For more information about D&B's privacy policy contact Client Services on 13 23 33.

Privacy policy

This webpage provides information on a range of issues as they relate to D&B's privacy policy. To access the information you require click on the appropriate link below:

Legal entities

D&B Australia
Dun & Bradstreet (Australia) Pty Ltd
DUNS 75 340 7170
ACN 006 399 677

D&B New Zealand (Subsidiary)
Dun & Bradstreet (New Zealand) Ltd
DUNS 59 033 3696
GST REG 50 144 879

D&B Consumer Credit
DBCC Pty Ltd
DUNS 75 014 4649
ABN 38 101 620 446
ACN 101 620 446

 

What you need to know about our data protection practices 

Dun & Bradstreet Australia Pty Limited (D&B Australia) and DBCC Pty Limited (D&B Consumer Credit) (together D&B) ) are leading providers of information services. This page provides information about D&B's privacy and data protection policies and practices for Australia and some useful links.

D&B understands that while the free flow of information is important it must be balanced against the privacy interests of individuals and businesses. Regardless of how we collect or disseminate information, stringent privacy principles are applied to ensure that the privacy interests of individuals and businesses are respected. Where information relates to individuals those principles embody the National Privacy Principles and the other applicable provisions of the Privacy Act. D&B believes that treating information in this manner is good business.

 

Collection of information

D&B collects the personal information it needs to provide the products and services it offers.

For D&B Australia those products and services include:

  • commercial credit reporting;
  • other information services including marketing databases for direct mail, telemarketing, other sales activities and market research; and
  • receivables management including debt collection services.

The information D&B Australia collects to provide its commercial credit reporting and information services is business-related. Some information relates to the owners or principals of the business and to directors, officers and senior management. Information collected about individuals is limited to that which our customers find relevant for business decision-making. That information is collected to give D&B Australia's customers a sense of who is responsible for the decisions that drive the business and to serve as a resource to assess the likelihood of business success. Some of this information is collected from publicly available sources such as the Australian Securities and Investment Commission and court registries.

D&B Consumer Credit collects the personal information necessary for it to provide consumer credit reporting services. The information it collects is regulated by law and includes identification details, information about credit providers, certain default information and bankruptcy and judgment information.

D&B also collects personal information about its customers, or employees or officers of its customers, so that it can complete business transactions, deliver products and services, administer accounts, provide customer support and meet regulatory requirements.

In the course of its receivables management business D&B Australia collects the information it needs about individual debtors, or about principals, owners, directors, other officers and senior management of company debtors.

 

Web site data collection practices

A visitor to D&B's web site is not asked to reveal any individually identifiable information. We collect some information about visitors indirectly through standard web logs, including IP address, what browser is being used (e.g., Netscape), and the domain name from which a visitor entered the site (e.g., www.yourcompany.com or www.youruniversity.edu). We normally use this information in the aggregate to administer and improve our web site. Some data may be traceable to an individual, but we do not normally seek to identify individuals unless we believe that someone is using our site improperly.

Some existing customers come to our web site with IDs and passwords already assigned. Others who register at our web site are asked to provide standard contact information, such as name, mailing and email addresses, and telephone numbers. We may also collect a credit card number from those who register through the web site to buy products and services.

We sometimes use an Internet device called a cookie to store login or other information on your computer. A cookie is a small amount of information that a web site transfers to your computer's hard drive. Many web sites use cookies to make your life as a user easier and more engaging. We use cookies to simplify your access or to tailor our services to your needs and interests. For some services, we offer users the choice of having an ID or password stored in a cookie. We use a third-party contractor to monitor how our visitors use our web site and to determine which of our online features they prefer. To provide this service, our contractor uses cookies on our behalf to collect aggregated, non-identifiable information about our visitors' use of our site, solely for our internal use.

Cookies come with some protections. We do not store credit card numbers in cookies. No other web site can read a cookie set by D&B, and we can't read a cookie that another web site wrote to your computer. Most internet browsers are set to accept cookies. Users can reset browsers to refuse cookies and still use our web site, although access may not be as simple. For further information, including how to refuse cookies, visit www.coremetrics.com

Through our web site, we occasionally offer users the opportunity to receive sales or promotional information for D&B products and services of interest to them. A user who agrees may be asked to provide contact information (e.g., name, mailing address, email address, telephone and fax number) that we will use to provide information about our products and services.

 

Use and disclosure

D&B will use and disclose information it holds about an individual for the purpose for which it was collected and for other related purposes for which the individual would reasonably expect us to use the information or to which the individual has agreed (either expressly or impliedly). In many cases the primary purpose of collecting the information is to include it in one or more of our databases so that we can provide it to our customers as part of the product or service they select. Our customers include major corporations, small and medium d businesses and government bodies and agencies.

We ask registered users of our website to choose whether to receive email updates about D&B products and services. We honour the choices made. However, we reserve the right to email customers on rare occasions when we think it is important. We do not allow other uses or disclosures of mail or email addresses or registration information.

If D&B engages anyone to do something on its behalf (for example, suppliers of internet support services, auditors, process servers or lawyers) then D&B and the service provider may exchange information for the purposes for which the service provider has been engaged. We also use personal information for planning, product development and research purposes. For example, from time to time D&B compiles online transaction and registration information for internal analysis such as researching and identifying market segments and needs. These analyses produce only aggregate data about users.

D&B shares personal information with its related companies in Australia and with members of the D&B Group world-wide. In most cases where a product or service supplied by D&B is needed by a business outside Australia it is supplied to a D&B entity in the home jurisdiction of the business, for that D&B entity to supply to the business. D&B entities world-wide have access to a global marketing database on which D&B Australia records the names of the chief executive officers of organisations in Australia.

D&B may also use or disclose information where it is required or permitted by law to do so.

 

Information quality

Information quality is at the heart of any successful information company. Working to ensure that information is up-to-date and accurate benefits the information subject and D&B. To help ensure quality information, D&B employs extensive measures, including contacts with businesses, quality review at both the point of collection and at the end of the information collection process and prompt error correction.

 

Information security and retention

D&B is serious about the security of the information it collects. Accordingly, it employs technical, contractual and administrative steps to ensure that the information is protected against unauthorised access and disclosure. D&B employees undertake training in handling information, with particular emphasis on preserving the privacy interests of individuals and businesses.

D&B Australia will destroy or remove identifying features from information held about an individual or business within a reasonable time after it is no longer needed. D&B Consumer Credit will remove information from credit information files when required by law (for example default and judgment information is removed after 5 years, and bankruptcy information is removed after 7 years).

 

Access and correction

Generally D&B allows individuals and businesses to view information it holds about them within a reasonable time after they have made a request to do so. In some instances D&B will refuse to give an individual or business access to information. If it does so it will provide that individual or business with the reason it has refused them access.

D&B Australia & New Zealand

D&B Australia will correct information it has about an individual or business if it discovers, or the individual or business is able to show, the information is incorrect. If an individual or business seeks a correction and D&B Australia disagrees that the information is incorrect D&B Australia will provide the individual or business with it's reasons for taking that view.

Where requested to do so by an authorised agent of a business, D&B Australia will provide a copy of a business report. Such requests can be made by calling D&B's Public Access Centre.

Where an owner or principal of a business contacts D&B Australia about a potential error, D&B Australia will act promptly to rectify the error or any misleading information. Additionally, D&B Australia will apply a stop distribution to the relevant business report and to ancillary products affected by the error, until the matter is resolved.

In most cases a business may have its information removed from business marketing lists published by D&B Australia. Where an authorised representative of the business requests that it be removed from marketing directories, publications and/or mailing lists the business will usually be delisted. To be delisted, an authorised representative of the business should call our Public Access Centre.

D&B Australia may charge a fee for informing an individual or business what information it has about them or for providing a copy of a report. This fee will be charged to cover D&B Australia's reasonable costs in locating and supplying the information or report.

D&B Consumer Credit

D&B Consumer Credit will correct information in an individual's credit information file if it discovers, or the individual establishes, the information is incorrect. If an individual seeks a correction and D&B Consumer Credit disagrees that the information is incorrect D&B Consumer Credit will, if requested by the individual, include a note in the credit information file.

Usually D&B Consumer Credit will not charge you a fee for access to your credit information file. A copy will be mailed to you within 10 working days of your request. However we may charge a fee if:

  • it appears to us that the access request is not related to refusal of an application for credit or otherwise related to the management of your credit arrangements; or
  • you ask us for a copy of your credit information file urgently and we provide it to you within 3 working days of your request.

If you authorise someone else to access your credit information file, and we reasonably believe that person is acting as a business intermediary between you and a credit provider, we may charge that person an access fee.

 

D&B D-U-N-S Number registration

D&B provides businesses with the opportunity to apply for a D&B D-U-N-S Number online. The information submitted to obtain the D&B D-U-N-S Number becomes a part of the D&B database, which is the core of all of the company's high quality business information products and services. Being listed in the D&B database offers benefits to businesses, including identification and recognition in the marketplace. Information in the database is licensed to third parties that offer businesses useful products and services.

A company representative who registers at the web site may be offered an opportunity to obtain a D&B D-U-N-S Number for the company and may also be added to our database. Any person included in the D&B database may ask to be excluded from business lists licensed for marketing purposes. For more information, contact our Public Access Centre.

 

Updates to D&B data protection practices for the internet

To keep up with the rapidly evolving Internet environment, D&B will from time to time review and revise its Internet practices and communicate any updates on its website. Minor changes may be made at anytime without notice. We will update the version number and date of our privacy statement on the website when we makes changes other than minor ones. If we make a major change in the way that we use, disclose or protect Internet registration information, we will highlight the change. If possible, we will provide advance notice of any major change through a notice on the web site.

 

Financial transactions

D&B Australia works with a partner to support financial transactions on our website. The partner is eMatters, which on our behalf collects information, delivers products and services, administers individual accounts, provides customer support, and meets government regulatory requirements, such as GST collection. eMatters operates consistently with the D&B data protection policies and does not sell or voluntarily share information externally.

 

Additional information

Individuals and businesses who would like more information about D&B's approach to privacy are encouraged to contact our Public Access Centre on 13 23 33 or alternatively send us a message at clientservices@dnb.com.au. For more information about personal credit information files and how to access your file go to www.dnb.com.au or request a copy of our brochure called D&B's Public Access Centre, Frequently Asked Questions.

 

D&B Privacy Act Code of Conduct

D&B maintains an uncompromising attitude towards protecting the right of privacy for all our stakeholders. Our organisation is built on providing best in class services to its' employees, customers, shareholders, the Australian business community and the Australian public.

Everyday we interact with individuals. As a leading provider of credit information, debt recovery and direct marketing services we are at the forefront of our industry. Industry leaders, such as D&B, are depended upon as organisations to be decisive and committed to matters such as Privacy. Throughout our history, we have taken the lead in this area, and we continue to take the lead as a result of legislative amendments to the Privacy Act (1988) cth.

The Privacy Act (1988) cth serves to regulate the collection, storage and distribution of information, that identifies a real person (individual/consumer). Originally, the Privacy Act was designed to legislate the use and disclosure of information by credit reporting agencies and credit providers. Essentially, it is regulated that credit providers (eg: banks, card providers, utilities) must advise a consumer prior to accessing their credit history from a credit reporting agency. In addition there are restrictions on the types of information which credit reporting agencies are able to hold in databases and to whom this can be disclosed. Consumers also must have a right of access to their information held by a credit reporting agency. These guidelines are designed so as not to prejudice any Australian citizens right to privacy. These provisions of the Privacy Act have been retained and D&B will continue to perform its' obligations under the Privacy Act Code of Conduct.

On December 21, 2001 the Privacy Act was however expanded to now cover a broader approach to include the collection, storage and distribution of all information which a corporation retains, that identifies a real person (individual/consumer). This expansion of the Privacy Act is a direct result of the growth in information technology, where the ability to transport consumer information is easier today then ever before. Information is currently transferred for activities such as direct marketing, market segmentation and e-commerce transactions. Prior to the implementation of the National Privacy Principles the transfer of such information did not require consent from the consumer. For example; a credit card provider could transfer your personal details to an airline frequent flyer program, for the explicit purposes of generating increased revenue to both organisations. The changes to the Privacy Act now prohibit the exchange of such information, without the explicit consent of the consumer.

There are 10 National Privacy Principles and D&B's business practices compiles with all requirements. In fact in many cases D&B has taken a proactive approach to privacy and exceeds the expectations of the Guidelines. Detailed below is D&B's approach to the guidelines in the form of D&B's Privacy Act Code of Conduct for your easy reference. It must be read and understood by all D&B employees. D&B employees must ensure that their activities are in line with D&B's Privacy Act Code of Conduct.

 

Collecting personal information

D&B collects personal information to provide the products and services we offer.

These services include:

  • Commercial and consumer credit reporting
  • Receivables management including debt collection services
  • Other information services including marketing databases for direct mail, telemarketing, other sales activities and market research.

