20. Personal Information and Privacy
20.1. The Customer acknowledges and consents to NC gathering and retaining personal information about the Customer and its Guarantors. The Customer may access this information for the purposes of ensuring that the information is correct by making a written request for access to this personal information to NC. Upon request, NC will then provide such access to the Customer. The Customer agrees that NC may use this personal information in the course of NC’s business including credit assessment, debt collection and direct marketing activities and the Customer consents to any person providing NC with such personal information and the use of that personal information by NC. NC may disclose the Customer’s personal information to third parties including to its related entities or other third parties that provide products or services to NC provided such disclosure does not breach the terms of NC’s external privacy policy.
20.2. The Customer agrees that NC may directly collect, hold and use personal information (name, address, phone numbers, email address, date of birth, occupation, previous credit history) of the Customer to enable it to deal with the Customer on a commercial basis and to assess the creditworthiness of the Customer, to send invoices and demands for payments and to issue proceedings for monies owing. NC may directly collect, hold and use personal information of the Customer, other than sensitive information, to promote goods and services of NC to the Customer. The Customer may request not to receive direct marketing communications.
20.3. The Customer agrees that NC may obtain from a credit reporting body (CRB) a credit report containing personal credit information (name, address, date of birth, occupation, previous credit applications, credit history) about the Customer in relation to credit provided by NC. NC shall notify the Customer of such receipt of information.
20.4. The Customer agrees that NC may exchange information about the Customer with those credit providers and with related body corporates for the following purposes:
20.4.1. to assess an application by the Customer;
20.4.2. to notify other credit providers of a default by the Customer;
20.4.3. to exchange information with other credit providers as to the status of this credit account, where the Customer is in default with other credit providers; or
20.4.4. to assess the creditworthiness of the customer including the Customer’s repayment history in the preceding two (2) years.
20.5. The Customer agrees that personal credit information provided may be used and retained by NC for the following purposes (and for other agreed purposes or as required by law):
20.5.1. the provision of Goods and/or Services;
20.5.2. analysing, verifying and/or checking the Customer’s credit, payment and/or status in relation to the provision of Goods and/or Services;
20.5.3. processing of any payment instructions, direct debit facilities and/or credit facilities requested by the Customer;
20.5.4. enabling the collection of amounts outstanding in relation to the Goods and/or Services; or
20.5.5. the collection of overdue payments on commercial credit.
20.6. NC may give information about the Customer to a CRB for the following purposes:
20.6.1. to obtain a consumer credit report; or
20.6.2. allow the CRB to create or maintain a credit information file about the Customer including credit history.
The information given to the CRB may include:
20.6.3. personal information as outlined above;
20.6.4. name of the credit provider and that NC is a current credit provider to the Customer;
20.6.5. whether the credit provider is a licensee;
20.6.6. type of consumer credit;
20.6.7. details concerning the Customer’s application for credit or commercial credit (e.g. date of commencement/termination of the credit account and the amount requested);
20.6.8. advice of consumer credit defaults, overdue accounts, loan repayments or outstanding monies which are overdue by more than sixty (60) days and for which written notice for request of payment has been made and debt recovery action commenced or alternatively that the Customer no longer has any overdue accounts and NC has been paid or otherwise discharged and all details surrounding that discharge (e.g. dates of payments);
20.6.9. information that, in the opinion of NC, the Customer has committed a serious credit infringement; or
20.6.10. advice that the amount of the Customer’s overdue payment is equal to or more than one hundred and fifty dollars ($150).
20.7. NC will take reasonable steps to ensure that the personal information of the Customer it collects, uses or discloses is accurate, up to date, complete and relevant. NC shall also take reasonable steps to protect information it holds from misuse, interference, loss and unauthorised access and use. The Customer shall have the right to request from the NC:
20.7.1. a copy of the information about the Customer retained by NC;
20.7.2. that NC corrects any incorrect information; or
20.7.3. that NC does not disclose to a third party any personal information about the Customer for the purpose of direct marketing.
20.8. NC will destroy personal information upon the Customer’s request or where it is no longer required for the purpose it was collected unless NC is required to retain it by law or to fulfil the obligations of this Agreement.
20.9. The Customer can make a privacy complaint by contacting NC. NC shall respond to that complaint within seven (7) days of receipt and will take all reasonable steps to make a decision as to the complaint within thirty (30) days of receipt of the complaint. In the event that the Customer is not satisfied with the resolution provided, the Customer can make a complaint to the Information Commissioner at www.oaic.gov.au.
20.10. NC shall comply with all obligations under the Notifiable Data Breach Scheme. In the event that a data breach occurs and is likely to result in serious harm to the Customer, NC will as soon as practicable notify the Customer and provide a statement to the Commissioner. If it is not practicable to notify the Customer, NC shall publish a copy of the statement on its website and take reasonable steps to inform the Customer of its contents.