Privacy Policy

Internal governance annexes

The following confidential annexes support this policy. References to an annex describe Quant Lend internal governance controls only. The annexes are not public documents and are disclosed only where authorised by Quant Lend or required by law, regulation, court or tribunal order, contractual obligation, insurance requirement or authorised audit.

1. Purpose and status

This Privacy Policy explains how Quant Lend Pty Ltd, referred to as Quant Lend, QL, we, us or our, manages personal information in connection with its website, expressions of interest, client intake processes, commercial finance broking activities, customer relationships, marketing, digital services, artificial intelligence systems and related business operations.

This policy is designed to operate as an Australian Privacy Principles grade privacy framework. It should be read with applicable Australian law and any collection notice, privacy brief, consent, authority, credit disclosure or contractual document provided for a particular service.

Where a prospective or existing client progresses beyond a preliminary enquiry into Quant Lend’s client intake or finance assessment process, Quant Lend may provide the C1 Form, Client Intake and Privacy Brief. The C1 Form provides more specific information about the collection and proposed use of information for that engagement and records relevant acknowledgements and authorisations.

The C1 Form supplements this Privacy Policy. It does not replace this policy, expand Quant Lend’s legal or regulatory permissions, or authorise an activity for which a separate consent or authority is required by law or by the relevant third party.

This policy states Quant Lend public privacy practices. It does not represent that Quant Lend holds an ISO certification, an Australian credit licence, a particular industry accreditation or any other licence or certification unless Quant Lend separately confirms that status in writing.

2. Scope

This policy applies to personal information handled by Quant Lend in relation to prospective customers, customers, former customers, borrowers, applicants, directors, shareholders, beneficial owners, trustees, partners, guarantors, representatives of businesses, website visitors, referrers, introducers, professional advisers, suppliers, contractors, business partners and users of QL digital services.

It also applies to personal information supplied through the C1 Form and supporting information provided in connection with a commercial finance enquiry or application.

Employee records and information subject to a specific statutory exemption or separate internal policy may be managed under the applicable legal rule or internal policy.

3. Privacy commitment and governance

Quant Lend will comply with the Privacy Act 1988 and the Australian Privacy Principles to the extent they apply to Quant Lend and the relevant activity. Regardless of whether a particular activity is legally required to comply with every Australian Privacy Principle, Quant Lend adopts the Australian Privacy Principles as its minimum internal privacy benchmark unless a higher legal, contractual or security requirement applies.

Quant Lend maintains internal practices, procedures and systems to support privacy compliance, accountability, enquiries and complaints. Governance responsibilities, review controls and privacy by design requirements are maintained in confidential Annex A.

4. Definitions

1. AI means artificial intelligence, including generative AI, machine learning, automated decision support, natural language systems and related automation.

2. APP means an Australian Privacy Principle in Schedule 1 to the Privacy Act 1988.

3. C1 Form means the controlled Quant Lend document titled Client Intake and Privacy Brief, as amended from time to time, used to collect information relevant to a client’s funding request, provide a collection and privacy brief and record applicable acknowledgements, permissions and authorisations.

4. Personal information has the meaning given by the Privacy Act and generally means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

5. Sensitive information has the meaning given by the Privacy Act and includes specified categories of information requiring additional protection.

6. Approved AI system means an AI system authorised by Quant Lend for a defined business purpose under its governance controls.

7. Service provider means a third party that processes, hosts, transmits, stores, analyses or otherwise handles information for or in connection with Quant Lend.

5. Personal information we collect and hold

The information Quant Lend collects depends on the stage of the relationship and the service requested. It may include the following categories:

1. name, date of birth and contact details;

2. residential, postal and business addresses;

3. occupation, employment and professional information;

4. business names, business structure, directorship, shareholding, beneficial ownership and trust information;

5. identification information and identity verification results where reasonably necessary;

6. financial information, including income, expenses, assets, liabilities, bank statements, transactional information and cash flow information;

7. business financial statements, management accounts, tax returns and business activity statements;

8. information about existing and proposed loans, credit facilities, security, guarantees and liabilities;

9. credit history and credit related information where lawfully obtained;

10. information about the amount, purpose, proposed structure and timing of finance sought;

11. information about property, equipment, projects or other assets relevant to proposed finance or security;

12. information about customer requirements, objectives and circumstances;

