This is the Privacy Policy for all entities within the First Nations Finance Group. Members of the First Nations Finance Group provide both loans to both individuals and entities. Loans provided by the First Nations Finance Group include loans which are regulated by the National Consumer Credit Protection Act, 2009 (Cth) (NCCP) as well as loans which are not regulated.
In this Privacy Policy, the words ‘First Nations Finance’,’we’, ‘us’ or ‘our’ refers to the following entities, jointly and severally:
References to ‘you’ and ‘your’ in this Privacy Policy refer to any individual who accesses the First Nations Finance website, any individual who applies for a loan with First Nations Finance, any individual who is associated with an entity that applies for a loan with First Nations Finance or any individual who seeks employment with the First Nations Finance Group.
First Nations Finance understands how important it is to protect your personal information and we will endeavour to do so in accordance with the Privacy Act, 1988 (Cth) (including the Australian Privacy Principles (APPs) and any applicable APP Code and any other relevant law) (Privacy Act) at all times. This document sets out our Privacy Policy commitment in respect of personal information that you may provide to us.
In this Privacy Policy references to:
When we refer to Personal Information we mean information or an opinion about an individual, from which that individual is, or may reasonably be, identified. Such information may be collected directly from the individual or may be collected indirectly.
This information may include the individual’s name, date of birth, driver’s licence number, marital status, number and age of your dependants, phone number, email address, address, nationality and employment history.
Personal information includes sensitive information. Sensitive Information includes information about an individual’s health, medical history, race or ethnic background, their religion, trade union membership, political opinion, sexual preference or criminal record. It also includes biometric and genetic information (such as copies of face, fingerprints, iris, palm, signature or voice).
Personal Information also includes credit information about you. Credit Information is information which is used to assess your eligibility for a loan (or your eligibility to act as a guarantor of certain loans) and may include information about your income, assets, liabilities and repayment history information.
This Privacy Policy applies to all products and services provided to you by First Nations Finance. It also includes all Personal Information that we may collect about you when you access our website or apply for employment with us.
Any Personal Information that we collect about you will only be collected, used or disclosed as set out in this Privacy Policy, where we have your consent to do so, or as otherwise required or authorised by law.
However, our website may also contain links to third party websites. A link to another website does not mean that we endorse or approve the information on that website. If you link to a third party’s website through our website, this Privacy Policy does not apply to the collection, use or disclosure of your Personal Information by that third party. You should contact that third party to obtain relevant information about how they use and disclose Personal Information about you that they collect.
We collect and receive Personal Information about you in order to conduct our business and to provide our services. We also collect Personal Information about you to enable us to directly marketing of our products and services. If you apply for employment with us we may also collect Personal Information about you.
Personal Information may be collected by us in a number of circumstances, including when:
you:
we:
We may also use your Personal Information to verify your identity for the purposes of the Anti-Money Laundering / Counter-Terrorism Financing Act, 2006 (Cth).
Where reasonable and practical we will collect Personal Information about you directly from you or one of your representatives or from publicly available information. However, we will also collect Personal Information about you from third parties, such as a partner or spouse who contacts us on your behalf, from our contractors who supply services to us, from advisers such as accountants or lawyers or other organisations authorised by you.
Further, when you access our website, we may also collect Personal Information about you using ‘cookies’. ‘Cookies’ are files that are stored within a web browser and which collect, store and receive identifiers and information about your usage of our websites as well as information about where you are located at the time you access our websites. By using ‘cookies’ we are able to enhance and personalise our websites to better suit your needs. You can reject cookies, but by doing so, some or all of the functions on our website may not be available to you.
Generally, we will not collect Sensitive Information about you, unless such information is required in order to process an application for a product or service provided by us. However, we may collect and use biometric information to verify your identity. We will only collect Sensitive Information about you with your consent.
If you provide Personal Information to us about another individual or about an entity with which you are associated, you must ensure that you are entitled to disclose that Personal Information to us and that, without us taking any further steps required by privacy laws or by our general duty of confidentiality, we may collect, use and disclose such Personal Information for the purposes described in this Privacy Policy. For example, you should take reasonable steps to ensure any individual concerned is aware of the various matters detailed in this Privacy Policy. Any such individual or entity must also provide the consents set out in this Privacy Policy in respect of how we will deal with their Personal Information.
