How we handle your information.

CashLift Pty Ltd (ABN 51 701 182 596), Credit Representative 582328, is authorised under Australian Credit Licence 563429 held by Bacena Finance Pty Ltd (ABN 72 678 727 547). We are not yet accepting applications.

CashLift runs this website, the application portal and the systems used to assess, manage and collect loans. Bacena Finance Pty Ltd is the lender and credit provider. We act for it as its credit representative.

Both CashLift and Bacena Finance handle your information. This policy explains how CashLift handles it. Bacena Finance has its own privacy policy. If you apply, you will also receive Bacena Finance’s privacy collection notice before you sign.

We are bound by the Privacy Act 1988 and the Australian Privacy Principles. In this policy, “we” and “us” mean CashLift.

Waitlist. If you join the waitlist, the form stores your email address and signup time so we can tell you when CashLift opens. A repeated signup does not create a second entry for that address. Joining the waitlist is not a loan application: we do not ask you to connect a bank account or provide financial or identity documents through the waitlist.

Enquiries and calls. If you email us, we receive your contact details, what you write and our replies. Calls to 1800 868 609 are answered by our virtual assistant. It collects your enquiry and any message you leave, and may ask for details such as your name and date of birth to find your record. Calls are recorded and transcribed with your consent. The assistant asks at the start of the call and ends the call if you decline.

When you apply for a loan. We collect:

• your name, date of birth, email address, mobile number, current and previous addresses, and whether you are an Australian citizen or permanent resident;
• details from your driver’s licence or Australian passport (see “Identity checks” below);
• your employment, income, living expenses, household, dependants, debts and repayments to other lenders, and what the loan is for;
• your answers to eligibility questions, such as whether you are bankrupt or behind on another small loan;
• bank transaction data and account details from the account your income is paid into (see “Bank data” below);
• a record of the consents you give and the documents you sign, including the time, your IP address and details of your device and browser.

If you have a loan. We keep records of your loan, repayments, missed payments, payment arrangements, hardship requests, complaints and our communications with you.

Sensitive information. We do not ask for sensitive information, such as health information, and we do not ask for photos of you or your ID. If you choose to share sensitive information, for example to support a hardship request, we collect it with your consent and use it only for that purpose.

You can browse the website and ask general questions without telling us who you are. We need to know who you are to assess an application or discuss a loan. If you do not give us the information we ask for, we cannot assess your application and Bacena Finance cannot lend to you.

Most information comes from you: through the website, the application portal, email, text messages and phone calls.

We also collect information from others, with your consent or where the law allows it:

• from your bank, through our bank data provider, when you share your bank data;
• from the issuer or official record holder of your identity document, through our identity verification provider, which tells us whether your details match their records;
• from our payments provider, about payments to and from you;
• from Bacena Finance, and from people you authorise to act for you, such as a financial counsellor.

The website and the portal also collect some information automatically, through cookies and analytics tools. See “Cookies, attribution and analytics” below.

When you apply, we ask for details from one government ID: your driver’s licence number, card number and state of issue, or your passport number and the gender shown on it. With your consent, we check these details, with your name and date of birth, with the document’s issuer or official record holder through our identity verification provider. We are told whether the details match. We do this for Bacena Finance, which must verify your identity under anti-money laundering law.

Licence and passport numbers are government related identifiers. We use them only to verify your identity, and to let you reuse a verified document on a later application. We never use them as our own identifier for you: we give you our own customer and loan references. We disclose them only to verify your identity, to Bacena Finance as the lender, or where the law requires it.

We use a bank data provider to get your bank data through open banking, under Australia’s Consumer Data Right. You choose what to share and confirm it with your bank. Access is read-only, and we never see your bank password.

Before lending, the law requires the lender to obtain and consider at least 90 days of statements for the account your income is paid into. The provider analyses the transactions, for example your income, regular expenses and repayments to other lenders, and we use the results to assess your application. We also keep the account name, BSB and account number, so the loan can be paid into an account in your name.

