Privacy Policy for Universal AU Pty Ltd ACN 090 425 764, trading as Universal Candy

For the purposes of this Policy, Universal AU Pty Ltd ACN 090 425 764, trading as Universal Candy (“Universal AU”) (“us/we/our”) shall mean Universal AU and its associated entities.

Protecting personal information has always been important to us and the Privacy Amendment (Enhancing Privacy Protection) Act 2012 (Cth) and the Privacy Act 1988 (Cth) ('the Act’) and the Credit Reporting Code of Conduct ('CRCC') means that we have legal obligations in relation to protecting personal information. The Act, in accordance with Australian Privacy Principles and the CRCC, determines how we must handle personal information.

This is our policy on the management, collection, security, integrity, disclosure of and access to personal information about our clients; entities that include but are not limited to individuals, companies, trusts, trustees and their assigns ('you') whose personal information we manage, collect, secure, disclose and correct in accordance with our reasonable business purposes.

Personal Information Examples

Personal Information Examples Purpose of collection and disclosure of personal information and how we protect and manage that personal information

Contact details, date of birth, occupation, driver's licence, employment history, salary information, Tax File Number, qualifications, ethnic or racial origin, religious beliefs, political association, professional memberships, criminal record, health and genetic information, and other identifying information, financial information, bank account details, type of credit, day on which the credit is entered into and terminated, the terms and conditions of the credit that relate to the repayment of the amount of credit, the maximum amount of credit available under our credit terms, repayment history information (RHI), transaction history information, default information, serious credit infringement information, court proceeding information, publicly available information and personal shareholding in Universal AU information.

If we collect this type of information it is generally collected from your credit application form submitted to us, an application for employment and from third parties such as credit providers and insurers etc. Examples of third-party providers of your personal information include:

  • The Courts
  • Australia Post
  • Communications providers
  • MyGov
  • Banks and deposit taking institutions
  • ASIC
  • Utility Providers
  • Real Estate Agents
  • Share registries

We may also collect your publicly available information relating to credit worthiness and if applicable registration of security interests under the Personal Properties Securities Act 2009 (Cth).

  • Court judgments/writs
  • Bankruptcy and personal insolvency information
  • Directorship and Proprietorship Information

We may also be required to use and disclose your personal information in accordance with the law (for example by direction of a court/tribunal).

We may disclose your personal information to our professional advisors, and we may use your personal information for insurance purposes, or in relation to claims, audit processing and litigation and/or to assess your suitability for employment or credit related applications connected with Universal AU.

Credit card payment authorisation

We may sometimes require you to complete and sign our credit card payment authorisation form for the purposes of transacting with us. Upon your request, this information will be destroyed if it is no longer required for the purposes of our business functions, activities or legal requirements.

Unsolicited or sensitive information

We may sometimes collect sensitive information. Sensitive information is only collected if the information is reasonably necessary for the purpose of performing our functions and activities. We will destroy unsolicited information, whether sensitive or otherwise, unless it is necessary for the reasonable purposes of our business.

Anonymity or pseudonymity

We will preserve the anonymity or pseudonymity of an entity where practicable, in the circumstances and in accordance with the law.

Quality of personal information

We will take all reasonable steps to maintain accurate and complete personal information. You may access your personal information and request that your personal information is corrected.

Direct and Promotional Marketing

We will not use and/or disclose personal information for any direct or promotional marketing purposes without your prior consent. If you subscribe to our Newsletter you consent to your nominated subscription details being obtained, retained and used by us for direct or promotional marketing purposes until you advise us otherwise by notice in writing.

Government related identifiers

Unless you otherwise authorise us, we will not collect and/or disclose government related identifiers with the exception of your driver's licence information which may be collected in order to accurately identify you.

Overseas disclosure of Information

We may send your personal information offshore for business processing and administrative purposes. If we do, we would do so in compliance with our statutory obligations.

Security of Information

Administration security

Universal AU has processes, documentation and systems in place to protect your personal information from unauthorised access, use, disclosure or alteration. Only authorised team members performing designated tasks are permitted to see or use personal information held by Universal AU. We use a combination of physical and electronic security measures to protect personal information, including restricting physical access to our offices, firewalls and secure databases to keep personal information secure. We have appointed specialist service providers for our business such as lawyers, and document destruction contractors. These service providers are authorised to use personal information maintained by our business to the extent that is necessary for them to provide the contracted services. Our service providers are required to treat that information in the strictest confidence in accordance with confidentiality provisions in our agreements with the service providers and otherwise in accordance with the law.

Website Access and Use

Cookies may be used by us to collect information including IP addresses about people from our website. There are many aspects of the site which can be viewed without providing personal information, however, for access to Universal AU customer support features you are required to submit personally identifiable information. Cookies allow us determine who has seen particular pages on our website and how frequently. This can help us to identify your preferences and allow us to recommend content we believe you'd be most interested in or would be most relevant to you.

For each visitor to reach the site, we expressly collect the following non-personally identifiable information, including but not limited to browser type, version and language, operating system, pages viewed while browsing the Site, page access times and referring website address. This collected information is used solely internally for the purpose of gauging visitor traffic, trends and delivering personalised content to you while you are at this Site.

From time to time, we may use customer information for new, unanticipated uses not previously disclosed in our privacy notice. If our information practices change at some time in the future we will use data collected from the time of the policy change for these new purposes only.

Access to and correction of your personal information

You can request access to and correction of your personal information that we hold by contacting us by way of the following methods:

Phone:               +61 2 9457 0511


Mail:                 The Privacy Officer - Universal AU

                        8/22 Beaumont Road, Mount Kuring-Gai NSW 2080

We will endeavour to provide you with the copies of the personal information you require or to correct your personal information within a reasonable time following receipt by us of your request.

If a fee will apply to supply of the information, or we are permitted by

Destruction of Information

We will destroy personal information upon your request. You can contact us on (02) +61 2 9457 0511 or by accessing our website The exception to this is if the personal information is required in order to fulfil the reasonable purposes of our business or the information is required to be maintained and/or stored in accordance with the law.

Complaint procedure

If you have concerns about how we manage your personal information you may contact our internal dispute resolution ('IDR') team using any of the below methods:

Phone:              +61 2 9457 0511


Mail:                 Mail Dispute Resolution Team - Universal AU

                        8/22 Beaumont Road, Mount Kuring-Gai NSW 2080

We will provide you with an acknowledgement upon receipt of your complaint and seek to resolve it within 45 days.

In the event you are not satisfied with the resolution provided you may escalate your complaint to the Office of the Australian Information Commissioner:

Phone: 1300 363 992

Fax: (02) 9284 9666


Mail: GPO Box 5218, Sydney NSW 2001

For further information about privacy obligations please visit the Office of the Australian Information Commissioner website at

Changes to Privacy Policy

This policy is subject to change. We will endeavour to promptly update our website at with any amended Privacy Policy. You can contact the Privacy Officer to obtain a current copy of this Privacy Policy.