If you do not provide any Personal Information requested by us, we may not be able to provide you with our products or services.
We use Personal Information provided to us for the purpose for which it has been provided, for reasonably related secondary purposes, any other purpose you have consented to and any other purpose permitted under the Privacy Act. This may include using your Personal Information for the following purposes:
You agree that we may use your Personal Information for any of these purposes.
To enable us to maintain a successful business relationship with you, we may disclose Personal Information about you to:
By providing us with your Personal Information, you consent to us disclosing your Personal Information to such entities without obtaining your consent on a case by case basis.
With your consent, we may also disclose your Personal Information to organisations which may assist us to electronically verify your identity (including Document Verification Services (DVS)).
Sometimes we are required or authorised by law to disclose your Personal Information to a Court, Tribunal, law enforcement agency, a regulator (such as ASIC, the Office of the Australian Information Commissioner (OAIC) or AUSTRAC), the Australian Stock Exchange or to the Australian Taxation Office. From time to time, we may also be required to provide Personal Information about you to a foreign law enforcement agency or foreign regulator. We do not need to obtain your consent to provide your Personal Information to such official bodies.
Some of our third party service providers may be located in countries outside of Australia, including the United States of America, Canada and New Zealand, however, they may also be located in countries within South America, Asia, the United Kingdom or Europe. Further, our third party suppliers may also use businesses in countries outside of Australia. Our contracts with our third party suppliers generally include an obligation for the supplier to comply with the Privacy Act and with this Privacy Policy.
However, not all countries have the same high standards for the protection of your Personal Information as Australia and some of our third party service providers may be located in countries that do not have laws that provide the same level of protection as the laws of Australia. By providing us with your Personal Information, by using our website or by asking us to provide you with our products or services, you specifically consent to us sending your data out of Australia to other countries which may include New Zealand, the United States of America and Canada as well as countries located in North America, South America, Asia, the United Kingdom or Europe. You also specifically sending your data to the cloud.
If you are an individual and you are a party to any of our funding arrangements, we may provide your Credit Information to a credit reporting body in accordance with the law. The credit reporting body may provide the information that we report about you to other credit providers to assist them to assess your creditworthiness. We may also obtain information that other credit providers have provided to the credit reporting body to use in our assessments of your creditworthiness.
If you fail to meet your payment obligations in relation to any loan that we have provided to you, or any loan that we have arranged for you, or if you commit a serious credit infringement, we may report this to the credit reporting body.
You may access the Credit Information that we hold about you. Please refer to the section titled ‘Accessing and updating your Personal Information’ below. You may also request that we correct any Credit Information that we hold about you if you believe the information is incorrect. Please refer to the section titled ‘Accessing and updating your Personal Information’ below.
The information that we provide to a credit reporting body may sometimes be used for ‘pre-screening’ of direct marketing offers to be made by another credit provider. You may contact the credit reporting body to request that your Credit Information is not used in this way.
You may also contact the credit reporting body to request that they not use or disclose the credit-reporting information they hold about you if you consider that you may have been a victim of fraud or if you believe on reasonable grounds that the information they hold about you is incorrect. The credit reporting body must not use or disclose your Credit Information for a period of 21 days after receiving your notice.
For further information, and to find out how credit reporting bodies use your Personal Information, you can contact them at:
From time to time we may use your Personal Information to provide you with current information about products and services, special offers you may find of interest, changes to our organisation, or new products or services being offered by us or any company we are associated with. By providing us with your Personal Information, you consent to us using your Personal Information to contact you on an ongoing basis for this purpose, including by mail, email, SMS, social media and telephone.
If you do not wish to receive marketing information, you may at any time decline to receive such information by contacting our Privacy Officer on the contact details below. We will not charge you for giving effect to your request and will take all reasonable steps to meet your request at the earliest possible opportunity.
It is important to our relationship that the Personal Information we hold about you is accurate and up to date. During the course of our relationship you should inform us if any of the Personal Information has changed.
