Champion Broker – Privacy & Cookies Policy
1. Introduction
- In this policy, “we”, “us” and “our” refer to Grameen Pty Ltd ACN 168 621 896, ABN 68 168 621 896 (Australian Credit Licence 497227), trading as Champion Broker.
- We are committed to protecting your privacy and to being transparent about how we collect, use, disclose, and store your personal information, in accordance with the Privacy Act 1988 (Cth) (including the Australian Privacy Principles), the Privacy (Credit Reporting) Code, and other applicable laws (“Privacy Laws”).
- This Policy applies when you:
- use our website, apps, APIs or other digital platforms;
- interact with us (for example by phone, email, in person);
- apply for or use any product or service we offer.
- By using our services or providing personal information to us, you consent to the collection, use, disclosure and handling of your personal information as set out in this policy. If you do not agree with this policy, please do not use our services or provide personal information.
- We use cookies on our website. Where cookies are not strictly necessary, we will request your consent when you first visit.
- We provide certain privacy controls (e.g. marketing preferences) that let you tailor how we handle your data.
2. What personal information do we collect?
We may collect personal information about you (or your authorised representatives) including, but not limited to:
2.1 Types of personal information
- Identity & contact details: name, date of birth, address, email, phone number, social media username, etc.
- Government identifiers / identity documents: e.g. driver’s licence, passport, Medicare card, birth certificate, tax file number (if relevant), citizenship status, etc.
- Financial and credit information: income, employment details, bank account details, credit history, liabilities, assets, transaction records.
- Sensitive information (where permitted): health information (e.g. if you request hardship), biometric data (if used for login), and any other sensitive details only with your consent or as required by law.
- Interaction & usage data: records of your communications with us, call recordings (with your consent), website/app activity, IP address, device type, browser type, cookies data, geolocation (if permitted), analytics and behavioural information.
- Other information: publicly available data, information provided by third parties (e.g. credit reporting bodies, referees), or information you voluntarily submit (e.g. feedback).
2.2 If you don’t provide information
If you decline to provide certain personal information we request, we may be unable to provide you with certain products or services, or to properly perform our contractual or regulatory obligations.
3. How do we use your personal information?
We use your information for a variety of purposes, including:
3.1 To deliver and manage services
- Assess, verify and process applications
- Administer and monitor accounts
- Communicate with you, respond to enquiries or complaints
- Send you updates, notices, statements
- Provide customer support and service
3.2 Business operations & risk management
- Internal administration, record keeping, systems & process improvement
- Fraud detection, security, identity verification
- Credit assessments, credit management, debt recovery
- Compliance with legal, regulatory or licensing obligations
- Insurance, audit, corporate governance, dispute resolution
3.3 Marketing & offers
- With your consent (or where permitted), send you product or service offers, newsletters, promotions
- Perform market research, analytics, segmentation
- Tailor content, offers, website experience
3.4 Legal, regulatory & other obligations
- Disclosures to government, regulators, law enforcement, courts
- Compliance with anti-money laundering, counter-terrorism, taxation, consumer protection laws
- Establishing, maintaining or defending rights
Legal basis
We rely on one or more of the following legal bases to process your information: your consent; performance of contract (or steps to enter into contract); legitimate interests (where consistent with your rights); compliance with legal obligations.
If we receive personal information from a third party, we will ensure that its collection is consistent with this policy and the Privacy Laws.
4. Can you remain anonymous or use a pseudonym?
Where practical and lawful, you may deal with us anonymously or under a pseudonym (for example general enquiries). However, to provide products and services (particularly credit-related ones), we will generally need to identify you.
5. De-identified information
We may aggregate or de-identify your information (removing or altering identifiers so you cannot be reidentified). De-identified data is not subject to this Policy; however, if combined with other information that reidentifies you, that combined information will be treated as personal information under this Policy.
6. Disclosure of personal information
We may disclose your personal information to:
- Our group companies, related entities or affiliates
- Joint account holders or co-applicants
- Funding partners, lenders or financiers
- Entities we act for or represent
- Suppliers, contractors, service providers (e.g. IT, cloud providers, payment processors)
- Insurers, auditors, professional advisors
- Credit reporting bodies
- External dispute resolution schemes (e.g. AFCA)
- Law enforcement, regulators, courts, tax authorities
- Other third parties where you consent or where required by law
If we disclose your information overseas (e.g. to offshore service providers), we will take reasonable steps to ensure the overseas recipient handles your information in a way consistent with Australian Privacy Laws or obtain your consent.
