Privacy Policy

Privacy and Credit Reporting Policy

SYDCAP PTY LTD (ACN 605 847 158) (we, us, our) is an Australian private commercial finance firm and is bound by the Australia Privacy Principles (APPs) in the Privacy Act 1988 (Cth) (Privacy Act). We understand the importance of, and are committed to, protecting your personal information. This Privacy Policy explains how we manage your personal information (that is, information or an opinion about you, whether true or not, which identifies you or from which your identity is reasonably identifiable), including our obligations and your rights in respect of our dealings with your personal information.

To the extent that we collect, hold, use or disclose your personal information for the purposes of assessing, approving or managing credit applications, we will also comply with the Privacy (Credit Reporting) Code 2024 (Cth) (Credit Reporting Code).

Please take a moment to read our Privacy Policy as it describes what happens to your personal information (that is, information or an opinion about you, whether true or not, which identifies you or from which your identity is reasonably identifiable) that is collected via our website at www.sydcap.com.au (the Website).

1. How we collect your personal information

We will collect and hold your personal information in a fair and lawful manner, and not in an intrusive way. Where it is reasonably practical to do so, we will collect your personal information directly from you. We may collect the personal information you directly give us through some of the following means:

  • when you make an inquiry or order in relation to goods or services through our website located at www.sydcap.com.au;
  • in administering and performing any contracts with service providers;
  • when you contact us via telephone or facsimile;
  • from correspondence (whether in writing or electronically);
  • through any mobile applications provided by our organisation;
  • while conducting customer satisfaction and market research surveys;
  • when administering any of our services; and
  • as otherwise required to manage our business.

However, in certain cases we may collect personal information from publicly available sources and third parties, such as suppliers, recruitment agencies, contractors, our clients and business partners.

If we collect personal information about you from a third party we will, where appropriate, request that the third party inform you that we are holding such information, how we will use and disclose it, and that you may contact us to gain access to and correct and update the information.

2. Types of personal information we collect

The type of personal information we may collect can include (but is not limited to), your name, postal address, email address, phone numbers, billing information and, if applicable, employment information.

We may also collect and hold sensitive information about you, including health information, your racial or ethnic origin and criminal record. We only collect sensitive information about you with your consent, or otherwise in accordance with the Privacy Act.

Credit information (as defined by the Privacy Act), being credit related personal information lawfully created and accessible within the Australian credit reporting system, which we may collect about you includes:

  • identification information;
  • consumer credit liability information;
  • repayment history information;
  • financial hardship information;
  • a statement that an information request has been made in relation to you by a credit provider, mortgage insurer or trade insurer;
  • information about the types of consumer or commercial credit and the amounts of credit you have sought from a credit provider;
  • default information;new arrangement information;
  • court proceedings information;
  • personal insolvency information;
  • publicly available information that relates to your activities in Australia and your credit worthiness and is not court proceedings information about you or information about you entered or recorded on the National Personal Insolvency Index;
  • the opinion of a credit provider that you have committed, in circumstances specified by the provider, a serious credit infringement in relation to consumer credit provided by the provider to you;
  • information about your credit history, including credit liability information and repayment history information including default information, payment information and new arrangement information;
  • details of credit applications you make with us or through us;
  • credit eligibility information which is credit- related information about you that we might obtain from a credit reporting body (CRB), together with information we derive from such information based on our own analysis including internally generated scores, ratings and other assessments used to evaluate your credit worthiness; and
  • any other information lawfully obtainable within the Australian credit reporting system.

Where you do not wish to provide us with your personal information, we may not be able to provide you with requested goods or services.

3. Our purposes for handling your personal information

As a general rule, we only process personal information for purposes that would be considered relevant and reasonable in the circumstances.

We collect, hold, use and disclose personal information to:

  • offer and provide you with our goods and services;
  • manage and administer those goods and services, including account keeping procedures;
  • communicate with you, including (but not limited to), emailing you tax invoices, dispatch and tracking information, returns and exchange authorisations;
  • comply with our legal and regulatory obligations; and
  • otherwise to manage our business.

We will not use or disclose or sell your personal information for any other purpose unless you have consented to that use or disclosure.

We may disclose personal information between our organisations or to third parties such as our suppliers, organisations that provide us with technical and support services, or our professional advisors, where permitted by the Privacy Act. If we disclose information to a third party, we generally require that the third party protect your information to the same extent that we do.

We may also disclose your personal information, including your credit information, to lenders, investors, fund managers, other credit providers and CRBs. In particular, we may disclose to CRBs information about you failing to meet your payment obligations or you having committed a serious credit infringement. Information provided by us to CRBs may include any information provided to them by us in reports that are then provided to other credit providers for the purpose of such credit providers assessing your credit worthiness. Our disclosures of your personal information to third parties are on a confidential basis, in accordance with relevant non- disclosure agreements, and/or otherwise in accordance with law. We may also disclose your personal information with your consent or if disclosure is required or authorised by law.

We may obtain credit eligibility information about you from a CRB. This includes your credit report and information we derive from it, such as internal risk assessments or 0 credit scores. We collect, hold, use and disclose credit-related information to:

  • assess your creditworthiness and credit applications;
  • manage your credit account and our relationship with you;
  • undertake debt recovery and enforcement activities; and
  • comply with our legal and regulatory obligations.

4. Protection of personal information

We will hold personal information as either secure physical records, electronically on our intranet system, in cloud storage, and in some cases, records on third party servers, which may be located overseas.

