Privacy Notice

HCB Australia – Privacy Notice

(In line with the Australian Privacy Principles and The Privacy Act 1988)

Health Claims Bureau Australia (HCB) provides a range of services to the Financial Services Industry and Employers, and as Data Controllers or Data Processors collect, process, and store Personal Data in Australia.

1. Data Collected
   The data HCB collects can include name, address, date of birth, contact details, information relating to health, employment history and related information, and other personal information.
2. Purpose for processing of data
   To provide services to Insures and Employers.
3. Legal Basis for processing of data
   Processing is necessary in relation to a service provided to, or a contract HCB have with Insurers or Employers. Where required, HCB will obtain an Authority to Obtain Information (a “consent”) to collect and process personal data.
4. Who we share your data with
   HCB shares your data where necessary, with your Insurer or Employer, and medical and related personnel. Where there may be a risk of harm to the employee/the insured data subject, or to others, there is a duty of care on HCB and in such cases, HCB will report information to relevant authorities, including treating doctors, the police or crises services.
5. Your personal data
   HCB does not transfer your data outside Australia.
6. Period of data retention
   Your data will be stored/retained by HCB for 6 years after which time it will be securely deleted from the HCB systems.
7. Your rights in relation to the data stored

You have the right to:

• Access and receive copies of the relevant data and to have any inaccurate or incomplete information corrected and updated.
• Object to use of your personal data for our legitimate processing purposes.
• In certain circumstances, to have your information deleted or restricted.
• Have your information transferred to another provider (the right of “data portability”).
• Withdraw your consent to the processing of your data by HCB.

Data Access Requests and Complaints

Requests to access your data or in relation to other data queries or complaints should be made in writing to:

HCB Australia
Chief Operations Officer (COO)
Level 11, 66 Clarence St, Sydney 2000

Tel:  02 8705 5442

or email: enquiries@hcbgroup.com.au for the attention of the COO (marked ‘Data Privacy Enquiry’).

You also have the right, at any time, to lodge a complaint about our processing of your data with HCB Australia or your Data Privacy Authority.

Complaints can be made directly to: The Privacy Commissioner at https://www.oaic.gov.au/.

Further information is available at: http://www.oaic.gov.au/

HCB Australia Privacy Notice 2025