Privacy Policy

I respect your personal information, and this Privacy Policy explains how it's handled. It applies to Peter Sreng / PSM Finance Pty Ltd as a Credit Representative of R1 Investments Pty Ltd (ACL 422284), and it includes our credit reporting policy — covering the personal information collected in connection with a credit application or facility, which we call credit information.

Respecting your privacy

The Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs), regulates how personal information is collected, used, disclosed and stored.

1. Collection and holding of information

The personal information and credit-related information you provide is held by us and may be stored in electronic or physical form. We may collect information including:

• identification information and contact details;
• financial and employment information;
• credit-related information;
• bank statements and transaction information;
• taxation and income verification documents;
• identity verification documents; and
• other information reasonably necessary to provide our services and comply with legal obligations.

2. Authority to obtain credit information

You appoint us as your agent and authorise us to act as an "access seeker" to obtain your credit-related information from a Credit Reporting Body (CRB) to assist with your application for credit. You authorise us to:

• obtain credit-related information about you from CRBs and other information providers;
• disclose that information to prospective financiers, mortgage insurers, aggregators, service providers and other relevant parties in connection with your application; and
• exchange information with other entities as described in this policy.

3. Use of personal information

We may use your personal and credit-related information to:

• assess, arrange or provide finance and related services;
• verify your identity and financial position;
• communicate with lenders, mortgage insurers and other relevant parties;
• comply with legal and regulatory obligations;
• administer and manage our services;
• conduct fraud prevention, risk management and security monitoring; and
• improve our systems, processes and customer service.

We may use third-party technology providers, cloud-based systems, workflow automation platforms, identity verification systems and AI-assisted document-processing tools to help provide our services.

4. Disclosure of information

We may exchange or disclose your personal and credit-related information, where reasonably necessary for the purposes above, with entities including:

• Credit Reporting Bodies (CRBs), including for credit assessment and credit guarantee purposes;
• lenders, mortgage insurers, credit providers and persons providing financial or related products or services;
• people acting on your behalf — accountants, lawyers, financial advisers, buyers' agents, guarantors, attorneys or other authorised representatives;
• aggregators, licensees (including R1 Investments), referrers, intermediaries, service providers, contractors, related entities and technology providers;
• identity verification providers and fraud-prevention services;
• your employer, referees or other parties to verify information you've provided;
• government departments, regulators, courts, dispute resolution schemes and law enforcement, where required or authorised by law (including under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth));
• investors, trustees, funders, ratings agencies and parties connected with funding or securitisation arrangements;
• guarantors, co-borrowers or prospective guarantors/borrowers connected with a credit application;
• any person where you have provided consent; and
• any person considering acquiring an interest in our business or assets.

5. Overseas disclosure

Some entities we disclose information to, or technology providers we use, may store or process personal information overseas — in countries including the United States, Singapore, the Philippines, and others where our service providers operate. We take reasonable steps to ensure overseas recipients protect your information in accordance with the APPs, through contractual obligations, confidentiality requirements, access restrictions, cybersecurity controls and encryption.

6. Security and retention

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure — including secure electronic storage, encryption, access controls, multi-factor authentication, secure destruction procedures and cybersecurity monitoring. We retain personal information only for as long as reasonably necessary to provide our services, comply with our legal obligations, resolve disputes and enforce agreements, after which it may be securely destroyed or de-identified.

7. Access, correction and marketing

You may request access to, or correction of, the personal information we hold about you by contacting us using the details below. R1 Investments' full Privacy Policy contains further information about how we manage, access and correct personal information and handle complaints, and is available on the RateOne website.

We may send you information about products, services or opportunities that may be relevant to you. You can opt out of marketing communications at any time by contacting us or using the unsubscribe facility in our electronic communications.

8. Consent

By providing your personal information and proceeding with our services, you acknowledge and consent to us collecting, using, storing and disclosing your personal and credit-related information in accordance with this policy and R1 Investments' Privacy Policy.