01About this policy

Asset Based Lending Pty Ltd (ABL, we, us, our) provides short-term, asset-backed commercial finance to Australian businesses. We are a commercial-only lender. We do not provide consumer finance and we do not lodge or check consumer credit reports.

This policy explains how we handle personal information we collect through this website (assetbasedlending.com.au) and through our broader commercial lending services. It is published in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

The Privacy Act protects information about identified or identifiable individuals. When you submit an enquiry, you are an individual acting in a business capacity, but the contact details, asset details, and funding details you provide become information about you personally once they are stored against your name. This policy explains how we handle that information.

Some information we collect is purely about your business as an entity (for example, ABN, company structure, or financial statements). Information of that kind is not protected by the Privacy Act, but we treat it as commercially confidential.

02What information we collect

When you submit an enquiry through our website, we collect:

• Identity and contact details: first name, last name, business name, email address, phone number, industry.
• Funding context: the asset you propose to use as security (description, type, estimated value), the amount of funding sought, urgency of the request, and the purpose of funding.
• Technical information: IP address, browser type, device type, pages visited, and approximate location, collected automatically through cookies and analytics. See section 11.

Where we proceed beyond an initial enquiry, we may collect further information necessary to assess and document a loan, including identification documents (driver’s licence, passport), proof of business ownership, asset valuations, insurance documents, and registration or title documents for assets used as security. This information is collected directly from you, your broker, or your professional advisors.

03How we collect it

We collect personal information directly from you in the following ways:

• When you submit an enquiry through our website forms.
• When you call, email, or otherwise contact us.
• When a broker or advisor refers you to us with your authority.
• When you subscribe to our newsletter or download our published materials.
• Through cookies and similar technologies when you browse our website.

Where it is impractical or not appropriate to collect information directly from you, we may collect it from a third party (for example, a broker acting on your behalf, a commercial credit reporting body, or a public register such as ASIC). We will only do this with your knowledge or in circumstances permitted by the Privacy Act.

04Why we collect it

We collect personal information so we can:

• Respond to your enquiry and assess whether we can help with your funding situation.
• Verify your identity and authority to act on behalf of the business.
• Assess and document a loan, including valuing the asset and registering security where applicable.
• Communicate with you, your broker, and your advisors throughout the loan term.
• Comply with our legal and regulatory obligations, including anti-money-laundering, counter-terrorism financing, and tax reporting requirements.
• Improve how our website and services work.
• Send you relevant communications about our services. See section 8.

05How we use it

We only use personal information for the purposes for which it was collected, for purposes that are reasonably related to the original purpose, or where we have your consent or are otherwise permitted to do so under the Privacy Act.

The information you provide in your enquiry, including the purpose of funding (for example, paying tax debt, settling supplier bills, or managing working capital), is treated as commercially confidential. We do not use this information for marketing, profiling, or any purpose unrelated to assessing and progressing your enquiry.

06Who we share it with

We do not sell, rent, or trade your personal information. We do not share it with marketing partners, data brokers, or third parties for their own purposes.

Tools we use to store and work with your information

Your enquiry is captured and stored in our customer relationship management system, HubSpot. HubSpot is the tool we use to manage enquiries, communicate with you, and keep records. It is not a sharing partner: HubSpot stores your information on our behalf and is contractually bound to handle it consistently with applicable privacy laws.

The website also uses Google services to function (Google Analytics for understanding which pages people read, embedded Google Maps on our locations page, embedded YouTube videos on our website) and Spotify for embedded podcast episodes. These services are tools we use to deliver the website. They process limited technical data (such as IP address and page-view information) according to their own privacy policies. They do not receive the contents of your enquiry form.

Parties we may share information with for a specific transaction

If your enquiry progresses toward a loan, we may share relevant information with:

• Our funding partner FC Capital, in connection with funding your loan.
• Asset valuation, storage, auction, and collection partners (including Lloyds Auctions & Valuations) where required to value, secure, store, or sell assets used as security.
• Professional advisors (lawyers, accountants, valuers, insurers) engaged in connection with the transaction.
• Brokers and referrers, where you have been referred to us by a broker or advisor, in connection with your enquiry.
• Regulators and authorities, where required by law (including AUSTRAC, the ATO, courts, and other regulatory or law-enforcement bodies).
• Successors, in the event of a corporate restructure, merger, or sale of the business.

