Privacy & Credit Reporting Policy
A. ABOUT THIS POLICY
WeMoney Pty Ltd NZBN 9429050147854 (WeMoney
) respects your privacy and want you to understand how we collect, hold, use, and share your personal information.
We manage your personal information in accordance with the Information Privacy Principles found within the New Zealand Privacy Act 2020 (Privacy Act
), the Privacy Regulations 2020 (Regulations
) and registered privacy codes (together known as ‘Privacy Laws
) covers our data collection practices and describes your rights to access, correct, or restrict our use of your personal information
as defined in the Privacy Act (Data
). The WeMoney application services is a smart money management service that connects all of your financial accounts in one place, tracks your overall financial health including providing users (you
) with details about your credit score as well as information and tools using your financial data to compare for you a range of products, credit providers and services and make your aware of options available to you for your consideration. We may also tell you about products or promotions from our connected network of product providers.
We are committed to safeguarding the privacy of our website visitors and service users.
For any queries relating to this policy, please contact our privacy officer;
WeMoney Privacy Officer
Level 2/23 Foster Street, Surry Hills NSW 2010
1. Collection of Personal Information
The Privacy Act defines personal information as any information or opinion about an identifiable natural person.
As part of providing any of our Services we may collect, hold, process and share your personal information which can include:
(a) Identification Information
- This includes your name, address, contact details, and date of birth, occupation or place of work, your identity documents needed to identify you in order to provide the Services to you and protect you against fraud and unlawful activity.
(b) Financial information -
This includes your occupation and financial information that may include your personal finances, bank account, credit card details, transaction information, financial solvency and other financial related information in order for us to provide the Services to you and to give you access to the products and services provided by our platform partners.
(c) Credit-related information -
Where you have consented to us being your access seeker, we will collect your credit-related information about you, such as your credit score, credit capacity, repayment history information, credit history, consumer credit liability information and other information that appears on your credit file.
2. How we collect personal information
We collect your personal and credit information
several ways, such as:
(a) Directly From you
Most information will be collected from you personally, this can be taken by us:
(i) If you call or email us.
(ii) When we provide our Services to you.
(iii) When we manage our customer relationships and service provider relationships.
(iv) If you provide us with feedback or make a complaint.
(v) If we provide you with our Services.
(vi) If you apply for an account with us.
(vii) When CCTV footage is recorded at our offices or premises.
(viii) Your information that is in the public domain.
(ix) If you subscribe to our newsletters and marketing lists.
(x) Other information that may be collected include details provided on a resume sent to us relating to an employment opportunity.
(b) Credit-Related Personal Information
We may obtain your credit-related personal information
from a Credit Reporting Agency when we have obtained your credit report with your consent.
We collect your personal and credit-related personal information via our electronic records created when you use our website, tablet or mobile applications. For example, information about your location or activity including the date of and time of visits, which pages are viewed, how you as the user navigate through the website and interact with the webpages (including fields completed in form and applications), IP address, telephone number, information about the device used to visit our website and whether you've accessed third party sites.
(d) Information from other platforms
We may also collect information about you that is available from a social media or other platform providers where you use your social media account to register for WeMoney (for example, if you register for WeMoney via your Facebook account) or if your social media account is linked to the email address you use to access our Services.
(e) Third-party services providers
We may also receive your personal information from third parties that we deal with on your behalf and from our service providers. We may also receive your personal information from another party by any other means. If we do, we will apply the Privacy Laws in deciding whether it is lawful to keep the information received.
In addition, if you apply for a job or position with us we may collect certain information from you (including your name, contact details, working history, and relevant records checks) from any recruitment consultant, your previous employers, and others who may be able to provide information to us to assist in our decision on whether or not to make you an offer of employment or engage you under a contract.
Any information we receive that we are not lawfully required to hold will be deleted or destroyed.
Acceptance of any of our Services via an application in writing, orally or electronic means will be deemed as giving consent to the disclosures detailed herein.
4. How we hold personal information
We will keep your personal information securely and much of the information we hold about you will be stored electronically in cloud-based, or other types of networked or electronic storage centres that comply with the Privacy Laws whether the data is kept within New Zealand, Australia or other overseas countries. Some information that we hold about you may be stored in physical form. The security of your personal information is important to us.
We will take appropriate technical and organisational precautions to secure your personal information and to prevent the loss, misuse, unauthorized access, disclosure or alteration of your personal information.
Much of the information we hold about you will be stored electronically. We store some of your information in secure data centres that are located in New Zealand and Australia. We also store information in data centres of our contracted service providers (including cloud storage providers), and some of these data centres may be located outside of New Zealand or Australia.
