Privacy Policy

Last updated: [DATE]

[LEGAL ENTITY NAME] ABN [ABN], trading as Poppy Finance (“we”, “us”), respects your privacy. This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and, for New Zealand, the Privacy Act 2020 (NZ) and its Information Privacy Principles.

What we collect

Contact details: name, email, phone number and business name.
Business details: ABN or NZBN, industry, time trading, sales, funding amount and purpose.
If you continue to a full assessment: identity documents for business owners, bank transaction data you choose to share, and credit information where you’ve been told about it first.
For partners: company, role, accreditation details and deal volumes.
Technical information: IP address, browser type, the page that referred you and campaign tags, used to secure our forms and measure our marketing.

How we collect it

Mostly directly from you through our website forms, email and phone. We may also collect it from brokers or referral partners who introduce you, from bank data providers you authorise, from identity verification services, and from public registers such as the ABN Lookup and NZ Companies Office.

Why we use it

To assess whether our funding may suit your business, and to provide and manage funding.
To verify identity and meet our legal obligations, including anti-money laundering laws that apply to us.
To contact you about your enquiry or application.
To pay and manage broker and referral partners.
To send marketing, only where you’ve agreed. You can unsubscribe at any time.
To protect our website and prevent fraud.

Who we share it with

We may disclose personal information to: the broker or partner who introduced you; service providers who host our systems, send our emails, verify identity or provide bank data; credit reporting bodies (with notice to you); our funders, auditors and professional advisers; and regulators or others where the law requires. [LIST ANY OVERSEAS COUNTRIES WHERE PROVIDERS STORE DATA.]

Storage and security

We store personal information electronically with reasonable security safeguards, including access controls and encryption in transit. We keep it only as long as we need it for the purposes above or as the law requires, then securely delete or de-identify it.

Accessing and correcting your information

You can ask to access or correct the personal information we hold about you by emailing privacy@poppyfinance.net. We’ll respond within a reasonable time, usually 30 days.

Complaints

If you have a privacy complaint, email privacy@poppyfinance.net and we’ll respond within 30 days. If you’re not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au) or, in New Zealand, the Office of the Privacy Commissioner (privacy.org.nz).

Changes

We may update this policy. The latest version will always be on this page.