Privacy Policy

Last updated: May 2026 • Lyft Capital Pty Ltd (trading as EquipPay)

1. About This Policy

This Privacy Policy explains what personal and credit information we collect, why we collect it, how we use and disclose it, and your rights in relation to it. It applies to all individuals whose information we collect in the course of providing our equipment finance platform and credit assistance services.

EquipPay is a commercial equipment finance platform and credit assistance provider. We are not a lender and do not make credit decisions. We connect business customers with lenders on our panel to facilitate equipment finance applications. All credit is provided by independent lenders.

By using the EquipPay platform, submitting an application, or otherwise engaging with our services, you agree to the collection, use, and disclosure of your information as described in this policy.

Any reference to "we", "us" or "our" refers to Lyft Capital Pty Ltd (trading as EquipPay) and our authorised representatives.

Commercial Credit Consent Duration

Where you are applying for commercial credit (credit wholly or predominantly for business purposes), your consent under this Privacy Policy remains effective for 12 months from the date of your application or from the date you sign our Privacy Consent form. You are not required to provide a new privacy consent for each application you lodge with us within that 12-month period. You may withdraw your consent at any time by notifying us in writing using the contact details in Section 17.

2. What Information We Collect

Personal Information

Personal information is information or an opinion about an identifiable, or reasonably identifiable, individual. We may collect the following personal information:

• Identity information: full name, date of birth, residential address
• Contact information: email address, phone number
• Business information: business name, ABN, business address, industry, trading history, business structure
• Director and guarantor information: names, dates of birth, addresses, identification documents
• Financial information: income and revenue details, assets, liabilities, bank account details, bank statements, financial statements
• Employment and business history
• Usage data: pages visited, device type, browser, IP address, referral source, and interaction data collected via cookies and analytics tools

Credit Information

Credit information is personal information that relates to credit that a person has applied for or has been provided. The credit information we collect may include:

• Records of credit applied for, including credit provider name, type and amount of credit
• Repayment history information
• Default information and serious credit infringements
• Credit reporting information supplied to us by a credit reporting body
• Any information we derive from credit reporting information relevant to assessing creditworthiness

Sensitive Information

We may collect sensitive information in limited circumstances, including:

• Identity documents such as driver's licences, passports, and Medicare cards — for identity verification purposes only
• Information about whether a person is a politically exposed person (PEP) — for our obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) only

We only collect sensitive information where it is reasonably necessary for our functions and with your consent, or where required or authorised by law. We do not use sensitive information for any purpose other than the specific purpose for which it was collected.

Consequences of Not Providing Information

Providing your personal and credit information is voluntary. However, if you do not provide the information we require, we may be unable to process your finance application, provide credit assistance, or source suitable lenders or products for you.

3. How We Collect Your Information

We collect information directly from you when you:

• Submit a finance application through the EquipPay platform or a supplier's embedded widget
• Create or access a customer account
• Contact us by phone, email, or other means
• Upload documents to the platform

We may also collect information from third parties including:

• Referring suppliers or partners who introduce you to EquipPay
• Credit reporting bodies (as described in Section 7)
• Publicly available sources such as ASIC, ABR (Australian Business Register), and other government registers
• Your accountant, lawyer, or other authorised representatives

4. How We Use Your Information

We use your personal and credit information to:

• Verify your identity and assess your eligibility for equipment finance
• Process and assess equipment finance applications on your behalf
• Conduct preliminary assessments of your application using our platform, including automated processing and artificial intelligence tools (see Section 5)
• Match your application with suitable lenders from our panel
• Share your application with lenders listed in our Credit Provider Schedule (Schedule 1)
• Communicate with you about your application status, required documents, and outcomes
• Comply with our legal obligations under the Privacy Act 1988 (Cth), the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth), and other applicable laws
• Improve the EquipPay platform and conduct analytics
• Send you marketing communications about our products and services (see Section 11)
• Prevent fraud and meet our regulatory obligations as an ACL holder

5. Automated Processing and Artificial Intelligence

EquipPay uses automated processing and artificial intelligence (AI) tools in the operation of our platform. This includes the use of in-house AI to assist with preliminary application assessment, identity verification, and document analysis. Automated processing is used to help streamline the application process and improve the accuracy of assessments.

The categories of information processed by these tools may include your application data, identity documents, business and financial information, and bank statement data. We do not use your personal or credit information to train any third-party AI model.

Automated processing does not make final credit decisions. All final credit decisions are made by independent lenders on our panel, who conduct their own assessment.

If you would prefer that your application be reviewed without the use of automated processing, or if you have questions about how automated processing has been applied to your application, please contact us at support@equippay.com.au.

