Effective date: 4th September 2021
But first, the legal stuff.
Youi Pty Ltd (ABN 79 123 074 733) (“Youi”) is an Australian Financial Services Licensee (AFSL No. 316 511) regulated by the Australian Prudential Regulation Authority (“APRA”) and the Australian Securities and Investments Commission (“ASIC”).
At Youi, your privacy is extremely important to us. We are committed to protecting the privacy of your personal information and to handling your personal information in a responsible manner in accordance with the Privacy Act and the APPs.
- fair, transparent and open collection practice and management of personal information;
- processes that ensure personal information is accurate, complete, current and secure;
- an individual’s right to see and where necessary, correct personal information about themselves; and
- limiting the use of personal information.
Australian Privacy Principles
The APPs regulate the way that companies collect, use, secure and disclose personal information under the Privacy Act. Information containing anything that can be used to identify a person, inclusive of their name, address, telephone number, age, previous and current insurance experience is deemed to be ‘personal information’ within the Privacy Act.
The APPs are designed specifically to ensure the responsible collection, storage, and handling of personal information by companies. They also provide people with the right to know what personal information is currently being held about them and a right to correct that information if it is inaccurate. Lastly, the APPs have been designed to ensure that companies do not disclose personal information, without a person’s prior consent.
PERSONAL INFORMATION WE COLLECT AND HOLD
We will collect personal information from you and other individuals that is relevant to providing our products and services to you.
The personal information we collect and/or hold about you and other individuals (such as your partner, spouse, children or co-insured) can include:
- name, date of birth and gender;
- contact details such as address, phone and email;
- information relevant to providing a product or service such as:
- underwriting information like your claims history, where your vehicle is stored and how often it is used and your driving history, including telematics and/or roadside assistance data; and
- location data when using our app/s. An example of this is our Youi app, which uses your location data to provide more relevant partner searches, and
- financial institution account details like your credit card or bank account number e.g. if the product or service is being paid for in this way or we are making a claim payment. Credit card details are only stored as masked numbers with digits removed in line with best practice, and
- details of insurance policies you hold or have held; and
- health information; and
- information from use of our website, mobile apps, or cookies including the day and time of your visit, whether you have visited our website previously, your IP address, location, and web preferences, and
- any other personal information which is either required to acquire a product or service or needed during the lifecycle of that product or service.
We may also collect sensitive personal information such as criminal records where this sensitive personal information is relevant to underwriting an insurance policy or assessing a claim.
HOW WE COLLECT PERSONAL INFORMATION
Youi generally collects your personal information in two ways, directly and indirectly.
We will collect your personal information directly from you via:
- forms on our website and over the internet, including email;
- over the telephone;
- mobile apps; and
- in writing, including hardcopy forms.
We will collect your personal information indirectly via our website and mobile apps.
One example of information we collect indirectly is through our internet access logs. As is true of most websites, we gather certain information automatically. This information may include internet protocol (IP) addresses, device ID, User ID or other identifier, OS version, app version, browser type, internet service provider (ISP), referringexit pages, the files viewed on our site (e.g. HTML pages, graphics, etc.), date/time stamp, and/or clickstream data to analyse trends in aggregate form and to administer the site.
Youi mobile apps may collect exception or crash information to assist our developers in providing a better product. Any crash/exception data that is collected is available to Youi technical employees only.
Youi also records telephone conversations for evidentiary, contractual, training and quality control purposes.
We may also collect your personal information from publicly available sources, such as social media websites.
TABLE A: ENTITIES WE MAY COLLECT AND PROCESS PERSONAL INFORMATION THROUGH
|Our Service Providers||Such as our investigators, assessors, repairers, lawyers, experts, suppliers, data centre service providers, sub contractors, IT infrastructure, and data platform providers.|
|External Parties|| |
When we collect personal information from you about someone else
- We, or the relevant Table A Parties on our behalf, may seek to collect personal information about another person from you if, for example, you:
- apply for a product or service jointly with another person; or
- have personal information about another person which is relevant to a claim such as the contact details of a witness of an event for which you are claiming.
If you provide us or the relevant Table A Parties with personal information about another person, then you must:
- have their consent to do so;
- tell them that you are disclosing their personal information to us; and
We will use our own identifiers and not those assigned by government unless we are required to do so, or the APPs or another law permit us to do so. You may read more about what identifiers are in the Privacy Act.
Anonymity and pseudonymity
You have the option of not identifying yourself or using a pseudonym, providing it is possible for us to deal with you on this basis.
It will be impractical for you to deal with us anonymously or under a pseudonym, should you wish to enter a contract of insurance and hold an insurance policy with us. Your identity is a relevant factor in relation to our decision to insure you. It is material to our decision of whether to insure you and if so on what terms and premium. Also, under the Insurance Contracts Act 1984 (Cth) you have a duty to answer insurance application questions accurately and your identity is a material factor to disclose.
USE AND DISCLOSURE OF PERSONAL INFORMATION
We will use and disclose your personal information for the purposes we collected it, as well as purposes that are related, and will disclose your personal information to Table A Parties where you would reasonably expect us to.
We, or the relevant Table A Parties on our behalf, may collect, hold and use your personal information, and disclose your personal information to the relevant Table A Parties for the purposes of:
- confirming your identity;
- handling your enquiries;
- considering your application for a product or service;
- pricing an insurance policy (including deciding what excess to offer and ascertaining if any discounts are available);
- providing a product or service;
- managing, processing and assessing claims;
- managing complaints and disputes;
- managing our business operations (including our IT infrastructure, website, and statistical/maintenance purposes) and company research and development;
- conducting market research and communicating details about our products and services, including for marketing purposes;
- auditing, quality assurance and training; or
- any other purposes communicated to you at the time we collect your personal information and as permitted by law.
We may also be required or compelled by law to provide certain information, such as under a court order or subpoena, or a regulatory body request.
You may contact us at any time to “opt out” of receiving marketing communications or unsubscribe by following the links in any relevant electronic messages.
Location data is not shared or disclosed with third parties, including those listed in Table A.
Disclosure to overseas recipients
If your personal information is collected or supplied to an organisation outside of Australia we will ensure it will be held, used or disclosed only in accordance with the Privacy Act. We collect and provide your personal information to service centres in New Zealand and South Africa, and to certain Service Providers listed in Table A that are based overseas, including in the United States of America. Youi has contractual agreements in place with our Service Providers to protect personal data from unauthorised access or disclosure.
The countries to which this information may be disclosed may vary from time to time.
RESIDENTS IN THE EUROPEAN UNION
Where applicable, residents in the European Union have the following additional rights in relation to your personal information:
- You have the right to obtain information from us as to whether your personal information is being used, and if so, for what purpose, free of charge.
- You have the right to request we delete your personal information in certain circumstances, including where the information is no longer required for the purpose for which it was collected, or you withdraw consent and there is no other legal ground for processing the personal information.
- You have the right to object to the processing of your personal information, where the legal justification for the processing of the information is a legitimate business interest or for direct marketing.
- You have the right to receive a copy of your personal information we hold in a structured, electronic format, and to transmit such data to another data controller, where this is (a) personal information which you have provided to us, (b) if we are processing that information on the basis of your consent or to perform a contract with you and (c) where the processing is carried out by automated means.
- You have the right to request the rectification of inaccurate or incomplete personal information from us without undue delay.
- You have the right to restrict the processing of your personal information by us where you contest the accuracy of your personal information. The restriction may be temporary to enable Youi to verify the accuracy of your personal information.
STORAGE AND SECURITY OF PERSONAL INFORMATION
- We hold personal information electronically and sometimes in hard copy. The security of your personal information is very important and we’re committed to ensuring your personal information is managed correctly using generally accepted data security standards.
- We take reasonable precautions to secure your transactions with our website and mobile apps and to ensure your personal information is protected against unlawful use, unauthorised access, modification, and disclosure. Unfortunately, we cannot provide a guarantee that information sent over the internet is 100% secure and sending and receiving information over the internet is at your own risk.
- Access to personal information by employees within our organisation is limited to those who specifically need the personal information to conduct their business responsibilities.
ACCESS AND CORRECTION OF PERSONAL INFORMATION
Accessing your personal information
You can request access to the personal information we hold about you. So that we can provide access efficiently, we may ask you to provide personal information to confirm your identity. We may charge you a reasonable amount to cover the time spent retrieving, copying and sending out the information, but we will not charge you for making the request.
If we are unable to provide the information you have requested we will provide reasons why.
Correcting your personal information
We take reasonable steps to ensure that the personal information we collect and store, use or disclose is accurate.
- If you live in Australia, call one of our consultants on 13 YOUI (9684)
- If you live overseas, call one of our consultants on +61 7 3719 4800
- Email us using the enquiry form on our website
If you have a complaint regarding our management of your personal information or consider we have breached the APPs, you may contact us or access our Internal Dispute Resolution Service (IDRS).
We will promptly acknowledge your complaint, investigate it and determine the steps that we will undertake to resolve your complaint. We will contact you if we require any further information and will provide you with our decision once it is made. Once we have made our decision, we will also inform you of your right to take this matter to the OAIC together with contact details and the applicable timeframes applying to the OAIC.
The OAIC is the statutory body given the responsibility of complaint handling under the Privacy Act and is independent and will be impartial when dealing with your complaint. The OAIC will investigate your complaint, and where necessary, make a determination about your complaint, provided it is covered under the Privacy Act. You have 12 months from the date you became aware of your privacy issue to lodge your complaint with the OAIC.
Office of the Australian Information Commissioner Post: GPO Box 5218, Sydney NSW 2001
Youi Pty Ltd
ABN 79 123 074733
AFSL No. 316511