When conducting our business, D&B employees must inform individuals of who D&B is, our contact details and the purpose for which D&B collects information. We collect information to help identify the individual or promote one of the above services.

In our operation of commercial credit reporting and information services D&B discloses information to customers to provide an insight into who is operating a business. Whilst conducting its consumer credit reporting activities, D&B disclose strictly regulated information (defaults, past applications for credit) to credit providers, who have previously sought the consent of the individual to do so. D&B's Receivables Management Service discloses information to our Consumer Credit Bureau only with the consent of the credit provider. Each of D&B's business units and in turn D&B employees must collect information, lawfully, fairly and always with the individual's privacy interests in mind.

Using and Disclosing Personal Information

D&B's primary reason for collecting information, is to create or update a database, to enable us to produce a commercial or consumer credit report, or to collect a debt. Whilst conducting its consumer credit reporting activities, D&B disclose strictly regulated information (defaults, past applications for credit) to credit providers, who have previously provided advice to the individual.

D&B Marketing services, provides companies with the option of not receiving direct marketing. D&B operates on a full disclosure basis - all customers that have received either a consumer or commercial report will be recorded. D&B's Receivable management services may engage process servers or lawyers to act on our behalf. Whilst information maybe exchanged with process servers or lawyers it is only for the purpose of debt recovery. As a D&B employee you must only use information for the purpose that it was collected.

Data Quality

D&B recognises that data quality is imperative for our customers, subject companies and consumers. We pride our organisation on providing valuable information to our customers. Therefore responsibility sits with each D&B employee to ensure that information that we collect, use and disclose is accurate, complete and up to date.

Verification processes for on line default loading and on line debt collection, an automated quality program for our commercial credit reporting and many other processes ensure data quality. D&B reviews these processes regularly to ensure best practice and prompt error correction.

Data Security

Data security is integral to D&B's operations. Technical, contractual and administrative measures ensure that information is protected from misuse, loss and unauthorised access, enabling us to conduct our operations in a strict and extensively secure environment.

D&B's processes involve automatic purging of consumer credit reporting and commercial credit reporting data, also RMS database records, once they fall outside of regulated time frames, therefore destroying information when it is no longer needed. D&B employees must keep personal information in a secure environment.

Openness

D&B's Privacy Statement resides on our website and also is available in brochure format. Our Privacy Statement provides information on how we manage personal information. D&B's Privacy Statement is updated as changes to the law take place and/or as we change our business activities. All D&B employees are provided with D&B's Privacy Statement upon employment with D&B and are provided with updates as necessary. At any time, any employee, customer, company or consumer requests a copy of D&B's Privacy Statement they must be provided with a copy.

Accessing and correcting personal information

D&B's Public Access Centre, respond to requests from individuals for access to their personal information. Clear guidelines are available on our website www.dnb.com.au for individuals on how to access their personal information. D&B prides itself on exceeding the regulated time frames for supplying an individual with their consumer file, and encourages individuals to manage their credit arrangements effectively by receiving a copy of their own credit information file.

D&B's dispute resolution process deals quickly with requests from an individual to investigate information on file about them. All steps of D&B's dispute resolution process are documented, and audited to allow for process improvement and continual best practice.

D&B's employees are expected to know the process for access and correction of personal information. A D&B employee is not permitted to request a copy of a Consumers Credit File unless it is his or her own. At any time a consumer requests a copy of their credit file or a complaint is received the D&B employee must not try and answer the question but direct the consumer to the Public Access Centre. This provides consistency of service to consumers and ensures we follow all legislative requirements.

Identifiers

In the conduct of its activities D&B employees should not use or disclose identifiers assigned by a Commonwealth government agency.

Anonymity

D&B does not request an individual who is visiting our website to detail their identity in line with anonymity principles.

Transborder data flows

D&B seeks the consent of the individual prior to transferring personal information about an individual to someone outside of D&B.

Sensitive Information

D&B employees must not collect "sensitive information" unless it is required to establish or defend an equitable claim or if required by law. In the event that D&B is required to collect sensitive information, the consent of the individual will be sought.

Your Role in helping D&B's Privacy Compliance

It is incumbent upon each and every employee of D&B to ensure our company is privacy compliant - our business depends upon it. Your role to ensure D&B's privacy compliance includes, only collect information which is needed, collect the information lawfully, refer consumer queries to the Public Access Centre and to seek guidance in privacy issues where needed.