Compare Club Holdings Pty Ltd and its related bodies corporate (CCH) are committed to protecting the privacy and personal information of customers.   This Privacy Policy describes the practices and processes CCH has in place to manage and safeguard that information.

In this Privacy Policy, "we" and "us" refers to the entity providing the product or service as shown in the table below and "you" refers to an individual about whom we collect personal information. All entities listed in the table below adhere to this Privacy Policy.

CCH is required to comply with the Privacy Act 1988 (Cth) and is bound by the Australian Privacy Principles (APPs) set out in that Act.  The APPs establish minimum standards for the collection, use, disclosure and handling of personal information.  They apply to personal information in any form, including electronic and digital form. The APPs can be accessed at the website of the office of the Australian Information Commissioner: www.oaic.gov.au

CCH is also subject to other laws relating to the use of personal information. In certain circumstances, CCH may be subject to privacy obligations under the Telecommunications Act 1997 (Cth). CCH's direct marketing activities must also comply with the Do Not Call Register Act 2006 (Cth) and the Spam Act 2010 (Cth).  In this Privacy Policy, unless the context otherwise requires:

• Privacy Law refers to any legislative or other legal requirement that applies to CCH's collection, use, disclosure or handling of personal information.
• Personal information means information or an opinion about an identified individual or an individual who is reasonably identifiable, whether the information or opinion is true or not and whether the information or opinion is recorded in material form or not.  Personal information includes sensitive information.
• Sensitive information means personal information about an individual's racial or ethnic origin, political opinions or memberships, religious beliefs or affiliations, philosophical beliefs, professional or trade association/union memberships, sexual preferences and practices or criminal record.

Why does CCH collect personal information?

CCH collects personal information in order to:

• to allow you to compare products and/or obtain quotes for products or make enquiries;
• to send you a summary of your quote and comparison results;
• to provide to our business partners or participating suppliers so that they can (where you have agreed) provide you with updates or information about their products and services and provide you with reminders;
• to reconcile transactions with our business partners or participating suppliers that supply you products because of our services;
• unless you object, to communicate with you and make special offers to you;
• unless you object, to direct market our services to you;
• to administer competitions and promotions;
• generate consumer insights about you in order to better understand your preferences and enhance our products and services and to tell you about our products and services.
• market third party products and services to current and prospective customers; and
• comply with our legal obligations.

CCH needs to be able to collect personal information for most of its business activities, although the information we require depends on the particular circumstances. If we are unable to collect the personal information we need, we may be unable to meet the expectations of our customers or provide the products and services they wish to receive.

If you wish to compare certain products (such as health insurance or life insurance), we may also, where necessary, collect sensitive information from you.

Whose personal information does CCH collect?

CCH collects or holds personal information about individuals who are:

• Prospective customers.  This includes people who indicate to us that they are interested in our products and services or who we think may be interested in our products and services as well as people who have expressed interest in obtaining or learning more about those products and services.
• Current customers.  This includes people who purchase a product or service from CCH.
• Past customers.  These are people who have purchased products or services from any of the CCH related entities but do not currently hold any active accounts with CCH.

CCH may treat current and past customers as prospective customers for other CCH products and services.

CCH may collect personal information about associates of its customers, such as family members, employees or agents.  For example, CCH may collect personal information about nominated or authorised representatives, a beneficiary under an insurance policy, the holder of a credit card that is used to pay a customer's account, a person who acts as a secondary account holder, a person who acts as guarantor for a credit contract, the landlord of a tenanted property or the nominated contact on a business account.

CCH may in rare circumstances collect personal information from people who are under the age of 18.   If CCH does this, CCH may also collect personal information about the parent or guardian of that person.

CCH also collects personal information about all the individuals who are involved in providing CCH products and services.  This includes:

• staff of CCH related bodies corporate and other companies in the CCH group; and
• service providers and suppliers, agents and affiliates, and their staff.

Can you deal with CCH without identifying yourself?

