IUS - THE IUS Group of Companies

Privacy Policy

International Underwriting Services Pty Limited ABN 32 074 494 885 (IUS) values your privacy and is committed to protecting the privacy of your personal information. In accordance with the National Privacy Principles ("the Principles") which have been set down by the Privacy Act (Cth) 1988 ("the Act") and become operative from 21 December 2001, we hereby set out our policy which governs the information handling practices employed by this firm with respect to personal information entrusted by you to us.

What is "personal information"?

"Personal information" is defined in the Act as meaning information or an opinion (including information or an opinion forming part of a database), whether true or not, and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion.

In short, personal information is information or an opinion that can identify you or from which your identity can be reasonably ascertained. Please note that the Principles apply only to personal information and not to general or commercial information regarding a company or organisation.

Why do we collect your personal information?

When we underwrite insurance policies ("IUS Policies") with your employer, superannuation fund, union or other organisation on your behalf, we do not normally collect any personal information about you. We only collect your personal information if you lodge a claim against an IUS policy (eg .by completing a claim form).

In the event that you lodge a claim against an IUS Policy, it will be necessary for you to provide us with your personal information so as we are able to properly assess your claim. If you do not provide us with this information, we may not be in a position to assess your claim and make payment to you under an IUS Policy.

How do we collect your personal information?

Where possible, we collect your personal information directly from you. In most instances, collection will take place when you complete a claim form and lodge it with us. However, we may collect personal information about you from other sources. For example, in assessing a claim made by you under an IUS Policy we may collect information from:

• your employer regarding your employment conditions or membership of a superannuation fund;
• an insurance investigation or reference service; or
• a medical practitioner in relation to a sickness, injury, medical history, consultation, examination, prescription, treatment or medical records relevant to your claim.

We shall employ all reasonable endeavours in order to obtain your express consent prior to our collection, use or disclosure of your personal information. An Authority allowing IUS to obtain such information is included in the claim form.

How do we use your personal information?

We will use your personal information to decide whether or not your claim falls within the cover provided by the IUS Policy under which you are covered through your employer, union or superannuation fund.

Do we disclose your personal information to anyone else?

In certain circumstances, we may need to disclose your personal information to third parties and in most cases we will have obtained your express consent. However, there are certain situations where we may be required or authorised by law to disclose your personal information without your consent. For example, we may be compelled to disclose personal information under Subpoena to a court or subject to the investigative powers of the Police or a government authority. In general, we will not disclose your personal information to a third party unless that person or organisation has an agreement with us or we have reviewed their privacy compliance measures and can be assured that your privacy will not be abused. We do not disclose your personal information to third parties for the purposes of allowing them to direct market their products or services to you.

In particular, you should be aware that if you wish to have our decision regarding your claim reviewed, the review process may involve a referral to a Complaints and Disputes Review Committee which may comprise representatives of your employer or a union of which you may be member. Upon commencing the review process, you will be informed which parties may be involved and we will endeavour to obtain your express consent prior to the disclosure of your personal information under these circumstances.

Other examples of parties outside of IUS to whom we may disclose your personal information may include insurance reference agencies, assessors, medical practitioners or investigative service providers who may assist us in assessing your claim.

Is the personal information that we hold about you accurate?

In order to properly do business with you (eg to assess your claim under an IUS Policy), it is very important that the personal information we collect from you is complete, up-to-date and accurate. We therefore ask that you take care in completing your claim form to ensure that the particulars you have provided to us are truthful and comprehensive. Whilst assessing your claim, we may ask you to tell us of any changes to your personal information. In any event, you should feel free to contact us at any time if you believe that any personal information we have collected about you is somehow inaccurate or incomplete.

Is your personal information secure?

The protection of your personal information is very important to IUS. As a result, we take all reasonable precautions to safeguard your personal information from loss, misuse, unauthorised access, modification or disclosure. We employ a number of means to protect your personal information including:

• external and internal premises security;
• restricted access to personal information;
• entering into confidentiality agreements with employees, contractors and third party organisations; and
• maintaining technology (including encryption and firewalls) to prevent unauthorised computer access.

