Privacy Policy

1. Who we are

This website and the Oxyan service are operated by Vyvel Pty Ltd (ABN 95 687 610 840), trading as Oxyan ("Oxyan", "we", "us", "our"). Vyvel provides our business technology rentals, managed services rentals and software finance, and is the party named in your agreement.

We are bound by the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth) and, where relevant to credit information, by Part IIIA of that Act and the Privacy (Credit Reporting) Code. This policy is consistent with the "Use of Your Information" section of our agreements, which each customer, director and guarantor agrees to when they sign.

2. Information we collect

The personal information we collect depends on how you interact with us. It may include:

Identity & contact details

• Name, date of birth, email address, phone number and postal or business address.
• Identity verification data, including government-issued ID, checks through the Document Verification Service, and the results of biometric identity checks used to confirm it is you.
• Your role, employer or business, and Australian Business Number (ABN).

Financial & credit information

• Bank account and transaction information you provide or that we access, with your consent, through the Consumer Data Right (open banking) or similar services.
• Commercial credit information about the business and, for individual customers and guarantors, consumer and commercial credit reports from credit reporting bodies.
• Details of the equipment, software or services being financed, quotes or invoices, your payment history with us, and your direct debit details.

Usage & technical information

• Device, browser, IP address, and pages viewed, collected through cookies and similar technologies (see section 11).
• Records of your communications with us, including enquiries and support requests.

Where you provide us with information about another person (for example, a director, guarantor or authorised representative), you confirm you are authorised to do so and that they are aware of this policy.

3. How we collect it

We collect personal information directly from you, when you complete an enquiry or application, sign an agreement, create an account, contact us or use the Oxyan service. With your authority, we also collect it from third parties such as the vendor or supplier you are buying from, credit reporting bodies, identity verification providers, open-banking data holders, your accountant and your nominated financial institution.

4. Why we use it

We use personal information to:

• assess, approve, document and manage applications and agreements, including whether to accept a guarantor;
• verify your identity and meet our anti-money-laundering and counter-terrorism-financing obligations;
• register our interest on the Personal Property Securities Register;
• collect payments by direct debit, administer your account through the portal, and collect overdue amounts;
• respond to enquiries, provide support and send service and transactional communications, including notices and documents by email;
• manage end-of-term options and, where you have opted in, tell you about relevant products or offers;
• maintain the security of, and improve, our website and services; and
• comply with our legal and regulatory obligations.

We only use your information for direct marketing where permitted, and every marketing message includes an easy way to opt out. You can also contact us at support@oxyan.com.au or 1300 325 342 to stop marketing.

5. Automated decisions

We use automated credit decisioning, including artificial intelligence tools, to assess applications and monitor ongoing creditworthiness. If an automated decision adversely affects you, you can ask for it to be reviewed by a person by contacting us.

6. When we disclose it

We may disclose personal information to:

• our related entities, funders, assignees and servicing partners that fund or administer your agreement;
• credit reporting bodies, other credit providers, identity verification and open-banking service providers;
• the vendor, supplier or service provider involved in your agreement, to the extent needed to complete and manage it;
• your accountant and any guarantor, about your creditworthiness;
• the provider of the Oxyan Extended Protection Service, where it applies to your rental;
• our service providers (for example, cloud hosting, payments and direct debit, e-signature, analytics and customer support), who may use it only to provide services to us;
• debt collectors and professional advisers; and
• regulators, law enforcement and courts, where required or authorised by law.

We do not sell your personal information.

7. Credit reporting

We may give credit reporting bodies the information the Privacy Act permits us to give, which may include that you applied for credit, that you are a guarantor, and default information. The credit reporting bodies we use are:

• Equifax Australia Information Services and Solutions Pty Ltd, equifax.com.au
• illion Australia Pty Ltd, illion.com.au
• Experian Australia Credit Services Pty Ltd, experian.com.au

Each credit reporting body has a policy about how it manages credit-related information, available on its website. You can ask a credit reporting body not to use your information to pre-screen you for direct marketing. If you believe you are, or are likely to be, a victim of fraud, you can ask it not to use or disclose your information for 21 days (a ban period).

8. Where we store it

Personal and credit information is primarily stored in Australia. Some of our service providers may store or process information outside Australia. Where this occurs, we comply with Australian Privacy Principle 8 and take reasonable steps to ensure the information is handled consistently with the APPs and this policy.

9. How we protect it

We hold personal information in secure systems and apply technical and organisational safeguards — including encryption in transit, access controls and monitoring — to protect it against misuse, interference, loss, and unauthorised access, modification or disclosure. We retain information only for as long as we need it for the purposes described above or as required by law (including record-keeping obligations for credit and financial services), after which we take reasonable steps to destroy or de-identify it.

10. Accessing & correcting your information

You can ask us to access the personal information, including credit-related information, we hold about you, or to correct it if it is inaccurate, out of date or incomplete. Contact us using the details in section 13. We will respond within a reasonable time and will let you know if we need to verify your identity first. There is generally no charge to make a request, though a reasonable cost may apply to some access requests.

11. Cookies & analytics

Our website uses cookies and similar technologies to keep you signed in, remember your preferences, and understand how the site is used so we can improve it. You can control or disable cookies through your browser settings, though some features may not work as intended if you do.

12. Complaints

If you believe we have mishandled your personal information, please contact us first (section 13) so we can try to resolve it. We aim to respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

13. Contact us

For any privacy question, request or complaint, contact our Privacy Officer:

14. Changes to this policy

We may update this policy from time to time. The current version will always be available on this page, with the "Last updated" date shown at the top. Where changes are significant, we will take reasonable steps to notify you.