Legal

Privacy Policy

Noddle Pty Ltd, ABN 63 643 806 759 · ACN 643 806 759
Australian Credit Licence 526746 · FBAA Member 362825 · AFCA Member 81857
Version 1.1 · July 2026

Noddle Pty Ltd and our related bodies corporate. Three parts: personal information, credit information, hardship.

1. Privacy Policy

1.1 Introduction

This Privacy Policy explains how Noddle Pty Ltd ABN 63 643 806 759 (“Noddle”, “we”, “us”, or “our”) and our related bodies corporate (as defined in the Corporations Act 2001 (Cth)) handle personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Credit Reporting Code (together referred to as “Australian Privacy Law”).

This Privacy Policy applies to anyone who visits our website, deals with us in any capacity, or whose personal information we otherwise collect. It also applies to people who apply for or hold credit-related products or services through us — those individuals receive additional protections set out in Section 2 (Credit Information Policy). If you receive credit and apply to vary your repayment arrangements on the grounds of hardship, the additional protections in Section 3 (Hardship Privacy Policy) will also apply.

By using our website, submitting an enquiry or application, purchasing a product or service from us, or otherwise dealing with us in circumstances where this Policy has been made available to you, you acknowledge that you have been informed of the matters in this Policy and consent to our handling of your personal information as set out below.

Noddle is part of the Jacaranda Finance Group and operates under Australian Credit Licence 526746.

1.2 What is personal information?

Under the Privacy Act, “personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable — whether true or not, and whether or not recorded in a material form. “Sensitive information” is a subset of personal information that attracts additional protections (see Section 1.7 below).

“Credit information” and “credit eligibility information” have the meanings given in Part IIIA of the Privacy Act and the Credit Reporting Code, and are dealt with in Section 2.

1.3 Pseudonyms and anonymity

Where it is lawful and practicable to do so, we will give you the option of dealing with us anonymously or under a pseudonym. However, we are required by law to verify your identity before providing credit, arranging credit, or providing certain other services. Where verification is required, we will need your true legal name and other identifying details, and may be unable to deal further with you without them.

1.4 Kinds of personal information we collect

The categories of personal information we collect depend on the nature of our dealings with you. Common categories include:

Contact details — your name, date of birth, residential and postal addresses (and previous addresses, with duration), email address and telephone numbers.
Identification information — including details from your driver licence, passport, Medicare card, birth certificate, utility bills or other documents required to verify your identity under the AML/CTF Act, together with tax file number where lawfully required.
Employment and financial information — your employer (and previous employers and duration of employment), occupation, income (from all sources, including government benefits), expenses, assets, liabilities, and supporting documentation such as payslips, bank statements and tax statements.
Information about your finance requirements — the products and services you have enquired about or applied for, your credit history and credit information (see Section 2), and other information relevant to assessing your application or suitability as a guarantor.
Information about third parties — where you provide details of a spouse, co-applicant, co-borrower, guarantor, dependant, referee or other third party (see Section 1.5 below).
Records of interactions with us — including telephone calls, emails, chat messages, online forms, social media interactions, in-person dealings, surveys, enquiries and complaints.
Website, device and online activity information — IP address, device identifiers, browser and operating system information, location data (where available and not disabled), referring sites, pages viewed, links clicked, dates and times of access, and information collected via cookies and similar technologies.
Employment application information — qualifications, work history, professional or trade association memberships, references, criminal history and credit history, where relevant to a role you have applied for.

Some of the information we ask for will be identified as mandatory and the rest as voluntary. If you do not provide mandatory information, we may be unable to provide our products or services to you effectively or at all — for example, we may be unable to verify your identity, assess a credit application, or refer you to a lender.

1.5 Information about third parties

If you provide personal information to us about another person (such as a spouse, co-applicant, co-borrower, guarantor, dependant or referee), you confirm that:

you have the consent of that person to disclose their personal information to us; and
you have informed that person of the purposes for which we will collect, hold, use and disclose their information, as set out in this Policy.

1.6 How we collect personal information

Wherever reasonable and practicable, we collect personal information directly from you — for example, when you submit an enquiry or application, complete an online form, speak with us by phone or in person, correspond with us by post or email, or interact with us through our website or online tools.

We may also collect personal information about you from third parties or publicly available sources where it is unreasonable or impracticable to collect it directly from you. These sources may include:

credit reporting bodies;
lenders, financiers and other credit providers on our panel;
aggregation partners, dealers, brokers, introducers and other intermediaries acting on your behalf or referring business to us;
a person you have authorised to act for you (for example, your agent, financial counsellor, accountant, solicitor or representative);
your current and previous employers;
referees you have nominated;
landlords, real estate agents and other parties relevant to your application;
insurance providers and mortgage insurers;
identity verification service providers, including biometric verification providers;
service providers that assist us with the processing of applications;
co-applicants, co-borrowers and guarantors (or proposed co-applicants, co-borrowers and guarantors);
government and regulatory agencies (including tax authorities and identity document issuers);
publicly available sources — including online forums, social media platforms (such as Facebook, Instagram, X/Twitter, YouTube and LinkedIn), public registers (such as those maintained by the Australian Securities and Investments Commission), and similar sources.

Where we collect personal information about you from another person, we will take such steps (if any) as are reasonable in the circumstances to inform you of the collection and of the matters required under APP 5, unless we are not required to do so by Australian Privacy Law — for example, where the information is collected from a publicly available source or where notification is otherwise authorised or required by law.

We retain personal information for at least 7 years, or longer where required by the Corporations Act 2001, the AML/CTF Act, or other applicable laws.

1.7 Sensitive information

Sensitive information is a subset of personal information defined in the Privacy Act. It includes information or opinion about a person’s racial or ethnic origin, political opinions, membership of a political organisation, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association or trade union, sexual orientation or practices, criminal record, health information, genetic information, and biometric information used for the purpose of automated biometric verification or biometric identification (including biometric templates).

We will only collect sensitive information that is reasonably necessary for one or more of our functions or activities, and where:

you have consented to the collection; or
the collection is required or authorised by law.

The kinds of sensitive information we may collect, in particular contexts, include:

Citizenship, country of birth and politically exposed person (PEP) status, where required to verify your identity or to meet our obligations under the AML/CTF Act.
Biometric information used by our identity verification service providers (for example, facial biometric matching of a selfie or liveness image against the photograph on your identification document). Where biometric verification is used, your express consent will be obtained at the point that verification is conducted.
Health information that is relevant to a hardship application (see Section 3) or to assist you in obtaining an insurance product.
Criminal record and credit history, where relevant to an employment application.

We do not use sensitive information for direct marketing without your express consent.

1.8 How we hold personal information

We hold personal information in physical paper files and in electronic form on infrastructure that is either owned or controlled by us, or operated by service providers we have engaged. Much of the personal information we hold electronically is stored on servers and in data centres located in Australia, with some held by overseas service providers as set out in Section 1.11.

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure, including by:

maintaining secure environments for physical and electronic records;
restricting access to personal information to authorised personnel on a need-to-know basis;
using technical safeguards such as encryption, access controls and password protection; and
requiring our service providers to maintain appropriate security standards.

Despite these measures, no system can be guaranteed to be free from human error or malicious third-party activity. We are not responsible for the security of any computer or device you use to access our website or services.

We will destroy or de-identify personal information when it is no longer required for any purpose for which it may be used or disclosed under Australian Privacy Law and is not required to be retained under any other applicable law.

1.9 Purposes for which we collect, hold, use and disclose personal information

We collect, hold, use and disclose personal information for the primary purpose for which it was collected, for purposes set out in this Policy or in any specific collection notice provided to you, for related secondary purposes you would reasonably expect, and for any other purpose you have consented to. These purposes include:

assessing your eligibility for, and arranging, credit and credit-related products with lenders on our panel;
providing you with our products and services and managing our relationship with you;
assisting you in obtaining insurance and other related products;
verifying your identity and assessing your financial position;
exchanging information with credit reporting bodies, lenders, insurers, aggregation partners, intermediaries and other service providers;
responding to enquiries, requests and complaints;
delivering direct marketing communications in accordance with Section 1.10 below;
improving our products, services, website and operations, including through analytics and research;
registering, varying or discharging interests on the Personal Property Securities Register;
supporting any prospective sale, transfer, merger, restructure or securitisation of our business, assets or loan book;
complying with our legal and regulatory obligations, including those under the AML/CTF Act, the National Consumer Credit Protection Act 2009, the Corporations Act 2001 and applicable taxation laws;
investigating, preventing or responding to suspected fraud, unlawful activity, misconduct or threats to safety;
enforcing rights and obligations arising out of our dealings with you;
any other purpose communicated to you at the time of collection.

If you apply for or receive credit, we will also collect, hold, use and disclose information for the purposes set out in Section 2. If you apply for a hardship variation, the additional purposes in Section 3 will also apply.

We may also use or disclose personal information without obtaining your further consent where:

the use or disclosure is for a purpose related to a primary purpose of collection and is within your reasonable expectations;
it is necessary to lessen or prevent a serious threat to the life, health or safety of an individual or to public health or safety;
we have reason to suspect that unlawful activity, misconduct or serious threat to safety has been or is being engaged in; or
it is otherwise required or authorised by law.

1.10 Direct marketing

We may use your personal information to send you direct marketing communications about our products and services, and those of related entities in the Jacaranda Finance Group, by post, email, SMS, messaging applications and telephone (“Direct Marketing Communications”).

Where we intend to contact you by SMS, messaging application or telephone for direct marketing purposes, we will rely only on the express consent obtained from you at the point you submit an enquiry or application — we do not rely on inferred or implied consent for those channels.

We may rely on inferred or implied consent (for example, where you have not opted out after being given the opportunity to do so) to send Direct Marketing Communications by email only, where doing so is within your reasonable expectations given your dealings with us.

We do not use sensitive information or credit information to send Direct Marketing Communications without your express consent.

You may opt out of Direct Marketing Communications at any time by using the unsubscribe option in the relevant communication or by contacting our Privacy Officer using the details in Section 1.15.

1.11 Overseas disclosure

We may disclose personal information to recipients located outside Australia as part of our information technology, service provider and group company arrangements. The countries to which we are likely to disclose personal information include the United States of America, and may also include Singapore, India and other jurisdictions where our service providers or related companies operate. Because some of our service providers and platforms are accessible from multiple jurisdictions, it is not always practicable to identify in advance every country in which personal information may be held.

In particular, we may disclose limited personal information to overseas advertising and analytics providers for the purpose of measuring the performance of our marketing campaigns and serving relevant advertising — including providers such as Google LLC, Meta Platforms Inc. and Microsoft Corporation. The information disclosed for these purposes is generally limited to pseudonymous cookie-based identifiers and, in some cases, hashed contact identifiers (such as a hashed email address or telephone number) from our enquiry and application forms. We do not disclose your financial information, credit information, income, expenditure, assets or liabilities to any advertising platform.

By submitting your personal information to us, you consent to the disclosure of your personal information outside Australia for the purposes set out above. You acknowledge that where you provide that consent, the requirement in APP 8.1 for us to take reasonable steps to ensure the overseas recipient complies with the APPs no longer applies. We will nonetheless take reasonable steps to ensure that overseas recipients handle your personal information securely and consistently with this Policy.

If you do not consent to the overseas disclosure of your personal information, please tell us before submitting your information, using the contact details in Section 1.15.

