The type of personal information we collect may include your name, address, date of birth, occupation, contact details (e.g. phone numbers and email addresses), payment details (e.g. bank account or credit card details) and financial information
We may collect this information in a number of ways, such as:
- Directly from you – for example, where you complete your details in an order form or provide those details to one of our account managers;
- As a result of your use of our services – for example, when you pay your bill or use our services or self-service channels;
- From your online activity – for example, cookies and other digital identifiers;
- From third parties – for example, from your employer if you are an end user of one of our services or from a credit reporting agency in order to conduct a credit assessment or manage your credit situation with us.
- We will take reasonable steps to ensure that you know we have your personal information, how we received it and how we will use it.
- If you are unable to provide us with the details we ask for, we may not be able to provide you with a service that you wish to acquire or give you the level of service you expect.
- Our main business locations are in Australia and New Zealand, but some of our group companies may be based in other countries from time to time. Accordingly, we may need to share your personal information with overseas organisations.
- Where those organisations are based in countries that do not have the same or substantially similar privacy laws as those in Australia, we will take reasonable steps to ensure that they do not breach the Australian Privacy Principles
- We may also store your information in the cloud or other types of networked or electronic storage. These services often involve diverse geographic locations, which change periodically for reasons which include data protection and processing efficiency. Where we use these services, it is not always practical for us to notify you of which country your personal information may be located in.
Listed below are the countries where we are aware personal information that we share may be located:
- Australia
- New Zeeland
- Fiji
- Lebanon
- Philippines
- Taiwan
Please note that overseas organizations are subject to their own laws and may be required to disclose information that we share with them. In those instances, we will not be responsible for that disclosure.
Where we collected the personal information (e.g. customer contact details).
Our primary goal is to maintain information governance and security via compliance with the Privacy Act 1998 (Cth) (the Act). For personal information that we hold:
- If we suspect there has been a data breach, we will take appropriate remedial actions if possible, to contain the suspected breach.
- We will conduct an assessment within 30 days from when our suspicions arose. The assessment will follow our ISO 27001 procedure for Information Security Incident Management.
- If we determine there has been a breach and the assessment concludes there is a risk of serious harm, we will:
- notify affected persons in line with current standard processes, unless the incident is covered by an exception in the Act; and
- notify the Australian Information Commissioner.
- We will review the incident and take appropriate actions to prevent future breaches.
Cloud Service and Network Customers.
In relation to Cloud and network services that we may provide to you, it is your responsibility to ensure that no personal information is stored or processed by our Cloud and network services. Just like the landlord of a storage shed does not take inventory of the tenant’s goods, we provide the place for you to store your data, but do not inspect it.
However, if we have reasonable grounds to believe that personal information may have been stored in our Cloud which has been compromised, we will notify you and share all relevant details of the alleged breach. We will undertake an assessment of the breach in accordance with our obligations under the Act and may assist you with your assessment and remedial actions under the Act.
Please let us know if you have any questions or concerns about this policy or our practices.
You can contact us by:
Phone: 02 8667 0423
Email: privacy@aaptbc.com.au
Mail: Privacy Compliance Officer
Connect ANZ Pty Ltd
Level 5, 13-15 Lyonpark Rd, North Ryde NSW 2113
If you would like further information or to complain about our privacy practices, please contact our Privacy Compliance Officer. Our general complaint handling policy also applies to complaints about privacy.
Our Privacy Compliance Officer will investigate the matter and try to resolve it in a timely way. If we are unable to resolve your complaint to your satisfaction and no other complaint resolution procedures are agreed or required by law, you may lodge a complaint with the Telecommunications Industry Ombudsman (if the matter is related to a telecommunications service) or the Office of the Australian Information Commissioner.
We may update this policy from time to time and any changes will be reflected on this page.
