Skip to content
Apply now

Legal

Privacy Consent & Disclosure

How we collect, use and disclose your personal information in connection with commercial credit, and the consents you give when you apply. You give these consents in the application itself; this is the document that declaration refers to.

Last updated 2 September 2026Commercial credit onlyIncludes credit reporting consent

Important: This form explains how GreyRok Capital Pty Ltd (GreyRok, we, us or our) collects, uses and discloses your personal information in connection with an application for, or the provision or management of, commercial credit. It also contains consents required for consumer credit report checks for commercial credit and guarantee purposes.

1. Who this form applies to

This form applies to an individual whose information is provided to GreyRok in connection with commercial lending, including a sole trader, director, officer, secretary, shareholder, beneficial owner, authorised representative, guarantor, proposed guarantor or security provider.

2. Personal information we collect

Depending on your role and the proposed transaction, we may collect:

  • identity and contact details, including your name, date of birth, residential and postal addresses, email address and telephone number;
  • information in government-issued identification documents and the results of electronic identity verification checks;
  • your relationship with the applicant or borrower, including your office, shareholding, beneficial ownership or guarantee position;
  • financial information, including income, assets, liabilities, bank statements, tax returns and information relevant to your capacity as a sole trader, guarantor or security provider;
  • consumer and commercial credit information, credit enquiries, scores, payment history, defaults, court actions, insolvency information and business risk information;
  • information about your business activities, industry, trading history and information contained in loan applications, correspondence and account records; and
  • AML/CTF screening results, including for identity verification, politically exposed persons, sanctions, adverse media and, where permitted or required, criminal history information.

3. How we collect information

We may collect personal information directly from you or from:

  • the applicant, borrower, guarantor, security provider and their directors, officers, employees or representatives;
  • brokers, referrers, accountants, lawyers, financial advisers, banks and other persons involved in the application or transaction;
  • Simple KYC Pty Ltd, identity document issuers, government and non-government verification sources, sanctions and PEP databases, and adverse media sources;
  • Equifax, Experian (including illion), CreditorWatch and other credit or commercial information providers; and
  • public registers, regulators, courts, insolvency records and other publicly available sources.

4. Why we collect, use and disclose information

We may handle your personal information to:

  • assess and process an application for commercial credit, including the applicant’s and any guarantor’s creditworthiness and capacity;
  • verify identity, beneficial ownership and authority, and conduct customer due diligence, transaction monitoring, sanctions, PEP and adverse media screening;
  • decide whether to enter into, vary, renew, extend or enforce a loan, guarantee or security arrangement;
  • administer loan accounts, process payments, manage arrears, recover debts and exercise rights under finance and security documents;
  • obtain and assess consumer and commercial credit reports, scores and business risk information, and make permitted credit reporting disclosures;
  • comply with the AML/CTF Act, sanctions laws, court orders and other legal or regulatory obligations, including reporting to AUSTRAC where required;
  • manage complaints, disputes, audits, fraud prevention and legal proceedings; and
  • undertake related internal management, risk, compliance and record-keeping activities.

5. Collection required or authorised by law

Some collection, use or disclosure is required or authorised by the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth), the rules made under that Act, the Privacy Act 1988 (Cth), the Privacy (Credit Reporting) Code 2025 and other applicable Australian laws or court orders. Where sensitive information is not otherwise permitted, required or authorised to be collected, we will rely on your consent to collect that information.

6. If you do not provide the information

You are not generally required to provide personal information to us. However, if required information or consent is not provided, we may be unable to verify your identity, complete mandatory checks, assess the application, accept you as a guarantor or security provider, provide or continue the facility, or deal with a request relating to the loan.

7. Who we usually disclose information to

We may usually disclose relevant personal information to:

  • Simple KYC Pty Ltd and its identity verification and screening suppliers;
  • Equifax, Experian (including illion), CreditorWatch and other credit reporting or commercial information providers;
  • the applicant, borrower, guarantors, security providers and their authorised representatives where appropriate;
  • brokers, referrers, payment and banking providers, valuers, insurers, professional advisers, auditors and information technology or cloud service providers;
  • debt collectors, receivers, insolvency practitioners, enforcement agents and legal service providers; and
  • AUSTRAC, law enforcement agencies, courts, regulators and government bodies where required or authorised by law.

8. Identity verification and AML/CTF screening

We use Simple KYC Pty Ltd (ABN 12 608 580 829), The Commons, 388 George Street, Sydney NSW 2000 (www.simplekyc.com), to verify identity and conduct sanctions, PEP and adverse media screening. We may disclose your name, date of birth, address and identification document details to Simple KYC. Simple KYC may compare that information with reliable data sources and return the verification and screening results to us. Simple KYC may retain information under its own privacy policy and legal obligations.

9. Credit reporting notice

GreyRok may make an information request to a credit reporting body that involves the disclosure of your personal information to that credit reporting body. Your consent is not required for that disclosure.

A record of the information request may be used and, where permitted, disclosed by a credit reporting body or credit provider when assessing creditworthiness, including when calculating a credit score or rating. The number, type, amount and frequency of credit enquiries may affect a credit score or rating, although the effect will depend on the credit reporting body’s scoring methodology. A credit reporting body may include information disclosed by GreyRok in reports provided to other credit providers to assist them to assess creditworthiness. If an individual fails to meet payment obligations relating to consumer credit or commits a serious credit infringement, a credit provider may be entitled to disclose that information to a credit reporting body.

You have the right to request access to, or correction of, credit-related personal information held by GreyRok and to make a complaint about GreyRok’s handling of that information. Details are contained in GreyRok’s Privacy Policy and Credit Reporting Privacy Policy, both available free of charge at those links or in another form on request. The credit reporting policies of the credit reporting bodies used by GreyRok are available at the links set out in the Privacy Policy.

10. Overseas disclosures

We and our service providers may use systems or suppliers located outside Australia. Personal information may therefore be disclosed to overseas recipients. Because service provider locations can change and may involve multiple jurisdictions, it may not be practicable to specify all countries. We will handle overseas disclosures in accordance with the Privacy Act. This form does not ask you to waive the protections in Australian Privacy Principle 8.1 and section 16C of the Privacy Act.

11. Credit assessment system

GreyRok uses an internally developed system to score and rank applications using financial, trading, credit and identity or AML/CTF information. The system assists GreyRok’s credit team, but does not make the final decision. GreyRok staff make all approval and decline decisions.

12. Privacy policy, access, correction and complaints

GreyRok’s Privacy Policy explains how you may request access to or correction of personal and credit-related information, make a privacy or credit reporting complaint, and how GreyRok deals with complaints. The policy is available at greyrokcapital.com/legal/privacy or on request.

Privacy Officer: admin@greyrokcapital.com

Contact us

Email admin@greyrokcapital.com · Tel 1300 070 666
Mail: PO Box 89, Balaclava, Victoria 3183

Privacy PolicyBusiness Purpose DeclarationDisclosuresContact us