Skip to content
Login

Privacy Policy and Credit Reporting Policy

In this Privacy Policy, ‘us’, ‘we’ or ‘our’ means Brighte Capital Pty Limited (ABN 74 609 165 906) and Brighte Energy Pty Ltd (ACN 646 449 247). We are committed to respecting your privacy. This Privacy Policy sets out how we collect, hold, use and disclose your personal information (including for consumer or commercial credit). We are bound by the Australian Privacy Principles contained in the Privacy Act 1988 (Cth) (‘Privacy Act’). This Privacy Policy should be read together with the Brighte Privacy Collection Notice and Consents, which we give you at or before the time we collect your personal information, and with the Brighte Statement of Notifiable Matters below. Where those documents say something more specific about a particular collection, the more specific document applies.

By providing personal information to us, you acknowledge that we will collect, hold, use and disclose your personal information in accordance with this Privacy Policy and any other arrangements that apply between you and us. Where we collect sensitive information from you, we will obtain your specific consent at or before the time of collection, unless an exception under the Privacy Act applies. We may change our Privacy Policy and we will publish these changes on our website. We encourage you to check our website periodically to ensure that you are aware of our current Privacy Policy.

Personal information includes information or an opinion about an individual that could reasonably identify that individual. For example, this may include your name, age, gender, postcode and contact details. It may also include financial information, including your credit card information.

We may collect, hold, use, disclose or otherwise manage personal information as set out in this Privacy Policy, either on our own behalf or as an agent of a third-party entity. Where we act as an agent, we may act on behalf of that third-party entity whether or not its identity has been disclosed to you. The information in this Privacy Policy applies to both us and, where relevant, the third-party entity on whose behalf we act. The identity of the relevant third-party entity is available on request.

What personal information do we collect?

Personal Information

We may collect the following types of personal information:

  • name;
  • mailing or street address;
  • email address;
  • telephone number and other contact details;
  • age or date of birth;
  • information about your financial situation, such as your employment, income, expenses, assets and liabilities, and bank statements or transaction data you provide or authorise us to obtain (including through the Consumer Data Right, where you choose to share your banking data with us);
  • payment and banking information, such as your credit or debit card details, bank account number and BSB;
  • identification information, such as your driver’s licence or passport details, and information we or our service providers generate when verifying your identity against government records, credit reporting bodies or other identity verification sources;
  • if you access any software or websites we make available to you, details about your use of such platforms, which may include username and login details, your device ID, device type, geo-location information, computer and connection information, statistics on page views, traffic to and from the sites, ad data, your search queries or browsing behaviour (including through the use of cookies, tracking pixels, and other analytics tools), internet protocol (IP) address and standard web log information;
  • voice and call recording data, where we record or monitor phone calls between you and Brighte, including transcripts and summaries of those calls;
  • details of the products and services we have provided to you or that you have enquired about, including any additional information necessary to deliver those products and services and respond to your enquiries;
  • any additional information relating to you that you provide to us  directly, including through our website, app, phone, email, chat or other interactions with us, or indirectly through your use of our website or app, online presence or through other websites or accounts from which you permit us to collect information;
  • information you provide to us when you participate in any interactive features, including through customer surveys, feedback forms, contests, promotions, activities or events;
  • current and historical energy usage, load and consumption data, meter type and model and other statistics on your use of energy products and associated metering software, including products and software which are financed by us, where we have obtained your consent;
  • your preferences in receiving marketing from us and our third parties and your communication preferences;
  • where you are a worker of ours or applying for a role with us, your professional history such as your previous positions and professional experience, or whether you hold required authorisations or licences (if applicable);
  • information we are required to collect to meet our obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) and the National Consumer Credit Protection Act 2009 (Cth); and
  • any other personal information that may be required to facilitate your dealings with us, including, but not limited to information about you where you are a borrower, co-borrower, joint borrower, vendor or installer.

Sensitive information

Sensitive information is a sub-set of personal information that is given a higher level of protection. Sensitive information means information relating to your racial or ethnic origin, political opinions, religious beliefs or affiliations, trade union or other professional associations or memberships, philosophical beliefs, sexual orientation or practices, criminal records, health, genetic or biometric information.

We may collect sensitive information from you where it is reasonably required for our business functions or activities. We will only collect sensitive information with your consent, unless an exception under the Privacy Act applies.

In some cases, we are required by law to collect sensitive information. The Privacy Act permits us to collect this information without your consent, such as when we must determine whether you are a politically exposed person or subject to sanctions. We may also collect sensitive information without your consent where permitted by the Privacy Act, including where we reasonably believe it is necessary to take appropriate action in relation to suspected unlawful activity or serious misconduct (such as fraud), or to lessen or prevent a serious threat to the life, health, or safety of any individual and it is unreasonable or impracticable to obtain your consent.

The types of sensitive information we may collect include:

  • information about your race or ethnicity;
  • information about your political opinions, religious beliefs or affiliations, or membership of a political association (for example, where we are required to collect it to determine whether you are a politically exposed person or are subject to sanctions);
  • health information, including your medical condition (for example, where you make a hardship request and disclose information relating to your health as part of making that hardship request);
  • criminal history (including where you apply for a role with us);
  • biometric information, such as a photo of your face used to verify your identity, and biometric templates; and
  • other sensitive information as may be required for specific purposes with your consent.

Unsolicited Information

If we receive unsolicited personal information (including sensitive information) that we could not have collected in accordance with this Privacy Policy, we will destroy or de-identify the information as soon as reasonably practicable, if it is reasonable for us to do so. If we are unable to destroy or de-identify this information, we will retain the information in accordance with this Privacy Policy.

Accredited vendors and installers

If you are an owner, director, partner, licence holder, employee or other representative of a business that applies to become, or is, one of our accredited vendors (or an installer engaged by one), we collect personal information about you. This may include your name, contact details and role in the business; identification information, including biometric information such as a photo of your face where we need it to verify your identity; your licences, qualifications and accreditations; and information about your business and financial history, such as insolvency, adverse credit and other publicly available information about you.

We collect this information from you and the business and from third parties including public registers (such as ASIC and licensing registers), licensing and accreditation bodies, credit reporting bodies and other commercial information providers where permitted by law, referees, our customers and others who raise complaints or concerns with us, and regulators and dispute resolution bodies.

We use this information to assess the business’s application for accreditation (including to verify identities, confirm licences and accreditations, and assess whether the business and its people are suitable); to onboard the business and administer our relationship with it, including making payments; to monitor the business’s conduct, complaints and compliance with our requirements on an ongoing basis; to investigate concerns and take action under our agreements with the business, including suspension or termination; and to meet our legal and regulatory obligations. We may disclose this information to licensing and accreditation bodies, government scheme administrators, regulators, dispute resolution bodies and our professional advisers for those purposes.

How do we collect personal information?

We may collect personal information either directly from you, or from third parties. This may include information you provide to us, information generated through your interactions with us, and information we obtain from third parties. We may collect this information when you:

  • register on our website or app;
  • communicate with us through correspondence, phone calls, chats, email, or when you share information with us from other applications, services or websites; or
  • interact with our websites, services, content and advertising.

Personal information provided by third parties

Where we receive information about you from third parties: There may be occasions when information is collected from third parties, such as a partner or spouse who contacts us on your behalf, from our accredited vendors (for example, where a vendor refers you to us and gives us your contact details and information about the goods or services you are purchasing, such as quotes and installation details, or gives us information relevant to a complaint or investigation), from our contractors who supply services to us, through our business partners, from credit reporting bodies, from identity and document verification service providers, from sanctions and politically exposed person screening providers, from your joint applicant or a guarantor or from a publicly maintained record.  If we receive personal information about you from a third party, we will protect it as set out in this Privacy Policy, and where we are required to do so we will take reasonable steps to notify you that we have collected it.

Where you provide us with information about third parties: If you provide personal information to us about someone else, you represent and warrant that you have such person’s consent to provide the personal information to us and are entitled to disclose that information to us and grant us the ability to handle that information in accordance with this Privacy Policy. You should take reasonable steps to ensure the individual concerned is aware of this Privacy Policy and consents to us dealing with their personal information in accordance with this Privacy Policy.

Information from credit checks: We also collect information obtained as a result of credit checks, as detailed further in our Credit Reporting Policy.

Your choice: If you provide personal information to us, you understand we will collect, hold, use and disclose your personal information in accordance with this Privacy Policy and Credit Reporting Policy. You do not have to (and may choose not to) provide personal information to us, however if you do not provide personal information requested by us, we may not be able to provide you with our services, assess your application for credit, or verify your identity as we are required to do by law.

Why do we collect and how do we use your personal information?

Personal information: We use your personal information for the purpose for which it has been provided, for reasonably related secondary purposes, any other purpose you have consented to and any other purpose permitted under the Privacy Act. This may include using your personal information for the following purposes:

  • to enable you to access and use our financial products and services and related products and services;
  • to improve our products and develop new products;
  • to determine your eligibility for other products and services provided by us, based on your usage of existing products and services;
  • for identity verification purposes, which may involve the use of third-party systems, and matching information with official record holders;
  • to send you service, support and administrative messages, reminders, technical notices, updates, security alerts, and information requested by you;
  • to send you marketing and promotional messages and other information that may be of interest to you, including information sent by, or on behalf of, our business partners that we think you may find interesting;
  • to administer rewards, surveys, contests, or other promotional activities or events sponsored or managed by us or our business partners;
  • for quality assurance and internal training purposes;
  • to meet our obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth), including customer identification and verification, ongoing customer due diligence, politically exposed person and sanctions screening, and transaction monitoring and reporting;
  • to assess your application for credit and to comply with our responsible lending obligations under the National Consumer Credit Protection Act 2009 (Cth), including verifying your financial situation;
  • to assess and administer a request for hardship assistance, and to give effect to any financial hardship arrangement we agree with you;
  • where you are associated with an accredited vendor or installer, for accreditation, onboarding, and other purposes as described under ‘Accredited vendors and installers’ above;
  • to operate, protect, improve and optimise our website, app, business and our users’ experience and our products and services (including by using automated tools and AI-enabled services to help us perform analytics, conduct research, review and analyse customer feedback and complaints, and support quality assurance); and
  • to comply with our legal obligations, resolve any disputes that we may have with you, and enforce our agreements with third parties.

Sensitive information: We only collect, hold, use and disclose sensitive information for the following purposes:

  • any purposes you consent to;
  • the primary purpose for which it is collected;
  • secondary purposes that are directly related to the primary purpose for which it was collected, including disclosure to the below listed third parties as reasonably necessary to work with you as a customer or supplier of our business;
  • to contact emergency services, or to speak with your family, partner or support person where we reasonably believe there is a serious risk to the life, health or safety of you or another person and it is impracticable for us to obtain your consent; and
  • if otherwise required or authorised by law.

How long do we hold your information for?

We may be required to retain your information generally for up to 7 years after our relationship with you ends to comply with our legal and regulatory obligations.

Your personal information may be kept after your account with us is closed in order to carry out certain activities, such as:

  • collecting outstanding balances owed;
  • conducting investigations or resolving complaints;
  • account maintenance;
  • preventing or detecting fraud or unauthorised activity;
  • complying with our legal obligations; or
  • where otherwise permitted by law.

Where we no longer need your personal information for any purpose for which it may be used or disclosed, and we are not required by law or a court or tribunal order to retain it, we take reasonable steps to destroy it or to ensure it is de-identified.

Do we use your personal information for direct marketing?

We may send you direct marketing about financial products and services, in accordance with the Spam Act 2003 (Cth) and the Privacy Act. This may take the form of emails, SMS, mail, telephone or other forms of communication.

Where you have provided your express consent, we may also share your personal information with our carefully selected business partners so they can contact you directly with marketing.

Restrictions apply under the Privacy Act in relation to the circumstances and purposes for which credit eligibility information may be used for direct marketing and we comply with these restrictions.

You may unsubscribe from our email database or opt-out of receiving direct marketing or other communications from us by contacting us using the details set out below or by using the opt-out facilities provided in the communication (e.g., an unsubscribe link). .

Who do we disclose your personal information to?

Personal information: We may disclose personal information for the purposes described in this Privacy Policy to:

  • our employees and related bodies corporate (meaning an affiliated or connected company);`
  • your agents who act on your behalf;
  • referrers and other intermediaries;
  • credit and debt agencies;
  • third parties for securitisation purposes;
  • third party organisations that carry out functions on our behalf;
  • third party suppliers and service providers (including providers of cloud, analytics and AI-enabled tools used to support the operation of our websites and/or our business, and in connection with providing our products and services to you);
  • professional advisers, dealers and agents;
  • identity and document verification providers, and sanctions and politically exposed person screening providers;
  • any person who is, or proposes to become, a guarantor of credit we provide to you, and any person with whom you make a joint application, for the purpose of allowing them to decide whether to give the guarantee or to proceed with the application;
  • our accredited vendors, and any installer engaged by them, where reasonably necessary to: arrange, deliver, install or service the goods or services we are financing for you; tell them whether your application is approved, declined or pending (but not the reasons for a decision that relate to your credit report) and process payment to them; resolve complaints or disputes involving them; monitor and investigate their conduct and compliance with our requirements; and administer any government scheme that applies to your purchase. We do not give vendors your credit eligibility information, such as information from your credit report;
  • where you are financing goods or services under a Commonwealth, State or Territory government scheme, rebate or program, the relevant government department, agency, statutory authority or corporation and their appointed advisers and auditors, for the purpose of administering, monitoring and auditing that scheme;
  • payment systems operators (e.g. merchants receiving card payments);
  • our agents and business partners;
  • our sponsors or promoters of any competition that we conduct via our services;
  • anyone to whom our assets or businesses (or any part of them) are transferred;
  • specific third parties authorised by you to receive information held by us; and/or
  • other persons, including government agencies, regulatory bodies and law enforcement agencies, or as required, authorised or permitted by law.

Where you have provided your consent, we may also disclose your personal information to a trusted data analytics or insights provider that also holds other information about you. This third party may combine that information in order to enable it and us to develop consumer insights so that we can better understand your preferences and interests, personalise your experience and enhance the products and services that you receive. This does not include your credit information or credit eligibility information.