13. information relating to current finance facilities, payment obligations, tax liabilities, arrears, defaults, judgments or other matters reasonably relevant to a proposed finance transaction;

14. information about directors, owners, proposed guarantors and other persons relevant to a finance request;

15. information about accountants, solicitors, conveyancers and other advisers or authorised contacts;

16. communications, enquiries, complaints, feedback and records of interactions with Quant Lend;

17. marketing preferences, communication permissions and consent records;

18. website, device, browser, IP address, cookie, analytics and security information where collected;

19. chatbot conversations and information supplied through approved digital services; and

20. other information reasonably necessary for Quant Lend to provide, administer, secure or improve its services.

The C1 Form may be used to collect some or all of these categories where relevant to a particular funding request. Information requested through C1 is intended to be proportionate to the nature and stage of the proposed transaction. Information not relevant to a particular transaction may not be required.

Financial and business information may be highly confidential even where it is not classified as sensitive information under the Privacy Act. Quant Lend applies controls according to the sensitivity, volume and risk of the information. Internal data classification and handling rules are maintained in Annexes A, C and G.

6. Sensitive and highly confidential information

Quant Lend does not ordinarily seek sensitive information unless it is reasonably necessary for a lawful function or activity and collection is permitted by law. A customer may sometimes provide information about hardship, vulnerability, disability, health or another sensitive circumstance relevant to service delivery or a complaint. Quant Lend will apply additional care and obtain consent where required.

Customers should not provide passwords, one time authentication codes, online banking login credentials or unnecessary sensitive information through a general enquiry form, email, chatbot or the C1 Form.

Where supporting financial documents are requested after client intake, Quant Lend may specify an approved channel and may ask the customer to redact information that is unnecessary for the relevant purpose.

Detailed handling controls are maintained in Annexes C and G.

7. How we collect personal information

Quant Lend generally collects personal information directly from the individual through its website, enquiry forms, the C1 Form, phone calls, email, meetings, approved document transfer processes, applications, questionnaires, consents, authorities, approved messaging channels and digital services.

The C1 Form is ordinarily used after a preliminary enquiry has progressed to a stage where Quant Lend requires more structured information to understand the proposed transaction, the applicant entity, relevant principals, financial position, proposed security, available supporting information and other circumstances relevant to assessing finance pathways.

Where permitted by law and reasonably necessary, Quant Lend may also collect information from lenders, aggregators, platform providers, credit information providers, accountants, lawyers, authorised representatives, guarantors, referrers, identity verification providers, fraud prevention providers, government bodies, publicly available sources and technology service providers.

Where information about another individual is provided through C1 or another QL process, the person providing that information should have authority to provide it or otherwise ensure the disclosure is lawful.

Quant Lend internal collection standards, approved channels and data flow records are maintained in Annexes B and G.

8. Website enquiries and online registrations

Quant Lend’s website enquiry form allows prospective customers and business representatives to provide their first and last name, business name, email address, telephone number and an optional message. The general enquiry form is not intended for detailed financial documents, identity documents, bank statements, passwords, tax file numbers or banking credentials.

Information submitted through the general enquiry form may be used to record and respond to the enquiry, contact the person about the commercial finance services they have requested, understand their initial financing requirements, plan and improve services, maintain business records and, where consent or another lawful basis exists, provide relevant marketing communications.

Where an enquiry progresses beyond preliminary contact, Quant Lend may invite the prospective client to complete the C1 Form so that additional information can be collected in a structured and controlled manner.

Completion of a general website enquiry does not itself authorise Quant Lend to obtain a credit report, conduct a formal identity check or disclose detailed client information to prospective funders unless the required authority exists.

Website collection wording and form controls are maintained in Annex G.

9. Client intake, the C1 Form and collection notices

Quant Lend uses layered privacy information so that individuals receive information appropriate to the point at which their personal information is collected.

This Privacy Policy provides Quant Lend’s general public privacy framework.

