Privacy Policy

This Privacy Policy applies to and covers LeasePLUS Group Pty Ltd [ABN 73 158 960 617] and all its related entities (collectively referred to as the LeasePLUS Group; “us”, “we” or “our”), including LeasePLUS Pty Ltd [29 155 287 442], LeasePLUS Holdings Pty Ltd [79 154 926 833], Salary Packaging PLUS Pty. Ltd. [99 109 696 139], LeasePLUS Team Pty Ltd [71 158 960 608], LeasePLUS Corporation Pty Ltd [66 158 960 591], Myplus Pty Ltd [40 143 499 183], SafeCode Pty Ltd [70 153 046 318] and sets out how we manage Personal Information provided to or collected by us.

We understand that your privacy is important. We are committed to protecting your Personal Information (as defined in the Privacy Act).

We are bound by the Australian Privacy Principles contained in the Privacy Act 1988 and associated legislation (as amended from time to time).

This Privacy Policy applies to your use of our websites and apps and to the collection of any Personal Information by us in the course of our business.

We may update this Privacy Policy from time to time to reflect changes in the law, our services or how we handle Personal Information. The current version will always be available on our website. Any updated version takes effect from the date it is published, which is shown as the “Last updated” date at the bottom of this policy. If we make a significant change to how we handle your Personal Information, we will take reasonable steps to let you know.

We may also have obligations in relation to your Personal Information under a range of other legislation including for example (but not limited to), the Anti-Money Laundering and Counter Terrorism Financing Act 2006 (Cth) and Electronic Transactions Act 1999 (Cth). We may also collect Personal Information under the Personal Property Securities Act 2009 (Cth) (PPSA).

What kind of Personal Information is collected and how is it collected?

The type of information we may collect and hold includes (but is not limited to) Personal Information, including information about:

• Names, addresses (mail and email), previous addresses, phone numbers;
• DOB, gender, number of dependants, relationship status;
• Signatures;
• Banking and other relevant financial information including TFN, salary/income, assets, utility or phone contract and payment details;
• Statement of assets, liabilities and other financial information and any supporting documentation;
• Identification proof or information including drivers licence;
• Licence history;
• Photographs;
• ACN/ABN details;
• Application for credit forms;
• Credit provided by other credit providers including any credit you may have applied for or guaranteed;
• Credit checks, credit history, credit scores or ratings;
• Personal solvency records or relevant court proceedings or information;
• Overdue payments;
• Discharge of payments from previous credit providers; and
• Any other Personal Information deemed relevant or that we are legally required to collect so that we can provide you with our services.

We will collect Personal Information in a variety of ways including by way of phone and text message, forms completed and provided to us via email, mail, our websites, mobile Apps, subscriptions, services or newsletters.

We may collect information directly from you, for example, when you have a salary packaging agreement with us, complete an application form for one of our products or services, deal with us over the telephone or in person or send us a message by text, or via our Apps, or a letter. If you used our websites to register for further information or to subscribe to one of our services/newsletters service, we will also collect information from you.

In some circumstances we may be provided with Personal Information about you from a third party such as your employer, credit provider, family member, our business alliance partners, your agents or third-party brokers. If required by law, we will obtain your consent to collect information from third party sources.

We may also collect additional information about you depending on the products and services provided:

• if you apply for finance or a lease – age and number of your dependants, how long you have lived at your current address, your employment details, proof of earnings and expenses, details of income, assets, liabilities, expenses, credit history and credit worthiness;
• if you apply for insurance, we may collect some information regarding your health (see “Sensitive information” below), your driver accident and insurance claim history or your driver motor vehicle licence history (restrictions and cancellations);
• If you apply to work with us, we may collect application documents, qualifications, work history and referee details, together with any eligibility or background information reasonably required for the role. We use that information to assess applications, undertake permitted verification and manage recruitment and employment-related processes.

Where practicable and lawful, you may make general enquiries without identifying yourself or by using a pseudonym. This applies to general enquiries only. We will not access or discuss your account, make changes to it, process a claim or provide a regulated financial or payroll-related service until you have sufficiently verified your identity.

Sensitive information

Sensitive information is a category of Personal Information under the Privacy Act that includes health information and criminal history. We only collect sensitive information where it is reasonably necessary for our functions or activities and you have consented, or where the law otherwise requires or permits it. For example, we may collect:

• health information, if you apply for insurance through us;
• health information, if you apply to work with us or during your employment with us, for example to assess your fitness for a role, make reasonable adjustments, or manage leave, work health and safety or workers’ compensation matters; and
• criminal history information, if you apply to work with us, through a police check you have consented to.

We use and disclose sensitive information only for the purpose for which it was collected, or a directly related purpose you would reasonably expect, unless you consent or the law requires or permits otherwise.

Information collected from our websites

When you visit our websites, our web servers/Internet Service Providers make a record of your visit through your browser and logs the following information for statistical purposes only:

• the number of visitors to the website (gathered via IP address logs);
• your device's IP address (a number which is unique to the computer through which you have accessed the Internet);
• the date and time of your visit to the site;
• the pages you accessed and documents downloaded; and
• the type of browser and operating system you are using.

