Kooya

This privacy policy sets out how Kooya Salary Packaging Pty Ltd. (“Kooya”, “we”, “us”, “our”) uses and protects any information that you give us when you use this website.

Kooya is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.

Kooya may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes.

WHAT PERSONAL INFORMATION DO WE COLLECT AND HOLD?

GENERAL INFORMATION

The types of information that we collect and hold about you could include:

ID information such as your name, postal or email address, telephone numbers, and date of birth;
other contact details such as social media handles;
where you came to hear of us;
financial details such as your asset and liability statement and income and expenses;
credit information such as details relating to credit history, credit capacity, and eligibility for credit (‘credit worthiness’); and
other information we think is necessary.

INFORMATION FROM A CREDIT REPORTING AGENCY

When we’re checking your credit worthiness and at other times, we collect information about you that you can obtain from credit reporting bodies.

WHAT SENSITIVE INFORMATION DO WE COLLECT?

Sometimes we need to collect sensitive information about you, for instance in relation to some insurance applications. This could include things like driving history and any previous traffic infringements you may have had. Unless required by law, we will only collect sensitive information with your consent.

WHEN THE LAW AUTHORISES OR REQUIRES US TO COLLECT SENSITIVE INFORMATION

We may collect information about you because we are required or authorised by law to collect it. There are laws that affect financial institutions which require us to collect personal information, like the National Consumer Credit Protection Act.

WHAT DO WE COLLECT VIA YOUR WEBSITE ACTIVITY?

If you use our website or our programs, we may monitor your use of the website and our programs to ensure we can verify you and you can receive information from us, and to identify ways we can improve our services for you. We also know that some clients like to engage with us through social media channels and have exposure to our above-the-line marketing (TV, radio).

We may collect information about you when you interact with us through these channels. However, for all confidential matters, we’ll ensure we interact with you via a secure forum.

To improve our services and products, we sometimes collect de-identified information from users of our website or our programs. That information could include IP addresses or geographical information to ensure your use of our web and our programs is secure. We also collect de-identified information if you use our website or our programs.

Although the information collected does not identify an individual, it does provide us with useful statistics so that we can analyse and improve our web services and programs. If you disclose information through our websites, you may receive cookies, which are data that a website transfers to a user’s hard drive for record-keeping purposes. Cookies can facilitate a user’s ongoing access to and use of a website. The cookies allow us to track website usage patterns and to compile data that can help us improve our web content. If you do not want us to collect information by use of cookies, there is a simple procedure available in most browsers that allows you to deny cookies. However, please note cookies may be necessary for us to provide some web-based features; like services for which a person must register.

HOW DO WE COLLECT YOUR PERSONAL INFORMATION?

We understand that your personal information needs to be looked after and isn’t something you leave lying around for just anybody to take. Unless it’s unreasonable or impracticable, we will try to collect personal information directly from you (referred to as ‘solicited information’). For this reason, it’s important that you help us to do this and keep your contact details up-to-date. There are many ways we seek information from you. We might collect your information when:

An authorised Leasing Consultant fills out an application (a Finance Application) and information supporting the Finance Application. That information may include a credit report about you that you obtain for us;
A Broker fills out an application (a Broker Application) and information supporting the Broker Application. That information may include a credit report about you that you obtain for us;
A Loan Writer/Employee fills out an application for accreditation (Accreditation Application) to present loan applications to our panel lenders on the Broker’s behalf and information supporting the Accreditation Application;
Also, we might collect your information when you’ve given us a call or used our websites or our programs. We also find using electronic means, such as email or SMS, a convenient way to communicate with you and to verify your details.

HOW WE COLLECT YOUR INFORMATION FROM OTHER SOURCES

Sometimes we collect information about you from other sources. We do this only if it’s necessary to do so. Instances of when we may need to include, where:

we can’t get hold of you and we rely on publicly available information to update your contact details;
we need information from an insurer about an insurance application you make through us; and
at your request, we exchange information with your legal or financial advisers or other representatives.

Also:

we may obtain information from the Police or from ASIC or other government authorities to check your probity and use it to assess the broker application or the credit representative application;
we may obtain information from financial institutions on the Aggregator’s panel of financial institutions relating to application conversion ratios, application submission quality and use of online services;
we may ask for other information from you from time to time to enable us to improve our services to you.

WHAT IF YOU DON’T WANT TO PROVIDE US WITH PERSONAL INFORMATION?

