In handling your personal and financial information, Scottish Pacific Business Finance Pty Ltd (ABN 79 008 636 388), Scottish Pacific Business Finance Limited (NZBN 9429039019226) and our related bodies corporate, including Integral Collections Pty Ltd (ABN 37 143 757 117) and Business Fuel Finance Pty Ltd (ABN 58 629 419 021) (‘ScotPac’, ‘us’, ‘we’, ‘our’) are committed to complying with applicable privacy and spam laws in Australia and New Zealand (together, ‘Privacy Law’).

These laws include:

  • the Privacy Act 1988 (Cth), Privacy (Credit Reporting) Code 2025 and Spam Act 2003 (Cth) in Australia; and
  • the Privacy Act 2020, Credit Reporting Privacy Code 2020, and Unsolicited Electronic Messages Act 2007 in New Zealand.

Over the course of our relationship with you, we may handle Personal Information about you as described in this Privacy Policy.

This Privacy Policy also sets out how we handle credit-related personal information (Credit Eligibility Information, Credit Information and Credit Reporting Information), including how we disclose information to Credit Reporting Bodies, the purposes of those disclosures and your rights in relation to that information.

We may provide additional information about how we handle your Personal Information when you share specific information with us. Please read this information carefully.

You can request a copy of this Privacy Policy in a particular form (such as hard copy) by contacting us. Our contact details are set out in section 12.

 

1. What is Personal Information and Sensitive Information?

The Privacy Act 1988 (Cth) defines types of information. To the extent applicable, these terms also include the meaning given in the Privacy Act 2020 of New Zealand.

Personal Information means information or an opinion about an identified individual or an individual who is reasonably identifiable:

  • whether the information or opinion is true or not; and
  • whether the information or opinion is recorded in a material form or not.

Sensitive Information means Personal Information that includes information or an opinion about an individual’s racial or ethnic origin, political opinions or associations, religious or philosophical beliefs, trade union membership or associations, sexual orientation or practices, criminal record, health or genetic information and some aspects of biometric information.

Sensitive Information will be used by us only:

  • for the primary purpose for which it was obtained;
  • for a secondary purpose that is directly related to the primary purpose; and
  • with your consent or where required or authorised by law.

 

2. What Personal Information Do We Collect?

When you apply for one of our products, services or employment opportunities, ScotPac may request and collect your Personal Information.

We also collect Personal Information from agents, archivers, associates, brokers, call centre operators, contractors, debtors, guarantors, insolvency practitioners, introducers, mailing houses, mercantile agents, merchants, professional advisers, service providers and suppliers. More information on this is set out in section 3.

The Personal Information we collect and hold about you may include:

Personal and contact details

This may include your name, title, date of birth, sex/gender, current and previous addresses, postal or email address, telephone numbers and social media handles.

Australian and New Zealand government identifiers and identity documents

These may include your:

  • Tax File Number (TFN) or Medicare number (in Australia);
  • IRD Number or National Health Index (NHI) number (in New Zealand);
  • passport or driver’s licence details; or
  • citizenship and birth certificates (for example, where required to verify your identity).

We do not adopt government-related identifiers as our own identifiers of individuals.

Foreign government identifiers and identity documents

These may include foreign government identity documents and identifiers such as foreign passport or national identity card details.

Financial information

This may include:

  • account and/or credit/debit card details;
  • Credit Information such as credit history, the type of credit sought, credit capacity and eligibility for credit;
  • the note/s we make of any disclosure of Credit Information to a Credit Reporting Body (‘CRB’) so we can obtain Credit Information;
  • information about loans or guarantees obtained from other organisations;
  • bank statement information, such as:
    • bank account transaction history, including account names, addresses, account details, account balances and transaction details;
  • accounting data, such as:
    • financial statements, transactional details for the general ledger and the accounts receivable and accounts payable subledgers; and
  • information about assets you offer as security through public registers or service providers.

