Privacy Policy

TransAction Solutions Limited trading as Experteq ™ ACN 084 571 040.

Introduction

The protection of Personal Information collected, used or stored by TransAction Solutions Limited (ACN 084 571 040)  and its related companies from time to time (we, us or our) is fundamental to our business.

We are committed to safeguarding the Personal Information we hold and we are committed to do so in accordance with the requirements of the Australian Privacy Principles (APP) under the Privacy Act 1988 (Cth) (Privacy Act) and any other relevant laws, regulations and contractual arrangements we have in place with our clients.

This Privacy Policy sets out our policy relating to the management of Personal Information by us.

Personal Information is information or an opinion (including information or an opinion forming part of a database), whether true or not, and whether recorded in a material form or not, about an identified individual, or an individual who is reasonably identifiable.

How do we collect Personal Information?

We provide managed services to our clients including credit unions and mutual banks.

The managed services we provide to our clients include:

• infrastructure as a service delivering transaction processing between our clients and their respective customers;
• desktop as a service; and
• application service management; and
• disaster recovery services; and
• data storage and warehousing.

In providing the managed services to our clients we have access to and are provided with data provided by our clients which includes Personal Information of their customers.

We also may collect Personal Information from an individual if we provide a service to a client which involves us having direct access to one of its customers.

What kind of Personal Information do we collect and hold?

We collect and use Personal Information about customers of our clients in connection with the provision of managed services to our clients.  The kind of Personal Information that we collect includes:

• names;
• addresses;
• phone numbers;
• email addresses;
• financial information such as income information, transaction history and credit history; and
• bank account details.

Where we receive Personal Information from our clients we have requested them to provide you with a copy of our Privacy collection statement.  A copy of our Privacy collection statement is attached and also available at Experteq.com

Alternatively you can request a copy of our Privacy collection statement by contacting:

Contact: Privacy Officer, TransAction Solutions Limited

Address: PO Box 6155 North Sydney NSW 2059 Australia

Phone: +61 2 8363 8900

How do we hold Personal Information?

We take all reasonable steps to keep secure any Personal Information which we hold and to protect Personal Information from loss, misuse or unauthorised alteration.  Any Personal Information that we hold is held on secure servers.

Personal Information is held by us subject to internal policies designed to limit access to it only to persons that:

• you consent to having access to the Personal Information;
• require access to the Personal Information to perform their work for us or any of our clients;
• we are required to give access to the Personal Information by or under an Australian law or a court/tribunal order;
• you would reasonably expect us to give access to, and the access is related to our provision of services to our clients (for example where we engage third party contractors or services providers to assist under in the provision of services to our clients or to service, maintain or repair any equipment on which Personal Information is held; and
• we reasonably believe it is necessary to provide access to for one or more enforcement related activities conducted by, or on behalf of an enforcement body.

All Personal Information is maintained subject to physical security procedures to manage and protect the use, storage and disclosure of the Personal Information in our premises in Australia.  For example, all servers on which Personal Information data is held are only physically accessible by limited and specifically authorised personnel in accordance with our Information Security Management Policy and Procedures.

For what purposes do we collect, hold, use and disclose Personal Information?

We collect, hold, use and disclose Personal Information for the purposes of providing the managed services discussed above to our clients.  We may use or disclose Personal Information for another purpose only if:

• you consent to the particular use or disclosure of the information; or
• the use is one that an individual would reasonably expect us to use or disclose the information for and the use or disclosure is related to the provision of managed services to our clients.

For example we may disclose or give access to Personal Information to service providers or subcontractors which are engaged in connection with:

• the provision of the managed services; or
• providing services to us.

Access or disclosure of Personal Information to service providers or subcontractors is only provided if and to the extent reasonably necessary for providing the above services.

The collection, holding, use and disclosure of Personal Information of our clients’ customers are governed by:

• this Privacy Policy;
• contractual arrangements we have with our clients; and
• applicable laws such as the Privacy Act, Evidence Act 1995 (Cth) and any other applicable legislation or regulations which may require us to disclose any Personal Information to a third party include law enforcement agencies.

How do you get access to the Personal Information held by us and seek correction of it?

You have a right to request access to your Personal Information unless:

• the access would have an unreasonable impact on the privacy of other individuals;
• the request for access is frivolous or vexatious;
• there are existing or anticipated legal proceedings between us and you and would not be accessible by the process of discovery in those proceedings;
• giving access would be unlawful; or
• such access can be denied under the APPs, any law or by a law enforcement agency.