Sensitive information: We will only disclose sensitive information with your consent or where permitted by law. This means that we may disclose sensitive information to:

  • our employees, contractors and/or related entities;
  • IT service providers, data storage, web-hosting and server providers;
  • professional advisors;
  • if we merge with, or are acquired by, another company, or sell all or a portion of our assets, your personal information may be disclosed to our advisers and any prospective purchaser's advisers and may be among the assets transferred;
  • courts, tribunals, regulatory authorities and law enforcement officers, as required or authorised by law, in connection with any actual or prospective legal proceedings, or in order to establish, exercise or defend our legal rights;
  • any other third parties as required or permitted by law, such as where we receive a subpoena.

Disclosure of personal information outside Australia

We may disclose personal information outside of Australia, including to credit check companies and cloud service providers and providers of cloud-based analytics and AI-enabled services, located in Bulgaria, Canada, Costa Rica, Finland, Germany, India, Israel, Japan, Mexico, Mongolia, New Zealand, the Philippines, Singapore, Spain, the United Kingdom and the United States.

Before we disclose your personal information to an overseas recipient, we take reasonable steps to ensure that the recipient does not breach the Australian Privacy Principles in relation to that information and treats your information in accordance with applicable law by only sending what is necessary, requiring recipients to protect your information through contractual agreements which require the recipient to comply with the privacy standards in applicable law or through other mechanisms that provide comparable safeguards.

We remain accountable under the Privacy Act for what those recipients do with your personal information. We take the responsibility of due diligence seriously when it comes to third parties with whom we share your information.

Using our website and cookies

We may collect personal information about you when you use and access our website.

We may record certain information about your use of our website, such as which pages you visit, the time and date of your visit and the internet protocol address assigned to your computer.

We may also use ‘cookies’, ‘tracking pixels’ or other similar tracking technologies on our website and in our emails that help us track your website usage and remember your preferences from time to time.

Cookies are small text files that are placed in your computer's browser to store information on your computer, TV, mobile phone or other device. They enable the entity that put the cookie on your device to recognise you across different websites, services, devices and/or browsing sessions. Tracking pixels are tiny, invisible images (typically the size of one pixel) embedded in web pages or emails.

We may also use cookies to enable us to collect data that may include personal information. For example, where a cookie is linked to your account, it may be considered personal information under the Privacy Act. Cookies and tracking pixels, by themselves, do not tell us your email address or other personally identifiable information. However, they do recognise you when you return to our online website and allow third parties to cause our advertisements to appear on your social media and online media feeds as part of our retargeting campaigns. If and when you choose to provide our online website with personal information, this information may be linked to the data stored in the cookie or collected by tracking pixels. Unlike cookies, tracking pixels do not store any information on your device, but instead send information to our servers when the pixel is loaded.

You can disable cookies through your internet browser but our websites may not work as intended for you if you do so.

You can block tracking pixels by using ad-blocking or privacy-focused browser extensions. Some email providers allow you to block images by default, which can prevent tracking pixels in emails from loading.

However, if you use your browser settings to block all cookies (including essential cookies) and tracking pixels you may not be able to access all or parts of our website and you may not receive personalised content.

We will handle any personal information collected by cookies in the same way that we handle all other personal information as described in this Privacy Policy.

Google Analytics

We use Google Analytics to understand how people use our website. This involves cookies that collect information about your browsing activity. You can opt out of Google's advertising features through your Google account settings, browser add-ons, or your device's privacy settings. Google provides various tools and options to control how your data is used for advertising purposes. You can learn more about how Google uses your data and your available options on Google's privacy pages.

Meta advertising tools

We use Meta's advertising tools (such as Meta Pixel) to understand how our ads perform and to show you more relevant advertisements on Meta platforms like Facebook and Instagram when you visit our website or app. You can manage whether we connect information from our website with your Meta account for advertising purposes by adjusting your settings within your Meta account preferences.

Use of Artificial Intelligence (AI)

We may use artificial intelligence and machine learning technologies, including tools and services provided by third parties (AI Technologies), in our business and when providing our products and services. We will only use AI Technologies in accordance with applicable laws.

We may use AI Technologies to:

  • operate, secure, improve and personalise our website, app, products and services;
  • communicate and interact with you, including through AI-powered chat, messaging, voice and other digital channels;
  • process, review and analyse information you provide to us or that we otherwise collect;
  • assess and manage applications, accounts, transactions and customer interactions;
  • support customer service, including automating, transcribing, summarising and reviewing communications;
  • conduct analytics, research, reporting, quality assurance and business insights;
  • generate, review, search, draft, summarise or modify content, information, code and other materials;
  • support recruitment, workforce management and our internal business operations; and
  • support fraud, security, risk, compliance and our legal and regulatory obligations.

Where we use third-party AI providers to process personal information on our behalf, we take reasonable steps to ensure they implement appropriate security measures, protect personal information and do not use that information to train their own AI models, except where disclosed to you or otherwise permitted by law.

Security

We may hold your personal information in either electronic or hard copy form and your personal information may be stored by our third-party service providers. We take reasonable steps to protect your personal information from misuse, interference and loss, as well as unauthorised access, modification or disclosure.

We do this by using a number of physical, administrative, personnel and technical measures to protect your personal information. The measures we use to protect your personal information include:

  • using appropriate information technology and processes;
  • restricting access to your personal information to our employees and third-party service providers who need your personal information to do what we have engaged them to do;
  • protecting paper documents from unauthorised access or use through security systems we deploy over our physical premises;
  • using computer and network security systems with appropriate firewalls, encryption technology and passwords for the protection of electronic files;
  • securely destroying or “de-identifying” personal information if we no longer require it; and
  • keeping some information for certain prescribed periods only for the purpose of complying with our legal obligations.

However, despite these precautions, it’s important to note that we cannot always guarantee the security of your personal information. Security breaches or unforeseen events may still pose risks to data integrity.

Public information

Please note that any information you choose to share publicly on online platforms (such as comments or reviews) can be accessed and used by others. We cannot control or protect information that you make publicly available.

Notifiable Data Breaches

If we suspect or become aware that your personal information may have been lost, or accessed or disclosed without authorisation, we will promptly investigate and take steps to contain the incident. We will take all reasonable steps to complete our assessment of any suspected breach within 30 days. Where the incident is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required in accordance with the Privacy Act, explaining what has happened and the steps you can take to protect yourself.

Links

Our website may contain links to websites operated by third parties. Those links are provided for convenience and may not remain current or be maintained. We are not responsible for the privacy practices of, or any content on, those linked websites and have no control over or rights in those linked websites. The privacy policies that apply to those other websites may differ substantially from our Privacy Policy and Credit Reporting Policy, so we encourage you to read them before using those websites.

Accessing or correcting your personal information

You can access the personal information we hold about you by contacting us using the information below.  We will usually provide the information requested within 30 days of receiving your request. Please note, in some situations, we may be legally permitted to withhold access to your personal information. We do not charge you for making a request. We may charge you for giving you access, but any charge will not be excessive, and we will tell you what it is before we incur it.

We do not charge for access to credit eligibility information. Sometimes, we may not be able to provide you with access to all of your personal information and, where this is the case, we will advise you in writing as soon as reasonably possible, providing the reasons for our refusal and any mechanism available to complain about the refusal. If we can provide access to your information in another form that still meets your needs, then we will take reasonable steps to give you such access. We may also need to verify your identity when you request your personal information.

If you think that any personal information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us and we will take reasonable steps to promptly correct any information found to be inaccurate, out of date, incomplete, irrelevant or misleading. Please note, in some situations, we may be legally permitted to not correct your personal information. If we cannot correct your information, we will advise you as soon as reasonably possible and provide you with the reasons for our refusal and any mechanism available to complain about the refusal. We ask that you let us know if the information we hold about you is inaccurate or incomplete.

Where your request relates to credit information, credit eligibility information or other credit-related personal information, we will correct it within 30 days of your request, or a longer period if you agree to that in writing. If we need to consult a credit reporting body or another credit provider about your request, we will do that and we will tell you the outcome — you do not need to contact them yourself. If we correct information we have already given to someone else, we will tell them about the correction where the Privacy Act requires us to.

Making a complaint

If you think we have breached the Privacy Act, or you wish to make a complaint about the way we have handled your personal information, you can contact us using the details set out below. Please include your name, email address and/or telephone number and clearly describe your complaint. We will acknowledge your complaint within one business day and give you our decision within 30 days of receiving it.

If we cannot decide your complaint within 30 days, we will tell you before the 30 days is up, explain why, tell you when you can expect a decision, ask you to agree to a reasonable extension, and let you know that you can take the complaint to the Australian Financial Complaints Authority (AFCA). If you are not satisfied with our decision, you can take the complaint to AFCA or the OAIC, free of charge. Their contact details are set out at the end of the Privacy Policy and Credit Reporting Policy below.

Amendments

We may, at any time and at our discretion, vary this Privacy Policy and Credit Reporting Policy by publishing the amended Privacy Policy and Credit Reporting Policy on our website. We recommend you check our website regularly to ensure you are aware of our current Privacy Policy and Credit Reporting Policy.

