To assist ORIX Australia Corporation Limited (ORIX) in providing you vehicle buying, vehicle leasing, vehicle rental, fleet management, websites and mobile applications, or other products or services, and otherwise conducting our business functions and activities, we need to collect personal information about you.
Last updated: 1 March 2017
This policy sets out:
- the kinds of personal information we collect;
- how we collect and hold personal information;
- why we collect personal information;
- how we use and disclose personal information;
- how you can access and seek to correct the personal information we hold about you;
- whether we disclose your information to overseas entities; and
- how you can complain if you think we have breached this policy or the Australian Privacy Principles.
What personal information do we collect and hold and how do we collect it?
During the course of conducting our functions and activities (which include vehicle leasing, vehicle rental and fleet management) we collect, hold, use and disclose personal information about individuals who are or who are proposed to be:
- customers or guarantors under leasing agreements, hire purchase agreements, fleet and vehicle management agreements and rental agreements with ORIX (if the customer or guarantor is a corporation this includes directors and beneficial owners of that corporation);
- drivers or nominated custodians of vehicles leased or hired from ORIX or managed by ORIX;
- third parties to insurance claims that involve us or one of our customers;
- contractors or suppliers of vehicles, goods and services to ORIX or to one of our customers or intending customers;
- solicitors, valuers, auctioneers or other professional consultants engaged by us;
- referees of our contractors, suppliers, customers and our customer’s guarantors;
- purchasers of vehicles or equipment owned by us;
- finance brokers, introducers or other finance intermediary engaged by us; and
- applicants for employment with us.
Generally we collect personal information directly from the individual to whom the information relates (or from their employers, appointed agents or intermediaries). However, sometimes it is collected from third parties including:
- sources with a connection to the individual (for example, the individual’s employer, or referee or recruitment agent);
- our customers or their directors, principals or employees;
- guarantors or proposed guarantors of customers;
- insurance providers (for example, if payments are being paid for by a novated lease protection insurer);
- credit reporting bodies (for example Equifax Pty Limited);
- credit providers;
- publicly available sources of information;
- and government departments, authorities and agencies.
The kind of personal information that we collect and hold about an individual will vary considerably depending on the reason for its collection, including the nature of the individual’s arrangements or relationship with ORIX and the individual’s connection with the arrangements. The personal information collected and held (depending on the purpose of collection) might include (but is not limited to):
- name, address and contact details;
- date of birth, and driver’s licence particulars and other information to verify an individual’s identity;
- employment, credit and business history;
- information about products or services that an individual has requested or that we provide the individual or their employer;
- driver infringement history (captured during the course of our fines management service) and other driver usage information (including the use and location of tolls, use of fuel and fuel cards, and other driving data);
- “telematics” data captured about vehicles and vehicle drivers (including information as to location, performance, routes taken, vehicle specifications and speed and other driving infringements);
- payment (including credit card) details used to purchase our products or services;
- financial position and information, income and financial commitments;
- credit information (further information about our handling of credit information is set out in our Credit Reporting Policy); and
- any information we consider relevant to assessing and considering applications for employment, including information contained in letters of application and resumes and employment history.
Occasionally, we might also collect sensitive information about an individual, such as health information. We will only do this if the individual consents and only if it is reasonably necessary for ORIX to provide the individual with the product or service they have asked for or otherwise carry out our functions and activities (such as when payments are being made by a novated lease protection insurer, or when an individual is negotiating payment relief with ORIX).
Where we engage with an individual multiple times over a short period in relation to the same matter, we may not provide the individual with a separate notice about privacy each time we engage with that individual.
Collecting personal information from our apps, websites and customer portals
We may also collect personal information through our apps, websites and customer portals. Personal information may also be collected by our third party services providers who assist us in operating our apps, websites or customer portals.
We use website analytics such as Google Analytics to help analyse how people use our websites. Website analytics generate statistical and other information about website use by means of cookies, which are stored on users’ computers. The information generated is used to create reports about the use of ORIX’s websites. We may also share website analytics with third parties engaged to provide or update our websites.
In the case of Google Analytics Google will store this information. ORIX will not (and will not allow any third party to) use website analytics to track or collect any personal identifiable information of visitors to our websites. We will not associate any data gathered from our websites with any personal information from any source as part of our use of website analytics.
If you do not want your website data reported by Google Analytics, you can install the Google Analytics opt-out browser add-on. For more details on installing and uninstalling the add-on, please visit the Google Analytics opt-out page at https://tools.google.com/dlpage/gaoptout.
Like many websites, our website may use “cookies” from time to time. Cookies are small text files that are transferred to a user’s computer hard drive by a website for the purpose of storing information about a user’s identity, browser type or website visiting patterns. Cookies may be used on our website to monitor web traffic, for example the time of visit, pages visited and some system information about the type of computer being used. We use this information to enhance the content and services offered on our website.
Cookies are sometimes also used to collect information about what pages you visit and the type of software you are using. If you access our website or click through an email we send you, a cookie may be downloaded onto your computer’s hard drive.
Cookies may also be used for other purposes on our website but in each case none of the information collected can be used to personally identify you.
You can configure your browser to accept all cookies, reject all cookies, or notify you when a cookie is sent. Each browser is different, so check the “Help” menu of your browser to learn how to change your cookie preferences.
Third-party content (for example, social media links)
Some of the content on our websites may include applications made available by third parties, such as social media buttons or links that allow you to share content or links to our websites through the relevant third party platforms. These third-party applications themselves may facilitate the collection of information by those third parties through your interaction with the applications (sometimes even if you do not interact directly with them). We are not responsible for the technical operation of these applications or the collection and use practices of these third parties. Please visit the relevant third party websites to understand their privacy practices and options they may make available to you in relation to their collection of your personal information.
Why do we collect and hold personal information?
ORIX collects and holds personal information to conduct our functions and activities, including to market and sell our products and services, and so that we can:
- provide our customers (or their directors, principals or employees) with fleet (vehicle) leasing, novated leasing, short term vehicle rental, fleet management services and any other of our products and services they might request, including assessing and considering applications and guarantors for these products and services;
- verify customers in accordance with our “Know Your Customer” process;
- manage the facilities, the vehicle leases, hires and delivery of services connected with our leasing, fleet management, etc services;
- assess whether to engage applicants for employment and contractors and manage employment relationships;
- appropriately identify parties ORIX contracts with for goods or services (including suppliers and consultants) and manage the supplier relationship;
- comply with our legal and regulatory obligations;
- and carry out related activities.
If we are not able to collect the information we seek we will not be able to provide requested products and services.
From time to time, ORIX may also use and disclose the personal information we collect to let our customers know about products and services that might be of interest to them, including by direct marketing. You consent to us using your personal information for sending you information, including promotional material, about ORIX or our products and services, as well as the products and services of our related entities and third parties, now and in the future. You also consent to us sending you such information by means of direct mail, email, SMS and MMS messages.
If at any time you wish to stop receiving these types of notifications, please let us know by:
- clicking the “Unsubscribe” link in a direct marketing email that you have received from us;
- logging into your account on the website and editing your email preferences;
- or contacting our Privacy Officer the contact details of whom are shown below.
What do we do with the personal information we collect?
We use the personal information we collect for our functions and activities, which may include the following:
- to identify you (if you are a customer, supplier, guarantor, proposed guarantor, driver of a leased/hired vehicle or a purchaser of a vehicle);
- to assess and consider applications for the fleet (vehicle) leasing, novated leasing, short term vehicle rental and fleet management services – your involvement in the application for one of these products or services might be as the applicant/customer, a proposed guarantor for the applicant/customer or if the applicant/customer (or proposed guarantor) is a corporation, as a director, principal, beneficial owner or employee of that corporation;
- to provide and manage the fleet (vehicle) leasing, novated leasing, short term vehicle rental and fleet management services. This includes delivering and managing lease vehicles, managing our accounts (including the recovery of money, vehicles and equipment), managing vehicle registration, managing fines, tolls and fuel cards on your behalf, the maintenance and repair of vehicles and equipment, disposing of vehicles, issuing and managing fuel cards and arranging insurance;
- to collect, process and manage payments for our products and services;
- to manage insurance and accident claims;
- to obtain and use credit information and credit reporting information as specified in our Credit Reporting Policy;
- to provide and manage our websites, mobile applications, and customer portal;
- to personalise and customise your experience on our website;
- to help us research the needs of our customers to market our products and services with a better understanding of the needs of our customers, and for the purposes of improving existing products or services or creating new products or services;
- if applicable, to carry out checks on the Personal Property and Securities Register (PPSR) (which may involve a disclosure to the PPSR operator), including to confirm your details where you have applied for credit; and
- to enable us to comply with our obligations under the Anti-Money Laundering and Counter-Terrorism Financing legislation which might include identifying a customer’s beneficial owner.