We maintain appropriate physical, procedural and technical security for our offices and information storage facilities so as to prevent any loss, misuse, unauthorised access, disclosure, or modification of personal information. This also applies to disposal of personal information.

We further protect personal information by restricting access to personal information to only those who need access to the personal information do their job. Physical, electronic and managerial procedures have been employed to safeguard the security and integrity of your personal information.

We will destroy or de-identify personal information once it is no longer needed for a valid purpose or required to be kept by law.

5. Direct marketing

Like most businesses, marketing is important to our continued success. We believe we have a unique range of products and services that we provide to customers at a high standard. We therefore like to stay in touch with customers and let them know about new opportunities. We may provide you with information about new products, services and promotions either from us, or from third parties which may be of interest to you.

We will not disclose your personal information to third parties for marketing purposes without your consent.

We will not use or disclose credit related personal information for direct marketing purposes except to the extent permitted under the Privacy Act for the purpose of a CRB assessing your eligibility to receive direct marketing communications sent on our behalf. You may make a request directly to any CRB not to use your credit related personal information for these purposes.

You may opt out at any time if you no longer wish to receive commercial messages from us. You can make this request by contacting us through our details below.

6. Statement of Notifiable Matters under the Credit Reporting Code

CRBs we may disclose your personal information to the and we will use CRBs such as Equifax and Experian and Illion. A copy of the credit reporting policy for those CRBs will be available on their website or will be provided in hard copy upon request.

Under the Credit Reporting Code, there are several ‘notifiable matters’ that we are required to disclose to you at or before the time of collecting personal information that is likely to be disclosed to a CRB.

Those matters are:

  • if we make an information request with a CRB, your consent to the disclosure being made is not required. A record of the information request may be used and, as relevant, disclosed for the purposes of the CRB or us assessing your credit worthiness, including calculation of a credit score or credit rating (subject to any other use or disclosure limitations under the Privacy Act, Privacy Regulation 2013 (Cth) or the Credit Reporting Code);
  • an information request as referred to above may affect your credit score or credit rating calculated by a CRB;
  • the CRB may include the credit information we provide to it in reports, which it then provides to other credit providers to assist those other credit providers in assessing your credit worthiness;
  • if you fail to meet your payment obligations in relation to consumer credit or commit a serious credit infringement, we may disclose this to a CRB;
  • you can request a copy of this policy by contacting us, or obtain it directly from our Websites;
  • you have the right to access credit information we hold about you, request that we correct the information, and make a complaint, as set out below;
  • you can request a CRB not to use your credit reporting information for the purposes of pre- screening of direct marketing by us; and
  • you can request a CRB not to use or disclose your credit reporting information if you believe on reasonable grounds that you have been, or are likely to be, the victim of fraud.

You can ask us to provide you with a hard copy of this Policy (including this Statement of Notifiable Matters).

7. Cookies

A cookie is a small text file stored in your computer’s memory or on your hard disk for a pre-defined period of time. We use cookies to identify specific machines in order to collect aggregate information on how visitors are experiencing the Website. This information will help to better adapt the Website to suit personal requirements. While cookies allow a computer to be identified, they do not permit any reference to a specific individual. For information on cookie settings of your internet browser, please refer to your browser’s manual.

8. Accessing and correcting your personal information

You may contact us to request access to the personal information that we hold about you and/or to make corrections to that information, at any time. On the rare occasions when we refuse access, we will provide you with a written notice stating our reasons for refusing access. We may seek to recover from you reasonable costs incurred for providing you with access to any of the personal information about you held by us.

We are not obliged to correct any of your personal information if it does not agree that it requires correction and may refuse to do so. If we refuse a correction request, we will provide you with a written notice stating our reasons for refusing.

We will respond to all requests for access to or correction of personal information within a reasonable time.

9. Overseas transfers of personal information

As at the date of this Privacy Policy, we are not likely to disclose your personal information to overseas recipients.

If in future we do propose to disclose personal information overseas, we will do so in compliance with the requirements of the Privacy Act. We will, where practicable, advise you of the countries in which any overseas recipients are likely to be located.

If you do not want us to disclose your information to overseas recipients, please let us know.

From time to time we may engage an overseas recipient to provide services to us, such as cloud- based storage solutions. Please note that the use of overseas service providers to store personal information will not always involve a disclosure of personal information to that overseas provider. However, by providing us with your personal information, you consent to the storage of such information on overseas servers and acknowledge that APP 8.1 will not apply to such disclosures. For the avoidance of doubt, in the event that an overseas recipient breaches the APPs, that entity will not be bound by, and you will not be able seek redress under, the Privacy Act.

10. Resolving personal information concerns

If you have any questions, concerns or complaints about this Privacy Policy, or how we handle your personal information, please contact us below:

The Privacy Officer
SYDCAP PTY LTD

Address:
Level 6, 6 Bridge Street
Sydney NSW 2000
Telephone: 0477 999 444
Email: admin@sydcap.com.au

We take all complaints seriously, and will respond to your complaint within a reasonable period.

If you are dissatisfied with the handling of your complaint, you may contact the Office of the Australian Information Commissioner:

Office of the Australian Information Commissioner

GPO Box 5218
Sydney NSW 2001
Telephone: 1300 363 992
Email: enquiries@oaic.gov.au

11. Changes

We reserve the right to change the terms of this Privacy Policy from time to time, without notice to you. An up-to-date copy of our Privacy Policy is available on our Website. The last update to this document was 3 November 2025.