Privacy notice
Updated 14 September 2026
Who we are
Centurium prepares and coordinates applications for referral to the underwriting partner. It does not provide the funding. This notice explains information handling for the website, application and borrower account.
Information we collect
Applications include names, email addresses, phone numbers, business identity and address, ownership structure, revenue, trading history, the amount requested and the funding purpose. Supporting documents can include bank statements, identity documents and other assessment evidence. Account records include application progress, consent, documents, review outcomes, lender updates, payment evidence and correspondence. Business evidence may identify directors, beneficial owners or guarantors. Technical request information also supports account security and prevention of misuse.
Sources and purposes
Information comes from you, people authorised to act for the business, the documents supplied and confirmed lender information. We use it to prepare and coordinate the referral, check identity and authority, organise evidence, communicate lender decisions, present lender documents, record account information and external payment evidence, respond to enquiries and protect account access. If necessary information is not supplied, we may be unable to prepare the referral or provide the requested account service.
Lender referral and credit information
With the application sharing consent, application information and supporting documents are prepared for the underwriting partner to assess and document the proposed finance. The lender makes the credit decision and issues final documents. The current Centurium workflow uses recorded manual review; automated Equifax API access is not enabled. Application consent does not replace any separate authority or notice required before a credit bureau report is requested. Ask the team about the proposed report and its recipient before supplying that authority.
Technology providers and overseas handling
Supabase provides the application database, authentication and document storage services. The application database is hosted in Sydney, Australia. Vercel hosts the websites and server processing. The application server runtime is configured in Sydney, Australia. Providers may also handle information overseas as part of their service operations. Domain email is configured in Google Workspace. These providers support delivery and administration of the service. Database location does not mean that every processing activity takes place in Australia. The lender’s own documents explain its information handling; contact us if you need further recipient details before proceeding.
Access controls and retention
Account authentication, staff permissions and private document links restrict access to application information. Use the secure upload flow for evidence and do not share your password. Records are retained for application and referral administration, account support, payment reconciliation, security, complaint handling and applicable recordkeeping obligations. Retention depends on the record’s purpose, the account relationship and any continuing legal or dispute requirements. Contact us about a particular record if you need to understand its retention or request removal; deletion may be limited where the record must be retained.
Browser storage and cookies
The website uses local browser storage to retain application progress and a draft cookie to associate the browser with its application draft. The draft cookie is set for up to seven days and is removed after submission. Signing in uses authentication cookies or storage. These functions support the application and account experience. You can clear browser storage or restrict cookies in your browser, but doing so can remove local progress or prevent sign-in features from working. Application sharing consent is requested separately before submission.
Access and correction
Call 1300 955 210 to request access to your information, ask for a correction or discuss a record you believe is inaccurate. Tell us which account and information your request concerns. We may need to confirm your identity and arrange a secure way to receive the details or provide a response. Do not send passwords or identity evidence through an unsecured channel. Existing account holders can also raise a request in their borrower account.
Privacy concerns and complaints
Call 1300 955 210 to raise a privacy concern and ask for it to be recorded as a complaint. Explain what happened and the outcome you are seeking. The team can arrange a secure written follow-up and provide information about the response. If your concern involves lender information, identify that record so the relevant lender issue can be addressed. You can consult the Office of the Australian Information Commissioner about privacy rights and its complaint process, including the steps to take with the organisation first.
Information about Australian privacy rights and complaints is available from the Office of the Australian Information Commissioner. See its guidance on raising a concern with an organisation and making a privacy complaint.