Privacy & Terms
We take your rights and privacy seriously and have outlined what that means to us and our relationship with you.
Your rights and privacy
We respect that your debt is personal.
Each debt is a different story about people, conversations, agreements, promises and good intentions. It’s just that those intentions went wrong somewhere.
At Baycorp we believe that the more information you have available, the easier it is to lift the burden of debt and make the right decisions.
Your rights and responsibilities
Legally, responsibility lies with you when it comes to paying your debts on time, and you shouldn’t deliberately avoid your obligations.
Sometimes it also helps to get assistance from a community-based financial counsellor, solicitor or other qualified adviser who might be able to help. Across Australia and New Zealand there are several non-profit organisations that can help you with financial advice. If you are struggling with unmanageable debt we suggest taking a look at some of these websites.
Australia
The Australian Competition and Consumer Commission (ACCC) and Australian Securities and Investments Commission (ASIC) offer a booklet on ‘Dealing with debt: your rights and responsibilities’ which can be viewed here.
You can also contact the Office of the Australian Information Commissioner who is an independent statutory agency within the Attorney General's portfolio.
New Zealand
The Commerce Commission website provides an overview of your rights and responsibilities under the Fair Trading Act. Click here for the overview.
The Office of the Privacy Commissioner has a summary of Your Privacy and can be found here.
Our promise
At Baycorp our aim is to help you lift the burden of debt because as uncomfortable as debt is, resolving it once and for all, is a great feeling.
We respect that your debt is your business, so when you are dealing with us, you can always expect to be treated fairly, with respect and courtesy. We will not unduly harass or coerce you about debts owed.
Baycorp NZ - Privacy & Credit Reporting Policy
Baycorp forms part of the Credit Corp Group of companies, which comprises Credit Corp Group Limited at Level 15, 201 Kent St, Sydney 2000 (ACN 092 697 151) and its subsidiaries (“Credit Corp”, “we” and “our”). We are committed to ensuring that the privacy of your personal information is respected and maintained at all times.
We are bound by the Privacy Act 2020 (“Act”), the Information Privacy Principles (“IPP’s”), the Credit Reporting Privacy Code 2020 (CR Code), as well as other applicable laws and codes.
We only collect personal information as required or authorised by law. In particular, the Act authorises us to collect personal information from you and third parties in certain circumstances. Information about the ways and circumstances in which we collect personal information is contained in this Privacy Policy.
We are committed to protecting and maintaining the privacy, accuracy and security of your personal information. This Privacy Policy outlines how we manage your personal information and how we collect, store, maintain, use and disclose, and exchange that information. It also provides you with information about how you can access your personal information and seek correction.
In addition to your privacy rights arising under New Zealand Law and this Privacy Policy, individuals who are located in the European Union (EU)/United Kingdom (‘UK’) also have privacy rights arising under the General Data Protection Regulation ("GDPR"). The GDPR gives rights to individuals located in the EU/UK and places obligations on organisations holding their personal information.
Please visit https://www.creditcorp.com.au/european-union-general-data-protection-regulation-eu-gdpr-policy/ for details on your privacy rights if you are located in the EU/UK and information on how we meet these obligations to protect your privacy.
What is personal information?
Personal information means information about an identifiable individual; and includes information relating to a death that is maintained by the Registrar- General pursuant to the Births, Deaths, Marriages, and Relationships Registration Act 2021, or any former Act (as defined by Schedule 1 of that Act).
The types of personal information that Credit Corp collects typically includes your:
- name;
- contact details (such as address, telephone and email);
- date of birth;
- account details;
- gender;
- marital status and other household information such as number and age of dependents;
- occupation and employment information;
- financial information such as assets, liabilities, income and expenditure;
- complaint details; and
- involvement as a party in pending and completed legal proceedings.
Other types of personal information that Credit Corp collects relates to credit information. This typically includes:
- identification information;
- credit liability information;
- credit history;
- type and amount of credit;
- details of amounts payable and when such amounts are payable;
- repayment history, including when payments were made and whether payments were made when due; and
- default information.