We use a range of physical, electronic and other security measures to protect the security, confidentiality and integrity of the personal information we hold both in Australia and overseas. For example:
(a) access to our information systems is controlled through identity and access management controls;
(b) employees and our contracted service providers are bound by internal information security policies and are required to keep the information secure;
(c) all employees are required to complete training about privacy and information security; and
(d) we regularly monitor and review our security measures and compliance with internal policies and industry best practices.
You acknowledge that the transmission of unencrypted (or inadequately encrypted) data over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet and you do so at your own risk.
Also, our website may have links to external websites, and we take no responsibility for the privacy practices or the content of those other sites.
5. Use and disclosure of Information
We will use or disclose personal information held about you as permitted by law and for the business purposes for which it is collected (e.g. provision of our Services, including administration of our Services, notifications about changes to our Services, record-keeping purposes, technical maintenance, obtaining or maintaining insurance coverage, managing risks or obtaining professional advice) - that is, to carry on our business activities and provide our Services to you.
We may use your personal information to comply with legislative or regulatory requirements in any jurisdiction, for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure, to prevent fraud, crime or other activity that may cause harm in relation to our Services and help us run our business and maintain integrity.
We may also use your personal information to tell you about our Services we think may interest you or for a purpose related to the primary purpose of collection or where you would reasonably expect that we would use the information in such a way, subject to legal restrictions on using your personal information for marketing purposes.
6. Our Services to you
Collecting your personal information will assist us in providing our Services to you and this includes but is not limited to:
(a) processing applications for the provision of our Services, providing you with credit assistance or facilitating any credit to you;
(b) managing our Services to you which also includes; managing our customer relationships, processing payment receipts, and invoices;
(c) assessing and monitoring your creditworthiness;
(d) establishing your identity to ensure that we are dealing with you;
(e) responding to enquiries relating to your application, accounts and other Services provided to you;
(f) detecting and preventing fraud and other risks to you and other individuals;
(g) understanding your needs, developing and offering our Services to you as well as researching and developing new services;
(h) payment system operators (e.g., merchants receiving card payments);
(i) our product suppliers, sponsors, or promoters of any competition that we conduct via our services;
(j) our existing or potential agents or business partners;
(k) providing you with direct marketing relating to products that you may be interested in;
(l) ensuring workplace health and safety of our employees;
(m) dealing with any complaints made by you;
(n) specific third parties authorised by you to receive information held by us, including credit reporting bodies;
(o) complying with our legal and regulatory compliance requirements; or
(p) enforcing our rights, making legal enquiries, or taking legal action.
7. Disclosing your personal information to others
We may disclose your personal information to our insurers and/or professional advisers insofar as reasonably necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, obtaining professional advice, or the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
We may discloser your personal information for offer products and services to your by way of direct marketing.
We may disclose your personal information to our suppliers or subcontractors insofar as reasonably necessary to provide the relevant Services to you or providers for the operation of our websites, data analytics and/or our business.
In addition to the specific disclosures of personal information set out in this section 7, we may disclose your personal information where such disclosure is necessary for compliance with a legal or regulatory obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
We may also disclose your personal information when you have obtained your consent.
We may disclose your information to product providers (such as retailers and banks) in connection with a request by you for one of their products (for example, when you apply for a loan or when you agree to receive direct marketing from us or our product providers).
8. Direct Marketing
We may use your personal information for direct marketing. This means we may send information to you that relates to promotions from WeMoney or one of its preferred suppliers. We may offer you products and services by various means, including by mail, telephone, email, SMS or other electronic means, such as through social media or targeted advertising. You have the right to object to our processing of your personal information for direct marketing purposes. If you make such an objection, we will cease to process your personal information for this purpose. If you do not wish your personal information to be used or disclosed for the promotional purposes described above, please contact us via the WeMoney application. We will not sell your personal information to other companies or organisations.
9. Third Party Websites
10. Do we transfer your information overseas?
We may disclose your personal information to overseas recipients in order to provide our services and for administrative, data storage, product analysis or improvement purposes or other business management purposes. The countries to which this information may be disclosed include the United States of America, Canada, United Kingdom and countries within the European Union, Japan, Singapore and New Zealand. Additionally, the locations where we handle, store and process your data may change as our business needs change and we appoint other service providers from time to time.
Prior to disclosing your personal information to an overseas recipient, unless a permitted general situation applies, we will take all reasonable steps to ensure that:
(a) the overseas recipient is able to comply with the Privacy Laws; or
(b) the overseas recipient is subject to a law, or binding scheme, that has the effect of protecting the information in a way that, overall, is at least substantially similar to the way the Privacy Laws; or
(c) you have consented to us making the disclosure.
11. Direct Marketing
We may use your personal information for direct marketing. This means we may send information to you that relates to promotions from WeMoney or one of its preferred suppliers. We may offer you products and services by various means, including by mail, telephone, email, SMS or other electronic means, such as through social media or targeted advertising.
You have the right to object to our processing of your personal information for direct marketing purposes. If you make such an objection, we will cease to process your personal information for this purpose.
