4 Square Finance

About this Privacy Policy

Effective date: 15/08/2026

This Privacy Policy applies to 4 Square Finance, Australian Credit Representative No. 511118, authorised under IFBA Pty Ltd, Australian Credit Licence No. 391682.

In this policy, references to “4 Square Finance”, “we”, “us” and “our” mean 4 Square Finance and, where applicable, the persons and organisations involved in providing our services under our credit representative and aggregation arrangements.

We are committed to managing personal information in an open and transparent manner and in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

This policy explains:

the kinds of personal information we collect and hold;
how we collect personal information;
why we collect, hold, use and disclose personal information;
when personal information may be disclosed to third parties or overseas recipients;
how we manage direct marketing;
how we protect personal information;
how you may access or correct your personal information;
how privacy complaints are handled; and
how you can contact us about our privacy practices.

Who we are and what we do

4 Square Finance provides finance-broking and credit-assistance services as an authorised credit representative of IFBA Pty Ltd.

Through the lending and aggregation arrangements available to us, we have access to a panel of financiers and may assist customers with a range of consumer and commercial finance products. Where applicable and appropriately authorised, we may also assist customers in connection with insurance or related products.

Our role is to understand a customer’s requirements and objectives, identify potentially suitable options and assist with the preparation, submission and management of finance applications.

What is personal information?

Personal information is information or an opinion about an identified individual or an individual who is reasonably identifiable, whether or not the information is true or recorded in a material form.

The kinds of personal information we may collect and hold include:

your name, signature, date of birth and contact details;
your residential, postal, business and email addresses;
telephone numbers and other communication details;
identity-document information, including driver’s licence and passport details;
employment, occupation, business and income information;
employer details, business addresses, job titles and salary information;
bank account details, assets, liabilities, expenditure and financial-position information;
information about proposed purchases, assets, properties or transactions;
information contained in supporting financial documents;
credit-related information, including credit accounts, repayment history, credit enquiries, defaults, insolvency or bankruptcy information;
information supplied by referees, accountants, solicitors, employers, banks or other authorised persons; and
any other information reasonably necessary to provide the services you request.

Sensitive information

Sensitive information is a category of personal information and may include information about an individual’s racial or ethnic origin, political opinions, religious beliefs, criminal record, health, disability or other matters identified as sensitive under applicable privacy law.

We do not generally need to collect sensitive information as part of our ordinary finance-broking activities.

Where sensitive information is reasonably necessary—for example, health information required in connection with an insurance enquiry—we will obtain your consent before collecting it unless collection is otherwise authorised or required by law.

How we collect personal information

We will ordinarily collect personal information directly from you when you:

make an enquiry;
complete an online, paper or electronic form;
speak with us by telephone or in person;
communicate with us by email, SMS or another electronic channel;
apply for a finance or insurance product; or
provide documents or information in support of an application.
Information collected directly from you for these purposes is generally referred to as solicited information.
With your authority, or where otherwise permitted by law, we may also collect personal information from third parties, including:
employers;
accountants, bookkeepers and financial advisers;
banks and other financial institutions;
solicitors and other professional advisers;
referrers or introducers;
credit reporting bodies or authorised credit-report access services;
financiers, insurers and product providers;
asset suppliers, motor vehicle dealers and real estate representatives;
government agencies, registers or verification services; and
other persons you authorise to provide information to us.
A referrer may initially provide us with limited information, such as your name and contact details, so that we can contact you about your enquiry.

Why we collect, hold, use and disclose personal information

We collect, hold, use and disclose personal information so that we can:

respond to enquiries and communicate with you;
understand your requirements, objectives and financial circumstances;
assess potential finance or insurance options;
provide credit assistance and finance-broking services;
prepare, submit and manage applications;
verify the information provided to us;
obtain quotations, indicative terms or approvals from product providers;
facilitate settlements and other transactions;
administer our ongoing relationship with you;
maintain our business and compliance records;
manage complaints, disputes and legal matters;
comply with legal, regulatory, licensing and contractual obligations;
manage risk, detect or prevent fraud and protect our systems;
improve our services and business processes; and
undertake marketing where permitted by law.

