QUICKZY PRIVACY AND CREDIT REPORTING POLICY
Version 2.0 | August 2026
1. INTRODUCTION AND SCOPE
1.1 This is the Privacy and Credit Reporting Policy (“Policy“) of Pod 3 Finance Pty Ltd ABN: 55 661 632 702 T/A Quickzy Finance (“QUICKZY”, “we”/”us”/”our”), holder of Australian Credit Licence number 544927.
1.2 This Policy sets out how QUICKZY collects, holds, uses, and discloses personal information, credit information, credit eligibility information, credit provider (“CP”) derived information, financial hardship information, and sensitive information. It is designed to comply with:
- The Privacy Act 1988 (Cth), as amended by the Privacy and Other Legislation Amendment Act 2024;
- The Australian Privacy Principles (“APPs“);
- The Privacy (Credit Reporting) Code 2025 (“CR Code“);
- The Privacy Regulation 2013; and
- All other applicable Australian privacy legislation and regulatory guidance.
1.3 This Policy consolidates QUICKZY’s privacy obligations into a single, comprehensive document. It replaces and supersedes any previous policies.
1.4 This Policy applies to:
- All persons who access QUICKZY’s Website or otherwise deal with QUICKZY;
- Persons who apply for, or receive, credit from QUICKZY;
- guarantors and proposed guarantors;
- Persons who apply for hardship variations under their credit contracts;
- persons who apply for employment with QUICKZY; and
- Contractors and suppliers engaged by QUICKZY.
1.5 This Policy is available on request by contacting our Privacy Officer (see Section 24).
1.6 This Policy was last updated in July 2026 (Version 2.0).
2. KEY DEFINITIONS
The following terms are used throughout this Policy. Where a term is defined in the Privacy Act 1988 (Cth) or the CR Code, the statutory definition prevails.
2.1 “Personal information” (s 6, Privacy Act 1988) means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not and whether it is recorded in a material form or not. Examples include your name, address, date of birth, contact details, and employment information.
2.2 “Credit information” (s 6N, Privacy Act 1988) means personal information that is one or more of the following types of information about you:
● identification information;
● consumer credit liability information;
● repayment history information;
● information about credit applications (including the type of credit and amount sought);
● default information;
● payment information;
● new arrangement information;
● court proceedings information;
● personal insolvency information;
● publicly available information relevant to your creditworthiness; and
● serious credit infringement information.
2.3 “Credit eligibility information” (s 6P, Privacy Act 1988) means information that has been disclosed to QUICKZY by a Credit Reporting Body (CRB), together with any information that QUICKZY derives from that disclosure. This includes credit reports and credit scores provided to QUICKZY by CRBs, and any assessments QUICKZY produces using CRB-sourced data.
2.4 “CP derived information” (s 6PA, Privacy Act 1988) means information that QUICKZY derives from information disclosed to QUICKZY by a CRB. This includes internal credit risk ratings, credit scores, and other assessments generated by QUICKZY. CP derived information does not include your financial information in a recognisable form.
2.5 “Financial hardship information” (s 6QA, Privacy Act 1988) means information about financial hardship arrangements between you and QUICKZY, including temporary hardship arrangements and permanent variations to your credit contract.
2.6 “Sensitive information” (s 6, Privacy Act 1988) means personal information about an individual’s racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual orientation or practices, criminal record, health information, genetic information, biometric information, or biometric templates.
2.7 “Credit Reporting Body” or “CRB” means an entity that carries on a credit reporting business within the meaning of s 6H of the Privacy Act 1988. A CRB collects, holds, and discloses credit information about individuals for the purpose of providing credit reports to credit providers and other recipients permitted by law.
2.8 “Australian Privacy Law” means, collectively, the Privacy Act 1988 (Cth) (as amended), the Australian Privacy Principles, and the Privacy (Credit Reporting) Code 2025.
3. ANONYMITY AND PSEUDONYMITY
3.1 Under APP 2, individuals have the option of not identifying themselves, or of using a pseudonym, when dealing with QUICKZY. For example, you may make a general enquiry about our products without providing your real name.
3.2 However, QUICKZY cannot process loan applications, provide credit, or enter into credit contracts without verifying your identity. This is because QUICKZY is required by law to verify the identity of borrowers and guarantors under:
● the National Consumer Credit Protection Act 2009 (Cth) (“NCCP Act”);
● the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth); and
● the National Consumer Credit Protection Regulations 2010 (Cth).