If you do not wish your personal information to be used or disclosed for the promotional purposes described above, please contact us via the WeMoney application, our website to express your wish to opt out or click the “opt out
” at the bottom of any electronic communication from us.
We will not sell your personal information to other companies or organisations.
12. Wish to stay anonymous?
You can withhold your personal information when speaking with us if you are making a general enquiry. However, if you wish for us to provide you with our Services, we will need to identify you.
13. Retaining and deleting personal information
We will retain your personal information for as long as legally required and when we no longer are legally required or have a legitimate purpose to retain it, we will either delete, destroy, desensitize or anonymize it.
We may retain your personal information where such retention is necessary for compliance with a legal or regulatory obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
14. Your Privacy Law Rights
We have summarised the rights that you have under the Privacy Laws. Some of the rights are complex, and not all of the details have been included in our summaries. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.
The summary of your rights under the Privacy Laws are:
(a) to request, at any time, for us to inform you of the personal information we hold about you;
(b) the right to access your personal information;
(c) the right to rectification of your personal information;
(d) the right to erasure (where we have no legitimate right or business requirements to retain your personal information);
(e) the right to restrict or object to processing (where we have no legitimate right or business requirements to process your personal information);
(f) the right to complain to a supervisory authority; and
(g) the right to withdraw your consent (where we have no legitimate right or business requirements to retain or process your personal information).
We may refuse to give you access to personal information we hold about you and we will act reasonably and in accordance with the Privacy Laws.
If we refuse to give you access to or to correct your personal information, we will give you a notice explaining our reasons except where it would be unreasonable to do so in accordance with the Privacy Laws.
15. WeMoney Services account deletion
Your WeMoney account and all associated data can be deleted in two ways:
(a) use the 'delete account
' button in the 'my details
' section, accessible from the settings screen of the WeMoney application; or
(b) request account deletion by emailing firstname.lastname@example.org from the email account with which your account is registered (for social sign in, the email account of your Google or Facebook account).
16. About cookies & pop-up
Cookies may be either "persistent
" cookies or "session
" cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.
Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from the cookies.
We may also use a pop-up notice which only stores your session information, device details and geo-location. The purpose of the pop-up is for users that choose to subscribe, there will be a content drip workflow that periodically provides the user with articles and information related to our services. The article/information page links will appear in the user’s browser while they are browsing at other sites.
C. CREDIT REPORTING
17. Use of information by CRAs
Credit Reporting Agencies (CRA) are authorised by law to handle your credit-related information.
As permitted by law, we may collect, hold, use or disclose credit-related information held about you for the purposes of:
(a) to provide you with our Services;
(b) to deal with complaints and meet legal and regulatory requirements; and
(c) to assist other credit providers to do the same.
18. WeMoney’s chosen CRAs
WeMoney shares credit-related information with the following CRAs:
(a) Equifax New Zealand Services and Solutions Limited (Equifax)
T: 0800 653 309
(b) Experian New Zealand Limited (Experian)
T: (64) 9 927 4611
(c) Centrix Group Limited (Centrix)
T: 0800 236 874
You are able to obtain a copy of their credit reporting policies from their websites.
We may change our chosen CRA in the future. If we do, we will let you know of that change by posting an announcement on our website.
D. NOTIFIABLE DATA BREACHES
If we believe that there has been a privacy breach, we’ll identify the issue and take appropriate steps to minimise any harm to you.
If we believe there has been a data breach that impacts your personal information and creates a likely risk of serious harm, we will notify you and the Office of the Privacy Commissioner as soon as possible and keep in close contact with you about the nature of the breach, the steps we are taking and what you can do to also reduce the impacts to your privacy.
If you believe that any personal information, we hold about you has been impacted by a data breach, you can contact us using the contact details below.
E. COMPLAINTS HANDLING
19. Contact us
You may exercise any of your rights in relation to your personal information by contacting us. If you have a question or complaint about how your personal information is being handled by WeMoney, our affiliates or contracted service providers, please contact us at:Attention
: Privacy OfficerE-mail
: Level 2/23 Foster Street, Surry Hills NSW 2010
We will try to have your complaint resolved within 5 business days, but it may take longer depending on the complaint. If this is the case, we will aim to resolve your complaint within 30 days. All complaints will be handled in accordance with our Internal Dispute Resolution Policy.
20. The Office of the New Zealand Privacy Commissioner
Under the Privacy Laws you may also complain to the Office of the New Zealand Privacy Commissioner (OPC
) about the way we handle your personal information. Please note the OPC requires that any complaint be first made to the respondent organisation. The law also allows 30 days for the respondent organisation to deal with the complaint before a person may make a complaint to the OPC.
The Commissioner can be contacted at:
Office of the New Zealand Privacy Commissioner
PO Box 10094
Phone: 0800 803 909