This Privacy Policy contains important information about your personal information.
About this policy
This document sets out how we safeguard your privacy.
This document has been developed to follow a ‘layered’ format which means that it offers layers of detail. You can therefore read as much or as little as you like and can find what you need quicker.
Privacy policy
We recognise the importance of protecting your privacy. We are committed to ensuring the continued integrity and security of the personal information you entrust to us.
We appreciate that the success of our business is largely dependent upon a relationship of trust being established and maintained with past, current and prospective customers, shareholders and other individuals with whom we conduct business. We will therefore continue to collect and manage your personal information with a high degree of diligence and care.
Our aim is to comply at all times with the privacy laws (incorporating the Australian Privacy Principles) that apply to us. If you have a comment, query or complaint regarding a privacy matter, we encourage you to discuss it with us.
Collection
We usually collect personal information directly from you. Sometimes we collect or confirm this information from a third party such as a credit reporting body. We will use reasonable efforts to obtain your consent to do this.
We collect personal information that includes details such as your:
- Name
- Address
- Date of birth
- Contact details (such as phone numbers, e-mail addresses)
- Financial information such as information about your wages or salary or use of financial products and services which you acquire from or through us.
In some cases, we may need to collect sensitive information about you. We will first seek your consent to collect such information where we are required to do so.
As part of our business operations we collect personal information from other individuals such as shareholders and non-corporate suppliers. Where you are not a customer of ours you may still seek confirmation as to whether we hold information in relation to you. For the purposes of complying with our obligations under anti-money laundering laws, we are required to collect your personal information to confirm your identity and we may collect personal information about you from commercially available third party databases.
When you visit our website, apps or other web-based content and services (“Websites”), either we or our service provider will record information (such as your computer’s IP address and top level domain name, the type of browser you are using, the date, time and pages accessed) in relation to your visit.
Use and disclosure
We use your personal information in order to:
- Provide you with financial products and services (including situations where we are an agent for another product issuer)
- Assist you with your queries or concerns
- Comply with any legal or regulatory obligations imposed on us
- Perform our necessary business functions (such as internal audit investigations, performance reporting, research, product development and planning).
We may disclose your personal information to organisations that carry out functions on our behalf. This may include for example mailing and printing houses, electronic transaction processors, information technology service providers, professional advisers, account holders and operators, regulators and government authorities. Our agreements with these entities ensure your personal information is only used to carry out specific functions on our behalf.
We may disclose your personal information to an individual or an organisation (a “third party”) if:
- You direct us to do so;
- You consent to the third party obtaining the information from us; or
- You consent to the third party accessing the information on our systems, and/or do anything which enables the third party to obtain access.
Your consent to a third party obtaining or accessing information may be implied from:
- Your use of any service or application which a third party provides to you, or makes available to you, which involves the third party obtaining or accessing personal information held by us or organisations like us; or
- You doing anything else which enables the third party to obtain access to the information.
You should never provide or disclose any of your pass codes to any third party to enable the third party to obtain or access to your personal information. If you do, you may breach the ePayments Code and the terms and conditions applying to the products and services we provide to you and you may be liable for any unauthorised transactions that subsequently occur. Pass codes include PINs, internet and telephone banking passwords, and codes generated by security tokens.
We may use your personal information to tell you about other financial products and services we think you may be interested in. This may include products and services offered or distributed by us or the companies we are associated with. You can opt out of receiving this information (see below – ‘Opting out of product promotions’). We do not sell your personal information to third parties.
We provide services to a number of business partners and their customers. In order to provide these services, personal information may be used and exchanged. The information is given the same level of protection and treated in the same way as for customers of ours.
Where we have collected your personal information on behalf of another party (for example, where we are an agent for another product issuer) the use of your personal information by that party is governed by their privacy policy. You should contact them to understand how they might use your personal information.
Discoverability
A FinHr customer that has you listed in their phone contacts under your registered mobile number may import that list into the FinHr app and see that you’re a FinHr customer, including your FinHr name and profile picture.
