Privacy Policy

This is the Privacy Policy of FundingCheck (“we”, “us”, “our”). We are committed to ensuring the privacy of your personal information and are bound by the Australian Privacy Principles (“APPs”) contained in the Privacy Act 1988 (Cth) (Privacy Act). Our handling of credit information is also subject to the Privacy Act and the Privacy (Credit Reporting) Code 2025 (Cth).

This Privacy Policy is relevant to your dealings with us and to your use of our website at fundingcheck.com.au (the “Website”). It sets out how we collect, hold, use and disclose personal information (including credit-related information) about individuals. In this Privacy Policy, “personal information” has the meaning defined in the Privacy Act, and includes any information about an identifiable individual.

If you have any questions about this Privacy Policy, or would like a copy of it, contact our Privacy Officer using the details in section 18.

The personal information we collect depends on how you deal with us. It may include some or all of the following:

• Your name, email address, mobile number and other contact details
• Your business name, ABN, industry and how long the business has been trading
• Financial information such as monthly revenue, the amount and purpose of the funding you want, GST registration, details of existing loans or facilities, and details of any equipment you want to finance
• The credit profile you tell us about
• Your bank account transaction information, if you connect your bank through our bank-statements provider (section 5)
• Technical information such as your internet protocol (IP) address, browser type, operating system, referring/exit pages, date/time stamps and clickstream data
• Marketing attribution information, including the campaign details in the link you arrived on (UTM parameters), advertising click identifiers (for example fbclid or gclid) and cookie identifiers set by advertising and analytics platforms

We will not collect sensitive information about you (such as information about your race, political opinions, religious beliefs, sexual preferences, criminal convictions or health) without your consent, except where we are authorised or required to do so by law.

Where you give us personal information about someone else, you must make sure they know you are doing so, know the contents of this Privacy Policy, and (for sensitive information) have consented to us collecting and handling it in accordance with this Privacy Policy.

In most instances, we will collect information about you:

• From the forms you complete on our Website, including our qualification form and our bank-statements form
• From lead forms you complete in our advertisements on Facebook and Instagram, which Meta passes to us
• From your bank, through our bank-statements provider, if you connect your bank account (section 5)
• From public databases, such as the Australian Business Register and those maintained by the Australian Securities and Investments Commission
• Automatically when you visit our Website, through cookies, log files and similar technologies (sections 14 to 16)
• By email or telephone contact with you

We will normally collect your personal information directly from you, unless it is unreasonable or impractical to do so.

We will only use or disclose personal information we collect about you for the purpose for which it was collected, for related purposes you would reasonably expect, for marketing where the law permits it, where you have consented, or where we are required or otherwise permitted to do so by law.

The purposes for which we may use your personal information include to:

• Show you indicative funding options and assess your enquiry
• Pass your enquiry to the lender that assesses your application for a loan
• Communicate with you about your enquiry, including sending you your bank-statements link and follow-up correspondence
• Verify your identity and conduct due diligence
• Measure and target our advertising, and understand how visitors find and use our Website (sections 14 to 16)
• Send you marketing communications about products that may be of interest to you, where permitted by law
• Operate, maintain and improve our Website and services
• Investigate, identify or prevent fraud or other unlawful activity
• Meet our obligations under law, including the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth)

We may disclose your personal information to:

• The lender that assesses your application, and its related companies
• Our service providers, who host our Website and our application-processing systems, send our emails, run our customer relationship management (CRM) system (HubSpot), monitor our systems for errors, and collect bank statements (illion)
• Advertising and analytics platforms, including Meta and Google, as described in sections 14 to 16
• Credit reporting bodies, if you proceed with an application (section 10)
• Your authorised agents or your executor, administrator or legal representative
• Government agencies and regulatory bodies, as required or permitted by law
• Professional advisers, including legal, accounting and audit advisers
• People with or considering acquiring an interest in our business or assets

Our service providers are authorised to use your personal information only as necessary to provide their services to us, and we require them to handle it consistently with the Privacy Act.

When you connect your bank through our bank-statements link, our third party service provider, illion Australia Pty Limited and its related companies (illion), will access your internet banking to provide your bank account information to us and to the lender that assesses your application. We will obtain:

• Initial access: up to six (6) months of bank transaction history on the date you apply, for the purpose of assessing your application.
• Ongoing access: continued access to your bank transactions for the term of any loan, for the purposes of loan administration, assessing any future loan application, and monitoring account activity.

Your bank's terms may prohibit you from sharing your login, so you agree to appoint illion as your agent to access your internet banking on your behalf solely for these purposes, and you consent to this ongoing access for the term of any loan and the purposes outlined above. You enter your internet banking login with illion, not on our Website, and we do not see it.

Before a loan is provided to you, or to a person connected with you, the lender may be required to collect and verify your identification information (such as your name, residential address and date of birth) under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth). Where this is necessary, the information is collected directly from you and/or from third party sources.

Where it is lawful and practicable, you have the option of not identifying yourself or using a pseudonym when dealing with us. However, we cannot assess a funding enquiry or pass it to a lender without knowing who you are.