If you get a loan, the read-only connection stays open while the loan is running (up to 12 months, or until the loan is repaid, whichever is sooner). Before each repayment, we check that the money is in your account, and wait rather than take a payment that would fail. You can end this access at any time through your bank or by contacting us. If you do, repayments are taken on their due dates without that check.

We use your information to:

• manage the waitlist and tell you when CashLift opens;
• reply to enquiries, messages and complaints;
• verify your identity and help prevent fraud;
• assess whether a loan would be unsuitable for you, as responsible lending law requires;
• prepare your loan documents, pay out your loan and collect repayments;
• send you service messages, such as one-time codes, documents, repayment reminders and notices;
• help you if you are in financial hardship, and manage missed payments and collections;
• meet our obligations, and Bacena Finance’s, under credit, anti-money laundering and other laws, and respond to regulators, courts and AFCA;
• run, secure and improve our website, portal and systems, and fix technical problems.

We may also use or disclose information where the law requires or allows it, or for a related purpose you would reasonably expect.

We use automated rules and a credit scoring model to assess applications. They use the information in your application and your bank transaction data, such as your income, expenses and repayments to other lenders. Their results can decide, or help decide, whether you are offered a loan. An application that does not pass every check is reviewed by a person.

Our staff may use an AI tool to help draft their notes on an application they are reviewing. The tool receives the loan amount and term, what the loan is for, the assessment figures and a few other details, such as your employment status and number of dependants. It does not receive your name, contact details, address, identity document or bank account numbers. A person makes the decision.

We share information with Bacena Finance, as the lender. We also share it with service providers who help us run CashLift. They may use it only to provide their service:

• identity verification;
• bank data and its analysis;
• payments, to pay out loans and receive repayments;
• email, text messages and phone calls, including our virtual phone assistant, which holds call recordings and transcripts;
• address lookup, which suggests full addresses as you type yours;
• the AI drafting tool described above;
• cloud hosting and storage for our systems, databases and documents;
• analytics, and monitoring technical errors and website performance.

We may also share information with:

• our professional advisers, such as lawyers, auditors and compliance consultants;
• a debt collection agency, if your loan is in default;
• anyone a loan is transferred to, or may be transferred to, such as a funder, a trustee that holds loans or a buyer of the loan, and their advisers, so they can assess and administer it. Your rights under the loan do not change;
• a buyer of our business, or of part of it;
• regulators, courts, AFCA, the OAIC and law enforcement agencies, where the law requires or allows it;
• anyone you authorise to act for you, such as a financial counsellor or lawyer.

We do not sell your personal information.

Bacena Finance is not currently a member of any credit reporting body. This means:

• we do not obtain a credit report about you. Your application is assessed from your bank data and the information you give us;
• we do not give information about you or your loan to a credit reporting body. Your loan will not appear on your credit report, repaying it will not build your credit history, and a default cannot be listed against you.

If that changes, we will update this policy. We will not apply the change to your loan without first giving you a new notice and obtaining your consent.

We send service messages about your waitlist entry, application or loan, such as one-time codes, documents, repayment reminders and notices. These are not marketing. We do not currently send marketing messages.

When you apply, you can choose to receive tips and offers from CashLift. It is optional. We will send marketing only if you agree, and every marketing email or text will tell you how to unsubscribe. You can opt out at any time by using the unsubscribe link, replying STOP to a text, or emailing privacy@cashlift.com.au.

We do not use your information to market other companies’ products, and we do not give it to other organisations for their marketing.

We use website measurement to understand visits, how people found us and whether the waitlist works, using third-party analytics services. If you join the waitlist, we store how you found us with your entry. Website requests and analytics can involve device and browser details, IP or network information, pages visited, referral and campaign information, cookie identifiers and interactions such as a waitlist submission or error. The site can store referral and campaign attribution in a cookie for up to 90 days, and analytics tools may store their own identifiers.