If you don’t provide your personal information to us, we may not be able to:

consider a Finance Application;
provide you with the product or service you want;
manage or administer your product or service;
verify your identity or protect against fraud; or
let you know about other products or services from across the Group that might better meet your financial, ecommerce or lifestyle needs.

HOW WE COLLECT AND HOLD YOUR PERSONAL INFORMATION

We will collect your credit information from details included in a Finance Application. In addition to what we say above about collecting information from other sources, other main sources for collecting credit information are:

other credit providers;
your referees;
your agents and other representatives like your accountants or solicitors;
bodies that issue identification documents to help us check your identity; and
our service providers involved in helping us to provide credit or to administer credit, including our debt collectors and our legal advisers.

WHAT DO WE DO WHEN WE GET INFORMATION WE DIDN’T ASK FOR?

Where we receive unsolicited personal information about you, we will check whether that information is reasonably necessary for our functions or activities. If it is, we’ll handle this information the same way we do with other information we seek from you. If not, we’ll destroy or de-identify it.

HOW DO WE TAKE CARE OF YOUR PERSONAL INFORMATION?

We store information in different ways, including in paper and electronic form. The security of your personal information is important to us and we take reasonable steps to protect it from misuse, interference and loss, and from unauthorised access, modification or disclosure. Some of the ways we do this are:

confidentiality requirements of our employees, agents or the Provider;
document storage security policies;
security measures for access to our systems;
only giving access to personal information to a person who is verified to be able to receive that information;
control of access to our buildings; and
electronic security systems, such as firewalls and data encryption on our websites.

We can store personal information physically or electronically with third party data storage providers. Where we do this, we use contractual arrangements to ensure those providers take appropriate measures to protect that information and restrict the uses to which they can put that information.

WHAT HAPPENS IF WE NO LONGER NEED YOUR PERSONAL INFORMATION?

We’ll only keep your information for as long as we require it for our purposes. We’re also required to keep some of your information for certain periods of time under law, such as the Corporations Act. When we no longer require your information, we’ll ensure that your information is destroyed or de-identified.

WHAT ARE THE MAIN REASONS WE COLLECT AND HOLD YOUR PERSONAL INFORMATION?

Because we offer a range of services and products, collecting your personal information allows us to provide you with the products and services you’ve asked for. This means we can use your information to:

provide you with information about products and services;
consider an authorised Leasing Consultant or an authorised Agent’s request for products and services, including eligibility for those products and services;
process a Novated Lease Application
establish a Novated Lease Agreement

CAN WE USE YOUR INFORMATION FOR MARKETING?

We like to share what we know about our products with you. We may use or disclose your personal information to let you know about products and services through Kooya affiliated partners that might better serve your financial, e-commerce and lifestyle needs, or running competitions or promotions and other opportunities in which you may be interested.

We may conduct these marketing activities via email, telephone, SMS, IM, mail, or any other electronic means. We may also market our products to you through third party channels (such as social networking sites).

You may opt out of any marketing at any time by contacting as by email ask@kooya.com.au or selecting the ‘Opt Out’ option where available. Where we market to prospective clients, we are happy to let them know how we obtained their information and will provide easy to follow opt-outs.

We may disclose your personal information to third parties such as the Provider, or agents for the purpose of connecting you with other businesses or clients.

YES, YOU CAN OPT OUT AT ANY TIME

You can let us know at any time if you no longer wish to receive direct marketing offers from Kooya.

WHAT ARE OTHER WAYS WE COLLECT YOUR PERSONAL INFORMATION?

We’ve just told you some of the main reasons why we collect your information, so here’s some more insight into the ways we use your personal information including:

giving you information about a product or service;
considering whether you are eligible for a product or service;
processing your application and providing you with a product or service;
administering the product or service we provide you, which includes answering your requests and complaints, varying products and services and managing our relevant product portfolios;
identifying you or verifying your authority to act;
telling you about other products or services that may be of interest to you, or running competitions and other promotions (this can be via email, telephone, SMS, iM, mail, or any other electronic means including via social networking forums), unless you tell us not to;
assisting in arrangements with other organisations in relation to a product or service we make available to you;
allowing us to run our business and perform administrative and operational tasks, such as:
training staff;
developing and marketing products and services;
risk management;
systems development and testing, including our websites and other online channels;
undertaking planning, research and statistical analysis;
determining whether a beneficiary will be paid a benefit;
preventing or investigating any fraud or crime, or any suspected fraud or crime;
as required by law, regulation or codes binding us;
managing our relationship with you;
managing our relationships with our panel lenders and insurance providers;
investigating and dealing with suspected or actual unlawful activity;
assisting in improving industry standards relating to engaging in credit activities; and
assisting with recovering amounts owing to us; and
for any purpose for which you have given your consent.

WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?

To make sure we can meet your specific needs and for the purposes described in ‘How we use your personal information’, we sometimes need to share your personal information with others. We may share your information with other organisations for any purposes for which we may use your information.

SHARING AT YOUR REQUEST

We may share your personal information with:

your representative or any person acting on your behalf (for example, accountants or solicitors); and
your referees to confirm details about you;
where you give written consent

SHARING WITH THIRD PARTIES

We may share your personal information with third parties outside of the Group, including:

the Provider
our authorised Agents
our panel lenders;
industry bodies of which we are a member;
those involved in providing, managing or administering the product or service we provide to you;
authorised representatives of Kooya who sell products or services on our behalf;
valuers, insurers (including lenders’ mortgage insurers and title insurers), re-insurers, claim assessors and investigators;
brokers or referrers who refer your application or business to us;
loyalty programme partners;
other financial institutions, such as banks;
organisations involved in debt collecting, including purchasers of debt;
fraud reporting agencies (including organisations that assist with fraud investigations and organisations established to identify, investigate and/or prevent any fraud, suspected fraud, crime, suspected crime, or misconduct of a serious nature);
organisations involved in surveying or registering a security property or which otherwise have an interest in such property;
real estate agents;
government or regulatory bodies (including ASIC and the Australian Tax Office) as required or authorised by law (in some instances these bodies may share it with relevant foreign authorities);
our accountants, auditors or lawyers and other external advisers;
guarantors and prospective guarantors of your obligations to us;
organisations that maintain, review and develop our business systems, procedures and technology infrastructure, including testing or upgrading our computer systems;
organisations that participate with us in payments systems including merchants, payment organisations and organisations that produce statements for us;
our joint venture partners that conduct business with us;
organisations involved in a corporate re-organisation or transfer of Group assets or business;
organisations that assist with our product planning, research and development;
mailing houses and telemarketing agencies who assist us to communicate with you;
other organisations involved in our normal business practices, including our agents and contractors; and
where you’ve given your consent.

SHARING OUTSIDE AUSTRALIA

Kooya conducts the key functions of the business in Australia. We may store your information in cloud or other types of networked or electronic storage. As electronic or networked storage has the potential to be accessed from various countries via an internet connection, it’s not always practicable to know in which country your information may be held. If your information is stored in this way, disclosures may occur in countries other than those listed. Overseas organisations may be required to disclose information we share with them under a foreign law. In those instances, we will not be responsible for that disclosure.

HOW DO YOU ACCESS YOUR PERSONAL INFORMATION?

We’ll always give you access to your personal information unless there are certain legal reasons why we can’t. You can ask us in writing to access your personal information that we hold. In some cases we may be able to deal with your request over the phone. We will give you access to your information in the form you want it where it’s reasonable and practical (such as a copy of a phone call you may have had with us). We may charge you a small fee to cover our costs when giving you access, but we’ll always check with you first. We’re not always required to give you access to your personal information.

Some of the situations where we don’t have to give you access include when:

we believe there is a threat to life or public safety;
there is an unreasonable impact on other individuals;
the request is frivolous;
the information wouldn’t be ordinarily accessible because of legal proceedings;
it would prejudice negotiations with you;
it would be unlawful;
it would jeopardise taking action against serious misconduct by you;
it would be likely to harm the activities of an enforcement body (e.g. the police); or
it would harm the confidentiality of our commercial information.

If we can’t provide your information in the way you’ve requested, we will tell you why in writing. If you have concerns, you can contest this position. Please contact us.

HOW DO YOU CORRECT YOUR PERSONAL INFORMATION?

Contact us if you think there is something wrong with the information we hold about you and we’ll try to correct it if it’s:

inaccurate;
out of date;
incomplete;
irrelevant; or
misleading.

If you are worried that we have given incorrect information to others, you can ask us to tell them about the correction. We’ll try and help where we can – if we can’t, then we’ll let you know in writing.

CONTACT US

We care about your privacy. Please contact us if you have any questions or comments about our privacy policies and procedures. We welcome your feedback. You can contact us by using the details below: