Privacy & Credit Reporting Policy
How we collect, use, and protect your personal information.
This page summarises how CFI Finance Pty Ltd handles your personal information. For complete details, you can download the full policy (PDF).
Who we are
CFI Finance Pty Ltd (ACN 166 603 578). We comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles, and the Credit Reporting Privacy Code.
What we collect
We collect personal information reasonably necessary for our business activities, including:
- Name, date of birth, and contact details
- Government-issued identification (for identity verification)
- Residential and business address details
- Employment and business information
- Financial details — income, expenses, liabilities, assets, bank statements
- Credit history and credit application information
- Information about guarantors and co-applicants
- Taxation-related information relevant to your application
- Website usage data
We may use electronic identity verification services, which can involve document checks and facial comparison technology. Biometric information is used only for identity verification and is not retained after the process is complete.
We do not request or require Tax File Numbers. If provided inadvertently, we will not use them and will take reasonable steps to securely remove them.
Why we collect it
We use your information to:
- Assess and process your finance application
- Verify your identity
- Assess creditworthiness and manage your account
- Comply with anti-money laundering and other legal obligations
- Detect and prevent fraud
- Improve our products and services
- Communicate with you about your application or account
If required information is not provided, we may be unable to assess your application.
Who we share your information with
We may share your information with:
If you operate within a franchise network, we may exchange information with the relevant franchisor. If your application comes through a broker, we may exchange information with them for application processing and settlement.
We do not sell personal information.
Credit reporting bodies
We may disclose credit information to Equifax Australia, illion Australia, and Experian Australia. Each maintains its own privacy policy. If we decline your application based on credit reporting information, we will tell you which reporting body was used.
Overseas disclosure
We may use secure technology providers located outside Australia. We take reasonable steps to ensure overseas recipients comply with the Australian Privacy Principles or are subject to comparable safeguards.
Marketing
We may send you marketing communications. You can opt out at any time using the unsubscribe link in any email, or by contacting us.
Data security
We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access. Information is retained only as long as necessary for our legal and business obligations.
Access and correction
You have the right to request access to or correction of your personal information. Contact us and we will generally respond within 30 days.
Privacy complaints
If you have a concern about how we handle your personal information, please contact us:
If you are not satisfied with our response, you can escalate your complaint to:
Office of the Australian Information Commissioner — www.oaic.gov.au
Full Privacy & Credit Reporting Policy
Effective 16 February 2026. Download the complete policy for full details on how we handle your information.
Download PDF