6. Disclosure of Your Information

We may disclose your personal and credit information to the following parties:

• Lenders on our panel: your application details are shared with lenders listed in Schedule 1 (Credit Provider Schedule) for the purpose of assessing your finance application. Each lender has its own privacy policy available on their website.
• Referring suppliers: the supplier who referred you to EquipPay may receive basic status updates on your application to facilitate their referral relationship with us
• Credit reporting bodies: Equifax and illion (see Section 7)
• Our related bodies corporate, authorised representatives, agents, and advisers
• Fintelligence Pty Ltd (ABN 80 625 017 174, ACL 511803): our aggregator, through whose systems some applications are placed with lenders and compliance audits are conducted
• Service providers: trusted third-party technology and operational service providers who assist us in operating the platform, subject to confidentiality obligations
• Law enforcement, government, and regulatory bodies: where required or authorised by law, including ASIC and the OAIC
• Joint applicants and guarantors: where relevant to your application
• Debt collection agencies: where applicable
• Any party you have authorised: including accountants, lawyers, or financial advisers acting on your behalf
• Any prospective purchaser of our business or assets, subject to confidentiality obligations equivalent to those in this policy, and only to the extent reasonably necessary for the purposes of the proposed transaction

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

7. Credit Reporting Bodies

As part of our credit assistance process, we may exchange personal and credit information with credit reporting bodies. We currently use the following credit reporting bodies:

• Equifax Australia: www.equifax.com.au | Phone: 13 8332 (Mon–Fri 8:30am–6:00pm AEST)
• illion: www.illion.com.au

We may disclose information to credit reporting bodies and use information obtained from them to:

• Verify the identity of applicants and guarantors
• Obtain a credit report on an applicant or guarantor
• Conduct a preliminary assessment of a proposed credit application and its suitability
• Request an assessment of whether information provided by the applicant matches information held by the credit reporting body

Your Rights in Relation to Credit Reporting Bodies

Under Part IIIA of the Privacy Act 1988 (Cth) and the Privacy (Credit Reporting) Code 2024, you have the right to:

• Request that a credit reporting body not use your information for pre-screening of direct marketing by credit providers
• Request that a credit reporting body not use or disclose your information if you believe you have been, or are likely to be, a victim of fraud
• Access your credit reporting information held by a credit reporting body
• Request correction of your credit reporting information if it is inaccurate, out-of-date, incomplete, irrelevant, or misleading
• Complain to a credit reporting body or to the Office of the Australian Information Commissioner (OAIC) about handling of your credit reporting information
• Obtain a free copy of your credit reporting information from a credit reporting body once every 12 months — or more frequently in certain circumstances, such as following a correction request or where you have been refused credit in the past 90 days
• Know that credit reporting bodies may use your credit information to provide credit reporting services to other credit providers in the ordinary course of their business

You can access each credit reporting body's privacy policy and credit reporting policy via their websites listed above, or by contacting them directly.

8. Overseas Disclosure

Some of our service providers store or process personal information outside of Australia. Our primary overseas service providers are located in the United States, including our communications infrastructure (Twilio), email delivery (Resend), and application hosting (Railway). Where personal information is disclosed to these recipients, we take reasonable steps under APP 8.1 to ensure they handle your information in a manner consistent with the Australian Privacy Principles.

Please be aware that overseas recipients may not be subject to the same privacy protections as those applying in Australia, and you may have limited rights of redress in relation to how overseas recipients handle your information.

All primary data storage is maintained on servers located in Australia. If our infrastructure arrangements change in a way that affects overseas disclosure, we will update this policy before those changes take effect.

9. Data Security

We take the security of your personal and credit information seriously. Our security measures include:

• AES-256 encryption for all data at rest
• TLS encryption for all data in transit
• Primary data storage on servers located within Australia
• Strict internal access controls — only authorised personnel can access personal information
• Regular security reviews and vulnerability assessments
• Multi-factor authentication for system access

Despite these measures, no data transmission or storage system can be guaranteed to be 100% secure. If you become aware of any security concern, please contact us immediately at support@equippay.com.au or call 1800 005 938.

10. Data Retention

We retain personal and credit information for as long as necessary to provide our services and meet our legal obligations. Our retention periods are as follows:

• Credit and application records (settled deals): minimum 7 years from settlement date
• Identity documents and business verification records: 7 years from settlement date
• Declined or withdrawn applications: 2 years from the date of decision or withdrawal
• Communications and platform logs: 90 days
• Marketing consent records: retained for as long as we have a marketing relationship with you, plus a reasonable period thereafter

After applicable retention periods, personal information is securely deleted or de-identified. We may retain information for longer periods where required by law or where a dispute or regulatory matter remains unresolved.

11. Marketing Communications

We may use your contact details to send you marketing communications about EquipPay's products, services, and updates. We comply with the Spam Act 2003 (Cth) and will only send electronic marketing communications where we have your consent or where permitted by law.

You can opt out of receiving marketing communications from us at any time by:

• Clicking the unsubscribe link in any marketing email
• Replying STOP to any marketing SMS
• Emailing us at support@equippay.com.au

We will action all opt-out requests promptly and at no charge to you.

EquipPay's platform and services are directed at businesses. Where you have provided your contact details in connection with a business finance application, you confirm that those contact details are used wholly, primarily or predominantly for business purposes.

