At WIP (We, Us, Our), We are committed to protecting Your privacy and maintaining the confidentiality of the Personal Information You provide Us in accordance with the Privacy Act 1988 (Cth) (‘the Act’) and the Australian Privacy Principals (APPs).
By providing Us with Your Personal Information, You consent to Us collecting, storing, using and disclosing Your Personal Information as set out in this policy.
What is Personal Information?
‘Personal Information’ means information or an opinion about an identified individual or an individual who is reasonably identifiable:
- whether the information or opinion is true or not; and
- whether the information or opinion is recorded in a material form or not.
‘Sensitive Information’ is a form of Personal Information, it may include information or an opinion about an individual’s health, racial or ethical origin, political opinion, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual preferences or practices or criminal record.
What Personal Information do We collect, hold and use?
Personal Information collected may include Your name, date of birth, gender, postal and email address, telephone number, Medicare number, bank account details, taxation information, information obtained from any questionnaire which We may ask You to complete, health fund number, previous employment history, occupational health history and medical records or other information We consider necessary to provide Our services to You.
We will, if it is reasonable or practicable to do so, collect Your Personal Information from You. In some cases, We will collect Your Personal Information from others, such as other doctors or health professionals.
Dealing with Us anonymously
You may be able to deal with Us without identifying Yourself (i.e. anonymously or by using a pseudonym) in certain circumstances, such as when making a general enquiry of Us. If You wish to do so, please contact Us to find out if this is practicable in Your circumstances. However, if you do not provide us with all Your Personal Information it may affect Our services to You.
Why do We collect Personal Information?
We will collect Personal Information for the primary purposes of managing a claim or a customer complaint, We and Our representatives (including Our service providers) collect information about the claim, some of which may be Personal Information.
We provide this Personal Information to the insurers and underwriting agencies and those appointed to assist Us in processing a claim.
How We collect Your Personal Information
We may collect Personal Information about You or other individuals in several ways including:
- directly from You via Our website or online forms,
- by telephone,
- in writing, including hard copy forms,
- by email,
- from third parties, such as;
- service providers – lawyers, adjustors, doctors or health professionals, assessors and other parties who we work with to manage claims;
- external parties – government agencies or statutory authority;
- Our clients – insurers and underwriting agencies;
- customers of Our clients – insurance brokers or other entities who submit claims to us on behalf of policy holders or other parties.
Each third party is also obliged to comply with the applicable privacy principles.
How We use this Personal Information
We use Personal Information to manage claims. In doing so, We may Use Personal Information to:
- investigate and assess claims,
- contact claimants and clients about any matters relating to a claim,
- answer inquiries and /or process any approved payments,
- report or obtain information from regulatory authorities (i.e. Medicare, Centrelink or the Department of Health and Aged Care)
Disclosure of Your Personal Information
We will only disclose Your Personal Information where it is required or reasonable to provide a service to You. Where appropriate, We will disclose Your Personal Information
to any third parties as defined above or any other entities as notified to You at the time of collection.
You authorise Us to contact such third parties for the purposes of providing You with the services that You have requested.
Disclosure of Your Personal Information Overseas
Some of the third parties may be located outside of Australia such as the United Kingdom and Europe. In all instances where Personal Information may be disclosed to third parties who may be located overseas, We will take reasonable measures to ensure that the overseas recipient holds and Uses Your Personal Information in accordance with the consent provided by You and in accordance with Our obligations under the Act.
Your obligations when You provide Personal Information of others
If You provide Personal Information about another individual to Us You have their authority to do so and You have made them aware that You will or may provide their Personal Information to Us, the types of third parties We may provide it to, the relevant purposes We and the third parties We disclose it to will Use it for, and how they can access it. If You have not done or will not do either of these things, You must tell Us before You provide the relevant information.
If We provide You with Personal Information, You and Your representatives must only Use it for the purposes We have agreed to. Where relevant, You must meet the requirements of the APPs when You collect, use, and handle Personal Information on Our behalf.
You must also ensure that Your agents, employees, and contractors meet all of these requirements.
Accuracy of Your Personal Information
We aim to ensure that Your Personal Information We collect is accurate, complete and up to date. If You believe Your Personal Information is not accurate, complete or up to date, please contact Us.
Gaining access to Your Personal Information
You may make a request to access Your Personal Information, We will provide You with access to the Personal Information We hold about You, unless otherwise required or permitted by law within a reasonable time after the request is made.
Security of Your Personal Information
We take reasonable steps to protect any Personal Information that We hold from misuse, interference and loss, and from unauthorised access, alteration and disclosure. All Our staff are trained in Privacy procedures and it is a condition of their employment that they comply.
We hold the information We collect from You in Our computer system and in Our hard copy files. We maintain physical security over Our paper and electronic data and premises, by using locks and security systems. We also maintain computer and network security; for example, We use firewalls (security measures for the Internet) and other security systems such as user identifiers and passwords to control access to computer systems where Your information is stored.
However, data protection measures are never completely secure and, despite the measure We have put in place, We cannot guarantee the security of Your Personal Information. You must take care to ensure You protect Your Personal Information (for example, by protecting any usernames and passwords). You should notify Us as soon as possible if You become aware of any security breaches
We also require Our Service Providers to hold Personal Information securely.
How long do We retain Your Personal Information?
We keep Personal Information only for as long as is reasonably necessary for the purpose for which it was collected or to comply with any applicable legal or ethical reporting or document retention requirements.
How to make a complaint
If You wish to make a complaint about how We have treated Your Personal Information, You can lodge a complaint by using the contact details below. We will refer Your complaint to Our Privacy Officer who will investigate the issue and determine the steps that We will undertake to resolve Your complaint.
If You are not satisfied with Our determination, You can contact Us to discuss Your concerns or complain to the Australian Privacy Commissioner via www.oaic.gov.au.
We may make changes to this policy as a result of operational or legislative changes. When changes are made to this policy the updated policy will be uploaded to Our Website and the effective date updated accordingly.
How to contact Us
The Privacy Officer
Effective Date: 1/5/19