7. Data retention & deletion
- We keep your personal information only as long as necessary to fulfil the purposes for which it was collected (or required by law).
- When no longer needed, we will securely destroy or anonymise it.
- We may retain it longer where needed for legal, regulatory or compliance obligations, or to defend legal claims.
8. Security of personal information
- We implement technical, organisational, and physical safeguards to protect your data (access controls, encryption, secure servers, staff training, policies).
- Some data is stored locally in Australia; some may be stored with service providers (including overseas).
- While we strive to protect data, transmission over the internet is not completely secure; you accept that risk when using online services.
- You are responsible for keeping your account credentials (e.g. password) confidential.
We do not sell your personal information to third parties without your consent.
9. Cookies & similar technologies
9.1 What are cookies
Cookies are small text files placed on your device when you use the website. They may be “persistent” (remaining over sessions) or “session” cookies (expire when you close your browser). They typically do not themselves personally identify you but can be linked to the information we hold about you.
9.2 How we use cookies
We (and our service providers) use cookies for:
- Authentication / login sessions
- Tracking status (e.g. user logged in)
- Maintaining application states
- Personalisation (preferences)
- Security (fraud detection)
- Analytics / performance measurement
- Advertising / targeted marketing
9.3 Third-party cookies & services
We may use Google Analytics, advertising platforms, or other analytics/marketing providers. These parties may place their own cookies. Their cookies may collect data across websites. Please review their privacy policies for more details.
9.4 Managing cookies
You can block or delete cookies via your browser settings (Chrome, Firefox, Safari, etc.). However, blocking or deleting cookies may affect the functionality and user experience of our site (some features may not work properly).
10. Overseas disclosures
If we disclose your personal information to recipients outside Australia (e.g. overseas data centres or service providers), we will:
- take reasonable steps to ensure those recipients comply with privacy protections comparable to Australian requirements; or
- obtain your consent to the cross-border disclosure.
11. Notifiable Data Breaches
Under the Privacy Act’s Notifiable Data Breaches (NDB) scheme, if we become aware of a breach likely to cause serious harm, we will notify both affected individuals and the Office of the Australian Information Commissioner (OAIC), and recommend steps to mitigate harm.
If you suspect a data breach affecting your personal information, you may contact us using the contact details below.
12. Your privacy rights
You have certain rights under Privacy Laws, including (where applicable):
- The right to request access to the personal information we hold about you
- The right to request correction or updating of your information
- The right to request erasure (in certain circumstances)
- The right to object to or restrict certain processing (e.g. direct marketing)
- The right to withdraw consent (where processing is based on consent)
- The right to lodge a complaint with us or with the OAIC
We will typically provide one free copy of your personal information; additional copies may incur a reasonable fee.
If we refuse any request, we will notify you of the reasons (unless unreasonable to do so).
You may also object to direct marketing processing; on receiving your objection, we will cease that processing as required by law.
13. Complaints
If you have a question, concern or complaint about how we handle your personal information:
Contact us:
Privacy Officer
Grameen Pty Ltd (Champion Broker)
Email: info@championbroker.com.au
Address: PO Box 323, Maddington WA 6989
We aim to acknowledge your complaint promptly (within 7 days), investigate fairly, and provide a decision (usually within 30 days).
If you are not satisfied with our response, you may escalate the complaint to the Australian Financial Complaints Authority (AFCA) or to the Office of the Australian Information Commissioner (OAIC).
AFCA contact:
Phone: 1800 931 678
Email: info@afca.org.au
Mail: GPO Box 3, Melbourne VIC 3001
OAIC contact:
Phone: 1300 363 992
Email: enquiries@oaic.gov.au
Mail: GPO Box 5218, Sydney NSW 2001
14. Third-party websites
Our website may link to or integrate with third-party sites (e.g. social media, payment gateways). We have no control over their privacy practices. We recommend you review their policies before providing any personal information.
15. Updates to this policy
We may update this policy from time to time. The latest version will be posted on our website with a “last updated” date. Please review this page periodically to stay informed of changes.
16. Our details
This website is operated by Grameen Pty Ltd (Champion Broker), ACN 168 621 896, ABN 68 168 621 896, Australian Credit Licence 497227.
If you need to contact our Privacy Officer, please use the email or address listed above.
Policy version: 2.9 / 2025