3.3 If you choose not to identify yourself, QUICKZY may be unable to provide you with the products or services you have requested.
4. KINDS OF PERSONAL INFORMATION WE COLLECT
4.1 General Personal Information
QUICKZY may collect the following categories of general personal information:
● your name, current address, previous addresses, and duration of residence at each address;
● your date of birth;
● your contact details, including telephone numbers and email addresses;
● your employment details, including your current and previous employers, duration of employment, and income; and
● details of your referees, including their names, addresses, and contact details.
4.2 Website Information
When you visit the QUICKZY Website, we may collect the following information:
● your IP address and domain name;
● the date and time of your Website access;
● the pages you accessed on our Website;
● the address of any Website that referred you to our Website; and
● information collected through cookies, anonymous identifiers, and session variables.
Our Website uses plugins from providers including Facebook, Google and Zoho. These plugins take and share data including your browsing data, interests, gender, location and device type.
If you disable the use of cookies, your use of our Website may be affected. Please note that your internet browser or internet service provider may also separately collect information about your browsing activity.
4.3 Employment Applicant Information
If you apply for a position with QUICKZY, we may also collect:
● your education, training, and qualifications;
● your work history;
● your professional association memberships; and
● your criminal history (where relevant to the position and permitted by law).
5. CREDIT INFORMATION WE COLLECT
5.1 Identification Information
Information used to identify you, including your full name, date of birth, current and previous addresses, driver’s licence number, and other identification details.
5.2 Consumer Credit Liability Information
Information about your consumer credit accounts, including the type of account (for example, a car loan or credit card), the date the account was opened and, if applicable, closed, the credit limit or loan amount, and the terms of the credit.
5.3 Repayment History Information
Information about whether you have made your required monthly repayments on time. This includes information about whether a payment was made by the due date, whether a payment was late, and when a late payment was ultimately made. From 1 July 2022, repayment history information also includes financial hardship information (see Section 8).
5.4 Financial Information
QUICKZY collects financial information to assess your credit application and ongoing capacity to meet repayment obligations. This includes:
● income from all sources, including employment income and government benefits;
● employment status;
● assets;
● expenses; and
● existing debts and financial commitments.
Important: Financial information is collected and used by QUICKZY for responsible lending purposes under the NCCP Act. QUICKZY does not disclose your financial information (income, assets, expenses, and debts) to CRBs.
5.5 Information About Credit Applications
Information about credit applications you have made, including the type of credit sought, the amount applied for, and whether QUICKZY made an information request to a CRB in connection with your application.
5.6 Default Information
Information about overdue payments. A default may be listed on your credit report where a payment is more than 60 days overdue and QUICKZY has issued the required notices in accordance with the Privacy Act 1988 and the CR Code.
The default information provisions require:
1. The overdue amount must be at least $150 (s 6Q(1)(b)(ii));
2. A written notice must be given to you at least 14 days before listing (s 6Q(1)(c));
3. QUICKZY must also give you a s 21D(3) notice (separate from the s 6Q notice) before listing default information.
5.7 Payment Information
Information that an overdue payment, which was the subject of default information, has subsequently been paid.
5.8 New Arrangement Information
Information about the terms of any variation agreed between you and QUICKZY in relation to your payment obligations under your credit contract.
5.9 Court Proceedings Information
Information about any judgment of an Australian court that relates to credit that has been provided to you, or that you have applied for.
5.10 Personal Insolvency Information
Information about your bankruptcy, any debt agreement you have entered into, or any personal insolvency agreement, as recorded on the National Personal Insolvency Index.
5.11 Publicly Available Information
Information that is publicly available and that is relevant to your creditworthiness, such as information from public registers or court records.
5.12 Serious Credit Infringement Information
Information about a serious credit infringement, which may include:
● the fraudulent obtaining of credit, or an attempt to fraudulently obtain credit;
● the fraudulent evasion of credit obligations;
● an inability to contact you about an overdue payment for a period of at least 6 months; or
● an apparent intention on your part not to comply with your credit obligations.
6. CREDIT ELIGIBILITY INFORMATION
This section satisfies the requirements of s 21B(4)(b) of the Privacy Act 1988.
