Privacy Policy

Last modification: 1/8/2021

Background

The purpose of the Autonomy & Asset Management Group Pty Ltd (AAMG’s) Privacy Policy is to provide guidance on how the Company collects, holds, uses and discloses personal information in a number of different ways.

Our Privacy Policy

Our Privacy Policy provides you with general information about how the Company manages your personal information.

The Type of Personal Information We Collect And Hold

Personal information is information or an opinion about an identified individual or an individual who is reasonably identifiable. It includes sensitive information. We will ask for a broad range of personal information which is necessary for our functions or activities.

We will generally ask for the following types of personal information:

• Name, address and contact details;

• Date of birth;

• Gender;

• Marital status/family details or circumstance;

• Employment information

• Tax file number

• Super details

• Trade certificates or any other relevant tickets etc

We may also collect sensitive information such as information or opinion about your:

• Health;

• Racial or ethnic origin;

• Membership of a political, professional or trade association (or union)

• Religious beliefs or affiliations; and/or

• Criminal history

If we are not able to collect personal information about you, we may not be able to provide you with the products, services or assistance you require. The collection use or disclosure of your personal information is needed to provide these.

Ways We Collect Your Personal Information

Directly from you;

• Via the internet, including websites and social media and/or

• Through contact over the telephone, mobile or other messaging technology;

• In person to person contact

• By using written forms;

• From publicly available sources of information; and/or

• From other persons or organisations (including related and third parties)

We will collect your personal information during the onboarding process, or a recurrent basis using the above methods.

• Collection of Personal Information

• We collect your personal information so we can:

• Identify you and conduct appropriate checks;

• Understand your requirements and provide you with a product or service;

• Manage complaints and disputes, and report to dispute resolution bodies; and

• Manage, train and develop our employees and representatives;

• Get a better understanding of you, your needs, your behaviors and how you interact with us, so we can engage in product and service research, development and business strategy including managing the delivery of our services and products via the ways we communicate with you.

Sometimes we are required to collect your personal information to satisfy specific legal obligations.

Using and Disclosing Information

We use and disclose your personal information for the purposes we collected it. We will use and disclose your personal information for a secondary purpose related to a purpose for which we collected it, where you would reasonably expect us to use or disclose your personal information for that secondary purpose. In the case of sensitive information, any secondary use or disclosure will be directly related to the purpose of collection.

There will be other instances when we may use and disclose your personal information including where:

• You have expressly or impliedly consented to the use or disclosure;

• We reasonably believe that the use or disclosure is reasonably necessary for an enforcement activity conducted by or on behalf of an enforcement body; or

• We are required or authorised by law to disclose your personal information, for example, to a court in response to a subpoena, or the Australian Taxation Office, Centrelink, and the Australian Transaction Reports and Analysis Centre (AUSTRAC)

Security of Your Personal Information

We hold your personal information in:

• Computer systems;

• Electronic databases;

• Digital records; and

• In hard copy or paper files

These storage mechanisms may be managed in a number of ways. They may be managed or administered internally by Autonomy & Asset Management Group or they could be managed by a third-party storage provider with whom Autonomy & Asset Management Group has a contractual relationship and be either managed locally and/or externally.

We will take all reasonable steps to protect your personal information from misuse, interference and loss, as well as unauthorised access, modification or disclosure. The ways we do this include:

• Limiting physical access to our premises;

• Restricting electronic and physical access to personal information we hold;

• Having in place stand-by-systems and information backups to deal with major business interruptions;

• Maintaining technology security products;

• Requiring any third-party providers to have acceptable security measures to keep your personal information secure; and

• Destroying or de-identifying personal information pursuant to the law and our record retention policies.

We maintain industry standard technology and procedures in respect of our information management and provision of online services. Autonomy & Asset Management Group has an ongoing program of review and enhancement of its security measures. The reviews and updates address such matters as security and information management policies, processes and procedures, and technology reviews such as software, virus protection and fire wall settings. Autonomy & Asset Management Group systems and information technology infrastructure are regularly audited both by internal and external experts and regulatory bodies as required.

Email transmissions to Autonomy & Asset Management Group are not necessarily secure. If you have any concern about the security of the contents of your email or any other transaction over the internet, then you should consider contacting us by other means.

Autonomy & Asset Management Group trains its employees and representatives in their privacy obligations, applies confidentiality obligations and provides authorised persons with user identifiers, passwords or other access codes to control access to your personal information.

Cookies

Our websites rely on “cookies” to provide a number of services to you. A cookie is a piece of data that a website sends to your browser and which is then stored on your computer or other internet enabled device. Cookies are generally one of two types, a session cookie or a persistent cookie. A session cookie is a temporary cookie that is placed on the device and remains until you leave one of our websites. A persistent cookie will remain on your device for a period or duration specified in the cookie despite you leaving our websites.

Non-Customers

You may not be a customer of ours, but you may interact with one of our related companies or other third party organisation. You could be a claimant under an insurer’s policy, a witness in an accident or a spouse or family member of a customer. You may also interact with one of our related or other third party organisations by using our transactional websites, entering a competition or commenting via social media. We will collect, use and disclose your personal information in accordance with this Privacy Policy.

Anonymity and Pseudonymity

The Australian privacy regime provides the option of not identifying yourself, or of using a pseudonym unless we are required or authorised by law or a court/tribunal to identify you, or it is impracticable to deal with your anonymously or by a pseudonym.

Access and Correction of Personal Information

You have the right to request access to personal information we hold about you. We can deny access to some or all of your personal information in specified circumstances. We will provide reasons for any refusal in writing.

If you would like to request access to the personal information, we hold about you please contact us by email enquiries@aamgrp.com.au as we may be able to provide you this information within our normal business processes. Our response to your request will usually be completed within 30 days of the request. If we require further time, we will contact you in writing to advise of this and provide our reasons for the further time that is required.

We rely on the accuracy of the personal information we hold about to provide our products and services to you. You have the right to request us to correct ay inaccurate, out-of-date, incomplete, irrelevant or misleading personal information. We will take such steps that are reasonable in circumstances with regard to the purpose for which your personal information is held to make a correction. We may refuse to correct your personal information and will provide

reasons for refusal in writing. If we refuse to correct your personal information you have the right to associate with the information a statement that the information is inaccurate, out-of-date, incomplete, irrelevant or misleading. We will take such steps that are reasonable in the circumstances to associate that statement with all records containing the relevant information.

Complaints Handling

If you have a complaint about how we collect, hold, use or disclose your personal information or a privacy related issue such as refusal to provide access or correction, please use our complaints process so that we can help. It is important to follow the complaint handling process in order to resolve your complaint effectively and efficiently.

Step 1 – Let Us Know

If you would like to make a complaint, please let us know by contacting the relevant department as they may be able to resolve the complaint for you. If not, the staff member will refer you to a Manager they will attempt to resolve the complaint. A response is usually provided to you within 5 business days.

You can contact us by using the relevant Complaints contact on 07 3706 5273.