This Policy also serves as notification to individuals of the matters required to be notified by the Australian Privacy Principles.
An individual who provides personal information to the Company, either directly or through a business partner or service provider, is given access to this Policy.
By providing personal information to the Company and having access to this Policy, either directly or through a business partner or service provider, an individual consents to the Company collecting, holding, using and disclosing personal information in accordance with this Policy.
2. THE PERSONAL INFORMATION COLLECTED BY THE COMPANY
Personal information collected by the Company includes:
3. HOW PERSONAL INFORMATION IS COLLECTED AND HELD
The Company collects the personal information of individuals directly by electronic interaction, phone, in person, mail or fax when:
The Company also collects an individual's personal information from:
Personal information received by the Company is held electronically on the information technology systems of the Company and may only be accessed by its authorised employees who require access in connection with the purposes described in this Policy. This information is accessible by authorised employees, their managers to store and secure that information. If information or consent is not provided without all of the required personal information being provided or consent being given, the Company will not be able to provide the product or service an individual is seeking, and may not be able to handle enquiries or claims in connection with those products or services.
4. IF INFORMATION OR CONSENT IS NOT PROVIDED
Without all of the required personal information being provided or consent being given, the Company will not be able to provide the product or service an individual is seeking, and may not be able to handle enquiries or claims in connection with those products or services.
Personal information will be collected, held, used and disclosed for the purposes of delivering the Rewards program on behalf Westpac Group:
6. DIRECT MARKETING
7. DISCLOSURE OF PERSONAL INFORMATION
The Company may disclose personal information to its business partners and third party service providers to perform activities in connection with the purposes described in this Policy. This includes organisations such as:
Some of the organisations to which the Company will disclose personal information are located outside Australia.. By accessing the website or opening an email on which this Policy is located or linked, the individual is directed to read it and as a result, giving consent to the collection, handling, use and disclosure of personal information by the Company in accordance with this Policy. One of the things the individual consents to is that the Company is not required to ensure that an overseas recipient of personal information complies with the Australian Privacy Act 1988 (see Australian Privacy Principle 8.1 by going to http://www.oaic.gov.au/).
An individual may not be informed of each occasion personal information is shared or accessed by group companiesor an overseas recipient.
8. ACCURACY AND PROTECTION OF PERSONAL INFORMATION
An individual will need to ensure that the personal information which is provided is accurate, complete and up-to-date at the time it is provided and must notify the Company of any changes.
The Company will take reasonable steps to protect the personal information that it holds from misuse and loss and from unauthorised access, modification or disclosure.The Company's information technology systems are protected by various technology solutions. However, the Company will not be liable for direct or indirect loss or damage in connection with unauthorised access, use, alteration, destruction or disclosure of personal information.
9. WEBSITE USE
From time to time the Company may run online competitions whereby personal information about an individual may be collected and used in accordance with the rules determined by the Westpac Group.
10. ACCESS TO PERSONAL INFORMATION
An individual may see and have a copy of their personal information that the Company holds.
If an individual is able to establish that their personal information is not accurate, complete and up-to-date, then on request the Company will take reasonable steps to correct it.
If the Company is unable to agree whether personal information is accurate, complete or up-to-date, then an individual may ask the Company to place with the information a statement claiming that particular information is not accurate, complete or up-to-date.
An individual may make a complaint in writing about how their personal information has been dealt with by explaining the nature of the complaint and providing sufficient information to enable the Company to respond to insert details The Company will respond in writing to a written complaint within 30 days of receipt. If the complaint remains unresolved, then the individual has the option of notifying the Office of the Australian Information Commissioner.
12. ACKNOWLEDGEMENT AND CONSENT
Policy last updated: 11 March 2014