None of this sharing happens at the enquiry stage. We only share information with these parties when it is necessary for a specific transaction we are progressing.

07Offshore data storage

Some of the tools we use to run our business and our website store data outside Australia. We don’t share your information with these companies for their own purposes. They store it on our behalf or process limited technical data in the course of delivering their service.

• HubSpot. Hosted in the United States and the European Union. Stores enquiry records and our customer relationship management data on our behalf.
• Google. Servers located worldwide, primarily in the United States. Provides website analytics and the embedded maps on our locations page.
• YouTube (a Google service). Servers located worldwide, primarily in the United States. Hosts the videos embedded on our website. When you view a page with an embedded video, YouTube may set cookies and collect information about your visit even if you do not press play.
• Spotify. Servers located worldwide, including in the United States. Hosts the podcast episodes embedded on our website.

Where information is stored offshore, we take reasonable steps to ensure the storage provider is bound by privacy obligations consistent with the Australian Privacy Principles.

08Direct marketing

If you submit an enquiry, we will contact you about your specific situation. That is the primary purpose of the enquiry form.

From time to time we may also send you occasional updates, market insights, or product information where we believe it is relevant to the role and industry you indicated when you enquired. In practice, we send these communications most often to brokers, accountants, and advisors. Business owners who enquired about a one-off funding situation generally only hear from us about that situation.

You can opt out of any ongoing communications at any time by:

• Clicking the unsubscribe link in any marketing email we send you.
• Replying to any of our emails asking us to stop.
• Contacting us using the details in section 14.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

09Security and storage

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. These steps include access controls on our systems, encryption of data in transit, contractual safeguards with our service providers, and staff training.

We retain personal information only for as long as we need it for the purposes set out in this policy, or as required by law. Information collected through enquiries that do not progress to a loan is generally retained for a reasonable period to allow us to follow up if useful, then archived or deleted. Information related to executed loans is retained for at least seven years after the loan ends, in line with our regulatory record-keeping obligations.

10Accessing and correcting your information

You have the right to ask us:

• What personal information we hold about you.
• To correct information that is inaccurate, out of date, or incomplete.
• To delete information we no longer need to retain.

To make a request, contact us using the details in section 14. We will respond within a reasonable time, usually within 30 days. There is no charge for accessing or correcting your information, although we may charge a reasonable fee if a request is particularly complex or resource-intensive.

In some cases we may need to retain information even where you ask us to delete it, for example to meet legal record-keeping obligations or to defend a legal claim. If we cannot fulfil a request, we will explain why.

11Cookies and tracking

Cookies are small text files that a website places on your device when you visit. We use cookies to:

• Make the website work properly (essential cookies).
• Understand which pages people read and how the site is used, through Google Analytics (analytics cookies).
• Display content embedded from third parties, including Google Maps, YouTube, and Spotify (third-party cookies set by those services when you view the relevant content).

You can control cookies through your browser settings. Most browsers let you block, delete, or be notified about cookies. If you block cookies, some parts of our website may not work as intended.

For more information about how Google uses cookies, see policies.google.com/technologies/cookies. For YouTube, see policies.google.com/privacy. For Spotify, see spotify.com/legal/privacy-policy.

12What we don’t do

If we change any of this in future, this policy will be updated and the “Last updated” date at the top of this page will reflect the change.

13Changes to this policy

We may update this policy from time to time. The current version is always available at this URL. The “Last updated” date at the top of the page tells you when the policy was last changed. Where changes are material, we will notify you directly where practicable.

14Complaints and contact

If you have a question about this policy, or want to make a complaint about how we have handled your personal information, contact us first. We take privacy complaints seriously and will work with you to resolve any concerns.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by phoning 1300 363 992.