Westfund and Your Privacy

Westfund recognises the importance of keeping the personal information that you entrust to us private and confidential. This Statement has been compiled to outline how your personal information is handled and the steps taken by Westfund and its subsidiary to ensure your privacy. Our staff are trained to respect your privacy in accordance with our standards, policies and procedures.

About This Privacy Statement

This Privacy Statement outlines how we manage your personal information. It also describes in general terms, the types of personal information collected and how it is held, used and disclosed. This Privacy Statement applies to all of your dealings with Westfund, whether it be at one of our branches, at an agency, via our web site or with a Westfund representative.

What is privacy ?

From the 21st December 2001, private sector organisations are required to comply with the National Privacy Principles (NPP's) set out in the Privacy Act 1988 (Commonwealth). The principles provide a regulatory framework for the collection, use, storage, security and disclosure of personal and sensitive information. Individuals have the right to know what information an organisation holds about them and to have information that is incorrect amended.

What information does Westfund collect ?

As a member of Westfund certain personal information will be required to establish and maintain your policy. This will include information such as your name, date of birth, contact details, dependants, pre-existing ailments, details relating to membership and coverage from your previous health fund, possibly bank/credit card details and other information that Westfund considers necessary.

When it is reasonable or practicable to do so, Westfund will collect your personal information from you. This may occur when you fill out a form or give personal information over the telephone or counter, or via our web site. The fund also collects personal information from medical/ancillary service providers that relate to the ongoing management of your policy.

What are consequences of not providing information?

The information collected byWestfund is necessary to provide members with a health insurance product and to be able to accurately assess claims. Failure to provide information may result in a policy being cancelled or a claim rejected.

Why does Westfund collect certain information?

The relationship of dependants to the policy holder is collected to verify that they meet the funds definition of a "dependant" and are eligible to be covered under that policy.

Transfer details relating to your previous health fund are collected to ensure that there is continuity of cover and to determine and inform you of your eligibility to benefits, or if waiting periods will apply.

Pre-existing ailment information is collected to enable Westfund to inform you accurately of any waiting periods that may apply to your policy.

Credit Card or Bank account details are required if you wish to pay your premium by direct debit.

Your Medicare number is collected to enable you to collect the Federal Government 30% rebate. We also require this number for correspondence with the Health Insurance Commission (Medicare). Your Medicare number is not used for any other purpose. Information that we collect on behalf of the Government is a requirement under the National Health Act and/or the Private Health Insurance Incentive Act.

What is the information used for?

The information that you provide to Westfund is used only for purposes that you would reasonably expect in providing you with a health insurance product. This may include the auditing of information to protect against fraud.

Your contact information may be used to notify you of new products or promotions being offered by the fund. If at any time you no longer wish to receive this information, you can advise Westfund on 1800 027 912.

What information does Westfund disclose?

The information that Westfund collects will be kept strictly confidential and secure at all times. Where your personal information is disclosed, it will be disclosed in a manner that is consistent with the National Privacy Principles.

Information will only be disclosed to third parties in the following circumstances:

1. Where you would reasonably expect us to in order to provide the service for which the information was originally collected. For example, when providing verification of your membership to a hospital prior to you receiving treatment, or when sending claim data to Medicare for the payment of Medicare benefit; or

2. Where a third party has a confidentiality agreement with Westfund and it is required to perform a core business function on behalf of Westfund. For example, an agent transacting business for Westfund.

3. For maintaining, reviewing and developing our business systems, procedures and infrastructure including testing or upgrading our computer systems.

4. Disclosure of personal information may be deemed necessary in some exceptional circumstances such as when there are grounds to believe that the disclosure is necessary to prevent a threat to an individuals health and safety, for law enforcement purposes or to protect public revenue.

Your personal information is not disclosed outside Australia without your consent.

How does Westfund keep your personal information accurate?

Westfund will take reasonable steps to ensure that the information that we collect, use or disclose is accurate, complete and up to date. However, contact us if you believe that your personal information is not accurate, complete or up to date.

How does Westfund protect your personal information?

Westfund stores your personal information in different ways, including in paper and electronic form. We take the security of your personal information very seriously and take reasonable steps to protect it from misuse and loss, unauthorised access, modification or disclosure.

The methods we use to ensure this include:

¨ Confidentiality agreements with employees
¨ Confidentiality agreements with agents and sub-contractors
¨ Document storage security policies
¨ Internal system access security policies
¨ Verification procedures to identify an individual before access is allowed to personal information
¨ Access control for our buildings
¨ The use of data encryption, firewalls and other security systems for our computer system.

How does Westfund use identifiers?

Westfund uses it's own membership numbers to identify members. While in certain circumstances we are required to collect government identifiers such as your Medicare number, we do not disclose this information other than when it is required or authorised by law.

Can you deal with us anonymously?

Yes, you can deal with us anonymously where it is lawful and practicable to do so. For example, if you were making an general inquiry as to the benefits we pay on a dental procedure there would be no need to provide your personal details. However, to verify that you are covered for a procedure and waiting periods or limits do not apply, membership details will be required.

Can I access my personal information?

Yes, you are entitled to access your personal information that Westfund has collected since the 21st December 2001 or information that has been reactivated after this date that relates to the period prior to 21st December 2001.

Access is subject to some exceptions allowed by law. These include:

· access would pose a serious threat to the life or health of an individual
· access would have an unreasonable impact on the privacy of others
· a frivolous or vexatious request
· the information relates to a commercially sensitive decision making process
· access would be unlawful
· access would prejudice enforcement activities relating to criminal activities and other breaches of law, public revenue, a security or negotiations with you
· legal dispute resolution proceedings
· denying access is required or authorised by or under law.

If you wish to access details of your personal information, please contact our Privacy Officer on 1800 027 912 or by emailing us at privacy@westfund.com.au

There may be a charge associated with retrieving this information depending on the complexity of your request. We will give you reasons if access is denied.

How do I make a complaint?

Westfund will make every attempt to ensure your privacy. However, if you believe that your privacy has been breached, you may lodge a privacy complaint and we will endeavour to resolve the issue. Please contact:

The Privacy Officer
Westfund
PO Box 235
Lithgow NSW 2790
Phone: 1800 027 912
Email: privacy@westfund.com.au

If you believe that Westfund has not resolved the issue to your satisfaction, you may refer the complaint to:

Director of Compliance
Office of the Privacy Commissioner
GPO Box 5218 Sydney NSW 2001

Phone: 1300 363 992

The Privacy Commissioner's Office receives complaints submitted by email via the free Hushmail email encryption service. Emails that are not encrypted can be copied or tracked. You can set up your free account at www.hushmail.com and send your complaint to:

privacycommissioner@hushmail.com