6.1 QUICKZY holds credit eligibility information as defined in s 6P of the Privacy Act 1988. Credit eligibility information is information that has been disclosed to QUICKZY by a CRB, together with any information that QUICKZY derives from that disclosure.
6.2 Credit eligibility information includes:
- credit reports provided by CRBs;
- credit scores provided by CRBs; and
- other assessments or evaluations that incorporate CRB-sourced data.
6.3 QUICKZY uses credit eligibility information to assess credit applications, manage existing credit contracts, and for other purposes permitted by Australian Privacy Law.
7. CP DERIVED INFORMATION
This section satisfies the requirements of s 21B(4)(c) of the Privacy Act 1988.
7.1 QUICKZY derives information from disclosures made to QUICKZY by CRBs. This is known as CP derived information, as defined in s 6PA of the Privacy Act 1988.
7.2 CP derived information includes internal credit risk ratings, credit scores, and other risk assessment tools generated by QUICKZY using CRB-sourced data. These tools assist QUICKZY in assessing applications for credit and managing credit risk.
7.3 CP derived information does not include your financial information (such as income, expenses, assets, or debts) in a recognisable form.
8. FINANCIAL HARDSHIP INFORMATION
8.1 What Is Financial Hardship Information?
Since 1 July 2022, credit providers who provide Repayment History Information (RHI) to CRBs are required by law to report financial hardship arrangements to CRBs as part of repayment history information.
There are two types of financial hardship arrangements:
a. Temporary hardship arrangement – where a credit provider agrees to temporarily vary your repayment obligations (for example, a temporary reduction in repayments or a temporary pause on repayments).
b. Permanent variation – where a credit provider permanently varies the terms of your credit contract (for example, extending the term of the loan or reducing the interest rate).
QUICKZY is required by law to report financial hardship information to CRBs when reporting credit information. QUICKZY cannot agree to withhold this reporting, even at your request.
8.2 Your Protections Under the CR Code
The Privacy (Credit Reporting) Code 2025 (s 8A) provides the following important consumer protections in relation to financial hardship information:
a. Credit scores: CRBs must not use financial hardship information to calculate credit scores or risk assessments.
b. Retention period: Financial hardship information is retained on your credit report for a maximum of 12 months from the date the hardship arrangement ends.
c. Non-discrimination: Other credit providers must not refuse you credit, or reduce your credit limit, solely because financial hardship information appears on your credit report.
8.3 Distinction From Sensitive Hardship Information
It is important to understand the distinction between financial hardship information and the underlying reasons for your hardship. The reasons for your hardship – for example, health information, family circumstances, or details of your personal situation – are classified as sensitive information under the Privacy Act 1988. This sensitive information is not disclosed to CRBs. Only the fact of the hardship arrangement (and its type) is reported. See Section 9 for further details about how QUICKZY handles sensitive information in the context of hardship applications.
9. SENSITIVE INFORMATION AND HARDSHIP APPLICATIONS
9.1 When We Collect Sensitive Information
QUICKZY may collect sensitive information when a borrower applies for a variation in repayment terms on the grounds of financial hardship under Part 4 of the National Consumer Credit Protection Act 2009 (Cth). Hardship may arise because of illness, unemployment, or other reasonable cause that makes it difficult for you to meet your repayment obligations.
9.1.1 Kinds of Sensitive Information We May Collect
In connection with a hardship application, QUICKZY may collect the following sensitive information:
● health information about you or a family member;
● information about the reasons for your current employment status;
● information about your education, training, and qualifications (where relevant to your capacity to earn income);
● information about changes to your marital or family status; and
● other matters relevant to your hardship application.
QUICKZY will only collect sensitive information that is reasonably necessary for the purpose of assessing your hardship application, in accordance with APP 3.2.
9.1.2 Purposes
QUICKZY collects, uses, and holds sensitive information obtained through hardship applications for the following purposes:
● assessing your hardship variation application;
● explaining our decision on your application;
● administering, monitoring, and recording any agreed variation to your credit contract;
● considering complaints through QUICKZY’s internal dispute resolution (IDR) process or through external dispute resolution (EDR);
● managing QUICKZY’s responsible lending obligations under the NCCP Act; and
● reporting to relevant authorities as required or authorised by law.
