Privacy Policy

We collect, use and disclose your Personal Information so we can:

• consider your request for products and services, including your eligibility;
• process your application and provide you with the products and services;
• provide information on other products and services offered by or through us;
• confirm your identity;
• manage our relationship with you;
• complying with our legal obligations;
• monitor and evaluate products and services;
• gather and aggregate information for statistical, prudential, actuarial and research purposes;
• assist you with queries; and
• take measures to detect and prevent fraud

We may not be able to provide you with the products or services you are seeking if you provide
incomplete or inaccurate information.

Quality of information

We ensure that the Personal Information we collect, use or disclose is accurate, up to date, complete and relevant.

Please contact us if any of the details you have provided to us change or if you believe that the information we have about you is not accurate or up to date.

We may also take steps to update information we hold, for example, an address, by collecting Personal Information from publicly available sources such as telephone directories or electoral rolls.

How do we protect and hold your Personal Information?

We are committed to ensuring that we protect any Personal Information we hold from misuse, interference, loss, unauthorised access, modification and disclosure.

For this purpose, we have a range of practices and policies in place to provide a robust security
environment. We ensure the on-going adequacy of these measures by regularly reviewing them.

We have the following security measures in place to protect against misuse, loss and alteration
of Personal Information under our control. Our security measures include, but are not limited
to:

• educating our staff as to their obligations with regard to your Personal Information;
• requiring our staff to use passwords when accessing our systems;
• encrypting data sent from your computer to our systems during Internet transactions and customer access codes transmitted across networks;
• employing firewalls, intrusion detection systems and virus scanning tools to protect against unauthorised persons and viruses from entering our systems;
• using dedicated secure networks or encryption when we transmit electronic data for purposes of outsourcing;
• providing secure storage for physical records; and
• employing physical and electronic means such as alarms, cameras and guards (as required) to protect against unauthorised access to buildings

Where Personal Information we hold is identified as no longer needed for any purpose, we ensure it is effectively and securely destroyed, for example, by shredding or pulping in the case of paper records or by degaussing (demagnetise of the medium using alternating electric currents) and other means in the case of electronic records and equipment.

The Personal Information retained by us could include transactional and financial information along with contact details. The Personal Information does include the records that have been stored on the secure server. Where we retain adequate records for legal and accounting purposes, the Personal Information is stored and held securely in controlled facilities.

Who do we share your Personal Information with?

We may share your Personal Information with third parties to help deliver or support the provision of products or services to you.

In all circumstances where your Personal Information may become known to our contractors, agents and outsourced service providers, there are confidentiality arrangements in place. Contractors, agents and outsourced service providers are not able to use or disclose Personal Information for any purposes other than our own.

We take our obligations to protect your Personal Information very seriously we make every effort to deal only with parties who share and demonstrate the same attitude.

Depending on the product or service you have, the entities we exchange your Personal
Information with include but are not limited to:

• brokers and agents;
• affiliated product and service providers and external product and service providers for whom we act as agent (so that they may provide you with the product or service you seek or in which you have expressed an interest);
• auditors we appoint to ensure the integrity of our operations;
• any person acting on your behalf, including your solicitor, settlement agent, accountant, executor, administrator, trustee or guardian;
• your referee (to confirm details about you);
• if required or authorised to do so, regulatory bodies and government agencies;
• credit reporting bodies;
• debt collectors;
• insurers, including proposed insurers and insurance reference agencies (where we are considering whether to accept a proposal of insurance from you and, if so, on what terms);
• medical practitioners (to verify or clarify, if necessary, any health information you may provide);
• other financial institutions and organisations at their request if you seek credit from them (so that they may assess whether to offer you credit);
• investors, advisers, trustees and ratings agencies where credit facilities and receivables are pooled and sold (securitised);
• other organisations who in conjunction with us provide products and services (so that they may provide their products and services to you); and
• professional associations or organisations with whom we conduct an affinity relationship (to verify your membership of those associations or organisations)

We may also disclose your Personal Information to others where:

• we are required to disclose information by law e.g. under court orders or statutory notices pursuant to taxation or social security laws or under laws relating to sanctions, anti- money laundering or counter-terrorism financing;
• you may have expressly consented to the disclosure or your consent may be reasonably inferred from the circumstances; or
• we are otherwise permitted to disclose the information under applicable Privacy Laws

Do we disclose your Personal Information overseas?

We currently do not utilise overseas service providers for any of our activities.

However, if we were to utilise overseas service providers, we only disclose your Personal Information when permitted to do so by the Privacy Act and after we ensure that:

• the overseas recipient does not breach the APPs; or
• you are able to take action to enforce the protection of a law or binding scheme that has the effect of protecting the information in a way that is at least substantially similar to the way in which the APPs protect the information; or
• you have consented to the disclosure after we expressly informed you that there is no guarantee that the overseas recipient does not breach the APPs; or
•  the disclosure of the information is required or authorised by or under an Australian law or a court/tribunal order

We may store your Personal Information in cloud-based software or other types of networked or electronic systems. As electronic or networked systems can be accessed from various countries via an internet connection, it’s not always practicable to know in which country your Personal Information may be held. If your Personal Information is stored in this way, disclosures may occur in countries other than those listed.

Overseas organisations may be required to disclose information we share with them under a foreign law. In those instances, we are not responsible for that disclosure.

Do we use or disclose your Personal Information for direct marketing?

