ASLS Privacy Policy

Scope and Australian Privacy Law

This Privacy Policy explains how Australian Executive Solutions Pty Ltd trading as Australian Solar Lending Solutions and the ASLS Portal handle personal information in connection with vendor accreditation, agent access, application processing, settlement workflow, portal support, and related services.

ASLS aims to manage personal information in accordance with the Australian Privacy Principles in the Privacy Act 1988 (Cth). Where the General Data Protection Regulation or similar overseas privacy laws apply to a particular data subject or activity, ASLS will also assess and respond to requests in that context.

What We Collect

ASLS collects the information reasonably necessary to operate the portal and deliver finance workflow services. Depending on the user and transaction, this may include names, email addresses, phone numbers, business names, ABNs, addresses, director and guarantor information, uploaded identity and supporting documents, application information, settlement records, chat messages, system-generated PDFs, and operational audit logs.

Where a user uploads documents to the portal, those documents may contain additional personal information such as driver licence details, Medicare details, invoices, trust documents, certificates of currency, and settlement records.

How We Collect Information

ASLS generally collects personal information directly from vendors, agents, applicants, guarantors, and authorised representatives through portal forms, chat messages, uploaded documents, generated PDFs, status updates, and related support interactions.

ASLS may also receive information from lenders, vendors, agents, service providers, introducers, and operational platforms where that is necessary to manage an application or settlement workflow.

How We Use Information

ASLS uses personal information to assess vendor accreditation, manage user access, process and monitor applications, resolve outstanding tasks, support settlement, provide chat and help responses, send notifications, generate documents, maintain operational records, and comply with legal, contractual, lender, taxation, finance, and audit obligations.

Where applicable, ASLS may also use information to improve portal operations, security, support processes, and internal reporting.

Disclosure and Service Providers

ASLS may disclose relevant personal information to lenders, settlement counterparties, service providers, and workflow partners where that is reasonably necessary to process an application, complete settlement, support accreditation, or operate the portal.

Current categories of service providers may include hosting, database, email, document, e-signature, analytics, and infrastructure providers, including providers such as Supabase, Vercel, SendGrid, and DocuSign.

ASLS does not sell personal information, customer lists, or portal databases to third parties.

Overseas Disclosure and Storage

Some service providers used by ASLS may store or process information outside Australia, including in the United States and other jurisdictions in which those providers operate infrastructure or support services.

Where overseas disclosure occurs, ASLS expects its service providers to handle information under contractual, security, and operational controls appropriate to the services being provided.

Retention and Security

Uploaded documents and generated PDFs are stored against the relevant vendor or application record so they can be reviewed by ASLS and authorised portal users. ASLS retains records for as long as reasonably necessary for operational, contractual, legal, lender, taxation, finance, dispute, and audit purposes.

ASLS takes reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. However, no internet-based system can be guaranteed to be completely secure.

Access, Correction, and Deletion Requests

Individuals may request access to personal information held by ASLS and may request correction of inaccurate, incomplete, or out-of-date information.

Individuals may also request deletion or deactivation of a portal account. ASLS will review each request, but may retain the minimum information required where records must be kept for legal, contractual, lender, taxation, finance, or audit reasons.

Where the GDPR applies, a data subject may also request access, rectification, erasure, restriction, objection, and data portability to the extent required by law and subject to applicable exceptions.

Complaints and Contact

Privacy enquiries, correction requests, access requests, account deletion requests and complaints can be sent to ASLS at admin@asls.net.au.

ASLS will review privacy complaints and respond within a reasonable time. If you are not satisfied with ASLS's response and Australian privacy law applies, you may also be able to complain to the Office of the Australian Information Commissioner.