Privacy policy

1. Definitions

Personal information means information about an identified or reasonably identifiable person. Usage data means information collected automatically when you use the site. Cookies are small files stored on your device. In this policy, “we” means Lendarance, which decides how and why your information is handled and is responsible for it.

These terms are used consistently across our site, our emails and our account pages so that you can read each one in the same way.

2. What we collect and why

We collect your first and last name, email address, phone number and the contents of your enquiry when you register or contact us. If you proceed, we also collect identity documents, address, payment details and records of how you use the platform.

We use this to respond to you, open and run your account, let your account manager call you, meet legal obligations such as AML checks, keep the platform secure and improve it.

We collect information directly from you, from your device when you visit the site and from identity or payment providers who confirm your details with your permission. We do not collect more than we need for the purposes stated.

3. Legal bases

We handle your information because it is needed to provide the service you asked for, because the law requires it, because we have a legitimate interest in running and securing the platform or because you have agreed. Marketing messages are sent only with your consent, which you can withdraw at any time.

The Australian Privacy Principles in the Privacy Act 1988 set the standard we follow. If you are in a place where the GDPR applies, we apply its principles to your information.

Where we rely on legitimate interests, we weigh them against your privacy and stop the use if it would unfairly affect you. You can ask us to explain that assessment at any time.

4. Retention

Enquiry details are kept for up to two years after the last contact. Account and transaction records are kept for seven years after the relationship ends because of legal requirements. Marketing preferences are kept until you withdraw consent.

When retention periods end, we delete or de-identify the information.

Backups are kept for a short, fixed period and then overwritten. Information required for a legal claim or investigation may be kept longer until the matter ends.

5. Transfers

Some of our service providers, such as cloud hosts, may store or access information outside Australia. Where this happens, we take reasonable steps to make sure the recipient protects your information to a standard comparable to Australian law.

We do not sell your personal information.

If you are asked to transfer information overseas for a service you request, such as payment through an international card network, that transfer is part of the service itself.

6. Disclosure

We share information with licensed group companies, identity verification providers, payment processors, IT and communications suppliers, professional advisers and, where the law demands it, regulators and law enforcement. We share only what each recipient needs for its task.

If our business is sold or reorganised, information may pass to the new owner under the same protections.

We may also disclose information to protect rights, property and safety, to prevent fraud, or to a person you have told us you want us to speak to, such as a representative with your written authority.

7. Security

We protect information with encryption, access controls, staff training and monitoring. No system is completely secure, so we cannot promise absolute security, but we act quickly on any incident and notify you and the regulator where the law requires.

You can help by using a strong password and two-factor sign-in. See Security.

Our security program is reviewed regularly. Staff who handle personal information are bound by confidentiality obligations and are trained on privacy and fraud awareness.

8. Your rights

You can ask to see the personal information we hold about you, ask us to correct it, ask us to delete it where we do not need to keep it, object to certain uses and withdraw consent to marketing. We reply within 30 days.

To use these rights, email [email protected]. We may need to confirm your identity first.

You can also ask us to stop sending you marketing, to limit processing in certain cases and to give you your information in a common format. If we decline a request, we will explain why in writing.

9. Service providers

Providers act on our instructions under written agreements. They include hosting, email delivery, customer-support tools, identity verification and payment services. They may not use your information for their own purposes.

We check that providers have appropriate security and that their staff are trained. We end relationships with providers that do not meet our standards.

10. Analytics

We may use analytics tools to understand how visitors use the site, for example which pages are read and how long people stay. Analytics data is aggregated where possible and used to improve the site.

Analytics settings can be changed in your browser or with the controls on our site. Blocking analytics does not affect your ability to use the platform.

11. Advertising and retargeting

With your consent we may use cookies to measure the effect of our advertising and show relevant adverts on other sites. You can switch these off in your browser settings or through the cookie controls we provide.

You can opt out of interest-based adverts using your device settings or industry opt-out pages, and you will still see adverts, only less relevant ones.

12. Cookies

Essential cookies keep you signed in and the site secure. Optional cookies support analytics and advertising. Most browsers let you block or delete cookies, although parts of the site may not work without the essential ones.

We keep a list of the cookies in use and what each is for, and review it regularly. New categories of cookie are not added without updating this page first.

13. Links to other sites

Our site links to third-party sites that have their own privacy policies. We are not responsible for them, so read their policies before you give them any information.

A link to another site does not mean we have checked it. Do not enter your account details on any site that you reached from a message you were not expecting.

14. Children

Our services are not for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, tell us and we will delete it.

If a parent or guardian believes their child has used the platform, please contact us and we will close the account and delete the associated data as soon as we can.

15. Changes to this policy

We may update this policy as our services or the law change. The current version is always on this page, and we tell registered users about material changes.

If a change is significant, such as a new purpose for using your information, we will ask for your consent again where the law requires it.

16. Contact us and complaints

For any privacy question write to [email protected] or Level 4, 28 Furzer Street, Phillip ACT 2606, Australia. If you are not happy with our response, you can complain to the Office of the Australian Information Commissioner (OAIC).

Our privacy officer reviews all complaints. We aim to respond within 30 days, and the OAIC can investigate if you remain unhappy after our reply.