IUS may be required by law to retain your personal information for a period of time after you have ceased your relationship with us - up to seven (7) years subsequent to the resolution of your claim. After the required time has passed, it is our practice to destroy or delete your personal information from our systems in a secure manner.

Can you access the personal information we hold about you?

You may request access to any of the personal information we hold about you. In most cases, a summary of personal information such as your name and address details, contact telephone numbers and policy cover are freely available to you by calling the Claims Officer handling your file or our Privacy Officer. For more detailed requests (eg. access to personal information held in off-site archives), a fee may be charged to cover the cost of retrieval and the supply of this information to you.

All requests for access to personal information will be handled as quickly as possible and we shall endeavour to process any request for access within thirty (30) days of having received the request.

Can your request for access to your personal information be denied?

We are not always required to provide you with access to your personal information upon your request. We may refuse you access to personal information in a number of circumstances such as where the information may relate to existing or anticipated legal proceedings with you, where denying access is required or authorised by law or where the request for access is regarded as frivolous or vexatious. If we deny your request for access to or refuse your request to correct your personal information, we will provide you with reasons for doing so.

Do you have to be identified at all?

Generally speaking, it is not possible for us to assess your claim under an IUS Policy unless we have identified you. Wherever it is lawful and practicable to do so, we may offer you the opportunity to deal with us anonymously such as when making an inquiry about cover that is provided under a particular IUS Policy.

Does your personal information leave Australia?

It is not our usual practice to transfer your personal information outside Australia. However, should it become necessary for the provision of our products or services to you, such a transfer would only be made in accordance with the Principles.

Sensitive information

If personal information concerns particular topics it may be regarded as sensitive information. Sensitive information can be information about your racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual preferences or practices, criminal record or health. We will only collect, use or disclose sensitive information about you as is allowed by law, where we have received your express consent to do so or the collection is necessary for the establishment, exercise or defence of a legal claim by or against IUS.

Internet and Electronic Mail ("email")

Whilst the Internet has brought many improvements to the way we are able to comminicate with you, we also understand that you may have concerns about the personal information collected about you online or the security of your personal information that may be exchanged between us online.

Our web site ( www.ius.com.au ) relies on "cookies" to record limited information, including the Internet Protocol address of the computer you use to access our web site and the pages you request within our web site. A cookie is a piece of data that a web site can send to your browser, which may then be stored on your computer. Cookies generally allow the web site to interact more efficiently with your computer. You may be able to set your browser to notify you before you receive a cookie so that you can decide whether to accept it or to turn off cookies altogether, but sometimes not accepting a cookie may affect your use of a web site. We do not use cookies to track your browsing habits.

We recognise that email is a convenient and efficient forum for the transfer of information but also that it may not always be a secure form of communication. In instances where We may use email as a form of information delivery, We shall endeavour to only send information about You (which may include sensitive information) to secure email addresses.

Our Privacy Policy may change from time to time

IUS will review all of its policies and procedures to ensure that they are updated in line with changes in the law, technology and market practice. As a result we may change this privacy policy from time to time.

This Privacy Policy was last amended on 11 September 2008.

Please note that certain companies within the IUS Group are member organisations of the National Insurance Brokers Association of Australia (NIBA). The IUS Group reserves the right to adopt a privacy code prepared by NIBA or another industry association and approved by the Privacy Commissioner.

Contact information

If you have a question about this Privacy Policy, if you wish to lodge a request to access your personal information or if you believe that the IUS Group has not protected your personal information as set out in this privacy policy and wish to make a complaint, please contact our Privacy Officer at the details below:

Phone: (02) 8912 7200

Fax: (02) 8920 1915

Mail: The IUS Group
        Attention: Privacy Officer
        PO Box 6215
        NORTH SYDNEY NSW 2059

If you lodge with us a complaint concerning your privacy and you are not satisfied with our response, you can refer your complaint to the Federal Privacy Commissioner at the details below:

Phone: 1300 363 992

Mail: Director of Complaints
        Office of the Federal Privacy Commissioner
        GPO Box 5218
        SYDNEY NSW 1042