Privacy Statement

Macquarie Bank respects the privacy of our clients, and we uphold high standards of privacy practice and information security. This Statement explains how we handle personal information (including sensitive and credit information) and how we interact with you.

Whenever we handle personal information, we take steps to ensure that we apply appropriate standards. These include electronic, physical and other security measures and training our staff in how to keep your information safe

This Statement sets out why we need to collect personal information, what we collect, who we collect it from, what we do with it, how it is stored and who we might share it with. It also describes how you can access or correct information we hold about you and how you can ask questions or make a complaint.

We collect your personal information to:

• process your applications;
• manage your Macquarie products and services;
• assess your credit worthiness;
• monitor, audit, develop, research and evaluate our products and services;
• model and test data;
• develop scores, risk assessments and related analytical tools;
• conduct market research;
• communicate with you (including marketing);
• arrange and maintain funding;
• deal with enquiries and complaints; and
• fulfil our statutory obligations including under the following laws; Anti-Money Laundering and Counter- Terrorism Financing Act, Taxation Administration Act, Income Tax Assessment Acts, Corporations Act, National Consumer Credit Protection Act, Foreign Account Tax Compliance Act (US) the Common Reporting Standard under the Taxation Administration Act 1953 (Cth), and any other applicable laws, regulations and official guidance.

We may use your personal information in secure machine learning and artificial intelligence tools.

If you don’t provide the information we require, we may not be able to process your application or provide you with an appropriate level of service.

The personal information we may collect and hold includes your:

• identity details (including your name and gender);
• contact details;
• relationship status;
• financial and transaction information;
• interactions with us;
• credit information (such as details of the credit you have obtained, repayment history, financial hardship, default, court proceedings, insolvency, serious credit infringement);
• credit file (including your credit score);
• internal credit score, which may be derived from your credit file;
• sensitive information (including biometric, health and criminal information); and
• any other information we may reasonably need.

Sensitive information

• Generally, we only collect sensitive information when it is relevant to a product or service or when you consent. This includes the collection of health information to enable us to provide financial assistance, and biometric information for identification purposes when you open an account or you authorise an action or transaction.
• For more information about our handling practices for biometric information, refer to our client identity verification FAQs.

Where you provide us with, or instruct us to share, personal information about someone else, you must have shared this Privacy Statement with them and have obtained their consent to do so.

We collect your personal information from you and third parties including:

• joint account holders;
• financial service professionals or companies;
• service providers (including credit reporting bodies);
• information brokers (including fraud and financial crime information exchanges);
• public sources; and
• your employer and other financial institution(s).

We may disclose your personal information to:

• guarantors;
• our agents;
• other Macquarie Group companies;
• third party service providers (which may be based in the Philippines, India and the countries specified in our Privacy Policy), who may also disclose to their service providers;
• any person acting on your behalf including your financial service providers, attorney or solicitor, and their service providers (including data aggregators and software platforms);
• regulatory authorities and the Australian Financial Complaints Authority;
• other lenders;
• any credit enhancer, funder, ratings agency or other party acting in accordance with funding credit by means of securitisation;
• your referees, past and present employers, next of kin, account holders and account operators;
• debt collection agencies;
• other financial institutions, intermediaries and people paying, or collecting payments from, you for the prevention of, or responding to, fraud and other financial crimes or in connection with the payments system;* and
• credit reporting bodies (CRBs) including:
  • Equifax, www.equifax.com.au, 1300 762 207;
  • Illion, www.illion.com.au, 13 23 33;
  • Experian, www.experian.com.au, 1300 784 134; and
  • Tasmanian Collection Service, (03) 6213 5555.

* To find out more, including how you might be able to opt-out of the Confirmation of Payee service, visit our Help Centre.

When we share information with Credit Reporting Bodies (CRBs):

• the information request may be used and disclosed for the purposes of the credit reporting body or a credit provider assessing your credit worthiness, including calculation of a credit score or credit rating (subject to any other use or disclosure limitations under the Privacy Act, the Privacy Regulations or Credit Reporting Code); and the information request may affect your credit score or credit rating calculated by a CRB;
• CRBs may include your personal information in reports they provide to other credit providers to assist them in assessing your credit worthiness;
• you may contact the CRB and request that they do not use your credit reporting information for the purposes of determining your eligibility to receive direct marketing from other credit providers.

If you fail to meet your payment obligations under your credit contract or commit a serious credit infringement (e.g. fraud), we are entitled to disclose this information to CRBs.

We may use your personal information to market to you. You can change your marketing preferences at macquarie.com.au/optout-bfs.

We keep personal information in physical and electronic records, at our premises and the premises of our service providers. This may include processing or storage in the cloud, which may mean that this information is stored outside Australia. Where this occurs, we take steps to protect the security and integrity of personal information.

We also take reasonable steps to retain personal information for as long as necessary for the purpose for which it was provided to us, or as required to satisfy any legal or regulatory requirements.

When you use our digital banking services, we may collect information about the devices you use (including their operating systems, browsers, applications and settings) and how you use them. We do this to help reduce fraud and other financial crimes.

Phone calls and online chats with Macquarie may be recorded for training, quality and assurance purposes.

You can contact us via our website or by emailing privacy@macquarie.com to:

• request access to or correct your personal information (including credit information or credit eligibility information); or
• to make a complaint about a breach of the Privacy Act, a registered APP Code or Credit Reporting Code.

We will respond after we have reviewed your request or complaint. If you are not happy with our response, you can contact the Australian Financial Complaints Authority.