Transaction and interaction information

This includes information about transactions that you have made using our products and services, and information about your interactions with us, such as opinions, comments, compliments, complaints and the purpose for applying for a product or service.

Digital information

We collect information from you electronically when you use our online services. This may include information about your location or activity (including IP address and top-level domain name, type of browser you are using and whether you have accessed third-party sites) in relation to your visit and cookies left by your browser.

Sensitive information

This may include information such as:

  • scans of identity documents and live facial images (selfies) used for identity verification;
  • financial transactions;
  • photographs and video, for example captured at ScotPac events for promotional purposes;
  • criminal records or political affiliation, only where relevant to our legal or regulatory obligations; and
  • biometric information, such as biometric templates used when verifying your identity electronically.

Public sources

This may include information that is in the public domain, such as information obtained from public registers (including registers maintained by the Australian Securities and Investments Commission in Australia and the Companies Office in New Zealand), land title or real property registers, the Personal Property Securities Register, telephone directories, news articles and government publications.

Call recordings

On occasion, we record our calls with you. We will let you know if we are doing this.

The Personal Information we collect and hold varies depending on the person we are dealing with and the reason why we are dealing with them.

Collection Required or Authorised by Law

We may collect your Personal Information to meet our legal obligations, to assist government, law enforcement or regulatory bodies, or where otherwise required or authorised by law or an order of a court or tribunal. Your Personal Information may also be used or disclosed for these purposes.

For Australia these laws include:

  • the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) which requires us to collect Personal Information about you when verifying your identity;
  • the Personal Property Securities Act 2009 (Cth) under which we may need to collect Personal Information about you to record a security interest on the Personal Property Securities Register; and
  • the Corporations Act 2001 (Cth), the Tax Administration Act 1953 (Cth), the Income Tax Assessment Act 1997 (Cth), the Australian Securities and Investment Commission Act 2001 (Cth) and any associated regulations.

For New Zealand these laws include:

  • the Anti-Money Laundering and Countering Financing of Terrorism Act 2009 which requires us to collect Personal Information about you when verifying your identity;
  • the Personal Property Securities Act 1999 under which we may need to collect Personal Information about you to record a security interest on the Personal Property Securities Register; and
  • the Companies Act 1993 and the Income Tax Act 2007, and any associated regulations.

 

3. How We Collect and Hold Your Personal Information

There are many ways we seek Personal Information from you. We might collect your information when you:

  • enquire about, apply for or use our products or services;
  • contact us by phone, email or online;
  • visit our websites or use our digital services;
  • transact on your account;
  • participate in other activities we offer, such as events, competitions or surveys;
  • use our Partner Portal; or
  • make a job application to ScotPac.

Where reasonable and practicable, we collect your Personal Information directly from you. In some circumstances, we may collect Personal Information about you from a third party. If we do so, we will take reasonable steps to notify you, or otherwise ensure you are aware of the collection, the purposes for which the information is collected, and our usual disclosure practices, in accordance with Privacy Law, unless an exception applies.

The third parties we may collect your Personal Information from include:

  • brokers and introducers (who may disclose your Personal Information to ScotPac as part of a loan application or enquiry);
  • our clients where you are a director or shareholder (for example, to meet our ‘know your customer’ requirements and verify your identity);
  • joint facility owners;
  • referees nominated by you;
  • your agents or representatives;
  • other persons authorised by you (such as lawyers or accountants);
  • public sources including public registers;
  • other credit providers and credit reporting bodies; and
  • organisations with whom we have an alliance or agreement to promote our respective products or services, and agents acting for us or those organisations in administering those arrangements.

How we hold your Personal Information

We hold Personal Information in a combination of paper-based records and electronic records, including in secure buildings, databases and cloud-based storage systems. Some records are held by trusted third parties on our behalf. Where Personal Information is held by a third party, we retain the right to deal with that information, including to access, amend and combine it with other information. We use a range of physical, electronic and other security measures to protect the Personal Information we hold.

 

4. Purpose of Collection

We collect Personal Information before, during or after the provision of products and services to you and when you inform us of any change to the information we hold about you.

