Dated 14 May 2025

Your privacy is important

At CBA New Digital Businesses Pty Ltd trading as Credit Savvy Australia (“Credit Savvy”, “We” and “Us” and “Our”), We understand how important it is to keep any personal information We have about Our users, including visitors browsing the Credit Savvy website (www.creditsavvy.com.au) (“Website”) or the Credit Savvy app (“App”) and registered members of the Website or App (“You” and “Your”) private, protected and safe. We are committed to protecting the personal information of individuals with whom We deal with.

You can be confident that We comply with the Privacy Act 1988 (Cth) (“Privacy Act”) and the Australian Privacy Principles for the protection and use of personal information. This Credit Savvy Privacy Policy (“Privacy Policy”) outlines how We can collect, use, hold and disclose Your personal information.

Please read through this Privacy Policy carefully prior to accessing or using the Website or the App. Your access or use of the Website or the App indicates that You understand the content of this Privacy Policy and any other related policies, notices, representations or additional terms applicable to the Website or the App, including the Credit Savvy Terms of Use. The personal information We seek to collect about You is necessary for the service We provide. If You do not provide Us all of the information We require, We may not be able to deliver Our service to You.

What kind of personal information do We collect?

If You register your interest for Partnership with Us, We will collect personal information directly from You. This will include identification information such as Your full name, address and contact details.

If you use our services through the Credit Score Hub in the Commonwealth Bank app, We may collect credit reporting information about You. Details of the type of credit information We receive from Experian Australia Credit Services Pty Ltd ABN 12 150 305 838 (“Experian”) is outlined in detail in the Credit Savvy Terms of Use.

Why do We collect Your personal information?

We will use Your personal information for the reason We collected it and in order to provide You with Our services.

• Act as Your agent as ‘access seeker’ to obtain credit reporting information about You;
• Provide You with Your credit score and other credit reporting information;
• Manage Our risks and help identify and investigate any illegal activity, such as fraud;
• Contact You, for example for potential Partnership opportunities;
• Comply with Our legal and regulatory obligations and assist government and law enforcement agencies or regulators;
• Conduct internal system development testing and analysis; and
• Any other customer support purposes.

Sending information overseas

The information you provide us will not be sent overseas.

Do We gather and combine data to get insights?

We will not use the information you provide us for data and insights.

Do We use information for direct marketing?

We will not be using the information you provide us for direct marketing.

Who do We exchange Your information with?

The information you provide us will only be shared internally, this may include our parent company the Commonwealth Bank of Australia (CBA) and other members of the CBA Group.

Generally, We disclose personal information to organisations that help Us provide Our services to You. These may include:

• Credit reporting bodies, such as Experian Australia Credit Services Pty Ltd. For more information about how Experian use and handle Your personal information, please refer to Experian’s privacy policies at www.experian.com.au;
• Our suppliers, agents, associates, contractors and external service providers (including, for example, Hubspot Inc to manage complaints. For more information about how they use and handle your personal information, please refer to their privacy policies on their websites.

Security and storage of Your personal information

How safe and secure is the information We hold about You?

We take great care with the information We hold about You. Our aim is to ensure that any details are securely protected from misuse, interference and loss, and unauthorised access, modification or disclosure. We will take reasonable care to make sure that We keep Your information in an accurate, complete and up-to-date manner.

What about online security?

The Website is professionally hosted and operates in a secure environment. The Website uses encryption techniques to enhance Your privacy and security when using the Website. You should however be aware that there is always an inherent risk in transmitting Your personal information via the internet.

How long do We keep information about You?

We will hold your information for as long as required for Partnership opportunities but for no longer than 2 years after the date received. If you no longer wish for us to hold your information on our partnership database, you may ask us to delete your personal information by contacting us at complaints@x15ventures.hs-inbox.com. Credit Savvy will take reasonable steps to destroy or de-identify your data unless there is a business or legal requirement for us to retain it.

Accessing, updating and correcting Your information

Can You get access to Your information?

If you would like to know or access your information you can contact us at complaints@x15ventures.hs-inbox.com.

Updating and correcting Your information

If you would like to update your information you can contact us at complaints@x15ventures.hs-inbox.com.

Cookies and analytics

What are cookies?

Cookies are small data files that are downloaded from Our web servers and stored on Your hard drive.

How We use cookies on the Website

Cookies are used on the Website to track Your journey through Our Website. The type of cookie We use collects no personal information at all.

Other important information

Links to other websites

We provide You with links from Our Website to other third-party sites. The provision of a link does not imply any endorsement, nor can We accept responsibility for the conduct of third-parties linked to Our Website. Once You transfer from Our Website to another website, We are not responsible for the conduct or practices of those third-party websites.

Changes to the Privacy Policy

Sometimes We update Our Privacy Policy. Any modifications will be effective immediately upon posting the amended Privacy Policy on the Website or the App. We may contact You or notify You when You log into the Website or the App that there have been changes to Our Privacy Policy. You can always find the most up-to-date version on the Website.

Contact Us

Please contact Us if You:

• Have a concern about the handling, use or disclosure of Your personal information;
• Would like further information about the way We manage the personal information that We hold; or
• Wish to access or update Your personal information.

You can do so by sending Us an email at complaints@x15ventures.hs-inbox.com.

We will make every reasonable effort to investigate Your concern and notify You of the outcome as quickly as possible. If You are unhappy with Our response, You can contact The Office of the Australian Information Commissioner at:

Office of the Australian Information Commissioner (OAIC)
GPO Box 5218
Sydney NSW 2001
Email: enquiries@oaic.gov.au
www.oaic.gov.au

Complaints

If You have a concern or complaint about how We have handled Your personal information, let Us know and We’ll try to fix it. You can make a complaint by emailing us at complaints@x15ventures.hs-inbox.com. We try to get things right the first time – but if We don’t, We’ll do Our best to sort it out.

If Your complaint is about how We handle Your personal information, You can also contact the Office of the Australian Information Commissioner (OAIC).

Office of the Australian Information Commissioner (OAIC)
Website: www.oaic.gov.au
Phone: 1300 363 992
Postal Address: Office of the Australian Information Commissioner, GPO Box 5218, Sydney, NSW, 2001