You may request access the Personal Information that we may hold about you in the following manner:

• (Direct Personal Information) if you wish to have access to, or correct, Personal Information about you that was collected directly by us, you should issue your request to our Privacy Officer at the address above; and
• (Indirect Personal Information) if you wish to have access to, or correct, the Personal Information about you that you believe may have been provided to us by one of our client’s you should contact our client (i.e. the organisation that collected the Personal Information from you and may have supplied it to us) and make your request access and any correction request directly to the client (in accordance with its privacy policy).

Our ability to grant you access to, and correct, Personal Information which we hold about you, which was collected and provided to us by our clients, may be limited by our contractual arrangements with our clients.

If we receive a request about any Indirect Personal Information held by us, we will refer that request to the client, for whom we may hold that information, and who may better attend to your request.

We will respond to a request for access to Personal Information within a reasonable period after the request is made, which is general within a 30 day period.  We may also charge a fee for providing access to Personal Information to recover the reasonable costs that we incur in processing your request.

How may you complain about a breach of the AAP’s and how we deal with such a complaint?

If you believe that we have breached an APP you should advise us by contacting our Privacy Officer on the contact details stated below.

Upon receiving such a complaint our Privacy Officer will:

• consider the details of your concerns;
• request further information from you if necessary to better review your complaint; and/or
• contact you to:
  1. discuss the way in which we propose to resolve your concern;
  2. advise you of the findings of our review of your complaint; and/or
  3. advise you of the steps that we intend to take to resolve your complaint.

We will use our reasonable efforts to resolve your complaint as soon as reasonably practicable.

Are we likely to disclose Personal Information to overseas recipients

We are not likely to disclose any Personal Information to overseas recipients.

Changes to this privacy Policy

As our business or the services we provide may change from time to time, we may also modify or change this Privacy Policy.  If we do so we will only do so in a manner that is consistent with the APP’s.

We encourage you to periodically review our Privacy Policy for any changes.

Contacting us

You may obtain a copy of this Privacy Policy from our website at Experteq.com

Alternatively you can request a copy of this policy by contacting:

• Contact: Privacy Officer, TransAction Solutions Limited

• Address: PO Box 6155 North Sydney NSW 2059 Australia

• Phone: +61 2 8363 8900

Further Information

For further information about privacy issues and the protection of privacy visit the Australian Federal Privacy Commissioner’s website at https://www.privacy.gov.au

How Current is our Privacy Policy?

This Privacy Policy was last updated on 30 September 2018.

Privacy Collection Notice

TransAction Solutions Limited 

This is a privacy collection notice of TransAction Solutions Limited (ACN 084 572 040) and its related companies (together, we, us, our and other similar expressions).   We may be contacted at:

• TransAction Solutions Limited,
  PO Box 6155,
  North Sydney NSW 2059 Australia
• Phone: +61 2 8363 8900

Who we collect personal information from

We generally collect personal information about you directly from you or from our clients for whom we provide managed services.

Purpose of collection

In general, we collect, use and disclose personal information for the purpose of providing managed services to our clients, so they can provide you directly with services.

For example, if our client is a financial institution, we may receive personal information from it about you so that we can process a transaction you may have entered into or we may provide it with disaster recovery services.  The services we provided are strictly confidential and we hold all personal information and any information strictly on a confidential basis.

We may also use or disclose personal information for another purpose only if:

• you consent to the particular use or disclosure of the information; or
• the use is one that an individual would reasonably expect us to use or disclose the information for and the use or disclosure us related to the provision of manages services to our clients.

Consequences if information is not collected

If you do not provide the information requested we may not be able to provide managed services to our clients, who in turn may not be able to provide you with their services.

Who we usually disclose information to

We usually disclose the personal information we collect to our related entities, and to our clients, your service providers.

Access, correction and complaints

We have a privacy policy which includes information about how we collect, store, use and disclose personal information; about how an individual may access the personal information we hold about that individual and seek correction of that information; and about how an individual may complain about a perceived breach of the Australian Privacy Principles as set out in the Privacy Act 1988 (Cth) by us.

Access to privacy policy

Our privacy policy is attached and available upon request, or by visiting www.experteq.com

Disclosure to overseas recipients

We are not likely to disclose personal information to overseas recipients.

Who to contact?

If you have any queries about how we collect, store, use and disclose personal information, you can contact the Privacy Officer by mail at PO Box 6155 North Sydney NSW 2059 Australia