Data Retention Policy

Last updated: 10 May 2026

Why we keep your information

As an Australian Credit Licensee (ACL 509582), Simple Loans is required by the National Consumer Credit Protection Act 2009 and ASIC RG 209 to retain records of credit assistance, preliminary assessments, and supporting documents for a minimum of seven years from the date the assistance was provided.

What we retain

• Loan applications, preliminary assessments, and Best Interest Duty records
• Identification documents, payslips, bank statements, and other supporting evidence
• Communication history (email, SMS, call notes)
• Servicing calculations and lender submissions
• Compliance audit trails

Where it is stored

All structured data and uploaded documents are stored in our managed backend, hosted in Australia on AWS infrastructure (ap-southeast-2 / Sydney region). Data is encrypted at rest using AES-256 and in transit using TLS 1.2 or higher. Personally identifiable information extracted from documents is additionally encrypted at the application layer using AES-256-GCM.

Retention period

• Settled loans: 7 years from settlement.
• Declined or withdrawn applications: 7 years from the last activity.
• Marketing leads that never proceeded: 24 months from the last interaction.
• Audit and access logs: 7 years.

Destruction

Once the retention period expires, an automated job permanently deletes the underlying records from the database and removes associated objects from secure storage. Deletion is logged for compliance.

Your rights

You can request access to or correction of your information at any time, and you can ask us to delete information we are no longer required to retain. Contact info@simpleloans.au.