We know that how we collect, use, exchange and protect your information is important to you, and we value your trust. That’s why protecting your information and being clear about what we do with it is a vital part of our relationship with you.
Please note that during the course of our relationship with you, we may tell you more about how we handle your information. This could be when you complete an application or claims form, or receive terms and conditions or a Product Disclosure Statement. When you receive this further information, please consider it carefully. Please also visit our website regularly as we update this policy from time to time.
Bankwest is a division of CBA which has subsidiaries (the Group) that provide banking, finance, insurance, funds management, financial planning and advice, superannuation, stockbroking and other services. The Group includes Bankwest, CBA, CommSec, CommInsure, Commonwealth Financial Planning and Colonial First State businesses.
Australian members of our Group are bound by the Privacy Act and the Australian Privacy Principles (APPs), upon which this policy is based.
For more information about the Group, including a complete list of material Group members, see the Commonwealth Bank of Australia’s latest Annual Report, available through the CommBank website (search on Annual Report).
The information we collect from you may include your identity and contact details, other personal details such as gender and marital status and financial information. Where applicable, we also collect health information, for example for insurance purposes.
We collect information about you from others, such as service providers, agents, advisers, brokers, employers or family members. For example, if you apply for credit, we may need to obtain a credit report from a credit reporting body. If you apply for life or income protection insurance, we may collect medical and lifestyle information from you or your health professionals. We may collect information about you that is publicly available, for example from public registers or social media, or made available by third parties.
The Privacy Act also protects your sensitive information, such as health information that’s collected on insurance or hardship applications. If we need to obtain this type of information, we will ask for your consent, except where otherwise permitted by law.
We collect, use and exchange your information so that we can:
We may also collect, use and exchange your information in other ways where permitted by law.
If you don’t want to receive direct marketing, you can ask us not to contact you and not to disclose your information to others for that purpose, by calling 13 17 19.
Improvements in technology enable organisations, like us, to collect and use information to get a more integrated view of customers and provide better products and services. The Group may combine customer information it has with information available from a wide variety of external sources (for example census or Australian Bureau of Statistics data). Our Group members are able to analyse the data in order to gain useful insights which can be used for any of the purposes mentioned earlier in this section 4.
In addition, Group members may provide data insights or related reports to others, for example to help them understand their customers better. These are based on aggregated information and do not contain any information that identifies you.
We exchange your information with other members of the Group, so that the Group may adopt an integrated approach to its customers. Group members may use this information for any of the purposes mentioned in section 4.
We may exchange your information with third parties where this is permitted by law or for any of the purposes mentioned in section 4.
Third parties include:
If you are under 16 or have special needs, we may share your information with your parent or legal guardian or any person appointed to manage your affairs.
From time to time we may send your information overseas, including to overseas Group members and to service providers or other third parties who operate or hold data outside Australia. Where we do this, we make sure that appropriate data handling and security arrangements are in place. Please note that Australian law may not apply to some of these entities.
We may also send information overseas to complete a particular transaction, such as an International Money Transfer, or where this is required by laws and regulations of Australia or another country.
For a detailed list of the countries that Bankwest may share your information with, please follow this link to the CBA website .
When you apply to us for credit or propose to be a guarantor, we need to know if you’re able to meet repayments under your agreement with us. We also want to avoid giving you further credit if this would put you in financial difficulty. One of our checks involves obtaining a credit report about you.
A credit report contains information about your credit history which helps credit providers assess your credit applications, verify your identity and manage accounts you hold with them. Credit reporting bodies collect and exchange this information with credit providers like us and other service providers such as phone companies.
The Privacy Act limits the information that credit providers can disclose about you to credit reporting bodies, as well as the ways in which credit providers can use credit reports.
The information we can exchange includes your identification details, any applications for credit you have made, any significant default we have notified you of and whether you have committed a serious credit infringement (such as fraud). We also ask credit reporting bodies to provide us with an overall assessment score of your creditworthiness.
Once we move to comprehensive credit reporting, we will also provide credit reporting bodies with what type of loans you have been approved for, how much you’ve borrowed and whether or not you’ve met your loan payment obligations.
The credit reporting bodies we use are Veda Advantage Information Services and Solutions Ltd and Experian Australia Credit Services Pty Ltd. You can download a copy of their respective privacy policies at:
We use information from credit reporting bodies to confirm your identity, assess applications for credit, manage our relationship with you and collect overdue payments. We may also use this information as part of arriving at our own internal assessment of your creditworthiness.
We store credit-related information with your other information. You can access credit-related information we hold about you, request us to correct the information and make a complaint to us about your credit-related information. See sections 8 and 9.
Credit providers may ask credit reporting bodies to use their credit-related information to pre-screen you for direct marketing. You can ask a credit reporting body not to do this. Also, if you’ve been, or have reason to believe that you’re likely to become, a victim of fraud (including identity fraud), you can ask the credit reporting body not to use or disclose the credit-related information it holds about you.
