We are bound by the Privacy Act, it’s Amendment (Enhancing Privacy Protection) Act, and its Privacy Amendment (Notifiable Data Breaches) Act, and will protect your personal information in accordance with the Australian Privacy Principles. These principles govern how we can collect, use, hold and disclose your personal information, and how we respond when a data breach (including cyber and data security breaches), is likely to result in serious harm to any individuals whose personal information is involved in the breach.
What kinds of personal information do we collect and hold?
When you apply for an interest in any of our funds we may collect information that is necessary to be able to provide you with the Fund. For instance, we may ask for identification information such as your name, address and date of birth.
Why do we collect, hold, use and disclose personal information?
The main reason we collect, use, hold and disclose personal information is so we can service your request concerning the Fund. This may include:
• Checking your eligibility for the Fund;
• Providing you with the Fund; and
• Helping you manage your interests in the Fund.
How do we collect personal information?
We collect most personal information directly from you. Sometimes we collect personal information about you from other people such as publicly available sources of information.
How do we hold personal information?
Much of the personal information we hold will be stored electronically and securely by us at the offices of the fund administrator. We use a range of security measures to protect the personal information we hold.
Who do we disclose your personal information to, and why?
Sometimes we may disclose your personal information to organisations outside the Licensee. For example, with the administrator of the fund, so that it may perform its duties for the Fund and our services.
Who do we notify when there is a data breach of your personal information?
In accordance with the Notifiable Data Breaches scheme under the Privacy Act, we are obliged to notify individuals whose personal information is involved in a data breach that is likely to result in serious harm (these are referred to as ‘eligible data breaches’). This notification must include recommendations about the steps individuals should take in response to the breach. The Australian Information Commissioner (Commissioner) must also be notified of eligible data breaches.
In summary, subject to certain exemptions, the scheme requires us to:
· carry out a reasonable and expeditious assessment if there are reasonable grounds to suspect that there may have been an eligible data breach (and to take reasonable steps to complete that assessment within 30 days); and
· make the prescribed notifications (to the Commissioner, and if practicable, to affected individuals) as soon as we are aware that there are reasonable grounds to believe that there has been an eligible data breach. The notifications must include a description of the data breach, the kinds of information concerned and recommendations about the steps individuals should take in response to the data breach.
Do we disclose personal information overseas?
We may disclose your personal information to recipients located outside Australia. These entities may include our service providers.
Do we use or disclose personal information for marketing?
We may use your personal information to offer you products other than the Fund that we believe may interest you. We will not do this if you tell us not to.
If you don't want to receive marketing offers from us please contact us on the details listed at 'Contact us'.
Access to and correction of personal information
You can request access to the personal information we hold about you. You can also ask for corrections to be made. To do so, please contact us on the details listed at 'Contact us'.
Resolving your privacy concerns and complaints - your rights
If you are concerned about how your personal information is being handled or if you would like to make a complaint, please contact us on the details listed at 'Contact us'.
If you are unhappy with our response, there are other bodies you can go to. See additional information below.
Further information on privacy in Australia may be obtained by visiting the website of the Office of the Australian Information Commissioner (OAIC) at: http://www.oaic.gov.au/. We regularly review the OAIC website to keep informed of issues and developments in privacy law and changing legal obligations.