Privacy Statement
Updated as of 1 October 2026.
This Privacy Statement applies to Walker St Data Pty Ltd (ABN 74 686 165 711) (“Walker St Data”, “we”, “us”, or “our”).
Walker St Data is bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
How we operate (direct and via partners)
WSD provides data and analytics services in two ways:
- Direct – where you interact with WSD directly (for example, you provide information to a WSD interface); and
- Via a business customer/partner – where we provide services to a business, such as a lender, broker, platform provider or accredited data recipient. In these arrangements, we may receive your information from that business or from other authorised data sources or service providers. We may process, analyse and enrich that information and provide data or related outputs to the relevant business customer/partner or other authorised recipients. Your primary relationship may be with that business, and their privacy policy and terms may also apply.
What information we collect
We collect personal information that is reasonably necessary to provide our services. Depending on how you access the service, this may include identity and contact details and financial information (including bank transaction and statement data).
What we use it for
We use personal information to provide and operate our analytics services, which may include processing transaction data to generate outputs such as transaction categorisation/enrichment, aggregations, completeness indicators, and risk related analytics and scores for onboarding, monitoring and reporting workflows delivered by our business customers/partners.
We also use information to maintain and improve our services (including security), and to develop and validate models using deidentified and aggregated information where permitted by law and applicable arrangements.
Who we disclose it to
We may disclose personal information to:
- the relevant business customer/partner you are dealing with (so they can receive outputs and provide services);
- service providers that help us operate our services (including hosting, security and support);
- regulators or authorities where required by law.
Where we receive your information via a business customer/partner, that business customer/partner is responsible for providing any required privacy notices and obtaining any required consents for disclosure to us and our handling of the information for the purposes described in our Privacy Policy.
Consumer Data Right (CDR)
Where we handle CDR data as part of services provided to an accredited data recipient (ADR), we do so as an outsourced service provider and handle that data only to provide the relevant services and in accordance with the ADR’s documented instructions and applicable CDR requirements.
Contact: contact@walkerstdata.com.au.
Privacy Policy
Updated as of 1 October 2026.
This Privacy Policy applies to Walker St Data Pty Ltd (ABN 74 686 165 711) (“Walker St Data”, “we”, “us”, “our”).
Contact details: Please contact us at contact@walkerstdata.com.au.
If you access a service that is provided to you via a business customer/partner (including a whitelabel service), that business customer/partner’s privacy policy will also apply.
Walker St Data is bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We understand the importance of, and are committed to, protecting your personal information.
This Privacy Policy:
- explains how we collect, use and store your personal information;
- outlines our obligations and your rights in respect of our dealings with your personal information; and
- explains how we use automated decisioning and machine-based models.
We know that the way we collect, use and store your personal information is important to you, and we value your trust.
- How do we operate?
Walker St Data provides data and analytics services in two ways:
- Direct – where you interact with us directly (for example, if you upload information to a Walker St Data interface or otherwise provide information to us directly); and
- Via a business customer/partner – where we provide services to a business (such as a lender, broker, platform provider or accredited data recipient) and your information is provided to us via that business as part of delivering services to them. In these arrangements, your primary relationship is with that business and their privacy policy and terms will also apply. In white-label arrangements, WSD may not have a direct relationship with end users, and the relevant business customer/partner is responsible for customer-facing communications and support.
- What is personal information?
“Personal information” is any information or opinion, whether true or not, that identifies you or could reasonably identify you.
We collect and hold personal information that is reasonably necessary for us to provide our services, which include credit risk analytics, credit assessment, and risk profiling. This may include:
- Your name, date of birth, and identity details;
- Contact details such as address, email and phone number;
- Employment and financial details;
- Bank account, transaction and statement data (including information sourced via bank feeds, screen scraping or open banking services you authorise);
- Business identifiers (such as ABN) and account or customer identifiers used to process and return outputs; and
- Other information you choose to provide.
We do not seek to collect sensitive information. However, depending on the nature of bank transaction descriptions or documents provided, some information we receive may incidentally include sensitive information. Where this occurs, we handle it in accordance with the Privacy Act and limit use and disclosure to what is permitted and necessary for the purposes described in this policy.
- Why do we collect your personal information?
