This information explains how we comply with applicable privacy requirements and sets out minimum standards for how we deal with personal information collected and used by the nib Group. This information may be updated from time to time, and should be read in the context of any additional specific information such as that provided in privacy policies applicable to specific businesses or local areas as displayed on the relevant website from time to time.
nib Group's system for complying with applicable privacy requirements includes:
The businesses operated by the nib Group of companies provide a range of insurance services, including in relation to health and travel, and provide information in relation to health care and health care providers, and other services.
When you deal with us, we may collect personal information about you such as your name, your contact details, gender and other information about your circumstances and preferences including about your health or medical history, visa and employment details, bank account and credit card details, government related identifiers, and if you hold nib securities, information relating to you and your security holding.
We collect this information when we ask you for it and you provide it, including when you join our nib reward programs, or if an insurance claim is lodged by you or on your behalf. We may also collect information about you from third parties, such as your doctor or treating hospital, if it is not reasonable or practicable to collect the information from you. This may also include other people or organisations who might be representing you, including a person who takes out an insurance policy on your behalf or under which you are covered, or any person assisting or representing us.
We may also collect your personal information from publicly available sources or social networking services to enable us to contact you and offer our products and services to you, and in doing so we comply with all requirements, including providing a facility to allow you to indicate your preferences in relation to contact. We may also collect personal information about others such as parents and guardians, carers or authorised representatives of third parties.
Where we do not have your personal information (or personal information of an insured person or person requesting assistance), we are not able to contact you, process your requests or employment application, or provide our services to you including providing insurance or other assistance, or processing an insurance claim.
We may also collect personal information from databases and directories, if you are a recognised health care provider. Like many companies, we use technology and tools that tell us when a computer or device has visited or accessed our content. Those tools include services from search engines and other companies that help us to tailor our products and services to better suit our customers and potential customers. Search engines provide facilities to allow you to indicate your preferences in relation to the use of those tools in connection with computers and other devices controlled or used by you. Our mobile applications may also collect precise location information from your device if you consent to the collection of this information.
Generally, we use your personal information for our business and activities, and in our efforts to expand and improve our business. Examples include:
If we use your personal information to contact you and you would prefer us not to, or if you indicate a preference for a method of communication, please let us know and we will do our best to respect your preference.
When your choice is to continue to deal with us, we take it that you agree to and consent to us using your personal information in these ways, providing we follow the system and approach we explain in this information and comply with the law.
Personal information is retained during the time we need it for the identified purposes, to the extent necessary for purposes reasonably related to those identified purposes (for example, resolving disputes) or as required by law. In using and storing your personal information, we may pass on your personal information including outside the country of collection:
When we pass on, transfer or share your personal information in this way, including outside the location where we collect it (e.g. your country, the European Economic Area if your information is collected there, etc), we take steps to ensure it is treated in the same way that we would treat it and that an adequate level of protection can be ensured for your rights in relation to your personal information and data, and where the transfer is otherwise in accordance with relevant privacy and data protection laws.
Some businesses within the nib Group (e.g. our travel insurance businesses) have relationships with insurers and other entities overseas. The countries in which these recipients may be located will vary from time to time, but may include the United Kingdom, the United States, Canada, Denmark, and Brazil. We may also disclose your personal information to health service providers and others we have business arrangements with overseas as necessary to enable them to offer their products and services to you, such as where you are covered by a travel insurance policy and require appropriate medical treatment and services while overseas.
We may also disclose personal information to any person authorised by you, or to others you have nominated in connection with an insurance policy you hold with us. When you acquire an insurance policy with us, you authorise us to share personal information with any co-insureds to confirm, for example, full disclosure has been made to us or to ensure that the policyowner is aware of the details of all benefits and services claimed on the policy.
We do our best to keep our records of your personal information up to date and accurate, and to delete or amend personal information that is no longer needed.
We also share with others and disclose information from which personal information has been removed (including aggregated, anonymous or pseudonymised information) so that no privacy is affected.
We sometimes have to pass on personal information for legal or safety reasons or other special circumstances.
We use various systems and services to safeguard the personal information we store, as part of our business systems and processes. We take steps to protect your personal information from misuse, interference or loss and unauthorised access, modification and disclosure with appropriate safeguards and security measures.
While we take steps to protect your personal information when you send it to us, you should keep in mind that no internet transmission is ever completely secure or error-free. If you provide any personal information to us via our online services (including email), or if we provide information to you by these means, the privacy, security and integrity of any data transfer over the internet cannot be guaranteed. When you share information with us, it is at your own risk. If you reasonably believe that there has been unauthorised use or disclosure of your personal information, please contact us (see below).
You may wish to contact nib Group to access your personal information, to seek to correct it or to make a complaint about privacy. Our privacy email contact address for our Group Privacy Officer is email@example.com and further contact details for nib Group are set out below.
You can also contact your local entity. We will respond to your request for access to personal information we hold about you as soon as we reasonably can, including notifying you if we are unable to provide access (such as when we no longer hold the information) or if we are permitted by law to refuse access.
We do not impose any charge for a request for access, but we may charge you a reasonable fee for our costs associated with providing you with access and retrieval costs.
For complaints about privacy, we will establish in consultation with you a reasonable process, including time frames, for seeking to resolve your complaint.
If you are located in the European Economic Area (EEA) and require further information about how we deal with your personal data under EEA data protection laws, please contact us at:
Last updated: February 2018