Contact Us

For further information about our Privacy Policy or practices, or to access or correct your personal information, or make a complaint, please contact us using the details set out below:

The Brighte Privacy Officer
Email: privacy@brighte.com.au
Mail: Level 15, 1 Margaret Street, Sydney NSW 2000

If you require further information about privacy laws generally, please contact:

The Office of the Australian Information Commissioner
Mail: GPO Box 5288, Sydney NSW 2001
Phone: 1300 363 992
Website: https://www.oaic.gov.au/

This Privacy Policy was last updated in November 2026 and is subject to change.

See the Brighte Statement of Notifiable Matters below, which sets out the matters we are required to tell you about before we disclose credit information about you to a credit reporting body.

Credit Reporting Policy

This Credit Reporting Policy (and the Brighte Statement of Notifiable Matters) applies to Brighte Capital Pty Limited (ABN 74 609 165 906) (referred to in this policy as ‘Brighte’, ‘us’, ‘we’ or ‘our’).

At Brighte, we take our obligations to protect personal information about individuals, including credit information and credit eligibility information, seriously. We are bound by Part IIIA of the Privacy Act 1988 (Cth) (‘Privacy Act’) and the Privacy (Credit Reporting) Code 2025 (‘CR Code’), which govern credit reporting in Australia.

About this Credit Reporting Policy

The purpose of this Credit Reporting Policy is to tell you how we manage:

Credit information – this information relates primarily to your credit-related dealings with us, and we can disclose this information to credit reporting bodies. We describe the credit information we collect further below;

Credit eligibility information – this information relates primarily to your credit-related dealings with other credit providers. Credit eligibility information comprises ‘credit reporting information’ provided by credit reporting bodies and credit worthiness information that we derive using “credit information”, including a credit assessment score.

The Privacy Act contains a variety of detailed definitions describing these types of information. We have only included some general explanations above. If you would like to refer to the full provisions in the Privacy Act or the CR Code they are available on the website of the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

This Policy explains:

  • the kinds of credit information and credit eligibility information that we collect and hold;
  • how we collect and hold credit information and credit eligibility information;
  • the purposes for which we collect, hold, use and disclose credit information and credit eligibility information;
  • how you may request access to your credit information and credit eligibility information held by us or request correction of that information;
  • how to make a complaint if you consider that we have not complied with the Privacy Act or with the CR Code, and how we will deal with such complaints; and
  • the circumstances in which we may disclose credit information and credit eligibility information to overseas recipients and the countries where such recipients may be located.

This Policy applies to any individual for whom we hold credit information or credit eligibility information no matter how they interact with us (e.g., on-line, in person or over the phone). The latest version of this Policy will be published on our website.

What kinds of credit information do we collect and hold?

When you apply for credit with us, throughout our relationship, and for as long as we are required under the law, we may collect and hold your credit information. Examples of credit information include:

  • Identification information, such as your name, address, date of birth, employer, driver’s licence or passport details;
  • Consumer credit liability information. This is information about consumer credit accounts you hold, or have held, with us, such as the type of account, the date the account was opened and closed, the maximum amount of credit approved for that account and the specific terms and conditions relating to the repayment of credit under that account;
  • Repayment history information, including whether you have met your repayment obligations under consumer credit we provide, and if not, the extent to which a payment was overdue in a given month. We may disclose repayment history information to a credit reporting body, and credit reporting bodies may retain it for 2 years;
  • Financial hardship information. This is information about a financial hardship arrangement we agree with you in relation to consumer credit - either a temporary arrangement giving you relief from or deferral of your obligations, or a permanent variation to the terms of your credit. For a temporary arrangement, financial hardship information is reported for each month the arrangement applies. For a permanent variation, it is reported only for the first month affected by the variation. Credit reporting bodies may retain financial hardship information for 12 months. A credit reporting body cannot disclose your financial hardship information to a credit provider for the purpose of collecting overdue payments;
  • New arrangement information. This is information about changes to the terms of your existing consumer credit, or new credit provided in relation to an overdue amount, after a default or serious credit infringement has been reported to a credit reporting body.
  • A note that we have made an information request about you with a credit reporting body. An information request is when we ask a credit reporting body to provide us with credit reporting information about you;
  • The type of credit and the amount of credit sought in an application for credit made by you in connection with which we made an information request;
  • Default information about you. This is information about a payment owed by you as a borrower in connection with consumer credit that remains overdue for more than 60 days and is for an amount of at least $150, and which we can disclose to a credit reporting body if certain requirements under the Privacy Act are met.
  • Before we disclose default information about you, we must give you a written notice requesting payment of the overdue amount, and a second written notice telling you that we intend to disclose the default to a credit reporting body. If you ask us for hardship assistance, we will not disclose a default about the overdue payment while we are considering your request, including while we wait for information we need to decide it. If we refuse your request, we will not disclose the default until at least 14 days after we tell you of our decision. These protections do not apply if we reasonably believe your request is on materially the same basis as a hardship request you made in the previous 4 months. If we agree a financial hardship arrangement with you, we will not disclose a default about a payment covered by that arrangement while you are meeting its terms;
  • Where you are a guarantor, different requirements apply before default information about an overdue payment can be disclosed to a credit reporting body. These include giving you written notice of the borrower’s default and requesting payment, at least 60 days having passed since the request for payment, and taking other steps to recover the amount;
  • Payment information about you. Payment information is a statement that an overdue payment in relation to which default information was provided to a credit reporting body has been paid;
  • Court proceedings information about you. This is information about a judgment of an Australian court that is made against you that relates to credit that was provided to, or applied for, by you;
  • Personal insolvency information about you. This is information recorded in the National Personal Insolvency Index and relating to your bankruptcy, a debt agreement proposal given by you, a debt agreement made by you, a personal insolvency agreement executed by you, a direction given, or an order made, under the Bankruptcy Act that relates to your property or an authority signed under the Bankruptcy Act that relates to your property;
  • Publicly available information about you:
  • that relates to your activities in Australia or the external territories and your credit worthiness; and
  • that is not court proceedings information about you or information about you that is entered or recorded in the National Personal Insolvency Index; and
  • An opinion we have on reasonable grounds that you have committed a serious credit infringement in relation to consumer credit that was provided to you. A serious credit infringement includes, in summary:
  • that you were fraudulently obtaining (or attempting to obtain) consumer credit; or
  • that you are fraudulently evading (or attempting to evade) your consumer credit obligations; or
  • that you are no longer intending to comply with your consumer credit obligations as we have not been able to contact you for 6 months in accordance with the Privacy Act.