9.1.3 How We Disclose Sensitive Information
QUICKZY will not disclose your sensitive information (the underlying reasons for your hardship) to any CRB, other credit provider, or third party, except:
a. as permitted or required by Australian Privacy Law;
b. for the purposes described in Section 9.3 above; or
c. with your explicit consent under APP 3.3.
9.1.4 Consent
QUICKZY requires your explicit consent under APP 3.3 before collecting sensitive information. This consent is obtained through the Privacy Collection Notice and Consent form provided to you at the time of your hardship application. You may withdraw your consent at any time, although this may affect QUICKZY’s ability to assess or continue a hardship arrangement.
Bank account information may incidentally contain sensitive information. By continuing with your credit contract, you consent to our collection and use of such information for credit management purposes.
10. HOW WE COLLECT YOUR INFORMATION
10.1 Direct Collection
QUICKZY may collect personal, credit, and sensitive information directly from you through a variety of means, including:
● in person, over the telephone, by mail, by email, or electronically;
● through application forms, consent forms, or online forms submitted through our Website; and
● through your use of our Website, including through cookies, session variables, and other tracking technologies.
10.2 Collection From Third Parties
QUICKZY may also collect personal and credit information about you from third parties, including:
- Credit Reporting Bodies;
- a person authorised by you to act on your behalf, such as an agent, broker, accountant, solicitor, financial counsellor, or introducer;
- referees nominated by you;
- your employers or former employers;
- government bodies and agencies;
- other financial institutions or credit providers; and
- our agents and service providers.
10.3 Notification
In accordance with APP 5, QUICKZY will take reasonable steps to notify you at or before the time of collection – or, if that is not practicable, as soon as practicable afterwards – about the matters required by the APPs, including the purposes for which the information is collected, the entities to which it may be disclosed, and how you may access and correct the information.
11. Purposes of Collection, Use and Disclosure
11.1 General Purposes
QUICKZY collects, uses, and discloses personal, credit, and sensitive information for the following purposes:- administering contracts for the supply of goods or services;
- providing our credit products and services to you;
- processing loan applications and assessing your creditworthiness;
- considering proposed guarantees;
- managing credit contracts, including monitoring repayment performance;
- considering hardship variation applications;
- collecting debts or enforcing rights under credit contracts;
- assisting borrowers who are at risk of default;
- registering or searching interests on the Personal Property Securities Register;
- identifying individuals in accordance with QUICKZY’s obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth);
- investigating and responding to complaints;
- meeting legal and regulatory requirements, including reporting obligations;
- in connection with a prospective sale, transfer, or restructure of QUICKZY’s business or assets;
- securitisation activities or the assignment of debts; and
- any other purpose permitted or required by Australian Privacy Law.
11.2 Credit Reporting Purposes
In accordance with s 21B(4)(d) of the Privacy Act 1988, QUICKZY collects, uses, and discloses credit information for the following credit reporting purposes:
- participating in the credit reporting system established by Part IIIA of the Privacy Act 1988;
- disclosing credit information to CRBs as described in this Policy;
- obtaining credit reports and credit scores from CRBs;
- assessing credit applications; and
- managing credit contracts and collecting debts.
11.3 TaleFin Data Aggregation
If you fall into arrears or apply for hardship assistance, we may obtain your bank account transaction history from TaleFin (a data aggregation service) to assess your financial circumstances, verify income and expenses, and manage your credit contract. This includes using your encrypted login credentials to obtain account statements or balances for future credit services, collections, and related purposes and services.11.4 Limitation
QUICKZY will only collect, use, and disclose information for purposes that are permitted by Australian Privacy Law and the CR Code. QUICKZY will not use or disclose information for purposes that are unrelated to those set out in this Policy, unless required or authorised by law or with your consent.
12. Direct Marketing
- 12.1 QUICKZY may use personal information (other than credit information, credit eligibility information, or sensitive information) to communicate with you about products and services that QUICKZY believes may be of interest to you.
- 12.2 QUICKZY will not disclose credit information, credit eligibility information, or CP derived information to any party for direct marketing purposes other than disclosed in this document.
- 12.3 QUICKZY will not use sensitive information for direct marketing urposes.
- 12.4 You have the right to opt out of receiving direct marketing communications from QUICKZY at any time by contacting our Privacy Officer:
Email: care@quickzy.com.au
Phone: 1300 243 191 - 12.5 QUICKZY will action opt-out requests within a reasonable time.
