Credit Reporting Policy and Statement of Notifiable Matters

This statement complements our Privacy Statement (available at www.paypal.com.au) and provides information on the credit reporting practices of PayPal Credit Pty Limited Australian Credit Licence Number 568848 (“PayPal Credit”, “our”, “us” or “we”) and the credit reporting body to which we may disclose your credit information as well as information on certain rights you have in relation to your credit-related personal information. By selecting the Print icon at the top righthand corner of this statement, you will be able to download a PDF version or print a hard copy of this statement. You may also contact us by using the Contact Us information in our Privacy Statement.

Our handling of credit information is regulated by the Privacy Act 1988 (Cth) (“Privacy Act”) and the Privacy (Credit Reporting) Code 2025 (“CR Code”).

Credit reporting practices

Our Privacy Statement sets out information on our management of your credit information, including:

• how we may collect, use and disclose your credit information
• your right to access the credit information we hold on you
• your right to seek the correction of credit information that we hold about you
• your right to complain about a breach by us of the credit reporting provisions of the Privacy Act or the CR Code and how we will deal with such a complaint, and
• entities outside Australia to which we are likely to disclose your credit information and the countries where they are located.

What is credit information?

Credit information is personal information relating to credit that has been provided to you or that you have applied for. This includes credit for personal, domestic or household purposes and credit in connection with a business.

Kinds of credit information and credit eligibility information we collect, hold and use

We may collect and hold the following types of credit information and credit eligibility information (credit reporting information disclosed to us by a CRB (see below), plus any information we derive from it) about individuals in connection with our credit products:

• Identification information: including your name, address and date of birth, collected at the time of your credit application.
• Consumer credit liability information: including details of your current or past consumer credit accounts, including the name of the credit provider, the type of credit, the date the account was opened or closed, the credit limit, and the terms or conditions of the account.
• Repayment history information: including information about whether you meet your repayment obligations on time, for a period of up to two years.
• Default information: including information about overdue payments of 60 days or more, and serious credit infringements.
• Financial hardship information: including information about financial hardship arrangements we enter into with you.
• New arrangement information: including information about any new arrangement entered into following a default.
• Court proceedings information: including information about judgments against you relating to credit.
• Personal insolvency information: including information about your bankruptcy or other personal insolvency event, as recorded on the National Personal Insolvency Index.

We collect, hold and use this information for the purpose of our creditworthiness assessments and for making a decision regarding your application for our credit products. We hold and use this information in accordance with our Privacy Statement. We are permitted to use and disclose credit eligibility information only as allowed by the Privacy Act.

Credit reporting bodies and your personal information

Credit reporting bodies (“CRBs”) are allowed under the Privacy Act and the CR Code to handle personal information relating to credit. If you apply for a PayPal Credit product, we may disclose your personal information to, or collect personal information about you from, a CRB. The information we share is identification information including your name, address and date of birth. The information we collect includes default information and is used for the purpose of determining your eligibility for that product, and we may process the information to create a credit assessment or other ratings of your suitability for credit.

Where we make an information request to a CRB (e.g. to perform a credit check) your consent to that disclosure is not required. A record of the information request may be used and, as relevant, disclosed for the purposes of the CRB or a credit provider assessing your credit worthiness, including calculation of a credit score or credit rating (subject to any other use or disclosure limitations under the Privacy Act or CR Code). The information request may affect your credit score or credit rating, as calculated by the CRB, as an enquiry may be added to your credit report. The enquiry is one of a number of factors which could impact your credit score.

The Privacy Act and the CR Code limit what we can do with the information we obtain from a CRB.

CRBs may use your personal information, including information we disclose to them, in reports that they provide to credit providers to assist those providers in assessing your credit worthiness (such as when you have applied for a loan from the provider). If you fail to meet your payment obligations or commit a serious credit infringement, we may be entitled to disclose this to the CRB. Before disclosing default information, we are required under the Privacy Act to send you specific written notices.

The CRB we deal with is Equifax – www.equifax.com.au

For contact details and information on how Equifax manages credit-related personal information, please see Equifax’s privacy policies available at the link above.

CRBs offer a service to credit providers wishing to send direct marketing material about credit services to individuals. This is called “credit pre-screening”. You have the right to request that the CRBs do not use your information for this purpose. To opt out of credit pre-screening, contact Equifax using the contact details on their website noted above.

You can also ask a CRB not to use or disclose your personal information for a period if you believe on reasonable grounds that you have been or are likely to be a victim of fraud.

Overseas disclosure countries

We are likely to disclose credit information or credit eligibility information about individuals to entities located in the United States of America. Before disclosing your credit information overseas, we take reasonable steps to ensure the recipient does not breach the Australian Privacy Principles or the CR Code in relation to that information.

Accessing and correcting your credit information

You have the right to request access to the credit information we hold about you, and to seek correction of that information if it is inaccurate, out-of-date, incomplete, irrelevant, or misleading. To make a request, contact us using the details in our Privacy Statement. We will respond to access and correction requests within 30 days.

If we refuse your request for access or correction, we will provide you with written reasons and information about how to complain about that refusal.

Complaint handling

If you are unhappy with our handling of your credit information or credit eligibility information, contact us on 1800 073 263 (within Australia, landline only) or +61 2 8223 9500 to discuss your situation.

We will acknowledge your complaint within 7 days of receipt. We will investigate and respond to your complaint within 30 days, unless the matter is complex, in which case we will notify you of the extended timeframe. If you are not satisfied with our response, or we do not resolve your complaint within 30 days, you may escalate your complaint to the external dispute resolution scheme, AFCA, by