How does Credit Corp collect personal information?
Credit Corp collects personal information from various sources, including:
Directly from you:
This is personal information you provide to us, for example:
- during your communications with us, including by telephone, in writing, electronically, or through our websites and other digital platforms;
- when you verify your identity with us, which may include providing copies of identification documents;
- when you make a payment and provide us with your credit card or bank account details;
- when you set up a payment arrangement and provide us with information about your financial situation (such as your income, expenses, and employment status); or
- when you use the customer portals on our websites or our mobile apps, for example, by updating your contact details or sending us a message or allowing us to collect information regarding your interactions with our website.
Other Third Parties:
We may also collect personal information about you from other third parties as necessary to provide our services , to support our debt collection operations, to ensure the details we hold are accurate, to maintain contact with you, to understand your financial situation and collect any debt you may owe. These other sources include:
The Original Creditor/Client:
When your account with another organisation (like a bank, utility provider, or phone company) is referred or assigned to us, we collect the personal information about you and your account directly from that organisation. This forms the basis of the account we manage.
Credit Reporting Bodies:
We may collect credit information as permitted by law. Credit Information may be collected from the same entities to which we disclose credit information, as listed in the section titled “Disclosure to credit reporting bodies”.
Other Credit Providers:
In some circumstances, we may collect information from other credit providers to help us verify information or to assess your financial situation.
Your Authorised Representatives:
Such as a lawyer, accountant, financial mentor, or other third party you may appoint to manage your interactions with us.
Data Service Providers:
We may use trusted providers to supply updated contact details (like your address or phone number) or other information to assist us in managing your account. This may include Acceleon Pty Ltd, ID4ME Pty Limited.
Other people or entities connected to you:
In some circumstances, we may make limited contact with a third party connected to you (such as family, friends or third-party associates) for the purpose of helping us re-establish contact with you.
Publicly Available Sources:
This includes public registers and information that you have made public, such as on social media, news websites, or other web pages available to the general public.
Courts, tribunals and ombudsman schemes:
We may collect such information from these entities if you are party to a proceeding or complaint. We are a member of Financial Services Complaints Limited.
Related Companies:
If you have had previous dealings with another company within the Credit Corp Group, we may collect information from them to help us manage your current account with us and for our internal administrative purposes.
Protecting your personal information
We are committed to ensuring the security of your personal information. We store information in both hard copy and electronic form. We protect your personal information from misuse, loss, unauthorised access, modification and disclosure. The steps that we take to protect your personal information include:
- ensuring database security through password protection and secure servers and data storage devices;
- encryption of certain records;
- staff training on confidentiality; and
- maintaining accreditation to International Standard – ISO27001 Information Security Management.
We retain your personal information for as long as is necessary to fulfil the purposes outlined in this policy, or as required by law.
Why is personal information collected by Credit Corp?
Credit Corp collects personal information that is reasonably necessary for one or more of its functions or activities. We collect personal information about you so that we can:
- identify you and check information about your identity;
- contact you in relation to repayment/maintenance of your account;
- enter into payment arrangements with you;
- respond to your enquiries;
- provide you with products and services;
- contact you, including by electronic or by other means to provide you with offers of, or information about, goods and services we, any company within the Credit Corp Group of companies, or selected third parties, may be able to provide to you that we think may be of interest to you, unless you specifically request that we do not do so;
- comply with relevant laws and regulations;
- or for any other purpose with your consent.
In certain circumstances, we may also collect sensitive information about you such as information in relation to racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual orientation, biometric information or criminal record information. However, we only collect and use sensitive information with your consent and where we are legally authorised to do so.
Unless you otherwise consent or we are otherwise permitted to do so by law, personal information will only be used for the purpose for which it was collected (“the primary purpose”) or for a purpose directly related to the primary purpose (“the secondary purpose”).
