GP Money Pty Ltd (“GP Money”, “we”, “us”, “our”) is committed to handling your personal information responsibly and in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs). Where we handle credit information, we are also bound by Division 3 of Part IIIA of the Privacy Act and the Privacy (Credit Reporting) Code 2014.This Policy explains how we collect, use, hold and disclose personal information, including credit information, in the course of our business as a mortgage manager and lender.
1. Why We Collect Personal Information
We collect and hold personal information for the following purposes:
• Assessing applications for finance and managing loans throughout their term
• Providing the financial product or service requested
• Processing broker and partner accreditation applications
• Communicating with you about our products and services
• Direct marketing, where permitted
• Managing and resolving complaints and enquiries
• Complying with applicable laws and regulatory obligations, including those imposed by ASIC, AUSTRAC, and under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth)
2. What Personal Information We Collect
The types of personal information we may collect include, but are not limited to:
• Personal and contact details — full name, date of birth, phone number, residential or postal address, and email address
• Identity documents — driver’s licence, passport, birth certificate, or other documents required for identity verification• Government identifiers — Tax File Number and country of tax residency
• Financial details — employment status, income, assets, liabilities, and bank account information
• Credit information — see Section 6 below
If you are applying for finance, we may also collect information about the number and ages of your dependants, your current address history, employment details, and evidence of income and expenses.
We do not collect sensitive information (including political or religious beliefs, or ethnic background) unless required by law. Health information is only collected where it is relevant to an insurance product, and always with your explicit consent.
3. How We Collect Your Information
We collect personal information primarily from you directly. We may also collect information from:
• Finance brokers, accountants, lawyers, or other authorised representatives
• Credit reporting bodies
• Publicly available sources, including public registers
• Electronic identity verification services
We will not collect personal information about you without your knowledge, except where authorised or required by law, or where you have authorised a third party to provide that information to us.
If you provide us with personal information about another person, you confirm that the individual has consented to this and is aware of how their information will be handled under this Policy.
4. Anonymous Dealings
You may visit our website without identifying yourself or providing personal information. Our web servers record domain names, not email addresses, of visitors. However, if you request a service that legally requires us to deal with identified individuals, we will notify you accordingly.
5. How We Use and Disclose Your Information
We use and hold your personal information only for the purposes for which it was collected, or as otherwise permitted under the Privacy Act. This includes:
• Assessing and managing your finance application
• Providing the product or service you have requested
• Processing broker or partner accreditation applications
• Handling complaints and enquiries
• Direct marketing communications (see Section 7)
• Any other purpose to which you have consented
Disclosure to Third Parties
We may disclose your personal information to:
• Prospective or existing funders and other intermediaries involved in your loan
• Third-party service providers assisting in loan administration, including printing, postal, and call centre services• Your authorised representatives, including brokers, lawyers, and accountants
• Identity verification, technology, and infrastructure service providers
• Investors, agents, advisers, or entities with an interest in our business
• Regulatory bodies including ASIC and AUSTRAC, where required by law
• Law enforcement agencies, where required
• Successors in title to our business
By using our services, you consent to your personal information being disclosed to these entities as necessary to deliver those services. You are not required to consent to this on a case-by-case basis.
6. Credit Information
Credit information is information used to assess your eligibility for finance. It may include details of your existing credit obligations, repayment history, and any defaults.
When assessing a finance application, we may obtain a credit report from a credit reporting body. The information we may access from a credit reporting body includes identification details, existing credit liabilities, repayment history, default information, serious credit infringements, and court judgments relating to credit.
All credit information is handled in accordance with the Privacy Act and the Privacy (Credit Reporting) Code 2014.
7. Direct Marketing
We may use your contact information to tell you about products, services, or updates that we consider may be of interest to you. We may contact you by mail, telephone, email, SMS, or other electronic means.
If you do not wish to receive direct marketing from us, you may opt out at any time by contacting us at info@gpmoney.com.au. Where communications are sent by email, you may also use the unsubscribe function included in the message. We will action your request promptly and at no cost to you.
8. Security of Personal Information
We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Personal information is stored in secure electronic systems.
Access to personal information is limited to employees and representatives who require it to carry out their responsibilities, consistent with the purposes set out in this Policy.
When your personal information is no longer required, we will take reasonable steps to destroy or de-identify it securely. In some circumstances, we may be required by law to retain certain records — for example, under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) or the Archives Act 1983 (Cth).
9. Social Media
GP Money maintains a presence on social media platforms. We may collect aggregate, non-personalised statistics relating to engagement on those platforms. For any confidential or account-related matters, please contact us directly rather than through social media channels.
10. Accessing and Correcting Your Information
You have the right to request access to the personal information we hold about you, and to request its correction if it is inaccurate, incomplete, out of date, or misleading.
To make a request, please contact us using the details in Section 12. We will respond within a reasonable period. A reasonable fee may apply to cover the cost of providing access. If we are unable to provide access in the circumstances permitted under the Privacy Act, we will advise you in writing and explain our reasons.
We will respond to correction requests within 30 calendar days of receipt, at no charge. If we decline to make a correction, we will notify you in writing and provide an information statement if requested.
11. Complaints
If you have a concern or complaint about how we have handled your personal information, please contact our Privacy Officer using the details in Section 12. We will acknowledge your complaint as soon as practicable and endeavour to resolve it within 30 calendar days.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
Office of the Australian Information Commissioner
• Website: www.oaic.gov.au
• Email: enquiries@oaic.gov.au
• Phone: 1300 363 992
• Mail: GPO Box 5218, Sydney NSW 2001
12. Notifiable Data Breaches
We are required under the Privacy Act to notify you and the OAIC if a data breach occurs that is likely to result in serious harm to you. If you believe that personal information we hold about you has been compromised, please contact us immediately using the details below.
13. Changes to This Policy
We may update this Policy from time to time as required. Material changes will be published on our website. The date of the most recent update is noted at the top of this document.
If you require a copy of this Policy in an alternative format, please contact us and we will take reasonable steps to accommodate your request.
14. Contact Us
For all privacy-related enquiries, access or correction requests, and complaints, please contact:
Privacy Officer
GP Money Pty Ltd
Email: info@gpmoney.com.au
Phone: 1300 089 999