The above statistical data is anonymous and is used to evaluate our website performance and to measure the interest in the various areas of our site. We will not try to identify you or your browsing activities except, where we are compelled to do so by law (for example: pursuant to a valid search warrant to inspect the service provider’s logs) or if your use is causing technical concerns for our site which may need to be resolved.

If you provide us with Personal Information about another person, such as a partner, beneficiary, employee or authorised representative, please ensure you are authorised to do so and have made the person aware of the disclosure where required. We will handle that information in accordance with applicable privacy law.

Credit information

We do not obtain credit reports from, or provide information to, credit reporting bodies. If you apply for finance, such as a novated lease, we collect the financial information needed for your application and pass it to the financier you have chosen. The financier may carry out its own credit checks, including with credit reporting bodies, and will handle that information under its own privacy and credit reporting policies.

How we use, disclose and hold Personal Information

We collect Personal Information about you only where it is necessary for our business so that we may provide you with the services requested and you will usually be told the purposes for which we collect that information when it is collected. Generally, the collection of your Personal Information will be necessary for us to provide a service to you and where applicable, other purposes that you would reasonably expect or to which you have consented.

We disclose your Personal Information for the purpose for which it has been provided, reasonably related secondary purposes which are within the contemplation of the parties (and are directly related if the information is sensitive information), any other purpose you have consented to and any other purpose permitted under the Privacy Act. Depending on the product or service we are providing to you, or your relationship with us, we may disclose your Personal Information:

• to your employer;
• to a bank or financial institution;
• to our third party suppliers and vendors to the extent necessary for the establishment, provision, and administration of the applicable products or services (this may include car dealers, intermediaries, financiers, valuers, insurers or lawyers/debt collectors).  For example:
  • if you are requiring vehicle sourcing, we will disclose your Personal Information to your chosen car dealership;
  • if you are applying for or have a novated lease, we will disclose your Personal Information to, and otherwise deal with, the applicable financier and car dealership in setting up and administering your lease;
  • if you are applying for or have an insurance policy, we will disclose your Personal Information to the applicable insurer; or
  • if you have a salary packaging arrangement with us, we may disclose your Personal Information to applicable suppliers, for example, mechanics, fuel companies, statutory authorities in relation to vehicle registration/insurance, and superannuation funds for the purpose of processing your superannuation contributions;
  • if you are requiring a Meal Entertainment Card or a Living Expense card, we will disclose your Personal Information to the card program provider.
• to our personnel, agents, contractors and service providers that are involved in providing, managing or administering the applicable products or services (e.g. printing and postal services, call centres and mail houses);
• to those companies who provide information and infrastructure systems to us, including cloud storage providers and companies engaged in the provision of, or configuration of, automated decision making programs;
• to anyone acting on your behalf;
• to our professional advisors and consultants, accountants, lawyers and auditors;
• to anyone else in relation to whom you have provided us consent;
• to any company within LeasePLUS Group;
• if you are applying to work for LeasePLUS Group, your referees, the Australian Federal Police or an ACIC-accredited provider (to undertake criminal history checks), educational and professional institutions and bodies (to verify academic qualifications, licences and memberships), to organisations that conduct competence and psychometric tests, and the Department of Home Affairs (to verify your right to work in Australia); and where we are required to do so by law, and for any other purpose related to or ancillary to any of the above.

Our core systems and the Personal Information we hold are stored in secure cloud data centres located in Australia. Some of our service providers, such as website analytics and online booking providers, may store or process limited information on servers outside Australia, including in the USA. We take reasonable steps to maintain the security of your Personal Information and to ensure it is treated in accordance with the standards that apply in Australia.

We may use Personal Information to verify identity; administer salary packaging and novated leasing; process payroll, claims and benefit payments; manage customer accounts; prevent fraud; provide customer support; improve our websites and applications; conduct permitted research and analytics; assess employment applications; and meet legal or regulatory obligations.

Automated decision making

In some circumstances we use Personal Information about you to make automated decisions which may impact you, either solely by operation of a computer program, or as part of our decision-making process. We have described below the kinds of automated decisions we make and the kinds of Personal Information we may use in making those automated decisions.

We use the Personal Information you provide to us to assist us in:

• assessing supporting evidence you have submitted for your salary packaging claims;
• responding to your enquiries; and
• providing you with information and assistance in relation to your salary packaging account.

These decisions may be made solely by a computer program, or by a member of our staff with input from a computer program.

Direct marketing

We may from time to time use your Personal Information to provide you with current information about loans, insurance products, special offers you may find of interest, changes to our organisation, or new products or services being offered by LeasePLUS Group and its related entities. We will only do this where you have consented, or where you would reasonably expect us to contact you about these products and services, for example because you have a salary packaging arrangement or novated lease with us. We may contact you by phone, email, SMS or through the my+ app and portal, and every marketing message will give you a simple way to opt out.  We will not use or disclose sensitive information about you for direct marketing purposes unless you have consented to that kind of use or disclosure.

