Privacy Policy

1. Who we are

This website and the Oxyan service are operated by Vyvel Pty Ltd (ABN 95 687 610 840), trading as Oxyan ("Oxyan", "we", "us", "our"). Oxyan is the embedded finance product offered in connection with Zool Capital (AFSL 488196), the regulated credit provider that funds and administers leases. Zool Capital is a member of the Australian Financial Complaints Authority (AFCA) and is regulated by ASIC and APRA.

We are bound by the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth), and, where relevant to credit information, by Part IIIA of that Act and the Privacy (Credit Reporting) Code.

2. Information we collect

The personal information we collect depends on how you interact with us. It may include:

Identity & contact details

• Name, date of birth, email address, phone number and postal or business address.
• Identity verification data, including government-issued ID and the results of biometric identity checks used to confirm it is you.
• Your role, employer or business, and Australian Business Number (ABN).

Financial & credit information

• Bank account and transaction information you provide or that we access, with your consent, through the Consumer Data Right (open banking) or similar services.
• Credit information and credit eligibility information (for example, information from credit reporting bodies) used to assess applications.
• Details of the assets to be leased, quotes or invoices you submit, and your repayment history.

Usage & technical information

• Device, browser, IP address, and pages viewed, collected through cookies and similar technologies (see section 9).
• Records of your communications with us, including enquiries and support requests.

Where you provide us with information about another person (for example, a director, guarantor or authorised representative), you confirm you are authorised to do so and that they are aware of this policy.

3. How we collect it

We collect personal information directly from you — when you complete an enquiry or application, create an account, contact us, or use the Oxyan service — and, with your authority, from third parties such as our vendor and reseller partners, credit reporting bodies, identity verification providers, open-banking data holders, and your nominated financial institution.

4. Why we use it

We use personal information to:

• assess, approve, document and manage lease applications and contracts;
• verify your identity and meet our anti-money-laundering and counter-terrorism-financing obligations;
• process repayments and administer your account through the portal;
• respond to enquiries, provide support and send service and transactional communications;
• manage end-of-term options and, where you have opted in, tell you about relevant products or offers;
• maintain the security of, and improve, our website and services; and
• comply with our legal and regulatory obligations.

We only use your information for direct marketing where permitted, and every marketing message includes an easy way to opt out.

5. When we disclose it

We may disclose personal information to:

• Zool Capital and related funding, servicing and credit-assessment partners, as the regulated credit provider for your lease;
• credit reporting bodies, identity verification and open-banking service providers;
• the vendor or reseller through whom you applied, to the extent needed to complete the transaction;
• our service providers (for example, cloud hosting, payments, e-signature, analytics and customer support), who are permitted to use it only to provide services to us;
• professional advisers, regulators, law enforcement and courts, where required or authorised by law.

We do not sell your personal information.

6. Overseas disclosure

Some of our service providers may store or process information outside Australia. Where this occurs, we take reasonable steps to ensure the information is handled consistently with the APPs and this policy.

7. How we protect it

We hold personal information in secure systems and apply technical and organisational safeguards — including encryption in transit, access controls and monitoring — to protect it against misuse, interference, loss, and unauthorised access, modification or disclosure. We retain information only for as long as we need it for the purposes described above or as required by law (including record-keeping obligations for credit and financial services), after which we take reasonable steps to destroy or de-identify it.

8. Accessing & correcting your information

You can ask us to access the personal information we hold about you, or to correct it if it is inaccurate, out of date or incomplete. Contact us using the details in section 11. We will respond within a reasonable time and will let you know if we need to verify your identity first. There is generally no charge to make a request, though a reasonable cost may apply to some access requests.

9. Cookies & analytics

Our website uses cookies and similar technologies to keep you signed in, remember your preferences, and understand how the site is used so we can improve it. You can control or disable cookies through your browser settings, though some features may not work as intended if you do.

10. Complaints

If you believe we have mishandled your personal information, please contact us first (section 11) so we can try to resolve it. If you are not satisfied with our response, you may refer credit-related matters to the Australian Financial Complaints Authority (AFCA), or contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Contact us

For any privacy question, request or complaint, contact our Privacy Officer:

12. Changes to this policy

We may update this policy from time to time. The current version will always be available on this page, with the "Last updated" date shown at the top. Where changes are significant, we will take reasonable steps to notify you.