OzForex Travel Card

Privacy

OzForex Privacy Policy

Responsibility

1. OzForex is responsible for all personal information you provide to it and will deal with that information in accordance with the following Privacy Principles.
2. OzForex has implemented procedures to implement its Privacy Principles and to deal with complaints and enquiries. Our Compliance Manager has overall responsibility for ensuring that OzForex and its employees, agents and subsidiaries comply with our Privacy Principles. Our Compliance Manager may be contacted in relation to any enquiry or complaint at: compliance@ozforex.com.au.
3. OzForex will not disclose any of your personal information to a third party, or in a foreign country, unless the recipient is subject to legislation, or a contract, that safeguards your personal information in a manner that is substantially similar to our Privacy Principles.
4. The Privacy Principles should be read in conjunction with OzForex's Client Agreement.

Privacy Principles

Purpose

1. OzForex will collect personal information only for the purpose of providing its services to you or for any purpose that is directly incidental to the provision of those services. In the event that OzForex wishes to use your personal information for any other purpose, it will identify such purpose and obtain your consent before doing so, unless the new purpose is required by law.
2. OzForex is always willing to explain to you the purposes for which you information is being collected.

Consent

1. OzForex will seek your consent to the use of your personal information either expressly or impliedly, depending on the circumstances and the type of information collected. For example, OzForex will rely on your implied consent when you give us your name, address, telephone number and other details necessary for us to verify your identity in accordance with the provisions of the Client Agreement. We will seek your express consent if the information is of a financial nature or concerns your personal credit.
2. Your consent may also be given by an authorised representative or a person having Power of Attorney.
3. You may withdraw your consent at any time, subject to any legal restrictions and subject to any contractual restrictions you have already entered into with us, and provided that you give us reasonable notice in writing. We will explain to you the implications of such withdrawal.
4. If you are registered with OzForex, we may from time to time send you information that is relevant to the provision of our services. If, at any time, you do not wish to receive that information, you may by sending us an email opt-out and request that you are not included in any future mail-outs.
5. There may be circumstances in which OzForex is obliged to collect, use, or disclose certain personal information without your consent. Such circumstances include:
   1. a serious and imminent threat to someone's life, health or safety;
   2. a serious threat to public health or public safety;
   3. unlawful activity has been, is being or may be engaged in;
   4. disclosure is required or authorised by law;
   5. OzForex reasonably believes that the use or disclosure is necessary for the prevention, detection, investigation, prosecution or punishment of:
      1. criminal offences, breaches of a law imposing a penalty or sanction or breaches of a prescribed law;
      2. the enforcement of laws relating to the confiscation of the proceeds of crime;
      3. the protection of the public revenue;
      4. the prevention, detection, investigation or remedying of seriously improper conduct or prescribed conduct; or
      5. the preparation for, or conduct of, proceedings before any court or tribunal, or implementation of the orders of a court or tribunal.
6. If OzForex is obliged to use or disclose your personal information under paragraph 5, it will create a written report of the use or disclosure.

Limiting Collection and Retention of Information

1. OzForex collects your personal information in order to provide our products and services to you and satisfy our regulatory obligations under relevant anti-money laundering laws, for example, in Australia the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth), rules and other subordinate instructments (AML/CTF Laws).
2. In order for us to satisfy our regulatory obligations under relevant AML/CFT Laws, for example the obligation that OzForex takes reasonable steps to verify the identity of its clients, OzForex may disclose your personal information to our external credit providers.
3. [In some circumstances, OzForex may also disclose your personal information to intermediary banks in order to process certain transactions on your behalf, for example, by disclosing your name and address.]
4. The amount and type of information collected by OzForex will be limited to that which is necessary to provide our services.
5. OzForex will make reasonable efforts to inform you if we have collected personal information about you from someone else.
6. Personal information shall be retained only for as long as may be necessary for the fulfilment of the purpose for which the information is collected. However, you should be aware that OzForex is obliged under relevant anti-money laundering and counter-terrorism legislation to retain information relating to personal identity for 7 years.
7. Subject to any legislative requirements, OzForex will destroy, erase, or make anonymous your personal information when it is no longer required to fulfil the purpose for which it has been collected.
8. If you refuse or fail to provide any requested information, OzForex may not be able to process any transaction/s for you.

Accuracy

1. OzForex will make reasonable efforts to ensure that your personal information is sufficiently accurate, complete, and up-to-date to minimise the possibility that inappropriate information may be used to make a decision about you.
2. OzForex will not routinely update your personal information, unless such a process is necessary to fulfil the purposes for which the information was collected. In accordance with the Client Agreement, you must notify us as soon as possible if any of the information you have provided to us has changed.

Safeguards

1. OzForex has in place a range of security safeguards to protect your personal information against loss or theft, as well as unauthorized access, disclosure, copying, use, or modification, regardless of the format in which it is held.
2. The methods of protection may depend on the sensitivity of the information and the format in which it is contained. Security measures employed by OzForex include:
   1. technological measures including SSL 128 bit encryption for all data transfers over the Internet;
   2. physical measures such as locked filing cabinets and restricted access to offices; and
   3. strategic measures such as security clearances and limiting access to a "need-to-know" basis.
3. OzForex ensures that its staff are aware of the importance of maintaining the confidentiality of personal information.

