Consumer Data Right Policy
OCTO Finance Group
About the Consumer Data Right
The Consumer Data Right (CDR) is an Australian law that lets you share data a business holds about you — such as your banking data — with accredited providers you choose. This policy explains how OCTO Finance Group handles CDR data if you choose to share it with us.
When CDR data is used
We only collect CDR data with your express consent, and only for the purpose you consent to — generally to help assess your finances and prepare a finance application. You choose what to share and for how long, and you can withdraw your consent at any time.
What we do with it
We use CDR data solely for the consented purpose. We do not sell it, and we do not disclose it other than as needed to provide the service you asked for or as permitted by the CDR rules. We hold it securely for the period of your consent.
Your controls
You can view and manage the consents you've given, and withdraw a consent at any time. When a consent ends or is withdrawn, we stop collecting the data and either de-identify or delete what we hold, unless we're required to keep it.
De-identification and deletion
Where the rules allow, we may de-identify CDR data so it can no longer be linked to you. Otherwise, redundant CDR data is deleted in line with the CDR rules.
Questions and complaints
For anything about CDR data, contact us at hello@octofg.com.au. You can also contact the OAIC, which oversees the privacy protections in the CDR.
See also our Privacy Collection Notice.