Privacy Policy

At Bai Group Pty Ltd ('Bai Group','we', 'us' or 'our'), we respect your privacy and are committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, hold, use and disclose your personal information, particularly in connection with our credit assistance and brokering services, and the rights you have over it. By using our website or engaging our services, you consent to the handling of your personal information as described in this policy.

We may update this policy from time to time. The current version is always available on this page and is dated with the 'Last updated' date shown above.

What we collect depends on how you deal with us.

Through this website, we collect:

• The details you enter in our website forms — your name, email address, telephone number, the service or broker you are interested in, and your message
• Website usage information (see 'Cookies, Analytics and Website Usage' below)

If you engage us for credit assistance or our other services, we may also collect:

• Residential address and contact details
• Date of birth, gender and identity documents (for example, a driver licence or passport)
• Employment details, income and financial information
• Credit history and credit information
• Information about your credit needs, objectives and circumstances
• Information received from third parties such as referrers, lawyers or accountants

We may also collect sensitive information (such as health information or membership of a professional association) where you consent or where it is reasonably necessary to assess your application.

We collect your information directly from you through:

• Your interactions with us via our website, telephone, email or in person
• Applications, forms and documents you provide to us
• Referrals from our partners, agents or representatives

We may also collect information from:

• Lenders, lessors, credit reporting bodies and public registers
• Your legal, financial or other representatives
• Social media or publicly available sources, where reasonably necessary

Where we collect personal information about you from a third party, we will take reasonable steps to ensure you are aware of that collection and the matters set out in this policy.

We collect your information so that we can:

• Provide credit assistance and related services
• Help you apply for loans, leases or other credit products
• Assess your suitability and eligibility for credit products
• Administer payments, accounts and communications
• Comply with our legal, regulatory and licensing obligations
• Offer you additional products or services that may be relevant to you

You may opt out of receiving direct marketing from us at any time by contacting us using the details in 'Making a Privacy Complaint' below.

If you do not provide all or part of the information we request, we may not be able to provide our services, assess your application or provide you with the level of service you expect, and an application for credit may be delayed or declined.

Some collections are required or authorised by or under Australian law, including the National Consumer Credit Protection Act 2009 (Cth) and anti-money laundering and counter-terrorism financing laws. Where this is the case, we will tell you.

We may disclose your personal information to:

• Our licensee, Buyers Choice Licensing Pty Ltd ACN 626 172 281 (Australian Credit Licence 509484)
• Our aggregation partner, PLAN Australia (www.planaustralia.com.au)
• Lenders, lessors and other credit providers you ask us to approach
• Insurers, valuers and other service providers involved in your application
• Your representatives (for example, lawyers, agents or accountants), where you authorise us
• Government and regulatory bodies, where required or authorised by law
• External service providers who assist us with information technology, compliance, communications and analytics
• Our database and cloud hosting provider (Supabase), which stores and processes the information we collect

We may disclose your personal information to our support office in the Philippines, Bai Virtual Services OPC, and to other service providers located overseas. These may include our customer relationship management provider (GoHighLevel, United States), our email delivery provider (Resend, United States), our workflow automation and webhook services, and our database and cloud hosting provider (Supabase), whose infrastructure may be located outside Australia. The countries in which such recipients are likely to be located include the Philippines and the United States. Where we disclose personal information to an overseas recipient, we take reasonable steps to ensure it is handled in accordance with the APPs.

We do not sell your personal information.

Our website does not use advertising cookies or third-party tracking pixels. Instead, it uses browser local storage and session storage — for example, a randomly generated session identifier and a reference for any live-chat inquiry — to keep the site working. This information is not linked to your name or contact details.

We use a first-party analytics tool that records information such as the pages viewed, referring links and campaign parameters in the page address (UTM tags) against that random session identifier. This data is stored in our own secure systems and is generally aggregated. Information you submit through our website forms (for example, a contact or inquiry form) is stored securely and handled in accordance with this policy.

Cookies are used only to keep our private staff administration area secure and are not used to track public visitors. You can clear or block storage in your browser settings; if you do, some parts of the website (such as the live chat) may not work as intended.

We take reasonable steps to:

• Protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure
• Store information securely, whether it is held electronically or physically
• Ensure our service providers and partners handle personal information in accordance with privacy and security standards

We retain personal information only for as long as it is needed for the purposes described in this policy, to meet our legal and regulatory record-keeping obligations (including requirements under credit and taxation laws), and to resolve disputes.

When personal information is no longer needed for those purposes, we take reasonable steps to destroy or de-identify it.

You may request access to the personal information we hold about you, or ask us to correct it, by contacting us using the details in 'Making a Privacy Complaint' below.

We will respond within a reasonable time and may require you to verify your identity before releasing or updating the information. If we refuse a request, we will tell you why and explain how you can make a complaint.

If you are dissatisfied with how we handle your personal information, please contact us directly:

If your complaint is not resolved to your satisfaction, you can escalate it to the Australian Financial Complaints Authority (AFCA):

You may also contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.