1.12 Unsolicited personal information

If we receive personal information about you that we did not solicit, we will, within a reasonable period, determine whether the information could have been collected under Australian Privacy Law had we asked for it. If it could not have been, and it is not contained in a Commonwealth record, we will destroy or de-identify the information as soon as practicable, except where doing so would be unlawful. Where unsolicited information relates to a potential future employment application (for example, a CV submitted on spec), we may retain it for that purpose.

1.13 Automated decision-making

If you submit an enquiry or application to us (including a loan application), we may use personal information you provide as inputs to automated decision-making processes — for example, to assist with identity verification, fraud screening, risk assessment, or pre-qualification against lender criteria. Inputs may include your name, current and previous addresses (and duration), date of birth, Australian residency status, contact details, current and previous employers (and duration of employment), and financial information.

1.14 Accessing and correcting your personal information

You may request access to the personal information we hold about you by contacting our Privacy Officer using the details in Section 1.15. We will respond to access requests within a reasonable time and in accordance with Australian Privacy Law. There is no charge for making an access request, although we may charge a reasonable administration fee for providing access. Where we refuse access, we will provide written reasons except where it would be unreasonable to do so. Grounds on which access may be refused include where providing access would:

be unlawful or contrary to our legal obligations;
reveal personal information about another individual;
pose a risk to the health or safety of any person; or
disclose commercially sensitive information that we are not required to release under Australian Privacy Law.

If you believe that personal information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us using the details below. If we are satisfied that the information should be corrected, we will take reasonable steps to correct it. If we decline to make a requested correction, we will provide written reasons within 30 days.

1.15 Contacting us and making a complaint

Full details of our complaints process — including how to raise a concern, what to expect at each stage, and who to escalate to — are set out in our Credit Guide. In summary, complaints can be made in two ways:

Internal complaints — raised with our Internal Complaints Officer (contact details below). This is our Internal Dispute Resolution (IDR) process and is the first step for any concern.
External complaints — where you remain unsatisfied after our internal process (or where the timeframes in our Credit Guide have passed), you may refer the complaint to the Australian Financial Complaints Authority (AFCA), our External Dispute Resolution (EDR) scheme.

If you have a question, request or complaint about how we handle your personal information, please contact our Internal Complaints Officer / Privacy Officer:

Internal Complaints Officer / Privacy Officer — Noddle Pty Ltd

Office	1/339 Coronation Drive, Milton QLD 4064
Email	joshw@noddle.com.au
Telephone	0404 198 137
Website	noddle.com.au

We will acknowledge your complaint within a reasonable time (and, where practicable, within 1 business day) and respond as soon as reasonably practicable, consistent with the timeframes set out in our Credit Guide and applicable regulatory guidance. We will:

liaise with you to define the nature of the complaint;
request further information from you if needed;
keep you informed of the timeframe within which we expect to respond; and
where a decision is required, inform you of the basis (including any legislative basis) of our decision.

We keep a Register of Complaints recording each complaint received and any action taken, and report on complaints to ASIC and other regulators as required under our Australian Credit Licence (526746) and applicable laws.

If you are not satisfied with the outcome of our Internal Dispute Resolution process, you may refer your complaint to our External Dispute Resolution scheme. Noddle is a member of the Australian Financial Complaints Authority (AFCA Member 81857):

Australian Financial Complaints Authority (AFCA)

Mail	GPO Box 3, Melbourne VIC 3001
Telephone	1800 931 678 (9:00am–5:00pm AEST weekdays)
Email	info@afca.org.au
Website	www.afca.org.au

Office of the Australian Information Commissioner (OAIC)

Mail	GPO Box 5218, Sydney NSW 2001
Telephone	1300 363 992
Email	enquiries@oaic.gov.au
Website	www.oaic.gov.au

You may also lodge a complaint about the handling of your personal information with the Office of the Australian Information Commissioner (OAIC).