How do we collect credit information?

We collect credit information in a variety of ways, such as obtaining the relevant information directly from you or by persons acting on your behalf (including on application forms or other forms or in our ongoing dealings with you in connection with credit). Some credit information will also be derived by us from your transactions in connection with credit, such as when you make payments to us.

Exchanges of information about you with credit reporting bodies

We may obtain credit reporting information about you from credit reporting bodies. Credit reporting information includes:

  • credit information of the kinds listed under ‘What kinds of credit information do we collect and hold?’ but relating primarily to your dealings with other credit providers (such as about credit applications you have made or credit that you hold with other credit providers). This information will typically have been provided by other credit providers or other third parties; and
  • credit worthiness information about you that credit reporting bodies derive from the information above, such as credit scores, risk ratings and other evaluations about you.

We may also disclose your credit information relating to your dealings with us to credit reporting bodies. Those credit reporting bodies may include that information in reports that they provide to other credit providers to assist them to assess your credit worthiness.

For example, we will provide information that identifies you and about your application for credit when obtaining credit reporting information for the purposes of assessing that application. Further, if you fail to meet your payment obligations in relation to consumer credit, or commit a serious credit infringement, we may be entitled to disclose this to a credit reporting body.

Brighte may disclose your credit information to one or more credit reporting bodies which are:

Credit reporting bodies are required to have a policy which explains how they will manage your credit-related personal information. If you would like to read the policy please visit their website, or you can contact them directly for further information.

You have the right to request these credit reporting bodies to exclude your credit reporting information from any permissible direct marketing activities Brighte may request them to perform.

You also have the right to request credit reporting bodies not to use or disclose your credit reporting information if you believe that you have been, or are likely to be, the victim of fraud (for example, you suspect someone is using your identity details to apply for credit). The credit reporting body must then not use or disclose that information for an initial ban period of 21 days, which you can ask it to extend. You must contact the credit reporting bodies directly should this be the case.

With your consent, we may also ask a credit reporting body to assess whether the identity information you give us matches information held in its credit files, to help us verify your identity under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth). To make that assessment, the credit reporting body may use names, addresses and dates of birth held in its credit files, including those of other individuals. If you do not consent, we will offer you another way to verify your identity.

What kinds of credit worthiness information do we derive from credit reporting information?

We utilise credit reporting information obtained from credit reporting bodies to derive other information that assists us in assessing your credit worthiness, for example, credit risk ratings and credit scores.

How do we hold and protect credit information and credit eligibility information?

We understand the importance of protecting the personal information, including credit information and credit eligibility information, we hold. We take reasonable steps to ensure that this information is free from misuse, interference, loss, unauthorised access or modification. Examples of these steps include:

  • securing information both in physical and electronic form;
  • having internal procedures and measures limiting access to personal information only to those that need access for their legitimate activities; and
  • protecting our systems by appropriate technology solutions.

We retain credit information and credit eligibility information only for the periods permitted by Part IIIA of the Privacy Act and the CR Code, and we destroy or de-identify it when those periods expire.

For what purposes do we collect, hold, use and disclose credit information and credit eligibility information?