- 12.6 You also have the right to request that a CRB exclude your credit reporting information from being used for direct marketing pre-screening purposes. To exercise this right, please contact the relevant CRB directly using the contact details set out in Section 14.
13. Automated Decision-Making
- 13.1 From 10 December 2026, APPs 1.7, 1.8 and 1.9 of Schedule 1 to the Privacy Act require QUICKZY to disclose whether personal information is used in substantially automated decisions that could significantly affect individuals’ rights or interests.
- 13.2 QUICKZY may use automated processes to assist in assessing credit applications. These automated processes may include automated credit scoring tools, risk assessment models, and other decision-support systems.
- 13.3 These automated processes are used to assist, not replace, human decision-making. A qualified QUICKZY staff member reviews all credit decisions before they are finalised.
- 13.4 If you would like further information about how automated decision-making may affect you, or if you believe an automated decision has been made about you in error, you may contact QUICKZY’s Privacy Officer using the contact details in Section 24.
14. Disclosure to Credit Reporting Bodies
This section satisfies the requirements of s 21B(4)(d) and (e) of the Privacy Act 1988.
14.1 Credit Reporting Bodies
QUICKZY may disclose credit information to, and obtain credit reports from, the following CRBs:
- Equifax Australia — www.equifax.com.au
- Experian Australia — www.experian.com.au
- TaleFin — www.talefin.com
QUICKZY may disclose the following types of credit information to the CRBs listed above:
- Identification information.
- Consumer credit liability information.
- Repayment history information, including financial hardship information.
- Default information.
- Payment information.
- New arrangement information.
- Serious credit infringement information.
- Court proceedings information.
14.3 Information Not Disclosed to CRBs
- QUICKZY will not disclose financial information (including your income, assets, expenses, and debts) or sensitive information to CRBs.
- QUICKZY will not disclose repayment history information about you to a CRB if your credit contract with QUICKZY has been in effect for less than 14 days.
14.4 Use by CRBs
CRBs may include the information disclosed by QUICKZY in credit reports provided to other credit providers and other recipients permitted by law. This means that other credit providers may have access to information about your credit history with QUICKZY when assessing your future credit applications.
14.5 CRB Privacy Policies
Each CRB has its own privacy policy that explains how it manages credit-related information. QUICKZY encourages you to review the privacy policies of the relevant CRBs. These are available on the CRB Websites listed above.
15. Disclosure to Other Third Parties
15.1 QUICKZY may disclose personal information, credit information, and credit eligibility information to the following categories of third parties:
- other credit providers (with your consent or as otherwise permitted by law);
- Data Aggregation Services such as TaleFin (www.talefin.com) for bank statement retrieval;
- Identity Verification Platforms such as Scantek (scantek.com);
- proposed guarantors (credit information relevant to the guarantee being considered);
- your authorised representatives, including agents, brokers, solicitors, and financial counsellors;
- debt collection agencies engaged by QUICKZY;
- legal advisers;
- insurers providing credit-related insurance;
- debt management businesses and third-party lenders;
- service providers engaged by QUICKZY, including document storage and IT service providers;
- government agencies and regulators, including the Australian Securities and Investments Commission (ASIC), the Office of the Australian Information Commissioner (OAIC), and the Australian Financial Complaints Authority (AFCA);
- prospective purchasers or transferees of QUICKZY’s business or assets; and
- any party to securitisation arrangements or assignments of debt.
15.2 QUICKZY requires third-party service providers to comply with Australian Privacy Law and to handle your information in accordance with standards equivalent to those maintained by QUICKZY.
15.3 Where verbal authorisation is given for the release of information to a third party, QUICKZY will verify your identity before acting on the authorisation. The verbal authorisation will be recorded and confirmed in writing within 5 business days.
16. OVERSEAS DISCLOSURE
This section satisfies the requirements of APP 1.4(g)–(h) and s 21B(4)(i)–(j) of the Privacy Act 1988.
16.1 Your personal information we hold is likely to be accessed by our staff in India and the Philippines via our secure system in Australia.
16.2 We do not currently engage an overseas service provider to store or process customer information. In the event that we appoint overseas service providers, we will require them to comply with our information management policies and procedures and take reasonable steps to ensure your information has the same protections as if managed in Australia.
16.3 QUICKZY will not disclose credit eligibility information or CP derived information to overseas entities except as permitted by Australian Privacy Law.
16.4 Before making any overseas disclosure, QUICKZY will take reasonable steps to ensure that the overseas recipient does not breach the APPs in relation to the information, in accordance with APP 8.
17. Data Security
17.1 Technical Measures
QUICKZY implements the following technical measures to protect personal, credit, and sensitive information:- Encryption of electronic data at rest and in transit: QUICKZY uses cloud-based and third-party systems such as Google Workspace, Zoho CRM, Scantek, banking systems, and related service providers. These systems generally include encryption and secure transmission controls as part of their platform security.
- Password protection and multi-factor authentication: QUICKZY uses password-protected access across its business systems. Multi-factor authentication is generally used across key systems; including email, CRM, identity verification, and administrative access.
- Firewalls and intrusion detection systems: QUICKZY relies on a combination of cloud-provider security controls, device-level protection, network security settings, and external cyber security review.
- Regular security testing and vulnerability assessments: QUICKZY periodically undertakes an external cyber health check covering endpoints, network devices, the website, and dark web exposure. Identified issues are reviewed and remediation actions implemented where necessary.
- Secure disposal of electronic storage media: QUICKZY understands the requirement to securely dispose of electronic storage media when no longer required. This includes wiping, resetting, or securely destroying devices, storage drives, and other media before disposal or reassignment.
17.2 Organisational Measures
In accordance with APP 11.3, QUICKZY has implemented the following organisational measures:
- access controls that limit information access to authorised personnel only, on a need-to-know basis;
- regular staff training on privacy obligations and information security;
- secure physical storage for paper records, including locked filing cabinets and restricted access areas;
- security protocols in place to prevent unauthorised entry;
- contractual obligations on third-party service providers to maintain security standards equivalent to those of QUICKZY;
- documented incident response procedures for detecting, containing, and responding to security incidents;
- regular review and updating of security measures to address emerging risks; and
- employees and business partners follow information security policies which protect the security of your information including physical security over paper records, and industry standard measures to secure electronic data.
17.3 Website Security
QUICKZY takes reasonable steps to secure information transmitted through its Website. However, QUICKZY is not responsible for the security of devices, browsers, or networks used by individuals to access the QUICKZY Website. QUICKZY recommends that you maintain up-to-date security software on your devices and take reasonable precautions when transmitting information electronically.
18. DATA RETENTION AND DESTRUCTION
This section addresses QUICKZY’s obligations under APP 11.2 and the retention periods specified in the Privacy (Credit Reporting) Code 2025 (s 1A) and ss 20W–20X of the Privacy Act 1988.
18.1 Retention
- QUICKZY retains personal and credit information only for as long as it is needed for the purposes described in this Policy, or as required by law.
- Credit information is retained in accordance with the retention periods specified in the Privacy Act 1988 and the CR Code.
- Sensitive information collected during hardship applications is retained only for the duration of the hardship arrangement and any related complaint, plus any additional period required for legal compliance.
When information is no longer needed for any purpose described in this Policy and no legal obligation requires its retention, QUICKZY will take reasonable steps to destroy or de-identify the information. Specifically:
- electronic records will be securely deleted using industry-standard methods;
- physical records will be securely shredded or destroyed; and
- QUICKZY will notify relevant CRBs if credit information is required to be corrected or destroyed.
19. NOTIFIABLE DATA BREACHES
- QUICKZY is a covered entity under the Notifiable Data Breaches (NDB) scheme established by Part IIIC of the Privacy Act 1988.
- If QUICKZY becomes aware of an eligible data breach — or has reasonable grounds to suspect that an eligible data breach has occurred — QUICKZY will:
- conduct a reasonable and expeditious assessment of the suspected breach within 30 days;
- if the breach is assessed as likely to result in serious harm to any individual, notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as soon as practicable; and
- include in the notification a description of the breach, the kinds of information involved, and recommended steps that individuals should take in response.
- QUICKZY has established internal procedures for detecting, containing, assessing, and responding to data breaches.
- QUICKZY takes the protection of health information and financial information particularly seriously, given the potential for serious harm that may result from breaches involving such information.