If you do not wish to receive marketing information, you may at any time decline to receive such information by contacting us.  Contact details are set out in the Enquiries and complaints section of this policy. If the direct marketing is by email you may also use the unsubscribe function and if the direct marketing is by SMS you may reply 'STOP' to opt out. You can also opt out at any time using the marketing preferences in the my+ app and portal. We will not charge you for giving effect to your request and will take all reasonable steps to meet your request at the earliest possible opportunity.

Cookies

A 'cookie' is a small text file that allows our server to identify and interact more effectively with your computer. Cookies can be either "persistent" or "session" based. Persistent cookies are stored on your computer, contain an expiration date, and may be used to track your browsing behaviour upon return to the issuing Website. Session cookies are short-lived, are used only during a browsing session, and expire when you quit your browser.

Our websites may also store cookies on your web browser in order to improve service for you on your subsequent visits to this website. To track usage more generally, we may use third parties to collect statistical data via cookies.

Where we use analytics or advertising tools, data about website and application interactions may be combined with other information to understand service use, measure campaigns and, where permitted, tailor content or advertising. This may involve cookies, pixels, IP addresses or device identifiers. We will provide information about relevant third parties and available control or opt-out methods.

Management and security of Personal Information

We respect the confidentiality of your Personal Information and the privacy of individuals. We have in place steps to protect the Personal Information held from misuse, interference and loss, unauthorised access, modification or disclosure by use of various methods including locked storage of paper records and password access rights to computerised records. However, in relation to Personal Information provided via our websites, no data transmission over the Internet can be guaranteed as fully secure and accordingly, we cannot guarantee or warrant the security of any information you send to us using our on-line forms or products.

We will retain your Personal Information for as long as we require it for our purposes or as required under law. When we no longer require it, we will destroy or de-identify the Personal Information. We take reasonable steps to destroy or permanently de-identify Personal Information which is no longer needed for the purposes described in this Privacy Policy.

Our core systems and data storage are located in Australia. We do not have staff or contractors based overseas, and our personnel cannot access Personal Information from outside Australia. Some of our service providers, such as website analytics and online booking providers, may store or process limited information on servers located outside Australia, including in the USA. We will not send Personal Information about an individual outside Australia without:

• obtaining the consent of the individual (in some cases this consent will be implied); or
• otherwise complying with the Privacy Act or other applicable privacy legislation.

We apply physical, administrative and technical safeguards appropriate to the sensitivity of the information we hold, including role-based access restrictions, user authentication, security monitoring, secure transmission and controlled retention and disposal. We periodically review these measures to address relevant security risks.

Mandatory data breach notification

LeasePLUS Group and its related entities take reasonable steps to protect the Personal Information we hold about our customers, clients, suppliers, agents, brokers, referrers and anyone else whose information we collect. If a data breach occurs, we will act promptly to contain it and assess the risk of harm. If it is an ‘eligible data breach’ under the Privacy Act, meaning it is likely to result in serious harm to the people affected, we will notify you and the Office of the Australian Information Commissioner as soon as practicable. We will tell you what happened, what Personal Information was involved, and the steps we recommend you take.

Government-related identifiers, including tax file numbers

We may collect and use government-related identifiers, including tax file numbers and driver licence details, where reasonably necessary for a lawful function. We do not adopt a government-related identifier as our own account identifier or use or disclose it except as authorised or required by law. Tax file numbers are used only for permitted tax and superannuation purposes.

Access and correction of Personal Information

Under the Privacy Act an individual has the right to obtain access to any Personal Information about them and to advise of any perceived inaccuracy. There are some exceptions to this right set out in the Privacy Act.

To make a request to access or update any Personal Information we hold about you, please contact our Privacy Officer at [email protected] or on 1300 840 881.

We will require you to verify your identity and specify what information you require. We will not charge you for making a request or for correcting your Personal Information. We may charge a reasonable fee for giving you access, for example to cover retrieving and copying a large volume of material. Any fee will not be excessive, and we will tell you about it before we proceed. If we agree to correct the Personal Information, we will do it as soon as practicable and if there is a delay, we will advise you in writing. If we refuse to give you access or to correct your Personal Information, we will give you our reasons in writing and explain how you can complain.

Enquiries and complaints

Privacy enquiries and complaints can be sent to our Privacy Officer at [email protected] or 1300 840 881.

We will acknowledge requests to access or correct Personal Information, and privacy complaints, within 1 business day of receiving them. We aim to complete our review within 30 days and will contact you if we need more information or additional time.

We will explain the outcome of our review and any further escalation options. If dissatisfied, you can contact the Office of the Australian Information Commissioner at www.oaic.gov.au. If your complaint relates to a financial product or service provided by LeasePLUS Pty Ltd, you may also contact the Australian Financial Complaints Authority (AFCA), of which LeasePLUS Pty Ltd is a member (member number 34576): www.afca.org.au, 1800 931 678, [email protected], or GPO Box 3, Melbourne VIC 3001.