Privacy Policy

1. Purpose & Scope

CRAFT Group of Companies (CRAFT) is committed to protecting the privacy and confidentiality of personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy outlines how CRAFT will collect, use, disclose, store, and protect personal information.

This policy applies to all personal information collected, held, and used by CRAFT in the course of providing financial services as a CAR. It applies to all employees, contractors, and third parties who handle personal information on behalf of CRAFT.

2. Definitions

  • Personal Information: Information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not and whether it is recorded in a material form or not.
  • Sensitive Information: A subset of personal information that includes information about an individual’s racial or ethnic origin, political opinions, religious beliefs, sexual orientation, criminal record, or health information.

3. Collection of Personal Information

3.1 Types of Information Collected

CRAFT may collect the following types of personal information:

  • Name, address, and contact details (e.g., phone number, email address).
  • Date of birth, gender, and occupation.
  • Financial information (e.g., bank account details, tax file numbers).
  • Identification documents (e.g., driver’s licence, passport).
  • Sensitive information (only where necessary and with consent).

3.2 How Information is Collected

Personal information may be collected:

  • Directly from individuals (e.g., through forms, emails, or phone calls).
  • Indirectly from third parties (e.g., brokers, financial advisers, or credit reporting agencies).
  • Through our website or online platforms (e.g., cookies, IP addresses).

3.3 Purpose of Collection

Personal information is collected for the following purposes:

  • Providing financial services and products.
  • Complying with legal and regulatory obligations.
  • Managing client relationships and communicating with clients.
  • Conducting marketing and promotional activities (with consent).

4. Use and Disclosure of Personal Information

4.1 Use of Personal Information

CRAFT will only use personal information for the purposes for which it was collected, or for a related purpose that is reasonably expected.

4.2 Disclosure of Personal Information

Personal information may be disclosed to:

  • Third-party service providers (e.g., IT providers, auditors, or legal advisors).
  • Regulatory authorities (e.g., ASIC, AUSTRAC).
  • Credit reporting agencies or financial institutions.
  • Other parties with the individual’s consent or as required by law.

4.3 Overseas Disclosure

If personal information is disclosed to overseas recipients, CRAFT will take reasonable steps to ensure the recipient complies with the APPs.

5. Data Quality and Security

5.1 Data Quality

CRAFT will take reasonable steps to ensure that personal information is accurate, complete, and up to date.

5.2 Data Security

CRAFT will take reasonable steps to protect personal information from misuse, interference, loss, unauthorized access, modification, or disclosure. This includes:

  • Implementing physical, electronic, and procedural safeguards.
  • Regularly reviewing and updating security measures.
  • Training employees on privacy and data security.

6. Access and Correction

6.1 Access to Personal Information

Individuals may request access to their personal information held by CRAFT. Requests must be made in writing and will be responded to within a reasonable period (usually 30 days).

6.2 Correction of Personal Information

If personal information is inaccurate, incomplete, or out of date, individuals may request corrections. CRAFT will take reasonable steps to correct the information.

7. Complaints Handling

If an individual believes their privacy has been breached, they may lodge a complaint with CRAFT. Complaints will be handled in accordance with our Complaints Handling Policy.

Complaints Contact Details:
[email protected]

If the individual is not satisfied with the outcome, they may escalate the complaint to the Office of the Australian Information Commissioner (OAIC).

OAIC Contact Details:
Phone: 1300 363 992
Website: www.oaic.gov.au

8. Direct Marketing

CRAFT will not use personal information for direct marketing purposes.

9. Policy Review and Updates

This policy is reviewed annually or in response to regulatory changes. Updates are communicated to all relevant stakeholders.