20. Accessing Your Information
This section satisfies the requirements of APP 1.4(e), s 21B(4)(e), and s 19 of the Privacy (Credit Reporting) Code 2025.
- You have the right to request access to personal information, credit information, credit eligibility information, and sensitive information held about you by QUICKZY.
- Access requests should be made in writing to QUICKZY’s Privacy Officer using the contact details in Section 24.
- QUICKZY will require you to verify your identity before granting access to your information. This may include providing photo identification or other proof of identity.
- There is no charge for making a request. However, QUICKZY may apply a reasonable administration fee for the cost of providing access (for example, photocopying or retrieval costs). QUICKZY will inform you of any applicable fee before processing your request.
- QUICKZY will respond to access requests within 30 days of receiving the request.
- QUICKZY may refuse to provide access in limited circumstances, including where:
- providing access would pose an unreasonable risk to the health or safety of any individual;
- the information is subject to legal professional privilege;
- the information is commercially sensitive internal information that QUICKZY is not required by law to disclose; or
- access is not permitted by law.
If QUICKZY refuses access, it will provide you with written reasons for the refusal.
- QUICKZY cannot provide access to credit information held by CRBs. If you wish to access your credit report, please contact the relevant CRB directly using the contact details set out in Section 14.
- If you believe you have been, or are likely to be, a victim of fraud (including identity fraud), you have the right to request that a CRB not use or disclose your credit reporting information. Contact the relevant CRB directly using the details in Section 14 above.
21. Correcting Your Information
- 21.1 You have the right to request that QUICKZY correct personal information, credit information, or credit eligibility information that is inaccurate, out of date, incomplete, irrelevant, or misleading.
- 21.2 Correction requests should be made in writing to QUICKZY’s Privacy Officer using the contact details in Section 24.
- 21.3 QUICKZY will respond to correction requests within 7 business days of making a decision on the request, and in any case within 30 days of receiving the request.
- 21.4 If QUICKZY agrees to correct information that has been disclosed to a CRB, QUICKZY will notify the relevant CRB of the correction within 7 business days.
- 21.5 If QUICKZY refuses to correct the information, QUICKZY will:
- d. provide you with written reasons for the refusal; and
- e. inform you of your right to request that a statement of the correction sought be associated with the information.
- 21.6 If you are not satisfied with the outcome of a correction request, you may lodge a complaint with the Office of the Australian Information Commissioner (see Section 22.3).
22. COMPLAINTS
22.1 Internal Dispute Resolution (IDR)
If you have a complaint about how QUICKZY has handled your personal information, credit information, or sensitive information, you may contact our IDR Manager by phone, email or post at:
- Phone: 1300 243 191
- Email: complaints@quickzy.com.au
- Address: PO Box 331, Kellyville, NSW 2155
QUICKZY will acknowledge receipt of your complaint within one (1) business day.
QUICKZY will provide a substantive response to your complaint within 30 days. For complaints relating to hardship, QUICKZY will endeavour to respond within 21 days, consistent with ASIC Regulatory Guide 271 (RG 271).
If your complaint requires further investigation, QUICKZY will inform you and provide an estimated timeframe for resolution.
- Address: GPO Box 3, Melbourne VIC 3001
- Phone: 1800 931 678 (free call)
- Website: www.afca.org.au
22.3 Office of the Australian Information Commissioner (OAIC)
You may also lodge a complaint directly with the Office of the Australian Information Commissioner:
- Address: GPO Box 5288, Sydney NSW 2001
- Phone: 1300 363 992
- Website: www.oaic.gov.au
23. Changes to This Policy
23.1 QUICKZY may update this Policy from time to time to reflect changes in law, technology, business practices, or regulatory guidance.
23.2 The current version of this Policy will be published on the QUICKZY Website, together with the version number and date of the most recent update.
23.3 Where changes materially affect how QUICKZY handles credit information, QUICKZY will take reasonable steps to notify affected individuals.
23.4 Your continued dealings with QUICKZY after notice of changes to this Policy constitutes your acceptance of the updated Policy.
24. CONTACT US
If you have any questions about this Policy, wish to make a request regarding your personal information, or wish to lodge a complaint, please contact us at:
- Phone: 1300 243 191
- Email: care@quickzy.com.au
- Address: PO Box 331, Kellyville, NSW 2155
- Website: https://quickzy.com.au/