Brighte collects, holds, uses and discloses credit information and credit eligibility information, as well as information derived from credit information and credit eligibility information, about you for purposes reasonably necessary for our business activities and consistently with the requirements in the Privacy Act as permitted by law. These purposes include:

  • to assess applications for credit (including assessing any proposed guarantors);
  • for the ongoing servicing and administration of our accounts and products;
  • to assist with the management, including recovery, of outstanding debts;
  • to assist you if we consider that you may be at risk of default;
  • internal management purposes;
  • for data analysis;
  • to participate in the credit reporting system and provide information to credit reporting bodies as permitted by the Privacy Act;
  • to undertake securitisation activities and debt assignments;
  • to deal with complaints and legal proceedings;
  • to meet our legal and regulatory requirements (such as reporting matters to regulators or enforcement bodies when authorised or required by law); and
  • to assist other credit providers with such purposes in circumstances permitted by the Privacy Act (such as disclosing information to another credit provider with your consent or where you have committed a serious credit infringement).
    Restrictions apply under the Privacy Act in relation to the circumstances and purposes for which such information may be used or disclosed and we comply with these restrictions. For example, credit eligibility information may not be disclosed to some types of overseas entities and restrictions apply on the use of credit eligibility information for direct marketing.

Will we be disclosing your credit information or credit eligibility information to overseas organisations?

As is the case throughout the Australian financial services industry (and other major industries), technology allows for services to be provided by different service providers including some that are located overseas.

We utilise overseas service providers for some of our activities and to do so we may need to disclose credit information or credit eligibility information to those service providers. We may also disclose such information to other overseas recipients for the purposes listed above when permitted to do so by the Privacy Act.

Whilst it is not practicable to list every country in which such recipients are likely to be located, it is likely that the countries to which your credit information or credit eligibility information may be disclosed include Bulgaria, Canada, Costa Rica, Finland, Germany, India, Israel, Japan, Mexico, Mongolia, New Zealand, the Philippines, Singapore, Spain, the United Kingdom and the United States.

How can you access credit eligibility information we hold about you?

You may access the credit eligibility information which we hold about you by contacting us using the details provided at the end of this Policy. We will need to verify your identity before giving you access. We will provide the information requested within 30 days of receiving your request. If there is a reason we are unable to agree to a request for access to your credit eligibility information we will advise you of this in writing. We do not charge you for making a request for access to your credit eligibility information, and we do not charge you for giving you access to it.

How can you seek correction of the credit information or credit eligibility information about you which we hold?

We aim to hold accurate and up-to-date credit information and credit eligibility information about you at all times. If you consider that any such information we hold about you is incorrect in any way, you may seek the correction of that information. To seek such a correction please contact us using the details provided at the end of this Policy. In certain situations, we may not agree to a request to correct information we hold about you. If this occurs, we will advise you of this and our reason for not agreeing to the correction request in writing.

We will correct the information, or tell you that we will not, within 30 days of your request, unless you agree in writing to a longer period. If your request concerns information that came from a credit reporting body or another credit provider, we will consult them and tell you the outcome — you do not need to contact them yourself. We will also tell you how to complain about that decision. If we correct the information, we will give you written notice of the correction and, where the Privacy Act requires, notify any credit reporting body or other person to whom we disclosed it.

How can you make a complaint about our compliance with our credit reporting obligations and how will we deal with such a complaint?

If you believe that we have failed to comply with the credit reporting requirements in Part IIIA of the Privacy Act or the CR Code, please contact us and we will then follow our standard Internal Dispute Resolution process. We will acknowledge your complaint within one business day and tell you our decision within 30 days of receiving it. If we cannot decide it within 30 days, we will tell you before the 30 days is up, explain why, tell you when you can expect a decision, ask you to agree to a reasonable extension, and let you know you can take the complaint to AFCA.

The ‘Contact Us’ section of our website contains details of the ways you can contact us. If the complaint remains unresolved you may refer the matter to our recognised External Dispute Resolution scheme. Brighte is a member of the Australian Financial Complaints Authority (AFCA). AFCA independently and impartially resolves disputes between consumers and participating members on matters including privacy.

The contact details for AFCA are:

Australian Financial Complaints Authority
Email: info@afca.org.au

Mail: GPO Box 3, Melbourne VIC 3001

Phone: 1800 931 678
Website: https://www.afca.org.au/

Alternatively, the matter may be referred to the Office of the Australian Information Commissioner (the ‘OAIC’). The contact details for the OAIC are:

The Office of the Australian Information Commissioner
Mail: GPO Box 5288, Sydney NSW 2001
Phone: 1300 363 992
Website: https://www.oaic.gov.au/

Brighte Contact detail

The Brighte Privacy Officer
Email: privacy@brighte.com.au
Mail: Level 15, 1 Margaret Street, Sydney NSW 2000

This Credit Reporting Policy was last updated in November 2026 and is subject to change.