Personal information is information about an identifiable individual. It includes information that could be used to identify you, such as your name and contact details. It also includes credit information as defined in the Credit Reporting Privacy Code 2020, essentially information that has a bearing on credit that you have applied for or that is being provided to you.
Collection: We collect the personal information you provide to us either directly or from your computer, mobile or other device. We may also collect your personal information from a range of third parties, including service providers. If you choose not to provide the personal information we request then we may not be able to offer all our services to you.
Use and Disclosure: We use your personal information for a range of purposes including for the provision of products and services, for security, verification and prevention of fraud/criminal activity, to better understand your preferences and to conduct and develop our business. Where authorised, we may share your personal information with other members of the Westpac Group, credit reporting, governmental and law enforcement agencies and third party service providers.
Storage: If we collect personal information about you, we will store it in secure data storage facilities usually located in New Zealand or Australia.
Access & Complaints: You may request access and corrections to your personal information.
Most of your personal information that we collect will come directly from you when you deal with Westpac either in person, remotely or in writing. The type of information we collect will depend on the product or service in question and may include:
- your identification and contact details, including your name, (e)mail address, phone number, specimen signature, date of birth and Inland Revenue Department number;
- information collected in relation to your use of our online banking services, websites (including third party websites containing interactive Westpac content and Westpac-branded social media pages), mobile applications and ATMs (Digital Services), including your user name and login credentials, activity logs, IP address and cookie, device, browser and operating system identifiers (including device location identifiers where you agree to let us access that information);
- your employment details, financial position, credit record and banking transaction history; your queries, complaints and other written or verbal communications with us. When you’re dealing with any member of Westpac by telephone or live web or video chat service, your conversation may be recorded for training or verification purposes;
- in an insurance context, information about what is being insured, any insurance policy beneficiaries, your health, financial and insurance history and information required for processing claims;
- details you have shared publicly on social media platforms, which may be used to supplement our customer databases and for marketing and business development purposes; and
- any other information that any member of the Westpac Group is required by law to collect about you.
We may also collect your personal information from third parties, including:
- other members of the Westpac Group;
- where that information has been made publicly available, social media platforms and public information service providers such as public registers;
- regulatory and government agencies, such as Inland Revenue;
- commercial information service providers such as credit reporting agencies, market researchers, data and/or analytics providers and advertising networks;
- third parties providing offers, products and services available to you as a Westpac Group customer; your representatives, such as your legal or financial adviser;
- your employer;
- insurance providers and other organisations operating in the insurance industry, such as underwriters, health care providers, claims administrators and investigators;
- selected business partners to improve, optimise and personalise your experience of our products and services; and
- any other sources considered appropriate by any member of the Westpac Group in relation to the provision of credit.
Use & disclosure.
For the purposes set out below at 2.1-2.4, Westpac and any member of the Westpac Group may use and share your personal information with a range of organisations including other members of the Westpac Group (including their agents and anyone who provides services to them, subject to appropriate confidentiality obligations); your representatives and anyone you make a payment to; authorities such as regulators, government agencies, courts or the police; other financial services organisations; fraud bureaus, credit reference and debt recovery agencies; external dispute resolution schemes; brokers and referrers; anyone in connection with a reorganisation, sale or acquisition of any Westpac Group member’s business; payments systems operators; our agents; organisations that support us to investigate, identify or prevent fraud or misconduct; and third parties bound by confidentiality obligations such as service providers, suppliers, business partners and certain sub-contractors to:
2.1 Provide our products and services and administer our relationship with you, including to:
- assess whether to give you a particular product or service, including by confirming your identity, residence, employment and financial status and to make all necessary enquiries about any information you have given us in relation to any product or service that we are providing;
- provide our products and service to you, including communicating with you throughout the life of your relationship with Westpac about any changes to our product and services;
- provide customer support, including contacting you to offer assistance with online applications (including those you do not complete);
- update your records with us;
- improve, optimise and personalise your experience of our services;
- prevent, detect and investigate suspicious, fraudulent, criminal or other activity that may cause you, us, any of our business partners, or others harm, including in relation to our products and services; and
- if you are a joint account holder, enable any member of the Westpac Group to share your personal information relating to your joint account with the other joint account holder(s).