In some limited situations customers and other individuals may be able to deal with CCH anonymously or using a pseudonym.  However, if you do not wish to be identified we may not be able to provide the information or assistance you require.

What personal information does CCH usually collect?

CCH collects a wide range of personal information about its customers, but the type and amount of information collected depends on the particular business context.  However, CCH seeks at all times to ensure that it only collects the personal information that is necessary for the purposes of its business activities.

CCH needs to collect basic identifying and contact information for all customers, including from prospective customers.  This will usually include name, date of birth, email address, telephone number(s) and residential address.

There is always a risk in sending and receiving information over the internet, but once we have received your personal information, we'll take reasonable steps to make sure it is protected and secure.

When you become, or apply to become, a customer of CCH, you may be redirected to the relevant website or business operated by CCH. Once redirected, the member of the CCH related bodies corporate may collect a range of other information that that it needs so that it can assess your application and manage your accounts.

We also collect information about the way our customers use products and services of the CCH related bodies corporate.  This includes information about service usage, payment patterns and history and inquiries and complaints.

How does CCH collect personal information?

We collect information about prospective customers both directly and via our agents, service providers and affiliates.  We may collect this information:

• through our contact centres or staff via phone, post, email or sms;
• from third parties, related bodies corporate and third parties providing services to us;
• through CCH websites, or websites operated by CCH's affiliates;
• through 3rd party websites (incl. google) and social media platforms; and
• through data aggregation services.

CCH receives unsolicited personal information from time to time.  In accordance with its obligations under Privacy Law, CCH will decide whether it would have been permitted to solicit and collect that information and if it would not have been, will destroy or de-identify the information (provided it is lawful to do so).

CCH's use and disclosure of personal information

Where CCH collects personal information for a particular purpose, it may use and disclose the information for that purpose or another purpose that is related to that purpose (or that is directly related to that purpose in the case of sensitive information).  For example:

• Personal information collected from you for the purpose of establishing or managing an account may be used and disclosed for related purposes such as supplying this information to CCH related entities for identity verification, credit checking, assessing entitlement to concessions, supplying and servicing a product, connecting and administering a service, billing and collection in relation to the service and investigating and rectifying complaints or faults.
• Personal information collected for the purpose of establishing or managing an account may also be used for the purpose marketing of other CCH products and services.  CCH may contact prospective, current or past customers about products and services (including products not related to a product or service previously supplied).

CCH may use personal information about prospective, current and past customers for the purpose of direct marketing of CCH products and services or those of other organisations including associating and combining data collected from third parties with information that we hold and disclosing that combined personal information to market products and services to you.  Direct marketing communications may be sent via post, e-mail, telephone, social media sites or other means.  However:

• CCH will not use sensitive information for direct marketing purposes without your express consent.
• Unless you have provided consent, or we think it is impracticable to obtain your consent, CCH will not use your personal information for direct marketing purposes where we have obtained the personal information from a third party, or we have collected it directly from you but believe that you would not reasonably expect the information to be used for direct marketing.
• Whenever we communicate with you for direct marketing purposes, we will give you the opportunity to opt out of receiving further direct marketing communications from CCH.
• You may opt out of receiving direct marketing communications from CCH at any time by contacting us at compliance@compareclub.com.au
• If we use your personal information to facilitate direct marketing by other organisations on behalf of other organisations, you can ask us to provide the source of the information by contacting us at compliance@compareclub.com.au

CCH and related entities may disclose personal information about customers to a range of third parties.  For example, depending on the type of product or service, CCH may disclose customer information to a wholesaler or other third party who provides or assists to provide the service. Personal information may also be disclosed to the relevant industry Ombudsman (for complaint management purposes) or relevant Government regulator in its servicing of regulatory obligations.

Personal information may also be disclosed to third party agents and service providers who CCH engages to assist in the provision of products and services.  These include:

• sales agents and representatives;
• printers, mail distributors, couriers and dispatch centres;
• call centres operated by entities outside the CCH group;
• IT service providers and data managers; and
• legal, accounting, insurance and business advisory consultants services.