We keep your hard-copy or electronic records on our premises and systems or offsite using trusted third parties. Our security safeguards include:
|Staff education||We train and remind our staff of their obligations with regard to your information.|
|Taking precautions with overseas transfers and third parties||When we send information overseas or use third parties that handle or store data, we ensure that appropriate data handling and security arrangements are in place.|
|System security||When you transact with us on the internet via our website or mobile apps we encrypt data sent from your computer to our systems.
We have firewalls, intrusion detection systems and virus scanning tools to protect against unauthorised persons and viruses accessing our systems.
When we send your electronic data outside the Group we use dedicated secure networks or encryption.
We limit access by requiring use of passwords and/or smartcards.
|Building security||We have protection in our buildings against unauthorised access such as alarms, cameras and guards (as required).|
|Destroying data when no longer required||Where practical, we keep information only for as long as required (for example, to meet legal requirements or our internal needs).|
You can ask for access to your basic information (for example what transactions you’ve made) by visiting a store, going online or calling us. To obtain a copy of current credit-related information we hold about you, you can visit a store or call us.
For more substantial information, such as details of what is recorded in your loan file, please contact our Customer Relations team using the details in section 10.
There is no fee for making the initial request, but in some cases there may be an access charge to cover the time we spend locating, compiling and explaining the information you ask for. Generally, the access charge is a flat fee plus any photocopying costs or other out-of-pocket expenses. You’ll need to make the payment before we start, unless you’ve authorised us to debit your account.
We try to make your information available within 30 days of your request. Before we give you the information, we’ll need to confirm your identity.
In certain circumstances we’re allowed to deny your request, or limit the access we provide. For example we might not provide you access to commercially sensitive information. Whatever the outcome, we’ll write to you explaining our decision.
It’s important that we have your correct details, such as your current address and telephone number. You can check or update your information at any branch, or by going online or phoning us. Please see section 10.
You can ask us to correct any inaccurate information we hold or have provided to others (including credit-related information) by contacting us using the details in section 10. If the information that is corrected is information we have provided to others, you can ask us to notify them of the correction. We don’t charge a fee for these requests.
If your request relates to credit-related information provided by others, we may need to consult with credit reporting bodies or other credit providers. We’ll try to correct information within 30 days. If we can’t complete the request within 30 days, we’ll let you know the reason for the delay and try to agree a timeframe with you to extend the period.If we’re able to correct your information, we’ll inform you when the process is complete.
If we disagree with you that information should be corrected, we’ll let you know in writing our reasons.
We accept that sometimes we can get things wrong. If you have a concern about your privacy (including credit-related matters), you have a right to make a complaint and we’ll do everything we can to put matters right.
To lodge a complaint, please get in touch with us using your point of contact or one of the customer service teams set out in section 10. We’ll review your situation and try to resolve it straight away. If you’ve raised the matter through your point of contact or our customer service teams and it hasn’t been resolved to your satisfaction, please contact our Customer Relations team using the details in section 10.
We acknowledge every complaint we receive and provide our name, a reference number and contact details of the investigating officer. We keep you updated on the progress we’re making towards fixing the problem.Usually, it takes only a few days to resolve a complaint. However, if we’re unable to provide a final response within 45 days (or 90 days for superannuation complaints), we’ll contact you to explain why and discuss a timeframe to resolve the complaint.
If your complaint is about our practices relating to credit-related information, then we may need to consult with other organisations, including credit reporting bodies or credit providers. We will acknowledge receipt of the complaint within seven days. If we can’t resolve the matter within 30 days, we’ll contact you and explain the reason for the delay, the expected timeframe to resolve the complaint and seek your agreement to extend the period.
If you’re not satisfied with our handling of your matter, you can refer your complaint to external dispute resolution. We suggest you do this only once you’ve first followed our internal complaint processes set out above.
The Financial Ombudsman Service (FOS) Australia offers a free and independent dispute resolution service for the Australian banking, insurance and investment industries. FOS will consider privacy disputes if they’re about the provision of credit, the collection of a debt, credit reporting or the banker-customer relationship, or if the privacy issue is part of a broader dispute with us. Please contact FOS at 1800 367 287, online at www.fos.org.au or write to Financial Ombudsman Service Limited, GPO Box 3, Melbourne VIC.
If your complaint is about the way we handle your personal information, you may also contact the Office of the Australian Information Commissioner by calling them at 1300 363 992, online at www.oaic.gov.au or writing to the Office of the Australian Information Commissioner, GPO Box 5218 Sydney NSW 2001.
|For privacy related queries, access or correction requests, or complaints, or to request a printed version of this policy||STEP 1: Talk to us
We aim to resolve your query or complaint at your first point of contact with us. You can use your usual point of contact or contact one of our customer service teams:
If you have tried to resolve your query through your point of contact or a customer service team and are not satisfied with the outcome, you can also contact our Customer Relations team directly.
|For more information about the Australian Privacy Principles and credit reporting rules||Visit:
Bankwest customers get free McAfee® Internet Security for 6 months.