At Aureus Financial, we understand that the privacy of your information is important to you and we respect the confidentiality of the information that you provide to us. Protecting your information is an important part of maintaining trust between us and our clients and by handling information in a secure manner we build trusting business relationships.
This document provides information and details about how we manage the personal information that we collect, hold, use and disclose about individuals.
The Privacy Policy applies to all entities within Aureus Financial. We are bound by the Privacy Act and we manage and protect your personal information in accordance with the Australian Privacy Principles.
Why we collect and use personal information
We collect, hold, use and disclose personal information so we can provide you with financial advice and service relevant to your needs. We may also collect, use and disclose your information for related purposes such as:
- Complying with our legal obligations, such as verifying your identity
- Assisting with your questions and complaints
- Arranging for services to be provided by third parties
- Internal operations, such as record keeping, data analytics, auditing or training
- Promotion of other products and services that may be of interest to you
We collect, use, hold and sometimes disclose personal information about financial advisers and other people who we do business with (including employees) in order to administer and manage our business operations. This information is afforded the same standard of care as that of our clients.
Personal information collected may also be used for direct marketing purposes to promote events, products or services that may be of relevance to you. Please contact us should you wish not to receive direct marketing.
What personal information we collect
We ask our clients for a range of personal information to assist us in providing relevant financial services. The information we collect could include (but is not limited to) your name, date of birth, contact details, financial information, employment details, residency and citizenship status. We may also collect the personal information of your family members where it is relevant to the advice being provided.
We may also collect sensitive information about your medical history, health and lifestyle to provide financial advice about life insurance products.
In most instances, we collect personal information directly from that person when they:
- complete a financial product application form,
- complete an identification form,
- complete data collection documentation,
- interact with an online interactive tool, such as a budget planner,
- provide documentation to us, or
- when you communicate with us in person, over the telephone, fax, email, internet or by using other electronic devices.
Situations where we collect personal information from other people and organisations include (but are not limited to):
- a financial adviser,
-
other professionals who act on your behalf, such as a lawyer or accountant,
health professionals, - other organisations, who jointly with us, provide products or services to you, and
- social media and publicly available sites.
It’s your choice whether to provide your personal information. You have the right not to provide personal information, including about your identity. However, in this case, your adviser will warn you about the possible consequences and how this may impact on the quality of the advice provided. Your adviser may also decline to provide advice if they feel they have insufficient information to proceed. In some instances, we will decline to provide services or advice if we feel we have insufficient information for the scope of the service or advice requested.
Further, in some circumstances the law requires us to obtain and verify details of photographic and non-photographic identification documents.
What do we do with your personal information?
When you purchase something from our landing pages or store, as part of the buying and selling process, we collect the personal information you give us such as your name, postal and email addresses and phone number.
When you browse our store, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system.
With your permission, we may send you emails about new products, services and other updates.
Cookies and other web technologies we use
Some personal information may be collected automatically, without your knowledge, whilst navigating through and interacting with the content of our websites. The electronic methods of collection we use include cookies..
Cookies are a small text or pixel file stored on your device that records information about your visit to our websites. We use cookies to improve your website experience, to serve you with relevant information and to manage your access to certain parts of our websites. You can choose if and how a cookie will be accepted by changing your browser settings; but please be aware that this may affect your access to some parts of our websites.
Here is a list of cookies that we use. We’ve listed them here so you can choose if you want to opt-out of cookies or not.
_session_id, unique token, sessional, Allows Aureus Financial to store information about your session (referrer, landing page, etc).
_lsite_visit, no data held, Persistent for 30 minutes from the last visit, Used by our website provider’s internal stats tracker to record the number of visits
_lsite_uniq, no data held, expires midnight (relative to the visitor) of the next day, Counts the number of visits to a store by a single customer.
cart, unique token, persistent for 2 weeks, Stores information about the contents of your cart.
_secure_session_id, unique token, sessional
storefront_digest, unique token, indefinite If the shop has a password, this is used to determine if the current visitor has access.
The information we collect by these electronic means is generally not stored for long – they are temporary records – and can include device-specific data or log data such as your IP address, device screen size, device type, browser information, referring domain, pages visited, the date and time website pages were visited, and geographic location (country only).
How do we get your consent?
When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.
How do you withdraw your consent?
If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by contacting us at accounts@aureusfinancial.com.au or mailing us at Suite 2/379 Port Hacking Road, Caringbah NSW 2229.
Accessing and updating personal information
You can request access to personal information we hold. There may be circumstances where we refuse to provide you with the information you request, for example when the information is commercially sensitive. In these situations, we will inform you and provide an explanation as to why.
We will deal with requests for access to your personal information as soon as possible and aim to respond within 14 business days. The time we require will depend on the type of information requested.