We only use or disclose the Personal information we hold about you for the purpose of direct marketing if we have received the Personal Information from you and you have not requested not to receive such information.

Direct marketing includes, but is not limited to, contacting our clients to provide you with information on our products and services that may interest you.

If you wish to opt-out of receiving marketing information altogether, you can write to us at marketing@megacashgo.com.au.

In direct marketing communication we always inform you of your right to opt out of receiving direct marketing communications.

How can you access your Personal Information?

You can request us to provide you with access to the Personal Information we hold about you.

Requests for access to limited amounts of Personal Information, such as checking to see what address or telephone number we have recorded, can generally be handled over the telephone.

If you would like to request access to more substantial amounts of Personal Information such as details of what is recorded in your account file, we require you to complete and sign a “Request for Access” form.

Following receipt of your request, we provide you with an estimate of the access charge and confirm that you want to proceed.

We do not charge you for making the request for access, however access charges may apply to cover our costs in locating, collating and explaining the information you requested. The charges are based on a rate of $70 dollars per hour.

We do respond to your request as soon as possible and in the manner requested by you. We endeavour to comply with your request within fourteen (14) days of its receipt but, if that deadline cannot be met owing to exceptional circumstances, your request is dealt with within thirty (30) days. It helps us provide access if you can tell us what you are looking for.

Your identity is confirmed before access is provided.

Can we refuse to give access?

In particular circumstances we are permitted by law to deny your request for access or limit the access we provide. We let you know why your request is denied or limited if this is the case. For example, we are not required to give you access where giving you access to your Personal Information would pose a serious threat to any person’s life, health or safety or giving access would be unlawful or where we reasonably conclude your request to be frivolous or vexatious.

If we refuse to give access to the Personal Information or to give access in the manner requested by you, we will give you a written notice setting out the reasons for the refusal, the mechanisms available to complain and any other relevant matter.

Correction

We are committed to and do take all reasonable steps in respect of maintaining accurate, timely, relevant, complete and appropriate information about our clients, website users and other people that we deal with in our business.

We correct all Personal Information that we believe to be inaccurate, out of date, incomplete, irrelevant or misleading given the purpose for which that information is held or if you request us to correct the information.

If we correct your Personal Information that we previously disclosed to another APP entity you can request us to notify the other APP entity of the correction. Following such a request, we will give that notification unless it is impracticable or unlawful to do so.

We respond to any requests for correction within a reasonable time of receipt of the request.
A reasonable time period is no longer than thirty (30) days after the request being received.

Refusal to correct information

If we refuse to correct the Personal Information as requested by you, we give you a written notice setting out the reasons for the refusal. Such reasons set out the grounds for refusal, the mechanisms available to complain and any other relevant matter.

Request to associate a statement

If we refuse to correct the Personal Information as requested by you, you can request us to associate with the information a statement that the information is inaccurate, out of date, incomplete, irrelevant or misleading. We will then associate the statement in such a way that makes the statement apparent to users of the information.

Notifiable data breaches scheme

From February 2018, the Privacy Act includes a new Notifiable Data Breaches (“NDB”) scheme which requires us to notify you and the Office of the Australian Information Commissioner (“OAIC”) of certain data breaches that is likely to result in serious harm to affected individuals and provide recommendations of steps you can take to limit the impacts of the breach.

If we believe there has been a data breach that impacts your Personal Information and creates a likely risk of serious harm, we notify you and the OAIC as soon as practicable and keep in close contact with you about the nature of the breach, the steps we are taking and what you can do to reduce the impacts to your privacy.

If you believe that any Personal Information we hold about you has been impacted by a data breach, you can contact us using the contact details set out as per clause 21 below.

Privacy complaints

We offer a free internal complaint resolution scheme to all of our customers. Should you have a privacy complaint, please contact us to discuss your concerns. Our contact details set out as per clause 21 below.

To assist us in helping you, we ask you to follow a simple three-step process:

• gather all supporting documents relating to the complaint;
• contact us and we review your situation and if possible, resolve your complaint immediately; and
• if the matter is not resolved to your satisfaction, please contact our Compliance Officer on 1800 841 013 or put your complaint in writing and send it to Mega Cash Go at PO Box 142, Coogee NSW 2034

We rectify any breach if the complaint is justified and take necessary steps to resolve the issue.

In certain situations, to deal with a complaint it may be necessary to consult with third parties.
However, please note any disclosure of Personal Information to third parties is provided with
your authority and consent.

After a complaint has been received, we send you a written notice of acknowledgement setting out the process. The complaint is investigated, and the decision is sent to you within thirty (30) days unless you have agreed to a longer time. If a complaint cannot be resolved within the agreed time frame or a decision could not be made within thirty (30) days of receipt, a notification is sent out to you setting out the reasons and specifying a new date when you can expect a decision or resolution.

If you are not satisfied with our internal privacy practices or the outcome in respect to complaint, you may approach the OAIC with your complaint:

Office of the Australian Information Commissioner
Address: GPO Box 5218, Sydney NSW 2001
Phone: 1300 363 992
Email: enquiries@oaic.gov.au
Website: oaic.gov.au

Contact us

If you have any questions or would like further information about our privacy, credit reporting and information handling practices, please contact us by:

• Email: customercare@megacashgo.com.au; or
• Phone: 1800 841 013; or
• Post: PO Box 142, Coogee, NSW 2034