We use your Personal Information when:

  • considering your requests for products, services and other benefits;
  • providing you with products, services and other benefits or special offers;
  • executing your instructions;
  • verifying your identity;
  • providing you with information about other products and services that may be of interest to you;
  • conducting research and development for our products and services;
  • collecting overdue payments or enforcing our security interests due under our credit products;
  • managing our rights and obligations regarding external payment systems;
  • conducting direct marketing;
  • managing your facilities, including handling your concerns or complaints or any legal action;
  • identifying, preventing or investigating any fraud, unlawful activity or misconduct or suspected fraud, unlawful activity or misconduct;
  • maintaining and developing our business systems and infrastructure; and
  • required by relevant laws, regulations or codes of practice.

If you start an online application form but do not submit it or submit an application (whether electronically or otherwise) but do not proceed with the application, we may use your Personal Information to contact you regarding your application.

If you do not provide requested Personal Information, ScotPac may not be able:

  • to consider your application for credit or provide other services;
  • to provide you with the product or service you want;
  • to manage or administer the loan for you;
  • to verify your identity and meet our ‘know your customer’ requirements;
  • to let you know about other products or services that might be suitable for your financial needs; or
  • to assess, process and manage your application for employment.

 

5. Credit Information and Credit Eligibility Information

When you apply for a credit-related product, in addition to the above, we may also collect, hold, use and disclose Credit Information and Credit Eligibility Information to assess your eligibility for credit.

This includes information obtained from Credit Reporting Bodies and may relate to applicants, guarantors, debtors and relevant associates. We only collect information where permitted under Privacy Law.

The type of Credit Information we may collect, hold, use and where appropriate disclose, includes:

  • if the individual is a client, information to determine if we should provide a facility which includes the provision of commercial credit to the individual, their application for credit with us and the amount, that we are a current credit provider to that individual, to deal with or enforce our rights under the guarantee and any security which may be given to secure it;
  • if the individual is a guarantor, information to determine whether we should accept a guarantee from the individual and if the guarantee is given, to deal with or enforce our rights under the guarantee and any security which may be given to secure it;
  • if the individual is a debtor, information required to assess and verify the debt which the client sells to us or in which the client gives us a security interest, to collect the debt and to enforce the debt and any security which may be given to secure payment of the debt;
  • if the individual is an associate of the client, information to determine if we should provide a facility which includes the provision of commercial credit to the client and to assist in the provision of that facility;
  • if the individual is an associate of the debtor, information to assist us to verify the debt owed by the debtor and to collect and enforce the debt;
  • to assist in the management and enforcement of the facilities we provide, data analysis of your account and collection of any outstanding payments;
  • the names of any credit providers that have provided you with credit and the type and limit of that credit;
  • the day on which credit was made available to you and (if relevant) discharged;
  • advice that payments previously notified as unpaid are no longer overdue;
  • information about your repayment history (e.g. whether you made repayments on time, missed a payment or that you defaulted on a credit payment) including payments overdue and for which collection action has started;
  • any court judgments made against you that relate to credit provided to you, or applied for by you;
  • certain information about you on the National Personal Insolvency Index in Australia or the Insolvency Register in New Zealand, including bankruptcy and debt agreements;
  • commercial credit reports containing information about you from a Credit Reporting Body;
  • uses which are required or authorised by law, and otherwise in accordance with the consents and authorities you give in your credit application;
  • other information about credit standing, worthiness, history or capacity that credit providers can disclose under Privacy Law; and
  • any Personal Information about you from any referees (where applicable) that you may provide.

We use Credit Reporting Information provided by Credit Reporting Bodies to derive scores, risk ratings and other assessments. The Credit Eligibility Information we hold and use for decision making processes and other purposes includes that derived information and Credit Reporting Information disclosed to us.

Credit Information Disclosure

We may collect and disclose information about you to a Credit Reporting Body when assessing your eligibility for credit and at other times if you apply for credit, have credit with us, guarantee or are considering guaranteeing another person’s obligations to us or are a director of a company that is a client or guarantor.

When we make a credit enquiry (also known as an information request) to a Credit Reporting Body, we do not require your consent to disclose Credit Information, and we may make these disclosures as permitted by Privacy Law.

The information we might collect about you and disclose to one or more Credit Reporting Bodies may include:

  • identification information;
  • Personal Information relating to commercial credit;
  • default information;
  • publicly available information;
  • personal insolvency information;
  • serious credit infringements;
  • court proceedings information (other than criminal proceedings) that relate to any credit that has been provided to, or applied for by, the individual;
  • payment information; and
  • new arrangement information.

When we disclose your Credit Information to a Credit Reporting Body:

  • it may be included in credit reports provided to other credit providers;
  • those providers may use it to assess your creditworthiness; and
  • Credit Reporting Bodies may also use it to calculate credit scores or credit ratings.

A record of each credit enquiry we make may be retained by Credit Reporting Bodies and used to assess your creditworthiness. These enquiries may appear on your credit report and may affect your credit score, depending on the type of credit applied for, the number of recent enquiries and other information in your credit report. Multiple applications within a short period are more likely to negatively impact your credit score.

Other information may negatively affect your credit eligibility, for example if you default on payments or commit a serious credit infringement. This may impact your ability to obtain credit from other providers.

Credit Reporting Body Contact Details

The contact details of the Credit Reporting Bodies we use are outlined below. Each Credit Reporting Body has a credit reporting policy about how they handle your information. You can obtain copies of these policies on their websites.

For Australia:

Equifax Pty Ltd

Website: equifax.com.au 

Mail: Equifax – Public Access, Equifax Australia Information Services and Solutions Pty Limited

GPO Box 964, North Sydney NSW 2059

For New Zealand:

Equifax Pty Ltd

Website: mycreditfile.co.nz

Email: [email protected]

Mail: Equifax New Zealand Public Access

Private Bag 92156, Victoria Street, Auckland 1142

We only disclose Credit Information as permitted by Privacy Law. Credit report information may be accessed by authorised representatives of ScotPac and other third parties where required or permitted by law or with your consent where applicable.

6. Information About Credit Reporting Bodies

Credit Reporting Bodies collect Credit Information about individuals which they provide as credit reports to credit providers and others in the credit industry to assist them in managing credit risk, collecting debts and other credit-related activities.

“Credit pre-screening” is a service for credit providers wishing to send direct marketing material about credit services. A Credit Reporting Body uses information it holds to screen out individuals who do not meet criteria set by the credit provider.

Credit Reporting Bodies are required to maintain a confidential list of individuals who have opted out of their information being used in pre-screening. To opt out of credit pre-screening, contact the Credit Reporting Body, using the contact details on their website.

You can ask a Credit Reporting Body not to use or disclose your Personal Information if you believe on reasonable grounds that you have been or are likely to be a victim of fraud, including identity fraud.

7. Who We Can Disclose Your Personal Information To

In general, we do not use or disclose your Personal Information, including Credit Information and Credit Eligibility Information, for a purpose other than:

  • set out in this Privacy Policy;
  • otherwise disclosed to you to which you have consented;
  • required or permitted by law; or
  • what you would reasonably expect.

For the purpose of providing products and services to you and managing our business, we may disclose your Personal Information to:

  • external service providers, including identity verification providers and Credit Reporting Bodies, to verify your identity. This includes verifying your details (such as name, residential address and date of birth) against Credit Reporting Body records, where the Credit Reporting Body assesses whether your information matches (in whole or in part) its records, including information about other individuals. We may also verify your information with government agencies and other third-party identity verification providers against their records and/or information held by the issuer or official record holder of your identity documents. The results of these verification checks may be used by third parties to monitor and improve verification services;
  • external service providers to us, such as payment systems operators, printing and mailing houses, administrative and operational services and research consultants;
  • external organisations that are our assignees, agents or contractors;
  • professional advisers, such as accountants, lawyers, advisory firms and auditors;
  • Credit Reporting Bodies, including disclosing that you are in default under a credit agreement or have committed a serious credit infringement, if that is the case. A Credit Reporting Body may include information about you in reports that it gives other organisations (like other lenders) to help them assess your creditworthiness;
  • an accredited data recipient if requested by you under the Consumer Data Right (‘CDR’);
  • external dispute resolution schemes (or to other parties as directed by an external dispute resolution scheme);
  • fraud reporting agencies (including organisations that assist with fraud, investigations and organisations established to identify, investigate and/or prevent any fraud, crime or misconduct of a serious nature);
  • information technology service providers including those who assist or support us with loan management, the maintenance, review and development of our business systems, data storage, processing and software development;
  • other financial institutions, including other credit providers and their professional advisors or a Credit Reporting Body (for example, exchanging Credit Information about you with other credit providers, and exchanging Credit Information about you with any Credit Reporting Body and any other providers of credit to you named in your credit application or a credit report from a Credit Reporting Body);
  • organisations with whom we have an alliance, loyalty program or other agreement for the purpose of promoting our respective products or services, and agents used by us and our business partners in administering such an alliance or agreement;
  • your representative, for example, lawyer, insurer, other financial institution, financial adviser or agent, your executor, administrator, trustee, guardian or power of attorney, your employer, referees and other person authorised by you or to the extent deemed necessary by ScotPac in order to deliver any instruction you give us;
  • any introducer, dealer or broker referred to in an application;
  • other lenders or financial institutions, like banks;
  • insurers;
  • organisations that are involved in debt collection or in purchasing debts;
  • any agent or contractor of ours assisting in processing an application;
  • other entities that may be involved in a securitisation arrangement which we use to fund your facility, including without limitation other credit providers;
  • law enforcement bodies and courts; and
  • government and regulatory authorities, such as the Australian Transaction Reports and Analysis Centre (AUSTRAC), Australian Taxation Office (ATO) and the Australian Securities and Investments Commission (ASIC) in Australia or Financial Intelligence Unit (FIU), Inland Revenue (IR) and Financial Markets Authority (FMA) in New Zealand, if required or authorised by or under Australian or New Zealand law. In some instances, these authorities share information with relevant foreign bodies.

8. Accuracy

If you believe your Personal Information, including Credit Information and Credit Eligibility Information, is incorrect, incomplete or not current, you can request that we update this information by contacting us using the details set out in section 12.

 

9. Electing To Opt Out

You may opt out at any time if you no longer wish to receive direct marketing offers from us. We will process your request as soon as practicable.

You can make this request by using the unsubscribe option in the relevant email or SMS, or by contacting us using the details set out in section 12.

10. Complaint Procedure

If you have any questions, concerns or complaints about this Privacy Policy, or our handling of your Personal Information, including Credit Information and Credit Eligibility Information, please contact us using the details set out in section 12.

Our complaints handling process is outlined in our Complaints Policy which you can view here (for Australia) or here (for New Zealand).

If you feel your issue has not been resolved to your satisfaction after complaining to us, you can contact the Office of the Australian Information Commissioner (‘OAIC’) (for Australian residents) or the Office of the Privacy Commissioner (‘OPC’) (for New Zealand residents) who deal with privacy complaints.

Please note: the OAIC and the OPC require that complaints be first made to the respondent organisation.

For Australia, the Office of the Australian Information Commissioner can be contacted at:

Website: oaic.gov.au

Mail: Director of Privacy Case Management

Office of the Australian Information Commissioner

GPO Box 5288, Sydney NSW 2001

Telephone: 1300 363 992

For New Zealand, the Office of the Privacy Commissioner can be contacted at:

Website: privacy.org.nz

Mail: Office of the Privacy Commissioner

PO Box 10 094, Wellington 6140

Telephone: 0800 803 909

11. Overseas Disclosure

We may disclose your Personal Information, including Credit Information and Credit Eligibility Information, to recipients located outside the country you are in. This may include the following:

  • ScotPac companies located in Australia, New Zealand, China and Hong Kong;
  • our contracted service providers operating overseas, based in Australia, New Zealand, Lithuania, the UK and the US;
  • for international transactions, we may need to disclose your information to the corresponding international party in order to process the transaction.

The countries we may disclose your information with will depend on the details of the transaction you ask us to carry out.

12. How to Contact Us About Privacy

You may request access to your Personal Information (including Credit Information and Credit Eligibility Information) that we hold about you and the correction of that information. To make such a request, or if you have any questions or would like to make a complaint about our privacy practices, you can contact us using the details below.

ScotPac Business Finance – Australia:

Email: [email protected]

Mail: Privacy Officer, ScotPac Business Finance

GPO Box 9969, Sydney NSW 2000

Telephone: 1300 177 485

ScotPac Business Finance – New Zealand:

Email: [email protected]

Mail: Privacy Officer, ScotPac Business Finance

PO Box 106-047, Auckland 1143

Telephone: 0800 726 872

13. Policy Updates

We will amend this Privacy Policy from time to time. Please visit our website at scotpac.com.au (for Australia) or scotpac.co.nz (for New Zealand) to view the current version. This Privacy Policy was last updated in April 2026.

14. Glossary

AFCA: means the Australian Financial Complaints Authority.

AML/CTF Law: means the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) and the AML/CTF Rules (as defined in that Act) in Australia, and the Anti-Money Laundering and Countering Financing of Terrorism Act 2009 and any regulations made under that Act in New Zealand.

CDR: means Consumer Data Right.

Credit Eligibility Information: is your Credit Reporting Information and any further information a credit provider derives from your Credit Reporting Information.

Credit Information: is a type of Personal Information about an individual that is covered by Part IIIA of the Privacy Act 1988 (Cth). It includes information that identifies you, as well as details about the amount you have borrowed, your repayments and any defaults.

Credit Reporting Body (CRB): means an organisation whose business involves collecting Credit Information about individuals which they provide as credit reports to credit providers and others in the credit industry to assist them in managing credit risk, collecting debts and other credit-related activities. A Credit Reporting Body may also be known as a credit reporter or credit bureau.

Credit Reporting Information: is your credit report and your credit score (and for New Zealand purposes includes all categories of “credit information” as defined under the Credit Reporting Privacy Code 2020). Credit Reporting Bodies produce Credit Reporting Information.

EDR: means an External Dispute Resolution scheme.

FSCL: means Financial Services Complaints Limited in New Zealand.

IDR: means Internal Dispute Resolution.

OAIC: means the Office of the Australian Information Commissioner.

OPC: means the Office of the Privacy Commissioner in New Zealand.

Personal Information: means information or an opinion about an identified individual or an individual who is reasonably identifiable:

  • whether the information or opinion is true or not; and
  • whether the information or opinion is recorded in a material form or not.

Privacy Law: means, to the extent applicable, the Privacy Act 1988 (Cth), Privacy (Credit Reporting) Code 2025 and the Spam Act 2003 (Cth), which sets out Australia’s spam rules. It also includes the Privacy Act 2020, the Credit Reporting Privacy Code 2020 and the Unsolicited Electronic Messages Act 2007, which sets out New Zealand’s spam rules.

ScotPac, us, we, our: means Scottish Pacific Business Finance Pty Ltd (ABN 79 008 636 388), Scottish Pacific Business Finance Limited (NZBN 9429039019226) and our related bodies corporate, including Integral Collections Pty Ltd (ABN 37 143 757 117) and Business Fuel Finance Pty Ltd (ABN 58 629 419 021).

Sensitive Information: means Personal Information that includes information or an opinion about an individual’s racial or ethnic origin, political opinions or associations, religious or philosophical beliefs, trade union membership or associations, sexual orientation or practices, criminal record, health or genetic information and some aspects of biometric information.