Privacy policy

TALEFIN CRB AUSTRALIA PTY LTD (ACN: 644 262 742) and TALEFIN AUSTRALIA PTY LTD (ABN: 71 632 551 770) are information services businesses that recognise the importance of privacy and information security to effectively operate.  We operate within the bounds provided by the Australian Privacy Principles under the Privacy Act1988 (Cth) (the Act).  This document articulates how we manage personal information in compliance with our obligations under the Act.  

Privacy Policy

What is our commitment to privacy?

We recognise your right to privacy and have established systems to support
- the security of your information
- the ability to access the information that we hold about you and;
- the ability to correct and improve the quality of any information that we hold about you.

We also operate a credit reporting business. For information about how we handle credit reporting information please see here

What kinds of information do we collect?

We may collect and hold the following information:
- Identification information including:
    Full name
    Previous name or alias
    Address
    Previous address
    Date of birth
    Driver license number
   Other identifying document numbers
- Consumer credit liability information including:
    Credit provider name
    Type of credit
    Term of credit contract
- Repayment history
- Default information (Where applicable)
- Serious credit infringements (Where applicable)
- New arrangement information for an existing credit product
- Bank / Financial Institution login credentials 

If you access our website, we will record transactions conducted on the website including website tracking cookies and IP Addresses

The Privacy Act defines “sensitive information” as including:
- Racial or ethnic origin
- Political opinions or associations
- Religious beliefs
 - Membership of a professional or trade association or union
 - Sexual orientation or practices
 - Criminal records
 - Health information
 - Certain genetic and biometric information

While TaleFin does not seek to collect any of this information, some may become apparent through the analysis of your bank statement transactions

How do we collect and hold personal information?

We collect credit reporting information about you fairly and lawfully in the course of running a credit reporting business from:
- Credit Providers
- Mortgage or Trade Insurers
- Mercantile Agencies
- Personal Finance Apps

Before providing your information, these businesses must seek and obtain consent from you. We will also collect information from you to verify your identity before providing access to your file and to submit corrections and bans.

If you request us to access bank/financial information on your behalf, we will ask you to provide the name of your bank/financial institution, and your account log in credentials, so that the bank/financial institution can identify you to access your bank transaction information.  We also collect bank and financial information directly from you with your consent to help you to access credit.

We are committed to keeping your personal information secure.  We are ISO-27001 (Information Security) complaint.  Your data in encrypted in transit and at rest.

Why do we collect this information

We collect your personal information primarily

- to help you to access the best available credit products and understand your financial position,
- to help your credit provider(s) to understand credit risk and provide suitable products
- to help your service provider (such as mortgage broker or personal finance app) to reflect your financial position to banks and credit providers or back to you.

A secondary purpose use of the data is to remove all identifying information before generating a geodemographic insights model across the population.  This may be used to help business and government institutions to understand, describe and communicate with their customers and audiences.

Who we disclose your information to

We customarily do not disclose, or permit the disclosure of your personal information:

- in a way that could be used to identify an individual member in any circumstances; or
- to unrelated third parties, including to third party recipients overseas

except as described in this Privacy Policy and our User Terms & Conditions, unless we have your permission, or such disclosure is incidental to your use of the Website, or where we are required by law or regulatory authority to do so.

We disclose information in accordance with the Privacy Act to support customers to:
 - Meet compliance obligations
 - Assess risk when proving credit
 - Protect you against fraud

Clients who view your information do so only after having received consent from you either directly or through us on your behalf.

Currently TaleFin does not disclose personal information to overseas recipients.  We do have clients with overseas parent entities who may store and hold your data in an overseas jurisdiction.

How long do we hold your data

Credit reporting information is held in compliance with the Part IIIA of the Privacy Act and the Credit Reporting Code.

Bank Transaction information is held for up to 60 days before personally identifiable information is destroyed.

Bank credentials are held only for as long as we need to extract the relevant information.  In some cases, our client may store an encrypted version of your credentials, which may only be accessed via TaleFin’s systems. In such instances, our client will obtain your consent before proceeding.

How to access your information

You may at any time access information that we have about you by:
- Identifying yourself via our website here
- Registering an account that will allow you to be identified in the future
- Logging in at any time to access your information.

User experience

At TaleFin, we take your privacy seriously.

We use Google Analytics to collect anonymous information about how visitors use our website and application. Google Analytics uses cookies to collect this information, which is then used to generate reports about user activity on our website and application.
The information collected by Google Analytics may include:
- Your device's IP address
- Your device's operating system and browser type
- The web pages you visit on our website
- The date and time of your visit
- The amount of time you spend on each page
- Your geographic location

We use this information to understand how visitors use our services and to make improvements to content and functionality. Your personal information is kept secure and separate from the tracking data. By using our website, you consent to the processing of data about you by Google in the manner described in Google's Privacy Policy and for the purposes set out above.

You can opt-out of Google Analytics if you disable or refuse the cookie, disable JavaScript, or use the opt-out service provided by Google.

Updates to this policy

We may update this Privacy Policy occasionally. By continuing to use our website after changes are made, you agree to the revised policy. We encourage you to review it regularly before providing any personal information to ensure you're comfortable with any updates.

How to get in contact with us

If you have any questions or concerns about this Privacy Policy, please reach out to us at info@talefin.com. We're here to help with any inquiries you may have.

How to correct your information

If you believe that inaccurate or incorrect information has been provided to us, we encourage you first to engage with your credit provider to provide them with an opportunity to correct the information on their system and ours.

Failing that, to correct your information, please register for a TaleFin account here, or login to your existing account here, where you will be able to log a correction request via our online portal.

Information provided will be reviewed, and where applicable an investigation will take place:
- Through our investigation, we may contact you to seek additional information or clarification.
- We will also be in touch with the entity that provided your information for further clarification.

For requests that require investigation, we will respond to you in writing, the outcome of the investigation and where applicable will immediately make the resultant corrections.

How to lodge a complaint

   If you believe that TaleFin has mishandled your personal information you may contact:
   Australian Financial Complaints Authority (AFCA)
        https://www.afca.org.au
        info@afca.org.au
        1800 931 678
        GPO Box 3, Melbourne Vic 3000
   Office of the Australian Information Commissioner (OAIC)
        https://www.oaic.gov.au
        enquiries@oaic.gov.au
        1300 363 992
        GPO Box 5218, Sydney NSW 2001