The C1 Form, Client Intake and Privacy Brief may be provided when a prospective or existing customer progresses to a more detailed client intake or finance assessment stage. C1 is intended to:

1. collect information reasonably relevant to understanding the funding requirement and potential finance pathways;

2. explain in concise form how information supplied through the intake process may be used;

3. direct the individual to this Privacy Policy for Quant Lend’s broader privacy practices;

4. record acknowledgement that access to this Privacy Policy has been provided;

5. record relevant authority to discuss or progress the particular finance enquiry and, where expressly authorised, disclose relevant information to appropriate finance intermediaries, prospective funders or advisers;

6. record the individual’s confirmation, where requested, that information supplied is accurate to the best of their knowledge and that they are authorised to provide it;

7. separately record any optional direct marketing preference where applicable; and

8. identify where an additional consent, authority, verification or execution process may be required.

Where the Australian Privacy Principles apply, Quant Lend will take reasonable steps at or before collection, or as soon as practicable afterwards, to make the individual aware of the matters required by APP 5.

This Privacy Policy, the C1 Form and any other collection specific notice or authority should therefore be read together where they apply to the same engagement.

An authority given through C1 is limited to its stated purpose. It does not constitute a general or unlimited consent to collect, access or disclose personal information and does not remove the need for any separate authority required for a credit report, identity verification process, electronic signature process or other regulated activity.

Approved collection notice templates and change controls are maintained in Annex G.

10. Purposes for collecting, holding, using and disclosing information

Quant Lend may collect, hold, use and disclose personal information where reasonably necessary for its functions and activities, including to:

1. respond to enquiries;

2. conduct client intake;

3. communicate with customers and authorised representatives;

4. understand funding requirements, objectives, transaction structure and timing;

5. understand the applicant entity, relevant principals, ownership or group structure;

6. assess potential finance pathways;

7. identify lenders, finance providers or products for consideration;

8. assess the information likely to be required to progress a funding request;

9. prepare and progress applications where authorised;

10. communicate with prospective funders, finance intermediaries, advisers or other relevant parties where authorised or otherwise permitted;

11. verify information supplied to Quant Lend;

12. undertake identity, fraud or other verification processes where appropriately authorised;

13. conduct due diligence;

14. provide commercial finance broking services;

15. manage relationships and business records;

16. handle complaints;

17. comply with legal and contractual requirements;

18. maintain information and cybersecurity;

19. perform internal analytics and quality assurance;

20. obtain professional advice;

21. conduct permitted marketing; and

22. operate approved AI and automation systems.

Information collected through C1 will be used consistently with the purposes explained in this policy, the C1 privacy brief and any additional authority relevant to the engagement.

Quant Lend does not sell personal information as a standalone data product. It will not ordinarily use or disclose personal information for a materially unrelated purpose unless permitted by law or appropriate consent has been obtained.

Operational data flows and recipient records are maintained in Annexes B and H.

11. Commercial finance, credit information and regulated credit

Quant Lend operates primarily as a business funding and commercial finance broker. Where an enquiry or transaction falls within the regulated consumer credit regime, Quant Lend will only undertake regulated credit activities to the extent permitted by its applicable licence, authorisation, exemption and contractual arrangements.

This Privacy Policy and the C1 Form do not expand Quant Lend’s regulatory permissions or authorisations.

Information collected through C1 may be used to understand a proposed transaction, assess possible funding pathways and determine what additional information may be required before an application can be progressed.

Completing C1 does not by itself initiate a lender credit enquiry or formal credit check.

Where Quant Lend handles consumer credit reporting information or assists with an application in which a lender or another authorised party proposes to obtain such information, Quant Lend will seek to ensure that the handling is permitted and that any required notice, consent or authority has been obtained.

A formal credit report, formal identity verification process or similar activity may require a separate authority from the appropriate person or entity.

Operational controls and recipient due diligence are maintained in Annexes G and H.

12. Tax file numbers and government identifiers

Tax returns and financial documents supplied for a finance application may incidentally contain an individual tax file number. Quant Lend will not request, use or disclose an individual tax file number unless authorised by law.

The C1 Form is not intended to collect tax file numbers.

Where a tax file number appears in supporting material but is not required for the relevant purpose, the customer may be asked to redact it and Quant Lend may take steps to redact or restrict access to it.

Quant Lend will not use a government related identifier as its own general customer identifier where the law prohibits that use.

Handling rules are maintained in Annexes E and G.

13. Artificial intelligence and automated systems

Quant Lend may use approved artificial intelligence, machine learning and automation systems to support its operations. Personal information input into an AI system, and AI output containing personal information, remains subject to applicable privacy obligations. Quant Lend applies governance proportionate to the use case, information sensitivity and potential impact on individuals.