We may sometimes disclose personal information to third parties outside of ORIX. This disclosure will either be for one of the purposes for which the information was collected, related purposes, purposes to which you have consented or to allow us to comply with an Australian law that requires us to disclose personal information. External parties we may disclose personal information to include:
- credit reporting bodies which include Equifax Pty Limited (www.equifax.com.au);
- other credit providers; securitised lenders to ORIX;
- our agents, auditors, solicitors and other professional consultants;
- suppliers (including for vehicles and vehicle servicing), service providers, insurers, repairers and contractors (including tow truck operators);
- trade, commercial / mercantile agents and auctioneers; insolvency practitioners (for example, bankruptcy trustees, administrators, receivers, liquidators);
- insurers, insurance brokers, insurance assessors and inspection agents, and investigators;
- vehicle registration authorities, toll operators, state debt recovery authorities, motor clubs, emergency breakdown assistance providers and similar;
- government departments or agencies (where required or authorised by law); and
- our customer’s guarantors or proposed guarantors.
We may otherwise collect, use or disclose your personal information:
- or as required or authorised by law, including without limitation the Australian Privacy Principles under the Privacy Act.
Overseas disclosure of personal information
Some of your personal information may be transferred, stored, processed or used, interstate within Australia, or overseas, by us or by third party service providers. This may happen if we outsource certain activities overseas or if transactions, information, services or products have an interstate or overseas connection. You consent to the collection, use, storage, and processing of your personal information within and outside of Australia.
In addition, we sometimes disclose personal information to related corporations of ORIX within Australia or overseas who may use that personal information in connection with ORIX’s functions and activities. Mostly the recipient would be ORIX’s New Zealand subsidiary (ORIX New Zealand Ltd) or its parent company in Japan (ORIX Corporation), but it may include our related corporations in other countries from time to time.
How can you access or correct the personal information we hold about you?
If you wish to know about, or have access to, the personal information ORIX holds about you, you can request this by contacting the ORIX Privacy Officer (contact details below). Except where the information sought is not readily accessible, there will not be any charge for granting you access.
There are circumstances in which we may decline to provide you access to the personal information we hold about you and if this happens we will notify you of this and also your rights with regard to complaining about our refusal.
We take reasonable steps to ensure that any personal information we collect and use is accurate, complete and up-to-date. To assist us in this, you need to provide true, accurate, current and complete information as requested. If you believe or become aware that some of the personal information we hold about you is incorrect or requires updating (for example your address or contact details), you can and should notify us of the correct information by contacting the ORIX Privacy Officer, the contact details of whom are shown below.
How do we hold personal information?
We take reasonable and appropriate measures to protect your personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure.
We use and employ appropriate systems, security measures, techniques and processes for both hard copy and digitally recorded and stored information.
How can you complain if you think we have breached this policy or the Australian privacy principles?
It would assist us to respond to your complaint promptly if it is made in writing. Please detail information relevant to your complaint.
The ORIX Privacy Officer will acknowledge receipt of your complaint within 7 days of its receipt and respond to your complaint within 30 days of its receipt.
ORIX privacy officer’s contact details
Mail: Locked Bag 2068, North Ryde NSW 1670
Phone: 1300 652 886
Last updated: 16 March 2018
This vehicle has been fitted with an in vehicle monitoring system (IVMS). Using this device ORIX Australia Corporation Limited (ORIX) will collect information about the use and performance of the vehicle. Some of the information collected may constitute “personal information” within the meaning of the Privacy Act 1988.
We may use and disclose your personal information for direct marketing purposes, unless you opt out (which you can do at any time by emailing firstname.lastname@example.org).
Last updated: 25 September 2017