We will update your personal information if you contact us. In most cases, you can update your personal information over the phone on 1300 763894, or by contacting your adviser directly.
Who we share personal information with
From time to time we may share your personal information with other entities. This will vary according to the product or service involved, but could include:
- any person acting on your behalf, including your financial adviser, solicitor, accountant, executor, administrator, trustee, guardian or attorney
- financial product and service providers, including financial planning software providers and paraplanners
- for corporate superannuation members, your employer or your employer’s financial adviser
- other organisations including related bodies corporate and advice firms we have authorised
- medical practitioners and health service providers, such as pathology services
- companies involved in the payments system including financial institutions, merchants and payment organisations
- organisations who assist us with certain business functions, such as auditors, compliance consultants, direct marketing, debt recovery and information and communication technology support
- our solicitors, our insurers, courts, tribunals and dispute resolution organisations
- other organisations who provide us with products and services so that they may provide their products and services to you or contact you on our behalf, and/or
- anyone to whom we, or our service providers, are required or authorised by law to disclose your personal information to (for example, law enforcement agencies, Australian and international government and regulatory authorities).
We may also disclose your information to a third party where you have given your consent or where you would reasonably expect us to disclose your information to that third party. Third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, remember that certain providers may be located in or have facilities that are located in a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.
Once you leave our website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service. When you click on links on our landing pages, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
We may also disclose the personal information we hold about our financial advisers to professional organisations, companies and consultants that we work with.
The only circumstances in which we would collect, use or disclose your government related identifiers is where we are required or authorised by law to do so. For example, we may be required to disclose your Tax File Number (TFN) to the Australian Taxation Office, a superannuation or retirement income product provider. Likewise, we may need to disclose your Medicare number to Centrelink in order to assess your social security eligibility. Drivers license numbers and passport numbers may also be collected when we are required to verify your identity.
Disclosure of personal information
Personal information is generally hosted on servers located in Australia. If you access our services from outside Australia, you consent to the transfer of your personal information to Australia, a jurisdiction that may not provide the same high level of protection we apply in Australia.
We may disclose your personal information if we are required by law to do so or if you violate our Terms of Engagement.
How we protect personal information
We strive to ensure that the personal information that you provide to us is stored safely and securely. We take a number of precautions and follow industry best practices to protect the personal information we hold about you from misuse, interference and loss, and from unauthorised access, modification or disclosure.
If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.
We also have a range of practices and policies in place to protect personal information we hold, including:
- educating our staff and representatives about how to protect your personal information and updating them about cybersecurity developments, threats and scams,
- requiring our staff and representatives to use passwords when accessing our systems,
- where appropriate, using strict confidentiality arrangements restricting third parties’ use or disclose of personal information for any unauthorised purposes,
- employing physical and electronic means, including access controls (as required) to protect against unauthorised access to buildings,
- employing firewalls, intrusion prevention systems and virus scanning tools to protect against unauthorised persons, malware and viruses from entering our systems,
- some of the systems we use are on dedicated secure networks or transmit electronic data via encryption, and
- providing secure storage for physical records and securing paper files in locked cabinets and physical access restrictions.
Where personal information is no longer required, we take steps to de-identify or destroy the information in a secure manner.
Complaints about privacy
If you have any queries or are concerned about how your personal information has been collected, used or disclosed and you wish to make a complaint, please contact the Privacy Officer on the information below:
| Suite 2/379 Port Hacking Road, Caringbah NSW 2229 | |
| Phone | 1300 763 894 |
| accounts@aureusfinancial.com.au | |
| Website | www.aureusfinancial.com.au |
We will acknowledge receipt of a complaint immediately, however, where this is not possible, acknowledgement will be made as soon as practicable. We will then investigate the complaint and respond to you within 30 days. Some complex matters may require an extension to thoroughly investigate the complaint and bring it to resolution.
If you are not fully satisfied with our response, you can contact an external body. In cases of privacy related complaints, this is generally the Office of the Australian Information Commissioner (OAIC). The contact details for OAIC are:
| GPO box 5218 Sydney NSW 2001 | |
| Phone | 1300 363 992 |
| enquiries@oaic.gov.au | |
| Online | www.oaic.gov.au |
You may also direct privacy complaints related to financial advice to the Australian Financial Complaints Authority (AFCA). The contact details for AFCA are:
| GPO Box 3, Melbourne, VIC 3001 | |
| Phone | 1800 931 678 (free call) |
| info@afca.org.au | |
| Online | www.afca.org.au |
About this Policy
We may amend or update our Privacy Policy as required by law or as our business processes or technology changes. We will post the updated policy on our website – www.aureusfinancial.com.au. We encourage you to check our website from time to time to view our current policy or contact us for a printed copy.
If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.
