Privacy Policy

Last updated: 29 April 2026

1. Introduction

NOW (Aust) Pty Ltd, trading as Fix My Bad Credit ("we", "us", "our"), is committed to protecting the privacy of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at fixmybadcredit.com.au.

We are bound by the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our services, you consent to the collection and use of your information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

  • Full name, date of birth, and gender
  • Residential address and contact details (phone number)
  • Government-issued identification numbers (driver licence, passport)
  • Employment details and income information
  • Marital status and dependant information

2.2 Credit Information

As part of our credit file analysis service, we may collect:

  • Credit file reports from Equifax, Illion, and CreditorWatch
  • Credit scores and credit history
  • Details of defaults, judgments, and credit enquiries
  • Financial obligations and repayment history

2.3 Financial Data

  • Bank account details (for payment processing)
  • Payment card information (processed securely via Stripe)
  • Details of existing debts, loans, and financial commitments

2.4 Technical Data

  • IP address and browser type
  • Pages visited and time spent on the site
  • Device information and operating system
  • Cookies and similar tracking technologies

3. How We Use Your Information

We use your personal information for the following purposes:

  • To assess your credit file and identify potential issues or errors
  • To determine your eligibility for professional credit repair services
  • To refer qualified prospects to MyCRA Lawyers for professional legal assistance
  • To process payments for consultation fees and credit file orders
  • To provide you with DIY credit repair resources and guidance
  • To communicate with you about your account, orders, and services
  • To improve our website, services, and user experience
  • To comply with our legal and regulatory obligations

4. Who We Share Your Information With

We may share your personal information with the following parties:

  • MyCRA Lawyers – Qualified leads are referred to MyCRA Lawyers (Legal Practice Holdings Group) for professional credit repair and legal services. MyCRA Lawyers operates under its own privacy policy.
  • GoHighLevel (GHL) CRM – We use GoHighLevel as our customer relationship management platform to manage contacts, communications, and lead tracking.
  • Sendy (Email Marketing) – We use Sendy for sending email communications, updates, and marketing materials you have consented to receive.
  • Stripe – Payment processing is handled by Stripe, which operates under its own privacy and security policies. We do not store your full credit card details on our servers.
  • Credit Bureaus – Equifax, Illion, and CreditorWatch for ordering and accessing your credit files.
  • Professional Advisers – Lawyers, accountants, and auditors where necessary for legal compliance.
  • Government and Regulatory Bodies – Where required by law, court order, or regulatory request.

We will never sell your personal information to third parties for marketing purposes.

5. Data Security

We take data security seriously and implement the following measures:

  • All data is encrypted at rest using industry-standard encryption (AES-256)
  • All communications are transmitted over HTTPS/TLS encrypted connections
  • Two-factor authentication (2FA) is available for account security
  • Credit files and sensitive documents are stored in encrypted storage
  • Regular security reviews and access controls are maintained
  • Staff access to personal information is restricted on a need-to-know basis

6. Data Retention

We retain your personal information for the following periods:

  • Account data: For the duration of your account, plus 7 years after closure for legal compliance purposes
  • Credit files and financial data: 7 years, in accordance with Australian legal record-keeping requirements
  • Payment records: 7 years, as required by Australian taxation law
  • Communication records: 3 years from the date of communication

After the retention period, your data will be securely destroyed or de-identified.

7. Your Rights

Under the Australian Privacy Principles, you have the right to:

  • Access – Request access to the personal information we hold about you
  • Correction – Request correction of any inaccurate, incomplete, or outdated personal information
  • Deletion – Request deletion of your personal information, subject to our legal obligations to retain certain records
  • Withdraw consent – Withdraw your consent for marketing communications at any time
  • Complain – Lodge a complaint about how we have handled your personal information

To exercise any of these rights, please contact us using the details below.

8. Cookies and Tracking

Our website uses cookies and similar technologies to:

  • Maintain your session and login state
  • Remember your preferences
  • Analyse website usage and performance
  • Provide security features such as CSRF protection

You can control cookies through your browser settings. Disabling cookies may affect the functionality of our website.

9. Third-Party Services

Our website integrates with third-party services that have their own privacy policies:

  • Stripe – For secure payment processing (stripe.com/au/privacy)
  • GoHighLevel – For CRM and communications
  • Google Fonts – For web typography

10. Complaints

If you believe we have breached the Australian Privacy Principles or wish to make a complaint about our handling of your personal information, please contact us by phone at 1300 667 218.

We will acknowledge your complaint within 7 business days and aim to resolve it within 30 business days.

If you are not satisfied with our response, you may lodge a complaint with:

  • Australian Financial Complaints Authority (AFCA)
    Website: www.afca.org.au
    Phone: 1800 931 678
    AFCA Member Numbers: 98431 (East Coast Finance Pty Ltd) / 83703 (Legal Practice Holdings Group)
  • Office of the Australian Information Commissioner (OAIC)
    Website: www.oaic.gov.au
    Phone: 1300 363 992

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: