Privacy Policy

Effective date: 17 August 2026 · Last updated: 17 August 2026

1. About this Privacy Policy

ALYRA GROUP PTY LTD (ABN 72 699 671 291), trading as ALYRA (“ALYRA”, “we”, “us” or “our”), is committed to handling personal information carefully, securely and transparently.

This Privacy Policy explains how we collect, hold, use and disclose personal information in connection with:

• enquiries and confidential valuations;
• loans secured against valuable physical assets;
• identity and ownership verification;
• asset custody, redemption and return;
• purchases and other asset transactions;
• communications with clients and prospective clients; and
• our website at alyra.com.au.

Australian privacy law does not apply in exactly the same way to every business or every type of information. We comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles and other privacy requirements to the extent that they apply to ALYRA or to particular information or activities.

Whether or not a particular requirement of the Privacy Act applies, we intend to handle personal information in accordance with the standards described in this policy.

This policy should be read together with any specific privacy or collection notice provided when we collect information from you.

2. What is personal information?

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable.

The information we collect depends on the nature of your dealings with ALYRA.

We seek to collect only information reasonably necessary for our activities, transactions, security and legal obligations.

3. Information we collect

Contact information

We may collect:

• your name;
• residential or postal address;
• email address; and
• telephone number.

Identity and address information

Where necessary to verify your identity or residential address, we may ask you to provide:

• a driver's licence;
• passport;
• proof of residential address; and
• a bank statement where required as evidence of identity or address.

Where a bank statement is requested for verification, we do not currently use it to conduct a general assessment of your income, expenditure or financial capacity.

Identity documents may contain information that is not relevant to the purpose for which we requested them. We seek to use only information reasonably necessary for verification, security, transaction or legal requirements.

If you are concerned that a document contains unrelated information, you may ask us whether that information can be redacted before the document is provided.

Asset information

If you ask us to assess, value, purchase, hold or lend against an asset, we may collect information including:

• photographs or videos;
• make, model and description;
• serial, reference or registration numbers;
• certificates and authentication records;
• purchase information;
• provenance and ownership history;
• condition information;
• service or maintenance records;
• valuation information; and
• information required to establish ownership or your authority to deal with the asset.

Information about valuable assets can reveal information about a person's possessions, wealth, location or security arrangements.

We therefore treat information about clients' assets as confidential even where it does not technically constitute personal information.

Loan and transaction information

Where you proceed with an enquiry or transaction, we may collect and hold information relating to:

• valuation requests;
• applications and proposals;
• loan amounts and terms;
• agreements;
• payments and repayments;
• redemption of secured assets;
• custody and storage;
• release or return of assets;
• purchases or disposals;
• bank account or payment information; and
• records required by law.

Communications

We may keep records of communications relating to your enquiry or transaction, including communications by:

• email;
• telephone;
• SMS;
• WhatsApp;
• video call; and
• other communication channels that we agree to use with you.

This may include correspondence, enquiries, instructions, appointment information, complaints and notes reasonably made in connection with your dealings with us.

Recorded telephone calls

Some telephone calls with ALYRA may be recorded.

Where a call is recorded, we inform the caller at the beginning of the call.

A recording may contain personal information provided during the conversation.

We may use and retain call recordings where reasonably necessary to:

• maintain an accurate record of a conversation;
• confirm instructions or information provided to us;
• administer an enquiry or transaction;
• investigate a complaint or dispute;
• protect clients, staff or ALYRA; or
• comply with a legal requirement.

We do not intend to use recorded calls for purposes unrelated to the reason they were collected unless permitted or required by law.

Website and analytics information

When you use our website, we or our technology providers may collect technical information including:

• browser and device information;
• pages viewed;
• referring pages or websites;
• dates and times of visits;
• approximate geographic information;
• interactions with website features; and
• cookie or similar technology identifiers.

This information is used for website operation, analytics, security and improvement.

4. How we collect information

We usually collect personal information directly from you.

For example, we may collect information when you:

• submit an enquiry or valuation request;
• complete a form on our website;
• contact us by email, telephone, SMS or WhatsApp;
• participate in a video call;
• provide information or photographs about an asset;
• provide identity, address or ownership documents;
• attend an appointment;
• enter into an agreement or transaction;
• make or receive a payment;
• communicate with us during a loan;
• redeem or request the return of an asset; or
• make a complaint or privacy request.

Where reasonably necessary, we may also obtain information from:

• a representative you have authorised;
• valuers, authenticators and asset specialists;
• insurers and insurance brokers;
• custody or secure-storage providers;
• transport or logistics providers;
• professional advisers;
• government agencies and regulators;
• police or other law-enforcement authorities;
• publicly available registers or sources;
• verification or fraud-prevention providers; and
• technology and communications providers.

5. Why we collect, use and disclose information

We may collect, hold, use and disclose personal information to:

• respond to enquiries;
• conduct preliminary asset assessments;
• arrange or undertake valuations;
• verify identity and residential address;
• verify ownership of an asset or authority to deal with it;
• assess authenticity, provenance, condition and marketability;
• determine whether an asset is suitable as security;
• prepare and communicate a loan proposal;
• establish and administer a loan;
• process payments and repayments;
• administer redemption;
• arrange custody, storage, transport or insurance;
• release or return an asset;
• purchase an asset where separately agreed;
• maintain legally required records;
• prevent or investigate fraud, theft or unlawful conduct;
• protect clients, staff, assets and systems;
• manage complaints and disputes;
• comply with licensing, regulatory and legal obligations;
• obtain legal, accounting, insurance or other professional advice;
• maintain and secure our technology systems; and
• conduct ordinary business administration.

We do not intend to use personal information for an unrelated purpose unless you consent or the use is otherwise permitted or required by law.

6. Queensland pawnbroking and second-hand dealing requirements

ALYRA operates in a regulated environment.

Where applicable to a pawnbroking or second-hand property transaction, Queensland law may require us to obtain and verify information concerning:

• your name and address;
• evidence verifying your name and address;
• whether you own the relevant property; and
• where you are not the owner, information concerning the owner and how you obtained or became authorised to deal with the property.

We may also be required to enter prescribed information about property and transactions in statutory registers.

Information from those registers may be required to be provided to the Commissioner of the Queensland Police Service or other authorised government officers.

Queensland legislation places specific requirements on these registers. Existing entries in pawnbroker property registers and second-hand dealer transaction registers cannot simply be removed or altered. Where an error is identified, the legislation provides for correction through a new entry.

Those requirements can limit our ability to delete or alter information contained in statutory records.

7. Credit reporting and financial assessment

ALYRA does not currently obtain consumer credit reports or credit scores from credit reporting bodies when assessing an enquiry or application.

ALYRA does not currently report loan applications, repayment history or defaults to consumer credit reporting bodies.

We do not currently conduct conventional income-and-expense based credit assessments.

In particular, we do not currently request information about your income, living expenses or general financial position for the purpose of deciding whether you can afford a loan.

Where a bank statement is requested as evidence of identity or residential address, it is requested for that verification purpose rather than for a general analysis of your income or spending.

If our credit-reporting practices change materially, we will review our obligations and update our privacy documentation before introducing those practices.

8. Automated decision-making

ALYRA does not currently use artificial intelligence or a solely automated system to approve or decline loan applications.

Valuation, asset suitability and transaction decisions involve human assessment.

Technology may assist with administration, research, communications, security or other operational processes, but a client is not currently approved or declined for an ALYRA loan solely by an automated decision-making system.

If this changes materially, we will review and update this Privacy Policy before implementing the changed process.

9. Confidential valuations and asset information

Providing information about an asset for an enquiry or confidential valuation does not authorise ALYRA to publicly advertise, list or market the asset.

We may provide relevant asset information to a valuer, authenticator, specialist, insurer, custodian or other service provider where reasonably necessary to assess or administer your enquiry or transaction.

We seek to limit those disclosures to information reasonably required for the relevant purpose.

If you separately agree to a sale, disposal or marketing process, the relevant arrangements will be explained to you separately.

10. Who we may share information with

Where reasonably necessary for our activities, or where permitted or required by law, personal information may be provided to:

• ALYRA directors, staff and authorised contractors;
• valuers, authenticators and asset specialists;
• lawyers, accountants and other professional advisers;
• custody and secure-storage providers;
• insurers and insurance brokers;
• banks and payment providers;
• transport and logistics providers;
• website-hosting, technology and cybersecurity providers;
• email, messaging and video-conferencing providers;
• verification or fraud-prevention providers;
• government departments and regulators;
• Queensland Police and other law-enforcement authorities;
• courts, tribunals and dispute-resolution bodies;
• a representative you have authorised us to deal with; and
• another person where disclosure is authorised or required by law.

We do not disclose personal information merely because another person asks us to provide it.

We seek to disclose only information reasonably required for the relevant purpose.

11. Google Workspace

ALYRA currently uses Google Workspace Business Standard for business communications and information management.

Information may therefore be handled through Google services where, for example:

• you email us;
• an enquiry submitted through our website is delivered to us;
• you provide electronic documents;
• documents relating to an enquiry or transaction are stored electronically; or
• our team communicates or collaborates in relation to your enquiry or transaction.

Google Workspace Business Standard supports data-region settings for certain covered data. Google's available fundamental data-region options include the United States, Europe or no regional preference. Depending on ALYRA's configuration and the relevant Google service, information may therefore be processed or stored outside Australia.

12. WhatsApp and video communications

Where you choose to communicate with us through WhatsApp, information exchanged through that service is also handled through WhatsApp's systems and is subject to the privacy and security practices applicable to that service.

Where we use a third-party video-conferencing service, information such as your name, account information, device information and communications may also be processed by the relevant provider.

You are not required to use WhatsApp where another reasonable communication method is available.

If you have concerns about providing sensitive documents or information through a particular communications channel, contact us before sending them so we can discuss an appropriate alternative.

13. Google Analytics and Google Tag Manager

Our website currently uses:

• Google Analytics 4 (GA4); and
• Google Tag Manager (GTM).

These services help us understand how visitors use our website and assist us to maintain, analyse and improve it.

Information processed in connection with website analytics may include:

• browser and device information;
• approximate geographic information;
• pages visited;
• referring information; and
• interactions with our website.

Google Tag Manager is used to manage website tags and related scripts.

ALYRA does not use Google Analytics or Google Tag Manager to make lending decisions about you.

You may be able to restrict or disable cookies and related technologies through your browser or device settings. Doing so may affect some website functionality or the accuracy of analytics.

14. Overseas processing and disclosure

Some technology and communications providers used by ALYRA operate internationally.

As a result, personal information handled through services such as Google Workspace, website analytics, WhatsApp and other technology services may be processed or stored outside Australia.

Likely locations may include:

• the United States; and
• countries within the European Union,

depending on the provider, service and account configuration involved.

Other countries may be involved where a provider operates global infrastructure or uses international service providers.

Where Australian privacy law requires us to take particular steps before disclosing personal information to an overseas recipient, we will take reasonable steps to comply with those requirements.

We will review this section if our technology providers or information-handling arrangements change materially.

15. Marketing

Submitting an enquiry or requesting a valuation does not, by itself, enrol you in an ALYRA marketing list.

We currently use contact information supplied through an enquiry primarily to:

• respond to you;
• request information needed to assess your enquiry;
• arrange an appointment;
• provide an assessment or proposal; and
• administer a transaction if you proceed.

We may continue to send communications reasonably necessary to administer an existing enquiry or transaction.

If ALYRA introduces broader direct-marketing activities in the future, we will implement appropriate consent, preference and unsubscribe processes where required.

16. How we protect information

We take reasonable technical, organisational and physical measures appropriate to the nature and sensitivity of the information we hold.

Those measures may include:

• controlled access to business systems;
• account authentication and security controls;
• limiting access according to role and legitimate need;
• secure business technology services;
• confidentiality requirements;
• procedures for handling identification documents;
• procedures for handling information about valuable assets;
• physical security measures; and
• appropriate management of third-party service providers.

Information about identity documents, valuable assets, ownership and custody may create heightened privacy or security risks. We take this into account when deciding how that information should be handled and who requires access to it.

No electronic storage or communications system can be guaranteed to be completely secure.

If we become aware of a suspected data or privacy incident, we will investigate it and take action appropriate to the circumstances.

Where a data-breach notification obligation applies to ALYRA, we will comply with the applicable notification requirements.

17. How long we keep information

We retain personal information only for as long as it is reasonably required for the purpose for which it is held, or where retention is required or justified for another lawful purpose.

Unsuccessful enquiries

If an enquiry does not proceed to a loan, purchase or other transaction, we generally retain the personal information associated with that enquiry for no more than 90 days after the enquiry is closed.

After that period, we take reasonable steps to securely delete or de-identify the information unless:

• the information forms part of a record we are legally required to retain;
• retention is reasonably necessary to prevent or investigate suspected fraud or unlawful conduct;
• a complaint, dispute or legal claim exists or is reasonably anticipated; or
• another lawful basis requires or justifies continued retention.

This 90-day approach applies in particular to identity documents provided for an enquiry that does not proceed, subject to the exceptions above.

Successful or regulated transactions

Where an enquiry proceeds to a loan, purchase or other transaction, information may need to be retained for longer periods in order to:

• administer the transaction;
• comply with contractual obligations;
• maintain statutory records;
• satisfy accounting, taxation, insurance or audit requirements;
• manage disputes or legal claims; or
• comply with another legal obligation.

Information contained in Queensland pawnbroking or second-hand dealing registers may be subject to specific legislative requirements and cannot necessarily be deleted or altered.

Where information is no longer reasonably required and no law or other legitimate basis requires its retention, we take reasonable steps to securely destroy or de-identify it.

18. Accessing information we hold about you

You may contact us to ask what personal information we hold about you or to request access to it.

We may require reasonable evidence of your identity before providing access so that personal information is not disclosed to the wrong person.

There may be circumstances in which we are permitted or required to refuse or limit access. Where appropriate, we will explain the reason.

We do not charge a fee merely for making an access request.

If providing access would involve a reasonable administrative cost that we are permitted to recover, we will tell you before incurring that cost.

19. Correcting your information

If you believe personal information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, you may ask us to correct it.

We may take reasonable steps to verify the requested correction.

Where information forms part of a statutory register that cannot lawfully be altered or removed, we will deal with the correction in the manner required by applicable legislation.

20. Deletion requests

You may ask us to delete personal information we hold about you.

We will consider the request having regard to why the information is held and any applicable legal requirements.

We may need to retain information where reasonably necessary or required for matters including:

• an active enquiry or transaction;
• contractual obligations;
• statutory pawnbroking or second-hand dealing records;
• taxation, accounting, insurance or audit requirements;
• fraud prevention or security;
• an actual or reasonably anticipated complaint or dispute;
• legal claims; or
• another lawful record-keeping requirement.

Where information does not need to be retained, we will consider whether it can reasonably be deleted or de-identified.

21. Anonymity and general enquiries

You may browse our website without identifying yourself.

Where practicable, you may make a general enquiry without providing information beyond what is reasonably necessary for us to respond.

However, we cannot ordinarily complete a valuation, enter into a loan or asset transaction, release secured property or satisfy applicable identity and regulatory requirements without obtaining sufficient information to identify you and verify relevant details.

22. Privacy complaints

If you believe ALYRA has mishandled personal information about you, please contact us so that we can investigate.

Please provide enough information for us to understand:

• what happened;
• what information is involved; and
• what outcome you are seeking.

We will:

• review the complaint;
• investigate where appropriate;
• request further information if reasonably necessary; and
• respond within a reasonable period.

Where the Privacy Act 1988 (Cth) applies to the matter and you remain dissatisfied after giving ALYRA a reasonable opportunity to address your complaint, you may be entitled to complain to the Office of the Australian Information Commissioner (OAIC).

Other complaint or regulatory mechanisms may also apply depending on the circumstances.

23. Third-party websites and services

Our website or communications may contain links to websites or services operated independently by third parties.

ALYRA does not control an independent third party's information-handling practices merely because we link to or communicate through its service.

You should review the privacy information provided by a third-party service before providing personal information directly through that service.

24. Changes to this Privacy Policy

We may update this Privacy Policy if our:

• services;
• business practices;
• technology providers;
• information-handling practices; or
• legal or regulatory obligations

change.

The current version will be published on our website and identified by its effective or last-updated date.

If we materially change the way personal information is handled, we will consider whether additional notice is appropriate.

25. Contact ALYRA

For privacy enquiries, requests for access or correction, deletion requests or privacy complaints, contact:

Privacy Officer
ALYRA GROUP PTY LTD
ABN 72 699 671 291
Queensland, Australia

Email: hello@alyra.com.au

Please include “Privacy” in the subject line where practicable.