12. Electronic Communications

By providing us with your email address or mobile phone number, you consent to us using these details to send you notices, documents, and communications (including those from lenders) electronically. You are responsible for maintaining appropriate systems to receive, access, and store electronic communications.

If your contact details change, please notify us promptly. If you wish to withdraw your consent to electronic communications, please contact us using the details in Section 17.

13. Cookies

We use cookies and similar tracking technologies to operate and improve the EquipPay platform. These fall into the following categories:

• Essential cookies: required for the platform to function, including session management, authentication, and security. These cannot be disabled without affecting core functionality.
• Analytics cookies: we use Google Analytics to measure how visitors use our platform. This helps us understand usage patterns and improve our services. Data collected is aggregated and does not identify you personally.
• Advertising and attribution cookies: we use Meta Pixel and Google Ads conversion tracking to measure the effectiveness of our advertising campaigns. These tools may set cookies that help us understand how users interact with our site after seeing an ad.

You can manage or disable cookies through your browser settings at any time. You can also opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout, and manage advertising preferences via www.youronlinechoices.com.au. Please note that disabling certain cookies may affect your experience on the platform.

14. Government Identifiers

We may collect government identifiers such as your Australian Business Number (ABN) or Medicare card number where necessary for identity verification or to comply with our legal obligations. We do not use government identifiers to identify you other than as required by law, and we will not disclose government identifiers except where required or authorised by applicable legislation.

15. Minors

EquipPay's platform is intended for use by businesses and individuals aged 18 years and over. We do not knowingly collect personal information from persons under the age of 18. If we become aware that we have inadvertently collected information from a person under 18, we will take steps to delete that information promptly.

16. Your Rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you (APP 12) — we will respond to access requests within 30 days
• Correct information that is inaccurate, incomplete, or out of date (APP 13) — we will respond to correction requests within 30 days
• Complain about a privacy breach to us and, if not resolved, to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au

To exercise any of these rights, please contact us using the details in Section 17. We will not charge you for making an access or correction request. In limited circumstances permitted by law, we may decline an access request and will provide written reasons if we do so.

We will delete or de-identify personal information that we are no longer required by law to retain. Some categories of information must be retained under our regulatory obligations as an Australian Credit Licence holder — the applicable retention periods are set out in Section 10. Where our retention period has passed and there is no other lawful basis for us to keep your information, we will delete or de-identify it on request.

17. Contact Us

18. Complaints

If you have a complaint about how we have handled your personal or credit information, please contact us at support@equippay.com.au in the first instance. We will acknowledge your complaint within 1 business day and provide a written response within 30 days.

Where your complaint relates to a credit matter (including a hardship notice, default notice, or enforcement proceeding), we will respond within the timeframes required under ASIC Regulatory Guide 271, which may be shorter than 30 days.

If your complaint is not resolved to your satisfaction, you may lodge a complaint with:

• Office of the Australian Information Commissioner (OAIC): oaic.gov.au | Phone: 1300 363 992
• Australian Financial Complaints Authority (AFCA) (for credit-related complaints): www.afca.org.au | Phone: 1800 931 678 | Our AFCA membership number is 93387

19. Notifiable Data Breaches

We are subject to the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 (Cth). If we become aware of an eligible data breach that is likely to result in serious harm to any individuals whose information is involved, we will:

• Notify the Office of the Australian Information Commissioner (OAIC) as soon as practicable
• Notify affected individuals directly, or publish a notice on our website if direct notification is not reasonably practicable

If you believe your information may have been compromised, please contact us immediately at support@equippay.com.au or call 1800 005 938.

20. Banking Transaction Data

To assist with the assessment of equipment finance applications, we may use an embedded bank statement tool provided by illion to collect and analyse your banking transaction data. This tool allows you to securely connect your bank account so that we and our lender panel can review your transaction history as part of the credit assessment process.

When you use the illion bank statement tool:

• You are choosing to share your banking transaction data for the purpose of supporting your finance application only
• Transaction data is used for credit assessment of your application and, in aggregated and de-identified form, to improve our credit assessment processes. It is not used for marketing, sold to third parties, or shared with third parties in identifiable form
• We do not store your bank login credentials
• illion's own privacy policy governs how they collect, handle, and store your data — available at www.illion.com.au
• You may provide bank statements manually as an alternative to using the embedded tool

If you have questions about how your banking transaction data is handled, please contact us at support@equippay.com.au.

21. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. The current version will always be available at equippay.com.au/privacy. We encourage you to review this policy periodically.

Schedule 1 — Credit Provider Schedule

The following credit providers are members of our lender panel. When you submit a finance application through EquipPay, we may share your personal and credit information with one or more of the following lenders for the purpose of assessing your application. Each lender has its own privacy policy available on their website.

This schedule is current as at the date of this policy. Our lender panel is subject to change. An up-to-date list is available on request by contacting support@equippay.com.au.