1.16 Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in the law, technology, or our business practices. Updates will be posted on our website. Where the change is material — for example, where it affects how we handle your information under a consumer credit contract — we will take reasonable steps to notify you directly if required by Australian Privacy Law.

2. Credit Information Policy

2.1 Introduction

This Credit Information Policy describes how Noddle complies with Australian Privacy Law when handling credit information. It applies if you:

apply to us, or through us, for any credit product;
hold (or are a guarantor of) a credit product arranged by us; or
we otherwise hold credit information about you, or information about your credit eligibility or creditworthiness.

This section is in addition to, and should be read together with, Section 1.

As a finance broker operating under Australian Credit Licence 526746, Noddle does not generally lend in its own name. Rather, we arrange credit through a panel of lenders (“Credit Provider Schedule”) and, where relevant, through aggregation partners.

2.2 Kinds of credit information we handle

In addition to the personal information described in Section 1, when you apply for or hold credit through us we may collect:

Identification information required under the AML/CTF Act.
Financial information, including:
- income from all sources (including government benefits), current employment status and recent employment history;
- regular and one-off expenses;
- existing debts and liabilities; and
- bank statements covering at least the 90 days preceding your application, and later periods if you hold a consumer credit product arranged through us.
Consumer credit liability information about credit accounts you hold with us, with lenders on our panel or with other credit providers, including:
- the type of account;
- the dates the account was opened and (where applicable) closed;
- the maximum amount of credit approved on the account; and
- other specific terms and conditions of the account.
Information about your credit application, including:
- whether the credit applied for is consumer or commercial;
- the amount of credit sought; and
- whether an information request has been made about you to a credit reporting body.
Default information where you have failed to make a payment to a credit provider that remains overdue for more than 60 days, where the notices required under Australian Privacy Law have been provided before disclosure to a credit reporting body, or where the default has already been reported by another credit provider.
Payment information indicating that you have made a payment that was previously overdue.
New arrangement information describing variations to the terms or conditions of payments under a credit contract.
Court proceedings information, being information about any judgment of an Australian court made against you in relation to credit you have applied for or received.
Personal insolvency information recorded on the National Personal Insolvency Index maintained by the Australian Financial Security Authority, including bankruptcies, debt agreements, debt agreement proposals, personal insolvency agreements, and any related directions or orders made under the Bankruptcy Act 1966.
Publicly available information relevant to your creditworthiness.
Serious credit infringement information indicating that you have:
- fraudulently obtained credit;
- fraudulently evaded payments under a credit contract;
- cannot be contacted at the last known addresses provided, or have not been in contact for at least 6 months; or
- otherwise indicated that you no longer intend to comply with your credit obligations.

2.3 How we collect credit information

We collect credit information using the methods described in Section 1, including:

directly from you (through application forms, our website, phone, email and written correspondence);
from credit reporting bodies;
from lenders on our panel and other credit providers;
from aggregation partners, dealers, brokers, introducers and other intermediaries; and
from referees, employers, identity verification providers, suppliers and other parties relevant to your application.

2.4 How we hold credit information

We hold credit information using the same controls described in Section 1.8. Credit information is retained for at least 7 years to comply with our obligations under the Corporations Act 2001, the AML/CTF Act and other applicable laws.

2.5 How we disclose credit information

We may disclose credit information about you to:

Credit reporting bodies, in order to obtain credit reports about you and to participate in the credit reporting system. Information disclosed may include credit application information, default information and serious credit infringement information, but not financial information.
Lenders on our panel (the Credit Provider Schedule) and other credit providers, for the purpose of arranging credit on your behalf.
Aggregation partners, for the purpose of arranging or supporting your credit application.
Insurers and mortgage insurers, in connection with arranging insurance or assessing risk associated with credit.
Guarantors, co-applicants and co-borrowers in relation to your application.
Service providers, including those who assist with application processing, identity verification, document handling, IT services and customer communications.
Debt collection agencies, valuers, surveyors and parties involved in the registration of security interests, where relevant.
Purchasers of debt portfolios and counterparties to securitisation or assignment arrangements, where relevant.
Accountants, financial advisers, legal advisers and other professional advisers acting for you or for us.
External dispute resolution schemes and regulators, including AFCA, ASIC, AUSTRAC and the OAIC.
Government authorities in connection with lawful information requests or to meet our legal obligations in any relevant jurisdiction.