CCH may also disclose personal information as authorised by privacy law for a range of other purposes, including:

• where necessary to prevent or lessen a serious threat to health or safety;
• for law enforcement or crime prevention purposes;
• for the investigation of unlawful activity;
• for location of missing persons; and
• for use in legal proceedings or dispute resolution.

In situations other than those described above, CCH will not disclose personal information without the customer's consent (although consent may be implied).

If we disclose your personal information to our business partners or participating suppliers, they will use, deal with and manage your personal information in accordance with their privacy policies. We will never sell or rent your personal information to external companies other than our business partners and participating suppliers.

Is personal information disclosed outside Australia?

Some of our service providers and/or business partners may be located in overseas locations. If we are permitted by law to do so, we may disclose your personal information to these providers or partners to provide our services to you. Currently, these locations include the United States of America, Serbia, India and Philippines.

How does CCH protect your personal information?

CCH recognises the importance of protecting your personal information and of ensuring that it is complete, accurate, up-to-date and relevant.  We will take reasonable steps to ensure this occurs. If you believe that your personal information is not accurate, complete or up to date, please contact us. You will not be charged for accessing your information, although we might have to charge the reasonable cost of processing your request, including photocopying, administration and postage.

Can you access or correct personal information CCH holds about you?

You have a right to access personal information we hold about you. If your request is particularly complex or requires detailed searching of our records, there may be a cost to you in order for us to provide you with this information.

If you believe there are errors in the information we hold about you, you have a right to ask us to correct the information.

However, we are not required to provide access where we believe doing so would:

• prejudice law enforcement or crime prevention activities;
• pose a serious threat to health or safety;
• have an unreasonable impact on the privacy of other individuals;
• prejudice CCH in legal proceedings or negotiations with you;
• reveal information connected with a commercially sensitive decision making process;  or
• be contrary to law.

If you wish to have access to information CCH holds about you, you should contact us by emailing us on compliance@compareclub.com.au

Dealing with CCH on-line

We collect personal information about the other websites that are visited by computers that are used to visit our website.  This information may be aggregated to provide us with information about the types of webpages and websites, or particular webpages and websites, visited by computers that use our site. We may store the Internet Protocol (IP) address of your computer when you visit our website.

CCH also uses interfaces with 3rd party websites such as Facebook. If you choose to "like" or "share" information from this website through these services, you should review the privacy policy of that service. If you are a member of an email provider (like Gmail or google) or social media site, their interfaces may allow the website site to connect your visits to this website with other personal information.

When you use the website, we send a cookie that gives each computer a unique identification number. Cookies do not identify individuals, although they do enable us to identify your browser type and internet service provider. Your browser may be configured to accept all cookies, reject all cookies or notify the user when a cookie is sent. If you reject all cookies, you may not be able to use our websites.

How to opt out

If you no longer want to receive communications from us that are non-account related or legally required, you may request to opt-out from receiving such marketing communication by emailing us on compliance@compareclub.com.au. We will not charge you for any request to opt-out and will process your request in accordance with our legal obligations.

Complaints and further information

If you believe your privacy has been interfered with and wish to make a complaint, please contact our Compliance Manager at compliance@compareclub.com.au.  The Compliance Manager will investigate your complaint and notify you of the outcome.

If it appears from your complaint that there has been an interference with privacy by a person other than CCH, the Compliance Manager may discuss the complaint with that person in an attempt to resolve it.

If you are dissatisfied with the outcome of your complaint, or you do not receive a response to your complaint within 30 days, you may make a complaint to the Office of the Australian Information Commissioner (OAIC).  Complaints to the OAIC must be made in writing. Where possible, complaints to the OAIC should be made through the online Privacy Complaint form, available at www.oaic.gov.au/privacy/making-a-privacy-complaint.

Dated May 2021.