Privacy Policy
Last updated: May 28, 2026
1.Introduction
Drive IQ Technology Pty Ltd (ACN: 638 678 136) trading as youX Powered (we, us, our) conducts business in Australia and New Zealand, providing applications and software as a service through our website hosted at https://www.youxpowered.com.au/ (Website) as well as on various third party platforms (Services).
youX operates as a technology platform and software-as-a-service provider used by brokers, dealers, introducers, lender partners, and authorised credit representatives to facilitate lead generation, loan origination, credit application processing, borrower management, and lender connectivity, including through integrated API and workflow services.
We take our privacy obligations seriously and take care to protect the personal information of our users.
This Privacy Policy applies to our collection and handling of personal information. Personal information is information or an opinion about an individual, or an individual who is reasonably identifiable, whether true or not and whether recorded in material form or not.
This Privacy Policy explains what personal information we collect, how we may use it, and the steps we take to ensure that it is kept secure. We also explain your rights and how to contact us.
2.What information do we collect?
In order to provide you with our Services, we collect personal information about you if you:
- • visit our Website;
- • use our Services;
- • register for any events that we organise;
- • contact us with a query or complaint;
- • respond to surveys or enter any promotions we run; or
- • make direct contact with us by telephone, in writing, or via our Website.
The personal information we collect may vary depending on the nature of your interaction with us, but may include:
- • contact information and identification such as your name, date of birth, telephone number(s), email address(es), residential and/or business address(es), ABN, demographic information (such as postcode, age, gender) and driver's licence details;
- • vehicle warranty and servicing details provided by our dealer network, affiliates or third parties including vehicle registration, vehicle purchase details, name of your selling or servicing dealer, service appointment bookings, vehicle service and repair history (including in relation to warranty, repairs and recalls, if applicable), and data collected as a result of on-board vehicle telematics;
- • information collected from marketing campaigns, product research, customer surveys, your interactions with us including via social media, or publicly available information that you post or publish;
- • information about you collected from our dealer network or other service partners (including broker intermediaries);
- • employment application information;
- • information you communicate directly with us by SMS, telephone, in writing or via the Website; and
- • any other relevant information.
You have a right not to provide information that can identify you. However, if all or part of the personal information that we request from you is not provided, we may not be able to provide you with certain services.
Please note that we do not collect or store any credit card or payment details. Payment for subscriptions and other products or services is handled via a secure third-party payment gateway.
3.Credit Assessment and Government Identifiers
Where you are an applicant for consumer or commercial credit through a Licence Holder (an organisation holding an Australian Credit Licence or Australian Credit Representative authority) using the youX platform, we collect driver's licence details as part of the credit application process.
This collection is authorised under Australian Privacy Principle 9.3(b) as it is reasonably necessary to verify the identity of credit applicants for the purposes of our activities as a credit technology platform operator. Specifically:
- • Licence Holders are required under the National Consumer Credit Protection Act 2009 (Cth) to verify the identity of consumers before providing credit assistance and to retain records of that verification;
- • Driver's licence details are the primary government-issued identity document used for this purpose in the Australian and New Zealand asset finance context;
- • We collect and process this information as part of the operation of the youX platform on behalf of, and at the direction of, Licence Holders, brokers, dealers, introducers, and authorised platform users involved in the relevant credit application process.
- • We do not use driver's licence details as our own identifier for any individual, and we do not use this information for any purpose other than facilitating the credit application for which it was collected.
Driver's licence data is classified as High Risk Data within our platform. It is encrypted at the field level, at rest, and in transit, and access is restricted to those with a direct need in connection with the relevant credit application. This data is retained for seven years from the date credit assistance was provided (as required by the NCCP Act) and deleted or de-identified thereafter.
4.How will we use your information?
All personal information that we obtain about you will be recorded, used and protected by us in accordance with the Privacy Act 1988 (Cth) (the Act) and this Privacy Policy.
We will primarily use your personal information to provide our services to you, including:
- • to provide Services to you;
- • to communicate with you and provide user support;
- • for record keeping purposes as required by law;
- • to improve the quality of our Services;
- • to notify you of further products or services that we are able to offer you from time to time;
- • for market research; and
- • to track activity on our Website.
We may also use your personal information for secondary purposes closely related to the primary purpose in circumstances where you would reasonably expect such use or disclosure.
5.Limitation on use of borrower information
Personal information collected from borrowers or credit applicants through the youX platform is used solely for the purpose of facilitating the credit application for which it was collected.