AI is used as a support capability and not as a substitute for accountable human judgement in material customer matters. Quant Lend does not treat an AI output as a binding finance approval, lender commitment, legal opinion, taxation opinion or final credit decision unless an authorised person or relevant third party confirms the matter through the proper process.

Information collected through C1 will only be made available to an AI or automated system where the use is approved under Quant Lend’s governance controls and is appropriate having regard to the purpose, information sensitivity and applicable legal requirements.

From 10 December 2026, additional APP 1 privacy policy disclosure obligations apply in specified circumstances involving computer programs that use personal information to make, or substantially and directly assist in making, decisions that could reasonably be expected to significantly affect an individual’s rights or interests. Quant Lend will maintain its public disclosures consistently with those requirements where applicable.

Detailed AI approval, prohibited use, data minimisation, human review, testing, vendor, chatbot and change controls are maintained in confidential Annex D. ISO/IEC 42001 may be used as a voluntary governance benchmark and does not constitute certification.

14. Website chatbot and digital assistants

Where Quant Lend provides a chatbot or digital assistant, the interface will identify the automated nature of the service where appropriate. Information entered may be collected, processed or retained for enquiry handling, service delivery, security, quality assurance, record keeping and other purposes described in this policy.

Users should not enter passwords, one time authentication codes, unnecessary sensitive information, tax file numbers or bank login credentials into a chatbot.

A chatbot is not a substitute for the C1 client intake process. Where a matter progresses to detailed finance assessment or requires structured financial or personal information, Quant Lend may direct the user to the C1 Form, another approved secure channel or a human representative.

Detailed controls are maintained in Annexes C, D and G.

15. Direct marketing and communications

Quant Lend may send information about its services, finance solutions, insights or relevant offers where permitted by law. Direct marketing will be managed having regard to APP 7, the Spam Act 2003, the Do Not Call Register Act 2006 and applicable communications standards.

Where the C1 Form contains a marketing preference, that preference is optional and is distinct from the authority required to assess or progress the underlying finance enquiry.

A person is not required to consent to future marketing merely to submit C1 or request commercial finance assistance.

Where required, commercial electronic messages will contain a clear and functional unsubscribe mechanism. A person may withdraw or change marketing preferences.

Withdrawal of marketing consent does not prevent necessary service, security, legal or transactional communications.

Consent evidence and suppression controls are maintained in Annex G.

16. Cookies, analytics and digital information

Quant Lend website and digital services may use cookies, analytics, security logs and similar technologies. Depending on the systems used and user settings, these technologies may collect IP address, browser information, device information, operating system, pages visited, access times, referral information, interaction data and similar technical information.

Quant Lend may use this information to operate and secure its website, diagnose faults, analyse service performance, understand use, improve services and, where permitted, support marketing.

Website contact tools may record interaction counts, including clicks on the WhatsApp contact button, for operational reporting. Where a visitor chooses to open a third party messaging service, that service may separately process information according to its own privacy practices.

Analytics and cookie technologies must be assessed before production use and are recorded in Annexes B, G and H.

17. Disclosure of personal information

Where reasonably necessary and permitted by law, Quant Lend may disclose personal information to banks and other finance providers, aggregators, lender portals, credit information providers, identity and fraud providers, professional advisers, referrers, technology providers, approved AI and automation providers, contractors, government agencies, regulators, courts, law enforcement bodies, persons involved in an authorised corporate transaction, and other recipients authorised by the individual or permitted by law.

Where a client provides authority through the C1 Form for Quant Lend to discuss or progress a finance enquiry with appropriate finance intermediaries, prospective funders or relevant advisers, Quant Lend may disclose information within the scope of that authority where reasonably necessary for the stated purpose.

Completion of C1 does not create an unrestricted authority to disclose information to every lender or third party. Quant Lend will seek to keep disclosure proportionate to the relevant finance request, authority, stage of the transaction and legitimate purpose.

A separate authority may be required before Quant Lend or another party conducts a formal credit report, identity check or other activity for which separate consent or authority is required.

Disclosure to a lender or finance provider does not mean that finance will be approved or provided.

Quant Lend seeks to limit disclosure to information reasonably necessary for the relevant purpose. Detailed recipient and provider records are maintained in Annexes B and H.

18. Overseas processing and disclosure

Quant Lend uses technology, cloud, communications and professional service arrangements to support its operations. Personal information may therefore in some circumstances be accessed, processed, stored or disclosed outside Australia.

Where Quant Lend is likely to disclose personal information to an overseas recipient, it will take reasonable steps required by APP 8 unless an exception applies.

As at 10 November 2026, the United States of America is identified as a likely overseas recipient location arising from technology arrangements. Quant Lend reviews this assessment against its production systems, provider contracts and account settings. Australian based infrastructure and data residency arrangements may be used where reasonably available and appropriate.

Other countries or regions will be added to the public policy or an applicable collection notice where they become likely overseas disclosure locations and it is practicable to identify them.

Detailed service provider names, network architecture, system locations, security configurations and data flow records are maintained in confidential Annex B and are not published merely because they support this clause.

Routing information through overseas infrastructure does not necessarily constitute a disclosure to an overseas recipient. Quant Lend assesses the legal character of each arrangement according to the applicable privacy framework.

19. Information security

Quant Lend will take reasonable steps appropriate to its circumstances to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Security measures are selected according to business risk, information sensitivity, system capability and the information lifecycle.

Information collected through C1 and supporting finance documentation is treated according to its sensitivity and may be subject to additional access, transfer and handling controls.

Quant Lend uses recognised cybersecurity and information security frameworks as governance inputs, including the Australian Signals Directorate Essential Eight and ISO/IEC 27001 where appropriate.

Quant Lend does not publish operational security details that would materially reduce the effectiveness of those controls, and it does not claim a particular Essential Eight maturity level or ISO certification unless formally established.

Detailed security architecture, device controls, identity controls, backup controls, access restrictions, monitoring, secure configuration and approved network controls are maintained in confidential Annex C.

20. Data breaches and incident response

Quant Lend maintains procedures to identify, contain, assess, investigate, remediate and document suspected or actual privacy and cybersecurity incidents.

Where the Notifiable Data Breaches Scheme applies, Quant Lend will assess suspected eligible data breaches and notify the OAIC and affected individuals where required by law.

The response workflow, severity model, evidence requirements, notification decision record and post incident review process are maintained in Annex F.

21. Data quality, access and correction

Quant Lend will take reasonable steps appropriate to the circumstances to ensure that personal information it collects is accurate, up to date and complete and that information used or disclosed is accurate, up to date, complete and relevant for that purpose.

Individuals completing C1 are asked to provide accurate information and may be asked to confirm that the information supplied is accurate to the best of their knowledge and that they are authorised to provide information relating to the applicant entity.

An individual should notify Quant Lend if information supplied through C1 or another process materially changes while a finance request is being assessed or progressed.

An individual may request access to personal information Quant Lend holds about them and may request correction if they believe information is inaccurate, out of date, incomplete, irrelevant or misleading.

Quant Lend may need to verify identity before providing access or making a correction.

Request handling and verification controls are maintained in Annex I.

22. Retention, destruction and de identification

Quant Lend will retain personal information only for as long as reasonably necessary for the purposes for which it may lawfully be used or disclosed and to satisfy applicable legal, regulatory, contractual, evidentiary, insurance, dispute resolution and legitimate business requirements.

Completed C1 Forms and related records may be retained as part of the client or transaction record where reasonably necessary for these purposes, including as evidence of information supplied, privacy information provided, acknowledgements, authorities and instructions.

Where the Australian Privacy Principles apply and personal information is no longer needed for a permitted purpose, Quant Lend will take reasonable steps to destroy it or de identify it unless an Australian law or court or tribunal order requires retention.

Retention rules, legal holds, backup treatment and secure disposal controls are maintained in Annex E.

23. Anonymity and pseudonyms

Where required by law and reasonably practicable, a person may make a general enquiry anonymously or by using a pseudonym.

Finance broking and credit related activities will commonly require identification because Quant Lend, lenders or other parties may need verified information to assess or progress a transaction, prevent fraud or meet legal obligations.

Accordingly, Quant Lend may require identifying information before a C1 Form can be meaningfully assessed or a finance request progressed.

Operational handling rules are maintained in Annex G.

24. Unsolicited personal information

Quant Lend may receive personal information that it did not request, including information supplied in a free text response, supporting document or attachment.

Where the Australian Privacy Principles apply, Quant Lend will assess whether the information could have been lawfully collected if solicited. Where it could not have been collected and no lawful retention requirement applies, Quant Lend will take reasonable steps to destroy or de identify it as required.

Triage and disposal controls are maintained in Annexes E and G.

25. Third party sites and services

Quant Lend website and communications may link to lender portals, aggregator systems or other third party websites and services.

Independent third parties have their own privacy and security practices.

Quant Lend offers an optional WhatsApp contact link on its website. Selecting the link opens WhatsApp, a messaging service provided by Meta. A message is sent to Quant Lend only when the visitor chooses to send it. WhatsApp and Meta may process information provided through that service under their own privacy terms. Quant Lend uses messages it receives to manage and respond to enquiries in accordance with this policy.

Visitors should not send identity documents, bank statements, tax file numbers, passwords or other sensitive financial documents through the WhatsApp contact feature. Where additional information is required, Quant Lend may direct the visitor to the C1 Form or an approved document transfer process.

Quant Lend undertakes due diligence appropriate to the risk where a service provider processes personal information for or in connection with Quant Lend.

Where a client is directed from C1 or another QL process to a third party platform, separate privacy terms, notices, consents or authorities may apply to that platform.

Provider classification, contractual assessment and review records are maintained in Annex H.

26. Children and minors

Quant Lend commercial finance services are not directed to children.

If Quant Lend becomes aware that it has received personal information about a person under 18 in circumstances where that information is not reasonably necessary, it will assess whether the information should be retained, restricted, destroyed or de identified.

Collection controls are maintained in Annex G.

27. Privacy complaints

A person who believes Quant Lend has mishandled personal information may lodge a privacy complaint with Quant Lend.

Quant Lend will acknowledge and assess the complaint within a reasonable period, investigate the relevant facts, document the outcome and communicate the outcome or next steps.

If the Privacy Act applies and the person remains dissatisfied, the person may have the right to complain to the Office of the Australian Information Commissioner.

Detailed complaint handling and escalation controls are maintained in Annex I.

28. Contact details

29. Policy review and changes

Quant Lend will review this policy at least annually and sooner where there is a material change to law, regulation, technology, AI use, lender or aggregator requirements, personal information handling, cybersecurity risk, business structure, service delivery or material client documentation.

Material changes to the C1 Form that affect the collection, use, disclosure, consent or authority framework must be assessed against this Privacy Policy and relevant governance controls before implementation.

The controlled version must be reviewed before 10 December 2026 to confirm Quant Lend automated decision arrangements and the additional APP 1 disclosure obligations commencing on that date.

Annex A governs review and approval, Annex B governs data flow changes, Annex D governs AI changes and Annex G governs collection and consent changes.

30. Governing framework

This policy is intended to operate consistently with applicable Australian law. Where a provision is inconsistent with a mandatory legal requirement, the mandatory legal requirement prevails to the extent of the inconsistency.

References to regulatory guidance and voluntary standards describe sources used to inform Quant Lend governance. They do not convert non binding guidance into law and do not create a representation of certification or regulatory approval.

The C1 Form, Client Intake and Privacy Brief is a client specific collection, privacy briefing and authorisation document. It should be read together with this Privacy Policy where C1 has been provided. If a separate consent, authority, statutory notice, lender requirement or contractual term applies to a particular activity, that document operates according to its terms and applicable law.

Annexes A to I are confidential internal governance documents. They support implementation of this policy but are not part of the public policy and are not generally available to customers, competitors or the public.

Quant Lend may disclose an annex or extract where required by law, court or tribunal order, regulatory requirement, contractual obligation, insurance requirement or authorised audit, or where Quant Lend determines that controlled disclosure is reasonably necessary for legal, compliance, due diligence or risk management purposes.

Regulatory and standards references

Official Australian Government and regulator sources are treated as primary references for Australian legal and regulatory obligations. Standards and provider documentation are supporting governance sources and do not replace applicable law.

Related controlled client document

C1 Quant Lend, Client Intake and Privacy Brief, current controlled version

C1 is used where appropriate to provide a collection specific privacy brief, obtain relevant client information and record acknowledgements, permissions and authorities relating to a particular funding request. C1 does not replace this Privacy Policy and does not remove any requirement for a separate consent or authority where one is required.