# Privacy policy

Last updated: 6 October 2026

This policy explains how Blackrock Leasing Pty Ltd ABN 15 681 267 818 trading as Navo (Australian Credit Licence 569484) ("Navo", "we", "us") handles personal information. We are bound by the Privacy Act 1988 (Cth), including the Australian Privacy Principles.

## Seeing your options

To work out your options we ask about the car you want, its price and any trade-in, how you will use it, how you earn your income, an income band, any business details (such as your business structure, how long you have traded and GST registration), when you need the car, how far you drive and what matters to you.

You don't need to give your name or contact details to see your options. Your answers are sent to the Navo Decision Engine to work out the figures, and we don't save them to a record about you at this stage.

Your answers are also kept in your own browser (local storage) so they survive a refresh. Choosing "Start again" clears them, as does clearing your browser's site data.

We also keep, in your browser for up to 90 days, where your visit came from: the page you first landed on, the website that referred you, and any campaign tags or ad click identifier in the link you followed. It is only sent to us if you choose an option and send your details.

## Cookies and analytics

We use Google Analytics to understand how people use the site, such as which pages are visited and where visitors come from, and Google Ads to measure whether our ads lead to enquiries. They use cookies and collect information such as your device, browser, approximate location, the pages you view and the steps you take (for example, that you saw your options or sent your details).

We never send Google your answers, your figures, your name or your contact details. We tell Google only which page you are on and which kind of finance (novated lease, car loan or business loan) you looked at or chose.

Advertising personalisation (remarketing) is turned off. Google may process this information outside Australia, including in the United States.

You can opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout), manage Google ad settings at adssettings.google.com, or block cookies in your browser. The site works without them.

## AI-written summaries

A short summary of your answers ("About you") and the plain-English explanation of your result are written by an AI model provided by Anthropic, based in the United States, from your answers and any note you add. We do not send your name or contact details to it. The figures themselves come from the Navo Decision Engine, not the AI model, and every figure in an explanation is checked against the engine's figures before it is shown.

## When you choose an option and send your details

We collect your name, email address and, if you give it, your phone number, with your consent, together with the wording you agreed to and where your visit came from (see "Seeing your options"). We keep a record of your answers, any note you add, the comparison you saw and the option you chose. This is the record of what you told us and what we showed you, and the law requires us to keep it.

Your contact details are stored separately from that record, so they can be corrected or deleted on request. If you don't go ahead, we delete them after two years.

We pass your details and your comparison to a specialist at our partner millarX, so they can contact you, confirm your figures and help you go ahead if you want to. millarX handles them for us, for that purpose only.

## If you apply for finance

With your consent we collect what is needed to arrange credit and to make sure it is not unsuitable for you. This can include identification, income, expenses, assets and liabilities, and bank statements.

We disclose your application to the lenders and funders on our panel that you agree to apply to.

Navo does not obtain credit reports about you from credit reporting bodies, or give information to them. The lender or funder you apply to may obtain a credit report about you, with your consent, under its own privacy and credit reporting policy, which it gives you when you apply.

## How we use and disclose your information

We use your information to work out and explain your options, contact you about the option you chose, arrange finance if you go ahead, meet our legal obligations (including responsible lending, record keeping and identity checks), handle complaints and improve our services.

We may disclose it to:

- our partner millarX and its specialists, who contact you and help you go ahead on our behalf;
- Google, for site analytics and ad measurement (never your answers, figures or contact details);
- lenders, funders and, for a novated lease, your employer and its salary packaging provider;
- identity verification services, with your consent;
- service providers that host and run the site and the engine (see below);
- our professional advisers, regulators, AFCA and others where the law requires or allows it.

## Where your information is stored

The Navo Decision Engine and its database run on Supabase, hosted in Sydney, Australia. The website is delivered by Netlify, which serves it from servers around the world. AI-written summaries are produced by Anthropic in the United States, and site analytics by Google.

So some information is processed outside Australia: in the United States (Anthropic, Google and Netlify) and, for the website itself, wherever Netlify serves it from. We take reasonable steps to make sure these providers protect it in line with the Australian Privacy Principles.

Other providers that we and millarX use to contact you and manage enquiries, such as email, SMS and customer-management services, may also store information outside Australia, including in the United States.

## Marketing

We will only send you marketing with your consent, and you can opt out at any time using the unsubscribe link or by contacting us.

## Security and how long we keep it

We protect personal information with access controls, encryption in transit and by limiting who can see it. We keep it for as long as we need it for the purposes above and as the law requires. For example, records of credit assistance are kept for at least seven years. After that we destroy or de-identify it.

## Access and correction

You can ask for access to the personal information we hold about you, or ask us to correct it, by contacting our privacy officer. We will respond within a reasonable time, and within 30 days. If we refuse, we will tell you why.

## Privacy complaints

Contact our privacy officer: Ben Millar, ben@millarx.com.au, 0492 886 857. We will acknowledge your complaint within one business day and aim to resolve it within 30 days.

If you are not satisfied, you can contact the Office of the Australian Information Commissioner (www.oaic.gov.au, 1300 363 992). You can also take a complaint about our service to the Australian Financial Complaints Authority (AFCA): see our Complaints and disputes page.

## Contact us

- Email: ben@millarx.com.au
- Phone: 0492 886 857
- Post: 387 Lower Heidelberg Road, Eaglemont VIC 3084