AUSURE'S Privacy Policy Our current privacy policy is detailed below. It is current as of and from 14 July 2005. We suggest that you read it thoroughly. This policy may change from time to time and all changes will be posted on our web site so please check it periodically. Alternatively, you can telephone (02) 4948 1155 or email katrina.brown@ausure.com.au and request a copy of our most recent policy. PERSONAL INFORMATION WE COLLECT The Personal Information we collect depends on the products and services you use or apply for. Typically the details we collect and hold include your name, contact details (address, phone and fax number, e mail address) date of birth, gender and payment details. We may also collect information that is specific to a particular product. We do not collect 'Sensitive Information' unless it is necessary for the purposes of determining risk or for providing you with a specific product or service. In this event we collect Sensitive Information in accordance with the National Privacy Principles. HOW WE COLLECT YOUR PERSONAL INFORMATION We collect your Personal Information from you in various ways and at several different points. We may collect your Personal Information on our web site, by telephone, facsimile, when you complete an application form and forward it to our attention, enter a competition or voluntarily participate in a survey. Wherever possible, we collect your Personal Information directly from you. There may, however, be occasions where we collect your Personal Information from someone else. For example, where you make an application in joint names, where it is provided to us by a third party with your consent. If you provide Personal Information to us about another person, we rely on you to have made or make them aware that you will, or may, provide their information to us and the types of third parties we may provide it to, the relevant purposes we and any of the third parties will use it for and how they can access it. If it is Sensitive Information we rely on you to have obtained their consent on these matters. If you have not done, or will not do, either of these things, you must tell us before you provide the relevant Personal Information. A number of interactive tools or facilities may be available on our web sites WHY WE COLLECT AND HOW WE USE PERSONAL INFORMATION We generally collect Personal Information to provide the various products and services we offer. More specifically, we collect and use Personal Information primarily in order to learn about you to enable us to advise you on your insurance needs. If we do not collect your Personal Information we may not be able to provide you with the product or service that you are seeking. We use Personal Information we may collect through competitions to determine prize winners, award prizes and notify winners. We use Personal Information we may collect through surveys to assess your satisfaction with our products and services and to determine how we may better service your needs. We, and our related companies, may also use Personal Information you provide if you chose to enter a competition or answer a survey for research and statistical analysis. DIRECT MARKETING On occasion, we, and our Related Companies, may use your Personal Information to provide you with information about the products and services we offer. We may also send you information about offers from other businesses where we think they may be of interest to you. If you do not wish to receive any of this information please let us know by contacting (02) 4948 1155 or by sending an e mail to katrina.brown@ausure.com.au. SHARING AND DISCLOSING YOUR PERSONAL INFORMATION We never sell or rent your Personal Information. We may share your Personal Information with Related Companies. We will not share your Personal Information with any unrelated party except under the following circumstances: • where a product or service you apply for is provided or supplied by or through a third party; • where a third party, such as a mailing house, carries out activities on our behalf; • if disclosure is otherwise required in order to provide you with a particular product or service; • in order to ensure our ability to continue providing products and services; • if disclosure is required for the purposes of conducting business analysis in order to improve our products and services; • Where the party intends to market products to you and we agree that the information may be of use to our clients. • if disclosure is required by law or requested by a statutory authority; • where a third party has an interest in the product or service we supply, for example a mortgagee, referral agent, distributor or insurance intermediary; • where it is necessary for a third party to assist us in providing our services, for example, insurers, reinsurers, insurance intermediaries, insurance reference bureaux, lawyers, accountants, loss adjusters and others involved in the claims handling process • where you have provided your consent - which may be given expressly or • may reasonably be implied by your conduct. Related and unrelated third parties to whom your Personal Information is disclosed are required to keep the information confidential and only use it for the same purposes we are permitted to use it. QUALITY OF YOUR PERSONAL INFORMATION We aim to ensure that your Personal Information is accurate, complete and up to date. During the course of your relationship with us we will ask you to inform us of any changes to your Personal Information. You should, however, contact us at any time to update your Personal Information or advise us that the information we have is not accurate or complete. SECURITY OF YOUR PERSONAL INFORMATION We are committed to keeping your Personal Information secure and will use all reasonable precautions to protect it from loss, misuse or unauthorised alteration, including: • Physically securing external and internal premises; • Maintaining computer and network security such as user identifiers and passwords to control access to computer systems; • Restricting access to your Personal Information to employees or those who perform services on our behalf who are authorised to handle your Personal Information and on a 'need to know' basis; • Entering into confidentiality agreements with relevant employees and third parties; • Appropriate training of staff; • Retaining your Personal Information for no longer than it is reasonably required to service a policy or continue to provide any products and services requested by you, unless we are required by law to retain it for longer; • Taking reasonable steps to destroy or de-identify Personal Information that we no longer require. ACCESS TO AND CORRECTION OF YOUR PERSONAL INFORMATION You may generally access the information we hold about you and request corrections. This right is, however, subject to the exceptions detailed in the National Privacy Principles. For example, we may refuse access where: • the information may have an unreasonable impact on the privacy of others; • the request is frivolous or vexatious; • the information relates to existing or anticipated legal proceedings; • the information would reveal our intentions in relation to negotiations in such as way as to prejudice those negotiations. If we deny you access we will let you know why. Where providing access would reveal evaluative information in connection with a commercially sensitive decision-making process, we will provide an explanation for the decision rather than direct access to the information. In most cases, you may access a summary of your Personal Information at no cost to you by telephoning our (02) 4948 1155. For access to complex or Sensitive Information or more detailed requests for access to your Personal Information, for example, access to information that is archived, we may require you to place your request in writing and charge you a fee for our reasonable costs of retrieving and supplying the information to you. In all cases you will be asked to verify who you are before your Personal Information is provided. All requests for Personal Information will be handled in a reasonable period of time. DEFINITIONS In this Privacy Policy: 'Our', 'Us' and 'We' refers to Ausure Insurance and Finance (Ausure). 'Personal Information' means any information that can identify an individual. 'Related Companies' has the same meaning as section 50 of the Corporations Act 2001 (Cth). 'Sensitive Information' is a sub set of Personal Information and concerns particular topics including information about health, racial or ethnic origin, political, philosophical or religious views or affiliations, sexual preferences or practices, memberships of professional or trade associations or trade unions or criminal records. 'You' refers to our customers and prospective customers. It also refers generally to users of our web site.