If we receive personal information about you that we did not solicit, we will assess whether we could have collected it under Australian Privacy Principle 3. If we could not have, we will destroy or de-identify it as soon as practicable, unless doing so would be unlawful or unreasonable.

We take reasonable steps to protect the personal information we hold from loss, misuse and interference, and from unauthorised access, modification or disclosure. The information we collect is stored in electronic files hosted in Australia, the United States and Singapore.

We retain personal information for as long as it is needed for the purpose for which it was collected, or longer where the law requires or authorises it. As a general guide:

• Enquiry and application records: 7 years from the date of your enquiry
• Marketing preferences: until you withdraw your consent or opt out
• Identification documents: as required under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth)

We may disclose your personal information to service providers and platforms that are located overseas or do not carry on business in Australia, to help us deliver our services: for example hosting our Website and application-processing systems, running our CRM, sending email, monitoring errors, and measuring and targeting our advertising. Where we do so, we take reasonable steps to ensure that overseas recipients handle your personal information in accordance with the Australian Privacy Principles.

As at the date of this Privacy Policy, we may disclose personal information to recipients in the United States of America and Singapore. If we start disclosing information to recipients in other countries, we will update this Privacy Policy.

We do not obtain credit reports to show you indicative options. If you proceed with an application, the lender may collect information from, and disclose information to, a credit reporting body to assess your application for commercial credit or to act as a guarantor. The credit reporting bodies used may include:

• Equifax Australia Information Services and Solutions Pty Limited — equifax.com.au
• illion Australia Pty Ltd — illion.com.au
• CreditorWatch Pty Ltd — creditorwatch.com.au

Their privacy and credit reporting policies explain how they manage credit information. You can ask a credit reporting body not to use or disclose your credit reporting information for a period if you believe on reasonable grounds that you have been, or are likely to be, a victim of fraud, and not to use it for pre-screening of direct marketing by a credit provider.

We do not use credit eligibility information (information obtained from a credit reporting body, or derived from it) for the purposes of direct marketing to individuals.

You may request access to the personal information (including credit-related information) we hold about you, or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. We will respond to your request within 30 days. If we cannot meet that timeframe, we will explain why and give you an expected date.

There is no fee for making an access request, although we may charge the reasonable cost of providing access. To make a request, contact our Privacy Officer using the details in section 18.

We may contact you to offer products and services that may be of interest to you. You can stop receiving our marketing at any time by following the unsubscribe instructions in our emails or by emailing us at info@fundingcheck.com.au with your full name and email address. To stop your information being used for advertising, see section 16.

If you have a complaint about how we have handled your personal information, please contact our Privacy Officer using the details in section 18. We will aim to resolve your complaint within 30 days. If we cannot, we will explain why and give you an expected date, and keep you informed of progress.

If we do not adequately answer your concerns, you have the right to make a complaint to the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the Privacy Act, the Australian Privacy Principles, or the Privacy (Credit Reporting) Code 2025 (or other applicable code). Complaints to the OAIC must be made in writing. See oaic.gov.au/privacy/privacy-complaints.

Technologies such as cookies, beacons, tags and scripts are used by us and our partners (for example our advertising and analytics providers) to analyse trends, administer the Website, track visitors’ movements around the Website, and gather information about our visitors as a whole. A cookie is a small text file stored on your device. You can control cookies in your browser settings. If you reject cookies, you may still use our Website, but some features may be limited.

As is true of most websites, we gather certain information automatically and store it in log files. This may include IP addresses, browser type, internet service provider, referring/exit pages, operating system, date/time stamps and clickstream data. We use Google Analytics to measure visits to our Website.

When you submit our qualification form, we send your email address, the campaign details of the link you arrived on, the page you submitted from and HubSpot’s browser cookie identifier to HubSpot, our CRM provider, to record how you found us.

We partner with third parties to manage our advertising on other sites. Our partners may use technologies such as cookies to gather information about your activities on this Website and other sites in order to show you advertising based on your browsing activities and interests. We also share information about your visits to our Website and, when you apply, your name and contact details in hashed form with advertising platforms (Meta) to measure and target our advertising. Google may use information about your visits for advertising unless you opt out.

If you do not want this information used for these purposes, you may opt out using the advertising opt-out below or by emailing us. This does not stop you seeing advertisements; you will continue to see generic advertisements.

We maintain commercially reasonable security measures to protect the personal information we hold, including:

• TLS 1.2 or higher encryption for data in transit
• Encrypted storage for sensitive data at rest
• Access controls and authentication for our systems
• Regular security assessments and monitoring
• Staff training and confidentiality agreements

No security measure or method of transmission over the internet is 100% secure, so we cannot guarantee absolute security.

Our Website links to other websites whose privacy practices may differ from ours. If you submit personal information to those sites, their privacy policies apply.

Privacy Officer
FundingCheck
Melbourne VIC 3000
Phone: 03 9003 9644
Email: info@fundingcheck.com.au

We may update this Privacy Policy to reflect changes to our information practices. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically.