THRIVEST PTY LTD - PRIVACY POLICY (Version 3.0)

Effective Date: 17 April 2026

Thrivest Pty Ltd Australian Credit Licence 571337 is committed to protecting your privacy and handling personal information responsibly.

This Privacy Policy explains how we collect, hold, use and disclose personal information and credit-related information in accordance with:

  • the Privacy Act 1988 (Cth)

  • the Australian Privacy Principles

  • the Privacy (Credit Reporting) Code

  • other applicable Australian laws

1. Who This Policy Applies To

This policy applies to people who:

  • visit our website

  • make an enquiry

  • apply for credit

  • receive credit from us

  • guarantee a loan

  • request hardship assistance

  • otherwise deal with us

By using our website or applying for our products, you acknowledge this Privacy Policy.

2. What Information We Collect

We may collect information reasonably necessary for our business activities, including:

  • Personal Information

  • full name

  • date of birth

  • residential and postal address

  • phone number

  • email address

  • identification details

  • Financial Information

  • employment details

  • income and expenses

  • bank account details

  • assets, liabilities, property ownership details and mortgage commitments

  • bank statements or transaction data (where authorised)

  • Loan Information

  • application details

  • repayment history

  • loan balances

  • hardship requests

  • communications and account records

  • Website / Technical Information

When you visit our website, we may collect:

  • IP address

  • browser/device type

  • pages visited

  • cookies

  • analytics information

3. Credit-Related Information

We may collect and hold credit-related information permitted by law, including:

  • credit applications and enquiries

  • consumer credit liabilities

  • repayment history information

  • default information

  • insolvency information

  • court judgments

  • internal credit assessments

  • hardship arrangements or payment variations

4. How We Collect Information

We may collect information:

  • Directly From You

  • online forms

  • loan applications

  • phone calls

  • email

  • WhatsApp or messaging

  • identity documents

  • From Third Parties

  • credit reporting bodies

  • identity verification providers

  • payment providers

  • service providers

  • referees or employers (where relevant)

  • advisers authorised by you

  • publicly available sources

  • regulators or government databases where lawful

5. Identity Verification

To verify your identity and help prevent fraud, we may disclose your name, residential address and date of birth to Experian Australia Credit Services Pty Ltd or other identity verification providers.

This assists us in complying with obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) and related laws.

Those providers may assess whether your information matches their records and provide us with the result of that assessment.

If electronic verification is unsuccessful, we may request alternative identification documents.

6. Bank Statement and Financial Data Verification

Where authorised by you, we may use secure third-party providers to obtain read-only banking or financial transaction data to assist with:

  • verifying income

  • assessing expenses

  • responsible lending obligations

  • affordability checks

  • fraud prevention

  • managing future applications or hardship requests where permitted by law

  • We do not receive your internet banking password directly.

7. Why We Use Your Information

We may collect, use and disclose your information to:

  • respond to enquiries

  • assess loan applications

  • verify identity

  • assess suitability and creditworthiness

  • comply with responsible lending obligations

  • establish and manage your loan

  • process repayments

  • communicate with you

  • assist with hardship requests

  • investigate complaints

  • prevent fraud or unlawful conduct

  • recover debts

  • enforce our legal rights

  • comply with legal and regulatory obligations

  • maintain business systems and records

  • Where permitted by law, we may also provide information about products or services. You may opt out at any time.

8. Disclosure of Information

We may disclose your information to:

  • credit reporting bodies

  • identity verification providers

  • direct debit and payment providers

  • loan management and CRM providers

  • IT and cloud service providers

  • legal, accounting and professional advisers

  • debt collection or enforcement providers

  • regulators, courts and government authorities

  • persons authorised by you

  • potential purchasers or advisers in connection with a sale or restructure of our business

  • We do not sell your personal information.

9. BizCore and Payment Systems

We use secure third-party systems to help administer our lending business, including:

BizCore for customer records, loan management, compliance workflows and administration.

We may also use direct debit or payment providers to collect scheduled repayments.

These providers may process or store information on our behalf under confidentiality and security obligations.

10. Credit Reporting

We may disclose credit information to credit reporting bodies in accordance with law.

This may include information about:

  • credit applications

  • credit accounts

  • repayment history

  • defaults where permitted

A credit reporting body we may deal with is:

Experian Australia Credit Services Pty Ltd

Website: experian.com.au

You may have rights to request:

access to your credit information

correction of inaccurate information

a temporary ban period where fraud is suspected

restrictions on certain direct marketing pre-screening uses

11. Overseas Disclosure

We generally seek to keep information within Australia.

However, some software or cloud providers may store information on secure servers located outside Australia. Where this occurs, we take reasonable steps to ensure information is handled securely and in accordance with applicable privacy laws.

12. Security

We take reasonable steps to protect information from misuse, interference, loss, unauthorised access, modification or disclosure.

This may include:

  • password protected systems

  • restricted access controls

  • secure cloud platforms

  • encryption

  • document retention controls

13. Electronic Communications

By applying for credit or dealing with us electronically, you consent to receiving communications electronically where permitted by law, including:

  • notices

  • contracts

  • statements

  • reminders

  • requests for information

  • hardship communications

  • account updates

You may request paper communications where legally required or otherwise available.

14. Access and Correction

You may request access to personal information we hold about you or request correction if it is inaccurate, incomplete or outdated.

We may require proof of identity before responding.

Where access is refused as permitted by law, we will explain our reasons.

15. Retention of Information

We retain personal information only for as long as reasonably necessary for our business purposes and as required by law.

16. Complaints

If you have a privacy complaint, please contact us first.

Privacy Officer

Thrivest Pty Ltd

Phone: 040 299 1313

Email: disputeresolution@thrivest.com.au

If unresolved, you may contact:

Australian Financial Complaints Authority

Website: afca.org.au

Phone: 1800 931 678

Office of the Australian Information Commissioner

Website: oaic.gov.au

17. Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will be available on our website.