Access

1. OzForex will upon request [and within 10 days of any such request] allow you access to your personal information. The requested information shall be provided or made available in a form that is generally understandable.
2. In circumstances where you point out to OzForex that any information held by us is inaccurate or incomplete, we will take appropriate action to amend the information as required and, if necessary, notify any third party of the correction.
3. There may be circumstances which preclude OzForex from providing access to some or all of your personal information. Those circumstances could be:
   1. the information may contain references to other individuals;
   2. legal, investigative, security, or commercial proprietary reasons; or
   3. the information is subject to solicitor-client or litigation privilege.
4. OzForex may be prohibited by law from providing you with access to your personal information. For example, when the disclosure could:
   1. threaten the safety or physical or mental health of an individual other than you;
   2. reasonably be expected to cause immediate or grave harm to your safety;
   3. reveal personal information about another individual; or
   4. contravene another law that prohibits the disclosure.

Complaints

1. OzForex has procedures in place, to receive and respond to, complaints or inquiries about our policies and practices relating to the handling of personal information. For more information, see our Complaints Policy.
2. OzForex takes all complaints seriously and will investigate all complaints.

Macquarie Group Privacy Policy

Central to the success of Macquarie Group (being Macquarie Group Limited and its related bodies corporate globally) is our commitment to our clients. We honour without reservation our obligation to respect and protect the privacy of the personal information of individuals with whom we deal.

The information we collect

Whenever it is reasonable and practicable to do so, we only collect information about you directly from you.

We only collect personal information about you which is reasonably necessary to:

• provide you with quality products or services
• consider applications and approaches you make to us
• maintain your contact details
• fulfil our legal obligations under applicable laws and rules, such as those relating to Anti-Money Laundering and Counter-Terrorism Financing.

We generally hold personal information relating to:

• the products and services we provide or have provided to you
• your financial interests and sometimes your financial position
• your contact details.

We do not generally collect sensitive information about you unless required by applicable laws or rules. Sensitive information includes information relating to:

• race
• political or religious beliefs
• sexual preferences
• criminal convictions
• membership of professional or trade associations or unions
• health information.

We collect health information where we offer products with an insurance component to our customers. We do not use or share that information for any purpose other than the underwriting or administration of a customer's policy, claim or account, or as otherwise disclosed to the customer when the information was collected.

We also collect personal information from people who submit applications or register interest for employment with Macquarie Group. Please read the Career Privacy Policy for more information.

How that information is used

We only use and disclose personal information about you for the purpose for which it was disclosed to us or related purposes which would reasonably be expected without your permission.

For example, we may from time to time use your personal information to inform you of investment opportunities or to provide information about products and services which we expect may be of interest to you. However, we do respect your right to ask us not to do this.

We do not sell personal information to other organisations to allow them to do this.

We may share personal information inside the Macquarie Group, and may disclose personal information outside the Macquarie Group:

• as required by applicable laws or rules, such as those relating to Anti-Money Laundering and Counter-Terrorism Financing
• to service providers in, or outside of, Australia who provide services in connection with our products and services
• to your nominated financial adviser with your permission.

Laws and rules regarding the use of personal information may vary by jurisdiction. Macquarie Group complies with applicable laws and rules in the related jurisdiction.

Keeping information accurate and up to date

We take all reasonable steps to ensure that all information we hold is as accurate as is possible. You are able to contact us at any time and ask for its correction if you feel the information we have about you is inaccurate or incomplete.

Keeping information secure

We use security procedures and the latest technology to protect the information we hold. Access to and use of personal information within Macquarie Group is appropriately limited to prevent misuse or unlawful disclosure of the information.

If other organisations provide support services, we require them to appropriately safeguard the privacy of the information provided to them.

Where the personal information we collect is no longer required, we delete the information or permanently de-identify it.

How you can access your information

You can contact us to request access to your information. In normal circumstances we will give you full access to your information. However, there may be some legal or administrative reasons to deny access. If access is denied, we will provide you with the reason why.

Cookies

A 'cookie' is a packet of information placed on a user's computer by a website for record keeping purposes. Cookies are generally used on Macquarie Group sites to:

• access online services - if you visit a Macquarie Group website and log into our secure areas we will use cookies to enable us to authorise your access
• manage advertising - we use advertising companies to deliver our online advertising. When you see one of our ads on a third party website, cookies are sometimes used to collect information about what pages you visit and the type of software you are using
• traffic monitoring - we use tracking companies to gather information about how people are using the Macquarie site, this information includes time of visit, pages visited, and some system information about the type of computer you are using. We use this information to enhance the content and services offered on the site.

Cookies may also be used for other purposes on Macquarie Group sites but in each case none of the information collected can be used to personally identify you.

You can configure your browser to accept all cookies, reject all cookies, or notify you when a cookie is sent.
(Each browser is different, so check the "Help" menu of your browser to learn how to change your cookie preferences).

If you disable the use of cookies on your web browser or remove or reject specific cookies from Macquarie Group websites or linked sites then you may not be able to gain access to all of the content and facilities on those websites.

Dealing with Macquarie Group online

If you visit a Macquarie Group website to browse, read or download information, our system will log these movements. These web site logs are not personally identifiable and Macquarie Group makes no attempt to link them with the individuals who browse the site.

Your account information is password protected and we recommend you do not divulge your password to anyone. To further protect your personal information, your log-in time will automatically expire after a certain period of inactivity.

Macquarie Group cannot guarantee or accept responsibility for the privacy practices or the content of web sites to which we provide links.

Contact us

If you have any questions regarding our privacy policy or handling of information, please direct your enquiry to privacy@macquarie.com or contact us by phone.