You can request access to any of the Personal Information we hold about you, including any credit-related Personal Information we hold about you, at any time. Upon receipt of your request, and, subject to limited exceptions in the Privacy Act (such as situations where we are prohibited from doing so by law, or where we are reasonably satisfied that that the information we hold is not inaccurate or incomplete), we will provide you with access to the Personal Information that we hold about you. (If we refuse to provide you with access to your Personal Information, we will provide you with our reasons for doing so, to the extent that it is not unlawful or unreasonable for us to provide you with our reasons. We will also provide you with details of how you can make a complaint about our refusal to provide you with access to your Personal Information).
If you wish to make any changes to the Personal Information that we hold about you, or if you think any such Personal Information we hold about you is incorrect, you should contact us to have it updated.
We do not charge a fee if you ask us to make a correction to the Personal Information that we hold about you, but in limited circumstances, we may charge you our reasonable costs for providing you with access to your Personal Information.
In most circumstances it will be necessary for us to identify you in order to successfully do business with you, however, where it is lawful and practicable to do so, we will offer you the opportunity of doing business with us without providing us with Personal Information. Such a situation would be where you make general inquiries about our services or current promotional offers.
We will only keep Personal Information that we hold about you while we need it or while we are required by law to keep it. Once we no longer need your Personal Information, we will take all reasonable steps to destroy it or to de-identify it.
At any time we hold your Personal Information, we will only use and disclose as set out in this Privacy Policy.
We will take reasonable steps to protect your Personal Information, by storing it in a secure environment, and when the Personal Information is no longer needed for any purpose for which the Personal Information may be used or disclosed, it will be destroyed or permanently de-identified.
We will also take reasonable steps to protect any Personal Information we hold about you from misuse, loss and unauthorised access, modification or disclosure.
If a data breach involving your Personal Information occurs, or we suspect that a data breach has occurred, whether the entity experiencing the data breach is First Nations Finance or one of the third parties we use, such as contractors or subcontractors, we will expeditiously conduct an investigation and assessment.
Based on this assessment, we will determine whether any steps need to be taken by us to ensure your Personal Information is not accessed by unauthorised persons or whether we need to notify you with recommendations about the steps that you should take in response to the data breach.
If there is a serious data breach we will tell you about any action we have taken, or we are intending to take, to prevent reoccurrence.
First Nations Finance will try to resolve any complaint within 10 calendar days of receipt. However, sometimes we may not be able to do this. If we can’t resolve your complaint within 10 calendar days, we will use all efforts to resolve your complaint within 30 days – unless your complaint relates to a Hardship Request, Postponement of Enforcement Proceedings or Default Notice under the National Consumer Credit Protection Act (NCCP), in which case, we will aim to resolve your complaint within 21 days.
In certain circumstances, we may not be able to provide you with our response to your complaint within the above timelines. In such cases, we will write to you to tell you the reasons for the delay and give you information about your rights.
If you are not satisfied with the final outcome of your complaint, you may choose to lodge a complaint with the Australian Financial Complaints Authority (AFCA). AFCA provides a free and independent dispute resolution service for individuals and small business customers who are unable to resolve their complaints directly with First Nations Finance.
Online: www.afca.org.au Email: info@afca.org.au Phone: 1800 931 678
Mail: GPO Box 3, Melbourne, VIC 3001
You may also raise any concerns directly with the OAIC. The OAIC acts as an impartial third party when investigating and resolving a complaint in relation to the handling of your Personal Information. You can contact the OAIC on:
Mail: GPO Box 5288, Sydney, NSW 2001 Phone: 1300 363 992
Online: www.oaic.gov.au Email: enquiries@oaic.gov.au
You can contact us via the methods below and request to discuss any point(s) with our Policy Officer:
If you would prefer to receive a copy of our Privacy Policy in an alternative form (such as in hard copy or via email), please contact us on the phone number or email address provided under the section titled ‘Contact Details’ above. We will be pleased to comply with your request.
We are constantly reviewing all of our policies and attempt to keep up to date with market expectations.
As a consequence we may change this Privacy Policy from time to time or as the need arises.
This Privacy Policy was last updated in October 2025.
First Nations Finance acknowledges the Traditional Owners and Custodians of the land on which we work. We pay respects to elders past, present, and emerging, and recognise their connection to the land. Sovereignty was never ceded.