DRAFT, not legal advice, lawyer review required before public go-live.

Credit Corrections Privacy Policy

1. Who we are
Credit Corrections (trading name) is operated by [PLACEHOLDER: legal entity name, ABN once registered] ("we", "us", "our"). Contact: info@creditcorrections.com.au. Address: [PLACEHOLDER: registered/virtual office address].

2. What this policy covers
How we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

3. The personal information we collect
Identity and contact details of broker firm users and consumers using the platform. Credit-reporting-derived information that a consumer chooses to upload from their own credit report. Account, usage, and consent records the platform generates.

4. How we collect it
Directly from you when you create an account, upload a document, or use the platform. We collect by lawful and fair means.

5. Why we collect, hold, use and disclose it
To provide the self-service credit-information tool, to operate broker firm accounts, and to maintain the platform. We do not act for you with any third party. We do not contact a creditor or credit reporting body on your behalf.

6. Disclosure
We do not sell personal information. We disclose only to service providers who host or support the platform, bound to protect it, and where required by law.

7. Overseas disclosure
[PLACEHOLDER: confirm whether any service provider stores or processes data outside Australia. The platform's stated position is Australian data residency. If any overseas disclosure occurs, list the countries here per APP 8.] Source basis: APP 8.

8. Security, retention and destruction
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, under APP 11. Uploaded credit files follow a defined retention period and are then destroyed. [PLACEHOLDER: state the exact retention period to match the implemented lifecycle, target 90 days.]

9. Access and correction
You may request access to and correction of your personal information by emailing info@creditcorrections.com.au, under APP 12 and APP 13.

10. Complaints
You may complain about a privacy breach by emailing info@creditcorrections.com.au. We will respond within [PLACEHOLDER: state response timeframe]. If unresolved, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.

11. Changes
We may update this policy. The current version is published on our website.

Source basis: APP 1, OAIC APP Guidelines Chapter 1, Privacy Act 1988.