Our services may involve collecting and processing transaction and related data to generate outputs such as transaction categorisation and enrichment, data aggregations, and risk-related analytics and scores. These outputs are used in onboarding, monitoring and reporting implemented by our business customers or partners. Our outputs are provided as analytical and decision support tools. The relevant financial service provider or business customer/partner determines how, and whether, to rely on them.
The primary purpose for which we collect personal information is to provide data and analytics services, including to:
- provide transaction data sharing services, including enabling a business customer to provide its transaction data once and, at that customer’s direction, share that data or related outputs with multiple lenders, brokers, advisers or other authorised recipients;
- provide lending, advisory, risk assessment, credit assessment, customer onboarding, broker referral, data aggregation, data enrichment, analytics and reporting services;
- categorise, classify, aggregate, enrich and analyse transaction and related data and generate reports, risk indicators, scores and other analytical outputs;
- assess, or support the assessment of, applications for credit or other financial services;
- monitor and analyse credit, financial or business risk over time;
- combine transaction data with other information lawfully obtained by us, including account, application, business, operational and lender-provided repayment or performance information, to develop and improve our analytics and risk-scoring products;
- develop, train, test, validate and improve classification, categorisation, analytics and risk-scoring models;
- create aggregated, anonymised or de-identified datasets, benchmarks, market insights and analytical products;
- provide or license enriched outputs and aggregated, anonymised or de-identified information to customers, lenders, brokers and other third parties; and
- maintain, secure and improve the performance, reliability and integrity of our services.
We may also use personal information to:
- personalise or improve our services where appropriate;
- respond to enquiries or requests;
- comply with legal and regulatory obligations;
- carry out internal operations such as recordkeeping, auditing, training and quality assurance; and
- where permitted by law and applicable arrangements, provide information about products or services that may be of interest to you.
Our services may also allow a business customer to provide transaction data and direct us to make that data, or outputs generated from it, available to one or more lenders, brokers, advisers or other third parties. We only make personal information available in this way where the disclosure is authorised by the relevant customer, consent or applicable arrangement and is permitted by law.
- How do we collect your personal information?
We may collect personal information:
- directly from you, including where you provide it to us via forms, portals or communications, or where you upload bank statements or other documents to a Walker St Data product; and/or
- from our business customers/partners, or their service providers, where they provide data to us so we can deliver services to them (for example, where a lender, broker, platform provider or other business uses our products to analyse transaction data and generate outputs).
Depending on the service, this information may be collected or transmitted via:
- bank feed, screen scraping or open banking / Consumer Data Right (CDR) providers authorised by you through our business customer/partner;
- bank statements or transaction files provided by you or our business customer/partner (including PDF statements) and processed using optical character recognition and enrichment services;
- data transmitted from our business customers/partners’ systems to WSD for processing, and outputs returned to them (for example, where a partner transmits transaction data to WSD and receives classifications, analytics and scores);
- information provided by the relevant business customer/partner about your account, application or relationship (for example, identifiers, account metadata and operational information necessary to provide the service); and
- technical and usage data when a user accesses our systems (for example, logs, IP address and device information).
- Who do we disclose your personal information to?
We may disclose your personal information to:
- our business customers and partners, and lenders, brokers, advisers, platform providers or other recipients authorised by you or the relevant business customer;
- recipients of enriched outputs, reports, benchmarking products and aggregated, anonymised or de-identified information, where permitted by law and applicable arrangements;
- bank feed providers and authorised third-party data aggregators;
- service providers that assist us with software, fraud, payment processing and data security;
- advisers, auditors, and consultants engaged by us;
- other parties you authorise, such as brokers or agents; and
- government and regulatory authorities as required by law (e.g. ASIC).
We take reasonable steps to ensure these organisations are bound by confidentiality and privacy obligations. We disclose personal information only to the extent necessary to provide our services and for the purposes described in this policy.
Where we receive your personal information via a business customer/partner, that business customer/partner is generally responsible for providing any required privacy notices and obtaining any required consents for disclosure to us and our handling of the information as described in this policy.
Overseas disclosure: Some of our service providers including cloud hosting may be located overseas (for example, the United States, Singapore, or India). Where your information is disclosed overseas, we ensure appropriate safeguards are in place.
- Automated Decisioning, AI & Algorithmic Models
We use computer programs, including rules-based systems, machine learning and predictive models, to categorise and analyse data and generate analytics, risk indicators, scores and other outputs. These outputs may be used by our business customers or partners as part of decisions about individuals or businesses.
Depending on the relevant service and how our customer uses the output, these programs may:
- assign or contribute to a risk rating, score or classification;
- provide information used in assessing an application for credit or another financial service;
- provide information used in determining pricing, fees, limits, terms or conditions;
- identify matters for further review or verification; or
- support ongoing monitoring or review of credit, financial or business risk.
The kinds of personal information used may include transaction data, income and expense information, account balances, repayment or credit behaviour, application or account information, business information, and derived indicators or scores.
Unless we expressly tell you otherwise in relation to a particular service, our outputs are analytical and decision-support tools and the relevant lender or other business customer determines what decision is made and how the output is used.
If you believe a decision made about you by automated means is unfair or incorrect, you may request a review by contacting us. If you have questions about a decision made by a lender or other provider, you should contact that provider first.
- Deidentified and aggregated information
We may create deidentified, anonymised and aggregated information from information processed through our services. This information is designed so that it does not identify an individual.
We may use this information to operate, secure, improve and develop our products and analytics, including for model training, testing and validation, benchmarking, statistical analysis, market insights and the development of analytical products.
We may also provide, license or commercialise aggregated, anonymised or deidentified datasets, benchmarks, insights and analytical products, including to customers, prospective customers, lenders, brokers and other business partners, where permitted by law and applicable contractual arrangements.
We do not attempt to reidentify individuals from information that has been deidentified, anonymised or aggregated.
Where this information is derived from CDR data, we handle it in accordance with applicable CDR requirements, the relevant Business Consumer Disclosure Consent and any applicable instructions or arrangements with the accredited data recipient.
- Consumer Data Right (CDR)
Where we handle CDR data as part of services provided to an accredited data recipient (ADR), we do so as an outsourced service provider and handle that data only to provide the relevant services and in accordance with the ADR’s documented instructions and applicable CDR requirements. Requests to access, correct or complain about CDR data are generally handled by the accredited data recipient you are dealing with.
- Access to your personal information
You may request access to the personal information we hold about you. We will respond within a reasonable time and provide access unless restricted by law. If we refuse, we will provide written reasons.
Where your information was provided to us via a business customer/partner, we may ask you to lodge your request through that business customer/partner or we may coordinate with them to respond.
Reasonable costs may apply for access requests.
- Updating your personal information
We take reasonable steps to ensure your personal information is accurate and up to date. You may request corrections by contacting us. If we refuse a correction, we will notify you in writing with reasons.
- How do we store your personal information?
Your information is stored electronically in secure databases. We use encryption, passwords, and firewalls to protect against misuse, interference, or unauthorised access.
Where we provide services to a business customer/partner, we may retain information for a period after the service ends to support transition, backups and operational requirements, unless we are required or permitted by law to retain it for longer (including for dispute, audit or regulatory purposes).
- Anonymity and pseudonyms
You may choose to deal with us anonymously or using a pseudonym where lawful and practical (for example, general enquiries). However, for us to provide our services (such as risk assessment), we usually require your personal information.
- Notifiable data breaches
If we become aware of unauthorised access, disclosure or loss of your personal information likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner in accordance with the Privacy Act.
- Website and cookies
When you visit our website, we may collect information such as the time and date of your visit, pages viewed, and your device and browser details.
We may use “cookies” to improve your experience. You may disable cookies in your browser, but this may affect functionality.
We take reasonable steps to ensure secure transmission of information over the internet but cannot guarantee its security.
Our website may contain links to third-party sites. We are not responsible for their privacy practices.
- Marketing
We may send marketing communications only where we have collected your contact details directly and are permitted to do so under applicable law.
In many B2B arrangements, marketing (if any) is managed by the relevant business customer/partner. We do not send marketing communications to end users of whitelabel services unless we have collected their contact details directly and are permitted to do so by law.
You can opt out at any time using the unsubscribe mechanism or by contacting us.
- Questions and complaints
If you have questions or complaints about this Privacy Policy or how we handle your information, please contact us:
Email: contact@walkerstdata.com.au
We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you are not satisfied, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) via www.oaic.gov.au or by calling 1300 363 992.
- Changes to this Privacy Policy
This Privacy Policy is effective as of 1 October 2026. We will update it as our practices change. The current version will always be available on our website.