bradstreet Australia
Experian Australia
You should contact credit reporting bodies if you think you’ve been the victim of fraud.
If you believe that you have been or are likely to be the victim of fraud (including identity fraud), you can request a credit reporting body not to use or disclose the information they hold about you.
If you do this, the credit reporting body must not use or disclose the information during an initial 21 day period without your consent (unless the use or disclosure is required by law). This is known as a ban period.
If, after the initial 21 day ban period, the credit reporting body believes on reasonable grounds that you continue to be or are likely to be the victim of fraud, the credit reporting body must extend the ban period as they think reasonable in the circumstances. The credit reporting body must give you a written notice of the extension.
Contact credit reporting bodies if you don’t want your information used by them for direct marketing or pre-screening purposes.
Credit reporting bodies can use the personal information about you that they collect for a pre-screening assessment at the request of a credit provider unless you ask them not to.
A pre-screening assessment is an assessment of individuals to see if they satisfy eligibility requirements of a credit provider to receive direct marketing. You have the right to contact a credit reporting body to say that you don't want your information used in pre-screening assessments. If you do this, the credit reporting body must not use your information for that purpose.
If you have general enquiry type questions, you can choose to do this anonymously or use a pseudonym. We might not always be able to interact with you this way as we are often governed by strict regulations that require us to know who we’re dealing with.
This Policy may change. We will let you know of any changes to this Policy by posting a notification on our website. Any information collected after an amended privacy statement has been posted on the site, will be subject to that amended privacy statement.
In addition, over the course of our relationship with you, we may tell you more about how we handle your information. This could be when you complete an application or form, or receive important disclosure documents from us, such as terms and conditions.
We recommend that you review these statements too as they may have more specific detail for your particular product.
We care about what you think. Contact us if you have any questions or comments about our privacy policies and procedures. We welcome your feedback.
You can contact us online or by:
Email: customercare@advantedge.com.au
Phone: 1300 300 989
Mail:
Advantedge Financial Services Pty Ltd
700 Bourke Street
Docklands VIC 3008
We take the security of our website seriously. If you believe you have found a security vulnerability you can report it through our Responsible Disclosure Program.
1Consumer credit is credit that is intended to be used wholly or primarily:
2Consumer credit liability information and repayment history information: These information types can only be provided to credit reporting bodies on and after 12 March 2014 in connection with a consumer credit facility.
3Sensitive information is information about a person’s racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association or trade union, sexual preferences or practices, criminal record, health information, genetic or biometric information.