You may opt out from being found via your mobile number in the FinHr app from the Payments Settings screen.
Importing your contacts
You may choose to import your contacts into FinHr. If you do, we store the name and mobile number of each contact, so that you can quickly and easily see who in your contacts is a FinHr user, or send an SMS invite to FinHr. This data is never shared outside the FinHr platform.
Disclosure to overseas recipients
In some cases, we may need to share some of your information with organisations outside Australia. For example, when you instruct us to carry out a transaction such as a telegraphic transfer to or from an overseas country, or when we use service providers located overseas to perform a function on our behalf.
When we share your information with organisations overseas we ensure appropriate data handling and security measures are in place.
Access and correction
In most cases you can gain access to your personal information held by us.
We will take reasonable steps to amend or correct your personal information to keep it accurate and up-to-date. Please contact us if you would like to access or request a correction of your personal information (see ‘Contacting us’ below).
Opting out of product promotion
You can opt out of receiving direct marketing material at any time by contacting us (see ‘Contacting us’ below).
If you do opt out, we will continue to provide information in relation to your existing accounts or facilities only (including new features or products related to these accounts/facilities).
Storage and security of personal information
We will take reasonable steps to keep the personal information that we hold about you secure to ensure that it is protected from loss, unauthorised access, use, modification or disclosure.
Your personal information is stored within secure systems that are protected in controlled facilities. Our employees and authorised agents are obliged to respect the confidentiality of any personal information held by us.
You can help to keep the personal information that we hold about you secure by taking care before you authorise or otherwise assist any third party to obtain or gain access to that information (see ‘Use and disclosure’ above).
Our websites, app, cookies and event tracking
Our website and app use a variety of analytics and tracking tools designed to help us understand usage, fix bugs and improve the effectiveness of our marketing. These include, but are not limited to cookies, tracking pixels and app based event data.
These tools determine which parts of our website and app are visited most often, indicate when specific events occur (such as when an advertisement has resulted in you becoming a customer), or whether you visited our site from another party’s website, and other sites you may visit from our website.
Sometimes we share this data third party service providers with whom we have an agreement to monitor the success of our marketing campaigns, make the advertising and communications we show more relevant or to provide core services and features on our websites. The third party service provider uses the instrumentation to collect information such as when you visited our site, your browser type, your IP address and other unique identifiers.
The information is used in an aggregate form and generally no personal information is collected by the third party service provider. Our agreements with these third parties ensure this information is only used to carry out functions on our behalf, and if any personal information is collected the confidentiality of that information is maintained.
Most internet web browsers and devices are pre-set to accept cookies and facilitate the eventing mentioned. However, if you do not wish to transmit this data you may configure your browser or device to opt-out or receive a warning when tracking instrumentation software is being used.
To amend your ad preferences for a specific social network see their privacy sections in your settings.
Changes to this policy
From time to time, it may be necessary for us to review our Privacy Policy and the information contained in this document. We will notify you of any changes by posting an updated version on our Websites.
Privacy concerns or complaints
If you have concerns or wish to make a complaint regarding the handling of your personal information by us, please e-mail us at [email protected]. We will promptly investigate your complaint and notify you of the outcome.
If you are not satisfied with the response provided by us, you may refer your complaint directly to the relevant External Dispute Resolution scheme:
Australian Financial Complaints Authority
GPO Box 3, Melbourne Vic 3001
Online: www.afca.org.au
Phone: 1800 931 678
Email: [email protected]
Office of the Australian Information Commissioner
GPO Box 5218, Sydney NSW 2001
Online: www.oaic.gov.au Phone: 1300 363 992
Email: [email protected]
Contacting us
If you have any questions about our Privacy Policy, what personal information we may hold in relation to you, or about the way we manage your personal information you can e-mail us at [email protected].
Further information about privacy
You can find more information about privacy (including information about specific issues, answers to frequently asked questions, and the Australian Privacy Principles) on the Office of the Privacy Commissioner’s website at www.oaic.gov.au