In the application portal, our analytics service records page visits and how the pages are used, with every field and all on-screen text masked, so it cannot capture what you type or what your account shows. Once you apply or log in, this activity is linked to a customer number, not your name or contact details. Our systems also send it events, such as the loan amount and term, application status and decision reasons, under the same customer number. When you apply, we store how you found us, such as campaign and referral details, with your application.

We do not include your waitlist email address in website analytics events. Browser settings can restrict cookies or scripts, which may affect measurement and some features. You can also submit the waitlist form without JavaScript. Do not put sensitive information into website links, campaign fields or an initial enquiry.

Our core lending systems and databases are hosted in Australia. Some information is likely to be disclosed overseas:

• Singapore. The Bacena group has an office in Singapore, and Bacena personnel there may access your information.
• Philippines. We plan to have operations staff in the Philippines. They may access customer records through our systems to help with customer service, loan administration and collections.
• United States. Our analytics and error monitoring providers process information in the United States.

Some of our other service providers, such as those for website hosting, document storage, email, text messages, phone calls and AI tools, are based overseas. They may store or process information in the United States or other countries.

We take reasonable steps to make sure overseas recipients handle your information in line with the Australian Privacy Principles, and we give them only what they need for their service.

We take reasonable steps to protect your information from misuse, interference and loss, and from unauthorised access, change or disclosure. For example, information is encrypted when it travels between you and us, staff use individual accounts and see only what their role needs, bank data access is read-only, and portal analytics mask what you type.

If a data breach is likely to cause you serious harm, we will tell you and the OAIC. Contact privacy@cashlift.com.au with questions or concerns about security.

We hold your waitlist email address so we can tell you when CashLift opens. You can ask us to remove your entry or stop waitlist updates at any time by emailing privacy@cashlift.com.au. We may need to verify the request.

Credit law requires us to keep loan records for seven years, so we keep your information for at least that long, even if your loan is repaid or your application is declined. When we no longer need information for any purpose and the law no longer requires us to keep it, we destroy it or de-identify it. Legal record-keeping requirements may limit what we can remove on request; we will explain any restriction.

You can ask what personal information we hold about you, ask for a copy and ask us to correct it, by emailing privacy@cashlift.com.au. Explain the information you are asking about. We may need to verify your identity or authority and clarify the request. There is no fee to ask, and we do not charge to correct information.

We respond to access and correction requests within a reasonable period, subject to applicable exceptions. OAIC guidance generally treats 30 days as a reasonable guide. If we refuse a request, we will tell you why in writing and how to complain. See OAIC’s correction guidance.

If you think we have mishandled your information, contact us first. Email privacy@cashlift.com.au, write to CashLift Pty Ltd, Attn: Privacy, Level 30, 1 Farrer Place, Sydney NSW 2000, or call 1800 868 609. Answered by our virtual assistant, who can answer general questions and take a message. Calls are recorded, with your consent. Tell us what happened and the outcome you are seeking. There is no fee to complain.

We will acknowledge your complaint, look into it and give you a written response explaining what we found and what we will do. We aim to respond within 30 days. Complaints connected with a loan follow the timeframes on our complaints page.

If you are not satisfied, you can contact the Australian Financial Complaints Authority (AFCA), a free, independent service, on 1800 931 678, at info@afca.org.au or at GPO Box 3, Melbourne VIC 3001. AFCA can tell you whether it can consider your complaint.

You can also complain to the Office of the Australian Information Commissioner (OAIC). Its privacy complaints guidance explains when it can consider a complaint and what to do first. You can contact the OAIC on 1300 363 992.

For questions about Bacena Finance’s handling of your information, see its privacy policy or contact it at Enquiries@bacena.com or on 02 5850 8633.

We update this policy when our services or the way we handle information change. The date at the top shows when it last changed. If you would like a copy in another form, ask us and we will provide it free of charge.