2.2 Comply with laws and regulation, including to:
- enable any member of the Westpac Group to comply with any New Zealand or overseas laws, rules or regulations, including any that are reasonably expected to be implemented (including to enable the government of New Zealand to comply with any agreement between it and the government of another country); and
- share personal information with the police, government agencies in New Zealand or overseas or other financial institutions, where any member of the Westpac Group reasonably believes that the disclosure will assist it to comply with any New Zealand or overseas laws, rules or regulations or will assist in the investigation, detection and/or prevention of fraud, money laundering or other criminal offences.
2.3 Understand your credit position, including to:
- enable any member of the Westpac Group to conduct credit checks when you apply for, open and operate accounts and loans. That may involve giving your personal information to credit reporting agencies, which collect information about your credit history and compile reports about your suitability as a borrower. Those reports can be used to confirm your identity, verify your current credit obligations and help assess your ability to meet repayment obligations;
- enable credit reporting agencies to update their credit reporting databases and provide updates to members of the Westpac Group and their other customers on your credit record and other information about you that could impact your ongoing relationship (including without limitation, updates notifying that other people have made enquiry of the credit reporting agency about you); and to collect any money owed by you.
2.4 Research and market products and services, including to:
- Conduct market research and analysis about our brand, offers, Westpac Group products or services either ourselves or using service providers, both while you are a customer and for a reasonable time afterwards;
- unless you ask us not to, make available and send you information about the full range of offers, products and services offered by any member of the Westpac Group, including to:
- enable selected third parties to present you with offers, advertisements and/or products or services that we believe may be of interest to you;
- and provide you with information about events, appeals and organisations sponsored by any member of the Westpac Group.
We may contact you by various means, including mail, telephone, email, SMS/text message and online banking. You can ask us not to use your personal information for marketing purposes either by updating your “Name and email preferences” in the “profile” section of Westpac Online Banking or by calling 0800 400 600. You can also unsubscribe from electronic messages received from us by following the instructions provided in the message.
In addition to the reasons set out above, Westpac Group members may also share your personal information with third parties (subject to appropriate confidentiality obligations) where you have consented to that information being shared or the reason for doing so is connected to the purpose of collecting the personal information.
Where Westpac receives a request for information from the police or any government agency, it may confirm whether a specified person is or was a customer, but will not provide any other customer information except with a production order, with the customer’s consent, where necessary to prevent or lessen a serious threat to health or safety, or as required by law.
Your personal information will be stored either in paper files or electronically in secure data centres located in New Zealand or overseas that are owned either by the Westpac Group or its external service providers.
We use a range of physical and electronic data security measures to protect information from loss and unauthorised use, access, modification or disclosure. For example:
- access to information systems is controlled through identity and access management;
- employees are bound by information security policies and are required to keep information secure;
- all employees are required to complete training about information security; and
- we regularly monitor and review our compliance (and our service providers’ compliance) with internal policies and industry best practice.
Personal information collected through use of our online banking services is passed through a secure Westpac server using encryption technology to help ensure that this information is protected when sent over the internet. Further, all stored personal information is protected from unauthorised access through the use of recognised security procedures such as passwords, PINs and biometric-based forms of access.
Accessing & correcting your personal info.
Westpac will do its best to ensure your personal information is accurate. You are responsible for promptly informing Westpac of any change of your personal details (including your name, address, telephone, mobile or facsimile numbers and email address).
You can contact us to request access, or that corrections are made, to the personal information we hold about you. A reasonable fee may be charged to process your request, covering activities such as locating, collating and supplying the information to you.
Under the Privacy Act, in some circumstances we do not have to give you access to or correct your personal information. If that is the case, we will explain why and provide information about how you can complain should you wish to do so.
This policy is current at 9 August 2023.