Some types of personal information are designated as ‘sensitive information’, which are subject to additional protection under the Privacy Act. For example, these can include information about your health.
The types of personal information we collect about you will depend on the purpose for which the personal information is collected. This can include:
Generally, we will not collect sensitive information about you. However, in certain circumstances, we may need to collect sensitive information. For example, your medical condition, your referring doctor’s details, and responses to our COVID-19 screening questions.
We also collect technical information and general analytics arising from your use of our website, such as:
We collect your personal information directly from you, including when you:
Where it is reasonable and practicable to do so, we will only collect personal information about you from you directly and not from third parties.
If you contact us to make a general enquiry about IAG or our services, you do not have to identify yourself or provide any personal information. Alternatively, you can also notify us that you wish to deal with us using a pseudonym.
However, if we are not able to collect personal information about you, we may not be able to provide you with the information or assistance you require. For example, we will not be able to send you information you have requested if you have not provided us with a valid email address or telephone number.
Generally, we use your personal information for purposes connected with our business or our services.
Some specific purposes for which we use your personal information are as follows:
IAG will not use personal information for any other purposes unless otherwise permitted or required by law, or with your prior consent.
Technical information and general analytics is used for the purpose of gauging visitor traffic, trends and delivering personalised content to you while you are on our website, and to improve our website and our services.
We may disclose your personal information to third parties in connection with the purposes described above (see the “How does IAG use your personal information?” section).
This may include disclosing your personal information to the following types of third parties:
If we disclose your personal information to third parties we will use reasonable commercial efforts to ensure that such third parties only use your personal information as reasonably required for the purpose of disclosure and in a manner consistent with applicable laws, for example (where commercially practical) by including suitable privacy and confidentiality clauses in our agreement with a third party service provider to which we disclose your personal information.
We will only send you direct marketing communications (either through mail, SMS or email), including offers any news and exclusive offers, promotions, or events, where you have consented to do so.
You may opt-out of receiving direct marketing communications at any time by contacting us or by using opt-out facilities provided in the direct marketing communications.
We store personal information in servers located in Australia. We may disclose your personal information to overseas recipients, such as to our service providers. It is not practical for us to list every country where such overseas recipients may be located, however such countries are likely to include the United States, United Kingdom, India, and the Philippines.
Except where an exception applies under the Privacy Act or other relevant legislation, we will take commercially reasonable steps to ensure that overseas recipients to whom we disclose personal information do not breach the Australian Privacy Principles stated in the Privacy Act in relation to such information.
IAG takes reasonable steps to ensure the security of your personal information. However, you should be aware that the internet is not a secure environment, we cannot guarantee the security or transmission of personal information you disclose to us online. Accordingly, you transmit your personal information to us online at your own risk.
Please notify us immediately if you become aware of any breach of security.
You may request access to your personal information held by IAG at any time by contacting us. We will provide access to that information in accordance with the Privacy Act, subject to any exemptions that may apply. We may charge an administration fee in limited circumstances, for example if we are required to.
If you believe that personal information we hold about you is incorrect, incomplete or inaccurate, then you may request us to amend it by contacting us.
If you have any questions, concerns or complaints about our collection, use, disclosure or management of your personal information, please contact us in writing using the contact details below.
We will make inquiries and your complaint will be assessed by an appropriate person with the aim of resolving any issue in a timely and efficient manner.
If you are unsatisfied with the outcome, we will advise you about further options including, if appropriate, review by the Privacy Commissioner within the Office of the Australian Information Commissioner.
Where local laws allow for an exemption to compliance with certain legal obligations (for example, the employee records exemption), we may rely on such an exemption.
If you have a query, concern or complaint about the manner in which your personal information has been collected or handled by us or would like to request access to or correction of the personal information we hold about you, please contact using the details provided below:
Attention: Privacy Officer
Suite 3, Level 2,
19-23 Prospect St, Box Hill,
Last updated: 8 November 2021.