The credit reporting bodies to which we may disclose credit information include:

Equifax Pty Ltd
PO Box 964, North Sydney NSW 2059
13 8332
www.mycreditfile.com.au

Experian Australia Credit Services Pty Ltd
GPO Box 1969, North Sydney NSW 2060
creditreport@au.experian.com
www.experian.com.au

illion Australia Pty Ltd
PO Box 7405, St Kilda Road, Melbourne VIC 3004
132 333
www.illion.com.au

TaleFin Pty Ltd (formerly Lend Guard)
Suite 86/3 Albert Coates Lane, Melbourne VIC 3000
info@talefin.com
www.talefin.com

We recommend that you review the privacy policies of these credit reporting bodies for further detail about how they handle your information.

We do not disclose credit information to third parties for the purpose of their own direct marketing.

2.6 Purposes for collecting, holding, using and disclosing credit information

In addition to the purposes described in Section 1, we collect, hold, use and disclose credit information to:

verify your identity as required under the AML/CTF Act;
assess your credit application (including by means of automated decision-making) and your suitability as a guarantor;
arrange credit through lenders on our panel and provide information to them in connection with that arrangement;
manage your credit contract and our broking relationship with you;
consider any application to vary your payments, including on the grounds of hardship;
assist with debt collection or enforcement of rights under a credit contract;
assist you where we identify a potential risk of default;
participate in the credit reporting system, including providing information to credit reporting bodies;
support securitisation and assignment of debt activities;
handle complaints through our Internal and External Dispute Resolution processes;
meet our legal and regulatory obligations, including disclosures to regulators; and
assist other credit providers where permitted by Australian Privacy Law (including with your consent or in connection with a serious credit infringement).

2.7 Overseas disclosure of credit information

We may disclose credit information to overseas recipients for the purposes described in this Policy, including as part of our information technology and service provider arrangements. The countries in which these recipients are likely to be located include the United States of America and may also include Singapore, India and other jurisdictions where our service providers operate.

We do not disclose credit information, credit eligibility information or credit worthiness information to overseas recipients except as permitted by Australian Privacy Law. We do not disclose credit information to overseas advertising or analytics providers.

2.8 Accessing your credit information

You may access credit information we hold about you in the same way described in Section 1.14. There is no charge for making a request, although we may charge a reasonable administration fee for providing access. We cannot provide you with access to information held by a credit reporting body — to request that information, please contact the relevant credit reporting body using the details above.

2.9 Correcting credit information

You may request correction of credit information in the same way described in Section 1.14. We will respond to correction requests in accordance with Australian Privacy Law, will provide our response or reasons within 7 business days, and will make a final decision no later than 30 days after receiving the request. If we correct credit information that has previously been disclosed to a credit reporting body, we will notify that body within 7 business days of our decision.

2.10 Complaints about credit information

Complaints about credit information are handled through the same process described in Section 1.15.

2.11 If you choose not to provide information

You are not required to provide us with personal or credit information. However, if you do not provide the information we need to verify your identity or assess your application, we may be unable to provide our broking services to you or to refer you to a lender.

2.12 Third-party information in a credit context

The third-party consent confirmation set out in Section 1.5 also applies whenever you provide credit information about another person (such as a co-applicant, co-borrower, guarantor, spouse or dependant) in connection with a credit application.

