Privacy Policy
Last updated: 5 January 2026
At Tofu Finance, we are committed to protecting your privacy and ensuring the security of your personal information.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.
Information We Collect
We collect information that you provide directly to us, including:
- Personal Information: Name, date of birth, contact details, residential address
- Financial Information: Income details, employment information, bank account details, credit history
- Identification Documents: Driver's license, passport, Medicare card
- Application Information: Details about the asset you wish to finance, loan amount, term preferences
- Device and Usage Information: IP address, browser type, pages visited, time spent on pages
How We Use Your Information
We use the information we collect for the following purposes:
- To assess and process your finance application
- To verify your identity and prevent fraud
- To conduct credit checks and assess creditworthiness
- To communicate with you about your application and account
- To comply with legal and regulatory requirements
- To improve our services and website functionality
- To send you marketing communications (with your consent)
Information Disclosure
We may share your information with:
- Lenders and Financial Institutions: To process your loan application
- Credit Reporting Agencies: To conduct credit checks and report credit information
- Service Providers: Who assist us in operating our business (e.g., IT providers, document verification services)
- Government Agencies: When required by law or to prevent fraud
- Professional Advisors: Including lawyers, accountants, and auditors
Credit Reporting
We may disclose your personal information to credit reporting bodies in accordance with the Privacy Act 1988 (Cth) and the Privacy (Credit Reporting) Code 2014. This includes:
- Identity particulars
- Credit liability information
- Repayment history information
- Default information (if applicable)
You can request not to receive direct marketing from credit reporting bodies by contacting them directly.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments.
Your Rights
Under the Privacy Act 1988 (Cth), you have the right to:
- Access your personal information
- Correct inaccurate or incomplete information
- Request deletion of your information (subject to legal requirements)
- Opt-out of marketing communications
- Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)
Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy and to comply with our legal obligations, typically for 7 years from the date of your last interaction with us.
Cookies and Tracking
Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic. You can control cookie preferences through your browser settings.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last updated" date.
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
Credit Representative Number: 549574
Australian Credit Licence: 377294
ABN: 37 451 835 363