GDPR Compliance Statement

Our Commitment to Data Protection

While we operate primarily in Australia, we recognize that some of our website visitors and customers may be located in the European Union or European Economic Area. We are committed to complying with the General Data Protection Regulation (GDPR) for any personal data we process relating to individuals in these regions.

This statement outlines how we handle personal data in accordance with GDPR principles and describes the rights available to individuals whose data we process.

Legal Basis for Processing

We process personal data under the following legal bases:

• Contractual necessity: Processing is necessary to provide insurance services you've requested or to take steps at your request before entering into a contract.
• Legal obligation: Processing is required to comply with Australian insurance regulations, financial reporting requirements, and other legal obligations.
• Legitimate interests: Processing is necessary for our legitimate business interests, such as fraud prevention, system security, and business analytics, provided these interests don't override your rights.
• Consent: For marketing communications and non-essential cookies, we rely on your explicit consent, which you can withdraw at any time.

Your Rights Under GDPR

If you are located in the EU or EEA, you have the following rights regarding your personal data:

Right of Access

You can request confirmation of whether we process your personal data and obtain a copy of that data along with information about how it's being used.

Right to Rectification

You can request correction of inaccurate personal data and completion of incomplete data.

Right to Erasure

You can request deletion of your personal data in certain circumstances, such as when it's no longer necessary for the purposes for which it was collected or if you withdraw consent.

Right to Restriction

You can request that we restrict processing of your personal data in specific situations, such as while we verify the accuracy of data you've challenged.

Right to Data Portability

You can request to receive your personal data in a structured, commonly used, machine-readable format and have it transmitted to another controller where technically feasible.

Right to Object

You can object to processing of your personal data that is based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significant effects, except where necessary for contract performance.

Exercising Your Rights

To exercise any of these rights, send a detailed request to [email protected]. Please include:

• Your full name and contact information
• Description of the right you wish to exercise
• Any relevant details that will help us locate your data

We will respond to your request within one month. If the request is complex or we receive multiple requests, we may extend this period by two additional months and will inform you of such extension.

Data Transfers

Your personal data is primarily stored on servers located in Australia. If we transfer data to countries outside the EEA that don't provide adequate data protection, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

Data Protection Officer

For questions specifically related to GDPR compliance or data protection matters, you can contact our data protection coordinator at [email protected] with "Data Protection Inquiry" in the subject line.

Supervisory Authority

If you are located in the EU or EEA and believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority. Contact details for supervisory authorities are available on the European Data Protection Board website.

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Significant changes will be communicated through a notice on our website, and the "Last updated" date will be revised accordingly.