3. Hardship Privacy Policy

3.1 Introduction

This Hardship Privacy Policy describes how Noddle handles personal information (including sensitive information) collected during a hardship application or arrangement. It applies if you:

hold credit arranged through us;
are experiencing difficulty meeting your repayment obligations under your consumer credit contract; and
have applied for, or contacted us about, a variation of those obligations on the grounds of hardship — whether following a Notice of Default or otherwise.

This section is in addition to, and should be read together with, Sections 1 and 2.

3.2 What “hardship” means

“Hardship” has the meaning given in the National Consumer Credit Protection Act 2009 (Cth), which includes illness, unemployment and other reasonable causes. As part of considering a hardship application, we may collect information about the underlying cause of your hardship, which is likely to be sensitive information under Australian Privacy Law.

3.3 Sensitive information collected in a hardship context

We will only collect sensitive information that is relevant to your hardship application. This may include:

health information about you or a member of your family;
your current employment status;
your educational, training and other qualifications;
membership of professional or trade associations or unions;
changes to your relationship or marital status;
whether you have experienced family or domestic violence; and
any other information directly relevant to your application and credit contract that is not otherwise covered by Sections 1 or 2.

3.4 How we collect hardship information

We collect hardship information in the ways described in Section 1, and additionally directly from you through hardship application forms and related correspondence (including our website, telephone, email and other written or electronic correspondence).

3.5 Purposes for collecting and using sensitive information in a hardship context

We collect, hold, use and disclose sensitive information for the following purposes:

assessing your hardship application;
explaining our decision to grant or refuse a hardship variation;
administering, monitoring and recording any agreed hardship variation;
considering complaints about our hardship decisions through our Internal Dispute Resolution process;
responding to complaints about our hardship decisions referred to our External Dispute Resolution scheme;
working with lenders on our panel to arrange or support hardship variations on your behalf;
meeting our responsible lending and operational obligations under the National Consumer Credit Protection Act 2009 and other applicable laws; and
reporting to relevant authorities as required.

3.6 Disclosure of sensitive information

We will not disclose your sensitive information except for the purposes described above and as permitted by Australian Privacy Law.

In particular, we will not disclose sensitive information to credit reporting bodies or other credit providers, although we may disclose the existence of an agreed hardship variation to such parties as set out in Section 2.

3.7 Overseas disclosure

We may disclose sensitive information to overseas recipients for the purposes described above, including as part of our information technology and service provider arrangements. The countries in which these recipients are likely to be located include the United States of America and may also include Singapore, India and other jurisdictions where our service providers operate.

We do not disclose sensitive information to overseas advertising or analytics providers, or otherwise except as permitted by Australian Privacy Law.

3.8 Accessing and correcting sensitive information

You may access and request correction of sensitive information in the same way described in Section 1.14.

3.9 Complaints

Complaints about the handling of sensitive information are managed through the process described in Section 1.15. If you are not satisfied with our Internal Dispute Resolution process, you may refer your complaint to AFCA or the OAIC.

3.10 Changes to this Policy

We may update this Hardship Privacy Policy for the same reasons, in the same manner and on the same notice as described in Section 1.16.

3.11 If you choose not to provide hardship information

You are not required to provide us with personal or sensitive information. However, if you choose not to provide the information needed to verify your financial position, we may be unable to approve a hardship variation. For example, without supporting documentation we cannot verify your financial position, which is required for permanent hardship variations.

Contact us

If you have any questions about this Privacy Policy, or would like to know more about how we handle personal information, please contact us:

Noddle Pty Ltd — Privacy Officer

Office	1/339 Coronation Drive, Milton QLD 4064
Telephone	0404 198 137
Email	joshw@noddle.com.au
Website	noddle.com.au
Licences	ABN 63 643 806 759 · ACN 643 806 759 Australian Credit Licence 526746 FBAA Member 362825 · AFCA Member 81857

We will respond to questions and requests as soon as reasonably practicable.

Noddle Pty Ltd is part of the Jacaranda Finance Group.