Borrower personal information is never used by youX for marketing, advertising, or any secondary purpose beyond loan facilitation.
6.Disclosing your information
We may disclose personal information to:
- • third party service providers and other suppliers where it is necessary or desirable to enable us to provide our services (including service providers that we engage to undertake data processing activities on our behalf, debt collectors and ratings agencies including but not limited to Equifax Verification Exchange);
- • third party contractors who help us conduct our business;
- • third parties we engage to conduct Optical Character Recognition (OCR) for identity document processing;
- • Licence Holders (credit licensees) to whom your credit application is submitted, and their lender and funder partners;
- • third parties with whom you have authorised us to share your information;
- • those who work for us (whether as an employee or a contractor);
- • our officers and related bodies corporate;
- • any relevant government authority, where we reasonably believe that such disclosure is necessary to enforce our rights or where required by law;
- • any entity with which we merge (or propose to merge) or by which we are acquired (or proposed to be acquired);
- • any entity involved in the transfer or sale of all or part of our business or assets; and
- • any other person where required or permitted by any law.
7.Vendors & Sub-processors
We engage a number of third-party sub-processors to assist in delivering our Services.
These sub-processors may have access to personal information only to the extent necessary to perform their designated functions and are bound by appropriate data protection obligations.
We will notify customers of any material change to our sub-processor list. Lender partners may request an up-to-date copy by contacting privacy@youxpowered.com.au.
8.Overseas disclosure
We may disclose your personal information to overseas recipients including information technology service providers. Countries in which such recipients may be located include the Czech Republic, Germany, India, Singapore, New Zealand, United Kingdom, and the United States of America.
Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure that the overseas recipient does not breach the Australian Privacy Principles in relation to that information. These steps include:
- • requiring overseas recipients to comply with data protection obligations equivalent to those imposed by the Privacy Act 1988 (Cth) through contractual arrangements;
- • assessing the privacy and security practices of overseas recipients prior to engagement; and
- • limiting the personal information disclosed to what is necessary for the relevant purpose.
youX primarily stores borrower personal information within Australian AWS regions located in Sydney and Melbourne. Certain authorised service providers and sub-processors may access or process limited personal information from overseas where necessary to support the delivery, security, or operation of our Services. Where this occurs, we take reasonable steps to ensure appropriate privacy and security protections are maintained.
Please note that by providing your personal information to us and consenting to its use in accordance with this Privacy Policy, you acknowledge that we may disclose your information to overseas recipients in the circumstances described above.
9.New Zealand Individuals
Where we hold or process personal information about individuals located in New Zealand, we do so in compliance with the New Zealand Privacy Act 2020 and applicable Information Privacy Principles (IPPs).
Where your personal information is collected indirectly — for example, through a broker or dealer intermediary rather than directly from you — we will take reasonable steps to notify you that your information has been collected, the purpose of collection, and your rights in relation to that information, consistent with IPP 3A of the Privacy Act 2020 (NZ) (as amended by the Privacy Amendment Act 2025 (NZ), in force 1 May 2026).
New Zealand individuals may make a privacy complaint to the Office of the Privacy Commissioner (New Zealand) at https://www.privacy.org.nz.
10.Data Sovereignty and Processing Locations
youX holds and processes all borrower personal information in Australia.
Our servers are located in Sydney, Australia, with a backup facility in Melbourne, Australia for disaster recovery purposes.
youX does not provide customer-configurable data hosting or processing locations. Borrower personal information is processed within our designated Australian hosting environments unless otherwise disclosed in writing.
We do not transfer or store your personal information outside of Australia in the ordinary course of our operations. Some of our authorised sub-processors (listed above) may handle certain data outside Australia where this is necessary to provide their services — where this occurs, we take steps to ensure your information remains protected in accordance with Australian privacy law.
If we plan to change where your information is held or processed, we will let you know in writing before any such change takes place.
11.Information about other people
If you provide personal information to us about a third party (such as your directors, employees, or someone you have a business dealing with), please make sure that you have their consent to provide that information to us. In any event, we will treat any personal information we receive in accordance with this Privacy Policy.
If you think that someone else may have provided personal information about you to us, you can contact us as set out below.
12.Security of information
We take the security of your personal information seriously. We have implemented technical and organisational measures designed to protect personal information against unauthorised or unlawful processing, accidental loss, destruction, or disclosure. These measures include:
- • field-level encryption of sensitive personal information (including government-issued identity documents such as driver's licence details) within our platform database;
- • encryption of personal information in transit using industry-standard protocols;
- • encryption of personal information at rest within our cloud infrastructure;
- • 24-hour, 7-day security monitoring of our platform environment through an engaged managed detection and response provider;
- • role-based access controls limiting access to personal information to those with a direct operational need; and
- • regular vulnerability scanning and penetration testing of our systems.
Where consent is relied upon as part of the operation of our Services, we maintain records of consent capture and related audit information appropriate to the nature of the processing activity.
We will take reasonable steps to destroy personal information or ensure it is de-identified if we no longer need it for any purpose for which it may be used or disclosed, in accordance with our Data Retention Policy.
13.Data Breach
While we take all reasonable steps to protect and secure your data, there remains a risk of unauthorised access to, disclosure of, or loss of personal information we hold ("data breach").
Where we suspect a data breach has occurred, we will promptly investigate and assess the nature and scope of the incident.
If a data breach is identified, we will assess whether it constitutes an eligible Notifiable Data Breach ("NDB") under the Privacy Act 1988 (Cth). Where required, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as soon as practicable and in accordance with applicable legal requirements.
Where a breach also affects individuals located in New Zealand, we will separately assess our obligations under the New Zealand Privacy Act 2020 and notify the Office of the Privacy Commissioner (New Zealand) and affected New Zealand individuals as required by law.
14.Data Retention
We retain personal information only for as long as it is necessary for the purposes for which it was collected, or as required by law.
For consumer credit applications processed through the youX platform, records (including identity verification documents) are retained for seven years from the date credit assistance was provided, as required by the National Consumer Credit Protection Act 2009 (Cth).
Where a lender partner or customer relationship ends, personal information will continue to be retained only for as long as required to comply with applicable legal, regulatory, contractual, and audit obligations, after which it will be securely deleted or de-identified in accordance with our Data Retention Policy.
15.Direct Marketing
We may use your personal information to notify you of products or services that we can offer you from time to time. We do not sell, licence, or in any other way distribute your personal information to any other company for the purpose of direct marketing.
You may opt out of receiving any publications, newsletter, or other marketing material we send you at any time by contacting us at privacy@youxpowered.com.au or using the unsubscribe link in any marketing communication.
16.Data Subject Rights
You have the right to access, correct, or request deletion of the personal information we hold about you.
To exercise any of these rights, borrowers and credit applicants may submit a Data Subject Request (DSR) by contacting us at privacy@youxpowered.com.au.
Lender partners may also submit DSRs on behalf of their customers by contacting us directly.
We will acknowledge your request promptly and respond within 30 days of receipt. Where a request cannot be fulfilled (for example, due to legal retention obligations), we will explain the reason in writing.
We maintain internal procedures and records relating to Data Subject Requests to support timely assessment, response, and compliance with applicable privacy obligations.
17.Processing of Personal Information
youX processes borrower personal information in connection with the services provided to brokers, dealers, lender partners, authorised credit representatives, and other authorised platform users, in accordance with applicable contractual arrangements, platform workflows, customer instructions, and relevant legal obligations.
18.Your right to access your personal information
You have the right to access the personal information we hold about you.
To request access, please contact us using the details below. We will respond to your request within 30 days. You will need to verify your identity before we can grant you access. Access may be denied in limited circumstances where an exception under the Act applies, in which case we will explain the reason.
19.Accessing and correcting information
We take reasonable steps to ensure that the personal information we collect, use, and disclose is accurate, up-to-date, and complete. However, the accuracy of that information depends in large part on the information you provide to us.
You can contact us to:
- • request access to your personal information;
- • update or correct your personal information; or
- • request deletion of your account or personal information (subject to our legal retention obligations).
We will respond to access and correction requests within 30 days of receipt.
20.Changes to this Privacy Policy
From time to time, we may amend this Privacy Policy. We will publish the amended policy on our Website. Where changes are material, we will take reasonable steps to notify users directly. The current version and date of last update are shown on the first page of this policy.
21.How to contact us
If you have any questions, comments, or complaints about this Privacy Policy or the way we have handled your personal information, please contact us:
Email: privacy@youxpowered.com.au
Website: https://www.youxpowered.com.au/
22.Making a complaint
If you are dissatisfied with the way we have handled a complaint about your personal information, you may contact:
Australia (OAIC) — Office of the Australian Information Commissioner: https://www.oaic.gov.au/privacy/privacy-complaints
New Zealand (OPC) — Office of the Privacy Commissioner (New Zealand): https://www.privacy.org.nz/
Drive IQ Technology Pty Ltd, trading as youX Powered. ABN 40 638 678 136. Registered in Australia.