Who we may disclose personal information to

Depending on the services requested, we may disclose personal information to:

financiers, lenders and other credit providers;
insurers, insurance brokers and product issuers;
IFBA Pty Ltd and businesses involved in our aggregation or licensing arrangements;
credit reporting bodies or authorised credit-report access services, where permitted and with any required authority;
your employer, bank, accountant, solicitor or other professional adviser for verification purposes;
suppliers or vendors involved in the proposed transaction, such as a motor vehicle dealer or equipment supplier;
valuers, settlement agents and verification-service providers;
referees or nominated contacts, where appropriate and lawful;
technology, document-storage, data-processing and professional-service providers;
auditors, compliance consultants, legal advisers and insurers;
government agencies, courts, tribunals, regulators and law-enforcement bodies where required or authorised; and
any other person or organisation to whom you authorise us to disclose the information.

We will only disclose personal information for purposes connected with the services requested, for a related purpose that would reasonably be expected, with your consent, or where otherwise permitted or required by law.

How long we retain personal information

We retain personal information for as long as it is reasonably required for the purposes for which it was collected and to satisfy our legal, regulatory, licensing, contractual and recordkeeping obligations.

As a general practice, information connected with a finance application or finance contract may be retained for at least seven years after our engagement or the relevant finance contract has ended, unless a different retention period is required or permitted by law.

When personal information is no longer required for an authorised purpose and we are not legally required to retain it, we will take reasonable steps to securely destroy it or permanently de-identify it.

Remaining anonymous or using a pseudonym

You may deal with us anonymously or use a pseudonym where it is lawful and practicable to do so.

For example, you may make a general enquiry about our services or the types of products available without identifying yourself.

However, if you ask us to provide credit assistance, arrange finance, verify your identity or submit an application, we will generally need to know your identity and collect sufficient personal information to provide the requested service and meet applicable lender and legal requirements.

Solicited personal information

We will only collect personal information that is reasonably necessary for one or more of our functions or activities, or where collection is otherwise authorised or required by law.

Sensitive information will generally only be collected with your consent and where it is reasonably necessary for the service being provided.

Unsolicited personal information

We may occasionally receive personal information that we did not request.

When this occurs, we will determine whether we could lawfully have collected the information and whether it is reasonably necessary for one or more of our functions or activities.

Where the information could have been lawfully collected and is relevant to our activities, we may retain and handle it in accordance with this policy.

If the information could not have been lawfully collected, or is not reasonably necessary for our activities, we will take reasonable steps to destroy or permanently de-identify it, provided it is lawful and reasonable to do so.

Notification when information is collected

When we collect personal information directly from you, we will take reasonable steps to notify you of, or ensure you are aware of:

our identity and contact details;
the purposes for which the information is being collected;
the main consequences if the information is not provided;
the organisations or types of organisations to which the information may be disclosed;
whether information is likely to be disclosed overseas;
how you may access or correct your information; and
how you may make a privacy complaint.

Where personal information is collected from a third party, we will take reasonable steps to notify you of the collection and the relevant circumstances, unless an exception applies.

Direct marketing

Where permitted by law, we may use your personal information to tell you about other finance, insurance or related products and services that may be of interest to you.

Marketing communications may be sent by:

email;
telephone;
SMS;
post;
social-media platforms; or
other electronic communication channels.

Marketing may relate to products or services offered by 4 Square Finance, businesses within our licensing or aggregation arrangements, or selected third parties. Where consent is legally required, we will obtain that consent before sending the communication.

We do not sell your personal information to organisations outside our business or associated group.

You may opt out of direct marketing at any time by:

using the unsubscribe facility in an electronic communication;
emailing admin@4sq.com.au.

We do not charge for opt-out requests. Requests relating to commercial email or SMS communications will be processed as soon as practicable and within the timeframe required by law. Other direct-marketing opt-out requests will be actioned within a reasonable period.

Opting out of marketing will not prevent us from sending service-related, transactional, regulatory or other non-marketing communications where appropriate.

Overseas disclosure of personal information

Our operations are based in Australia. However, we may use related organisations, service providers, contractors or technology providers located outside Australia or whose systems are accessible from overseas.

Countries in which overseas recipients may be located include:

Germany;
New Zealand;
the United Kingdom;
the Philippines;
India;
Singapore;
Japan;
Malaysia;
Vietnam; and
the United States of America.

The countries involved may change depending on the providers and systems used. In some circumstances, particularly where cloud or networked storage is used, it may not be practicable to identify every location from which information may be stored or accessed.

Before disclosing personal information to an overseas recipient, we will take the steps required by applicable Australian privacy law. Overseas recipients may also be subject to local laws that affect how information is accessed, used or disclosed.

Government-related identifiers

As part of an application or identification process, we may collect government-related identifiers appearing on documents provided to us, including:

driver’s licence numbers;
passport numbers; and
tax file numbers.

We will not adopt a government-related identifier as our own identifier for you unless permitted by law. We will generally identify customer files using names, internal reference numbers or application numbers.

Driver’s licence or passport information may be disclosed to a financier, insurer, verification provider or other authorised recipient where required as part of an identification or application process.

Tax file numbers are subject to specific legal restrictions. We will only collect, use, disclose or retain tax file number information where authorised by applicable taxation, superannuation or personal-assistance law.

Where tax file number information is received but is not authorised or necessary for us to retain, we will take reasonable steps to redact, securely destroy or permanently de-identify that information.

Accuracy and correction of personal information

We take reasonable steps to ensure that the personal information we collect, use and disclose is accurate, complete, relevant and up to date.

The accuracy of our records depends partly on the information provided to us. Please contact us if:

your personal or contact details change;
information you previously supplied is no longer accurate; or
you believe information held by us is incomplete, misleading, irrelevant or out of date.
We will take reasonable steps to correct the information where appropriate.
How we protect personal information
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.
Security measures may include:
confidentiality and privacy obligations applying to employees and representatives;
restrictions on access to customer information;
physical security for offices and hardcopy records;
document-retention and secure-disposal procedures;
password controls and user-access permissions;
firewalls, encryption and other electronic safeguards;
staff training and compliance procedures; and
contractual security and confidentiality obligations applying to service providers.

Where personal information is stored by a third-party service provider, we take reasonable steps to ensure that appropriate contractual, technical and organisational safeguards apply.

No electronic transmission or storage system can be guaranteed to be completely secure. If an eligible data breach occurs, we will respond in accordance with our legal obligations.

Accessing your personal information

You may request access to the personal information we hold about you by contacting us using the details below.

We will respond within a reasonable period and will generally provide access in the form requested where it is reasonable and practicable to do so.

There are circumstances in which access may be refused or limited, including where:

access would pose a serious threat to the life, health or safety of an individual or to public health or safety;
access would have an unreasonable impact on another person’s privacy;
the request is frivolous or vexatious;
the information relates to existing or anticipated legal proceedings and would not otherwise be accessible through discovery;
access would reveal our intentions in negotiations with you in a way that would prejudice those negotiations;
providing access would be unlawful;
denying access is required or authorised by law or by a court or tribunal;
access would prejudice enforcement activities or action concerning suspected unlawful activity or serious misconduct; or
access would reveal commercially sensitive evaluative information.
If we refuse access, we will provide written reasons where it is reasonable and lawful to do so and explain the available complaint mechanisms.

Correcting your personal information

You may ask us to correct personal information that you believe is inaccurate, incomplete, out of date, irrelevant or misleading.

We will respond within a reasonable period and take reasonable steps to correct the information where appropriate.

If we decline to make a requested correction, we will provide written reasons where it is reasonable and lawful to do so and explain the available complaint mechanisms.

Privacy complaints

If you believe that we have not handled your personal information in accordance with this policy, the Australian Privacy Principles or applicable privacy law, please contact our Privacy Officer:

4 Square Finance

Australian Credit Representative No. 511118

Authorised under IFBA Pty Ltd

Australian Credit Licence No. 391682

Address: Suite 113, Level 3, 30–34 Charles Street, South Perth WA 6151

Email: admin@4sq.com.au

Please provide sufficient information to help us understand and investigate the matter.

We will acknowledge your complaint promptly, investigate it fairly and provide a response within a reasonable period. We will generally aim to provide a substantive response within 30 days.

If you are not satisfied with our response, you may be entitled to refer your privacy complaint to the Office of the Australian Information Commissioner.

Changes to this Privacy Policy

We may amend this Privacy Policy from time to time to reflect changes to our business practices, systems or legal obligations.

The current version will be published on our website and will take effect from the date shown on the policy.

Effective date: [insert date]

Contact us

Questions about this Privacy Policy or our handling of personal information may be directed to: