1. Who we are and scope

Zip Funding is a trading name used by Basic Finance Pty Ltd (ABN 37 108 820 122; ACN 108 820 122). This policy covers personal information handled through zipfunding.com.au, our enquiry forms, telephone and email communications, and our finance enquiry and referral activities.

Third-party websites and providers have their own privacy practices. Their policies apply when you interact directly with them.

2. Personal information we may collect

The information we collect depends on your interaction and the proposed transaction. It may include:

• identity and contact details, such as your name, telephone number, email and address;
• business and employment information, including entity, director or guarantor details;
• finance requirements, purpose, requested amount, timing and preferred structure;
• property and security information, valuations, existing debt and ownership details;
• financial information and supporting documents you choose to provide;
• correspondence, enquiry history, consents and complaint records; and
• technical information such as IP address, device, browser, referring page and website activity.

We will only collect sensitive information where it is reasonably necessary and you consent, or where collection is otherwise permitted or required by law.

3. How we collect information

We usually collect information directly from you when you complete a form, call, email or provide documents. With your authority, or where permitted by law, we may also collect information from your representatives, advisers, referrers, co-applicants, related entities, lenders, valuers, service providers and publicly available sources.

If you provide information about another person, you should have authority to do so and make them aware of this policy where appropriate.

4. Why we collect and use it

We may use personal information to:

• respond to enquiries and understand the proposed transaction;
• identify and discuss potentially relevant finance pathways;
• communicate with lenders, funders and professional service providers where authorised or otherwise permitted;
• verify information, manage risk, prevent fraud and meet legal obligations;
• prepare records, manage our relationship with you and respond to complaints;
• operate, secure, analyse and improve the website and our services; and
• send service updates or marketing where permitted, subject to your right to opt out.

You can opt out of marketing at any time by using an unsubscribe facility or contacting us. We may still send communications necessary to respond to or administer an enquiry.

5. Disclosure of personal information

Depending on your instructions and the transaction, we may disclose personal information to prospective lenders or funders; valuers; solicitors; accountants; insurers; identity, fraud-prevention and verification providers; technology, cloud, analytics and communications providers; professional advisers; regulators, courts or law-enforcement bodies; and other parties where you consent or disclosure is authorised or required by law.

Overseas processing

Some technology or cloud providers may process or store information outside Australia. The locations may vary with the provider. Where practicable, we will identify relevant countries in a collection notice or on request and take reasonable steps required by applicable law in relation to overseas disclosures.

6. Cookies and website analytics

This website may use cookies and similar technologies for essential functionality, security, preferences, performance measurement and analytics. These technologies may collect device and usage information. You can control cookies through your browser, although disabling essential cookies may affect website functions.

Third-party tools, embedded content and links may set their own cookies and are governed by the provider’s privacy policy.

7. Security, retention and data breaches

We use reasonable administrative, technical and physical safeguards appropriate to the information we hold. No internet transmission or storage system is completely secure, so please use care when sending sensitive documents and contact us if you believe information has been compromised.

We retain information for as long as reasonably necessary for the purposes described in this policy, to manage records and disputes, and to meet legal or regulatory requirements. Information that is no longer required is destroyed or de-identified where required and practicable.

Where the Notifiable Data Breaches scheme applies, we will assess suspected eligible data breaches and notify affected individuals and the Office of the Australian Information Commissioner when required.

8. Access and correction

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. We may need to verify your identity. If an exception permits us to refuse a request, we will explain our decision where required.

To make a request, contact our Privacy Officer using the details below. We will respond within a reasonable period and do not charge for making a request, although permitted access costs may apply after notice.

9. Privacy enquiries and complaints

Send a written complaint to our Privacy Officer describing the issue and the outcome you seek. We will acknowledge and investigate it and aim to provide a response within 30 days, although complex matters may take longer.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner. The OAIC may ask you to raise the matter with us first.

10. Changes to this policy

We may update this policy when our practices, technology or legal obligations change. The effective date above identifies the current published version. Material changes apply from publication unless another date is stated.