The main consequences of us not collecting personal information are an inability or delay in being able to identify you, contact you or provide services to you.
We do not use your IRD number, drivers licence number, National Health Index Number or any other government related identifier for you as an account number or as our own identifier for you. However, we may ask you for one of these identifiers to prove your identity when you deal with us.
Disclosure of personal information
Where Credit Corp collects your personal information, Credit Corp is the intended recipient. However, in some circumstances, Credit Corp may disclose your information. Credit Corp only discloses personal information as authorised or required by law. This may involve disclosing such information to:
- organisations forming part of the Credit Corp Group of companies;
- credit reporting and identity verification agencies;
- our authorised agents;
- our legal advisors;
- your authorised representatives;
- courts, tribunals and ombudsman schemes;
- insurers;
- government agencies or regulators, or anyone else who has rights under any agreement that you have entered into with us or a company in the Credit Corp Group of companies or that we are legally required to share your information with;
- our service providers where we outsource functions (such as process serving, repossession, bulk mailing, information technology maintenance, functionality and support or document storage);
- any entity that may acquire an interest in your loan account and/or business; and
- other persons with your consent.
Disclosure to credit reporting bodies
Credit Corp may also disclose certain credit related personal information to credit reporting and identity verification agencies. For example, if you fail to meet repayment obligations or commit a serious credit infringement, we may be entitled to disclose this to a credit reporting agency. When such information is disclosed to a credit reporting agency, the credit reporting agency may retain such information (including default information) and include it in reports provided to credit providers to assist them in assessing your credit worthiness. We disclose information to the following credit reporting bodies:
Experian New Zealand Limited:
Phone: 0800 733 707
Web: www.experian.co.nz
Equifax NZ:
Phone: 0800 692 733
Email: publicaccess.nz@equifax.com
Web: www.equifax.co.nz
Centrix Group Limited:
Phone: +64 9 969 9706
Email: admin@centrix.co.nz
Web: www.centrix.co.nz
Details of how Centrix handles your personal information can be found here:
https://www.centrix.co.nz/privacy-statement
Centrix will collect your credit information for the purpose of providing credit reporting services to us and other subscribers to Centrix consumer credit reporting services, and Centrix will use and disclose your credit information in accordance with the Centrix Privacy Statement. You have rights of access to, and correction of, your credit information and any other personal information held by Centrix as set out in Centrix Privacy Statement.
If you would like more information about how the above credit reporting agencies manage credit related information you can contact them directly and request a copy of their privacy policy.
Does Credit Corp provide information to overseas entities?
If you relocate overseas, we may disclose personal information to our overseas agents that operate in the particular country to which you have relocated. We may also disclose personal information to entities or branches which are part of the Credit Corp Group of companies which are located overseas including within Australia and the Philippines.
We will not disclose information overseas unless:
- the overseas entity is carrying on business in New Zealand and, in relation to the information, we believe on reasonable grounds that the overseas entity is subject to the Act; or
- we believe on reasonable grounds that the overseas entity is subject to privacy laws that, overall, provide comparable safeguards to those in the Act; or
- the overseas entity is contractually required to comply with the Act; or
- after being expressly informed that the overseas recipient may not be required to protect the personal information in a way that, overall provides comparable safeguards to those in the Act, you consent to disclosure to the overseas entity.
Information about other people
If you provide us with any information about any other person, you confirm that they have agreed to this Privacy Policy and you have obtained the authorisation of the individual concerned to the disclosure of their personal information to us for the purposes set out above and you have advised such persons of their rights to access and request correction of their personal information in accordance with this Privacy Policy.
Access to personal information
You have the right to request access to any personal information that we hold about you (including credit information) and for such information to be corrected. You can make a request for access to your personal information by contacting customercare@baycorp.co.nz.
In some circumstances, we may refuse to provide you with access to your personal information in accordance with the Act. These circumstances include, but are not limited to, where:
- providing access would involve an unwarranted disclosure of the affairs of another individual or of a deceased individual;
- the disclosure of the information would be a breach of legal professional privilege;
- the information requested is not readily retrievable, does not exist or cannot be found;
- denying access is otherwise required or authorised by law; or
- the request for access is frivolous or vexatious, or the information requested is trivial.
Depending on the complexity of the information and/or the request, we will respond to any request as soon as reasonably practicable and in any case not later than 20 working days after the date on which we received the request. If your request is urgent, please specify this at the time of making your request. If you advise us the request is urgent and the reasons for this, we will consider the reason when determining the priority to be given to responding to it.
If we refuse to provide you access to your personal information, we will provide you with an explanation of the refusal.
If we do not correct your personal information, you are entitled to request that there be attached to the information a statement of the correction sought but not made. Where reasonably practical, we will inform each person or body or agency to whom the personal information has been disclosed of the correction or correction sought but not made.
You will not be charged a fee for making a request to access your personal information. However, depending on the type of request, a fee may apply and be charged for providing the information to you. The fee covers the direct out-of-pocket cost to us in collating, copying and providing certain information to you.
We will endeavour to provide the requested information as promptly and inexpensively as possible. Following receipt of your request, we will let you know if a fee applies and if so, the amount. Any applicable fee must generally be paid prior to us providing documents or information to you. Information about how any applicable fee is calculated will be provided following receipt of your request.
Credit Corp will take reasonable steps to ensure that your personal information is accurate, complete and up to date. If you believe the information we hold about you is incorrect please write to us at the address listed below.
Notifiable Privacy Breaches
The Act requires that we report any Notifiable Privacy Breaches ("NPB") to the Office of the Privacy Commissioner and any affected individual where we reasonably believe that a privacy breach has caused, or is likely to cause, serious harm to the affected individual or individuals.
In the event of any NPB, we will notify you as soon as practicable after becoming aware of such a breach, subject to the provisions of the Act.
Websites
Our websites use cookies. A cookie is a small text file that a website may place on your computer or mobile device to remember your preferences. The use of cookies may enable us to identify the pages you access and the prior site you visited. You can set your web browser to refuse cookies, however this may mean that you are unable to use the full functionality of our websites.
We also use online advertising tools such as Google Analytics. These may include Remarketing, Google Display Network Impression Reporting, DoubleClick Platform integrations and Google Analytics Demographics and Interest Reporting. Like cookies, these tools collect data about how you interact with our websites. These tools mean that third-party vendors, including Google, use cookies to collect such data and show our ads on sites across the Internet. You can find out more about how Google uses such data and how you can control information sent to Google at https://www.google.com/policies/privacy/partners. Information about how you can opt out of Google Analytics can be found at https://tools.google.com/dlpage/gaoptout. We also interact with social media sites such as Facebook for advertising purposes.
Contacting Us
You may obtain more information about the way Credit Corp manages your personal information and about access to and correction of your personal information by applying in writing to our Privacy Officer:
Post: Customer Care
Credit Corp Group Limited
Private Bag 92063,
Victoria Street West,
Auckland 1142
Email: contact@baycorp.co.nz
Further information on privacy in New Zealand may also be obtained by visiting the website of the Office of the Privacy Commissioner at www.privacy.org.nz..
Making a complaint
You may make a complaint if you believe that we have breached this Privacy Policy, the Act, the IPPs or the CR Code by contacting the Privacy Officer at:
Credit Corp Group Limited
Telephone: 0800 450 527 (within NZ) or 1300 768 621 (within Australia)
Email: customercare@baycorp.co.nz
We will endeavour to deal with your complaint as soon as is reasonably practicable. If we are unable to satisfactorily resolve your complaint, it may be referred to the Office of the Privacy Commissioner by visiting the following website and following the steps listed on the site: www.privacy.org.nz/your-privacy/how-to-complain. This Privacy Policy may be reviewed from time to time. We reserve the right to change our policy at any time to reflect changes in the law, and also our business needs as long as the changes do not disadvantage you.
Any revised version of this policy will be published on our website and available at www.baycorp.co.nz/privacy#privacy.
This Privacy Policy was last updated on 1 May 2026.
Acceptance
This site ("Site") is owned by Baycorp (referred to on the Site as "we", "us" or "our"). Use of our Site is subject to the following terms and conditions of access to and use of the Site ("Terms of Access"). By accessing and browsing the Site you represent that you have read, understood and accepted these Terms of Access and agree to be bound by them. If you do not agree to these Terms of Access please do not use our Site.
Changes
We reserve the right, at our discretion, to update or revise these Terms of Access. Please check the Terms of Access periodically for changes. Your continued use of this Site following the posting of any changes to the Terms of Access indicates your acceptance of those changes.
Jurisdiction
Your access to, and use of, the Site is governed by and construed in accordance with the laws of Australia or New Zealand, whichever is applicable, and you agree to submit to the exclusive jurisdiction of the courts in Australia or New Zealand, whichever is applicable.
Intellectual property rights
You acknowledge and agree that all content and material available on the Site is protected by copyrights, trade marks or other intellectual property rights and laws. No content or material on the Site may be reproduced, adapted, linked to, distributed or used in any way without our prior written consent. However, you may print or download one copy of the materials or content on this site on any single computer for your personal, non-commercial use, provided you keep intact all copyright and other proprietary notices.
Links
We have not reviewed all or any of the sites linked to the Site and are not responsible for the contents of any those sites. We request that you seek permission prior to linking to this site. Your linking to this site is at your own risk.
General disclaimer
Whilst we have endeavoured to ensure that the content and material on the Site is free from error, we do not warrant its accuracy, adequacy or completeness or that it is suitable for your intended use. This Site may not be continuously available.
Liability exclusion
Your use of the Site is at your own risk. By using this site, you agree that we are not responsible for any damage or harm arising out of your use of the Site. You also agree that all warranties, conditions and representations in respect of the Site (express or implied) are excluded to the fullest extent permitted by law.
What is a cookie?
Cookies are small files which are placed in your browser by the websites you visit on your desktop, tablet or smartphone. When you visit a website that has issued a cookie to your computer, your web browser sends the data that it has stored in that cookie back to the website's server.
There are two types of cookies - session and persistent.
Session cookies are temporary and deleted when you close your browser.
Session cookies are temporary and deleted when you close your browser.
Persistent cookies help websites remember your information and settings when you visit our site in the future.
What is the purpose of using cookies?
We use cookies for a variety of purposes, including the following:
- To enable the efficient operation of our website;
- To produce data on web traffic;
- To learn about how we can improve the digital experiences we provide;
- To advertise our products and services;
What cookies do use?
There several cookies categories we use on this site, including the following:
-
Strictly necessary cookies – These are cookies which are essential for use of the website.
a. Session: are temporary cookies which only exist during the time you use the website (or more strictly, until you close the browser after using the website).
-
Functional cookies – these are cookies facilitate the functioning of our website (for example language preferences).
Cookie Name and expiration term Recorded information Purpose Data Sharing PHP Session PHPSESSID - browser session Values of your session, such as visited pages Functional - Enhancing your website experience by enabling website functionalities. For example, this cookie ensures that when you click on "back", you actually return to the relevant previous page. No data sharing - Performance/tracking cookies – These are cookies used to gather data on how we can improve the online experience. We may use google analytics, hotjar, crazyegg for this particular purpose.
- Advertising/targeting cookies – These cookies are used to recognise you online so we can deliver adverts that more relevant. We may use google remarketing, google conversion tracking, doubleclick, adroll and linkedin ads/insights for this purpose.
How delete or disable cookies?
Your browser should allow you to delete your cookies. If you do choose to set your browser to disable all cookies, this may affect your ability to use this site. To learn more how you manage cookies click here