Legal
Privacy Policy
Introduction
This Privacy Policy is issued by Contega Pty Ltd (ABN 87 703 185 451) trading as Contega Risk Advisory ("Contega", "we", "us" and "our"). Contega is part of the Cohabit Group, whose head company is Cohabit Technology Group Pty Ltd (ABN 93 688 293 736).
We take privacy seriously. Whether you engage us for insurance advice, risk advisory services or any other offering, we are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, disclose, and manage personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our services or website, you agree to the practices described in this Policy. If you do not agree, please cease using our services and contact us.
"Personal information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether true or not and whether recorded in a material form or not.
Personal information we collect
The personal information we collect depends on how you interact with us.
A. Insurance and service information
- Full name, address, and contact details
- Business details, including business name and the nature of your operations
- Date of birth
- Property, asset, and financial details
- Insurance history and claims data
- Health information (where relevant to underwriting, with consent or as permitted by law)
- Identity verification documents (e.g. driver's licence, passport)
- Payment and billing details
B. Website enquiries
When you contact us through our website, we collect the details you provide in the enquiry form: your name, business name, email address, mobile number and message.
C. Employment information
If you apply for a position with us, we may collect employment history, academic background, references, and background screening information where permitted by law. This Policy does not apply to the records of current or former employees to the extent such records are exempt from the Privacy Act.
D. Device and technical information
When you use our website, we may automatically collect:
- IP address and approximate location
- Device type, operating system, and browser type
- Log data and usage analytics
- Session data and page-view statistics
E. Sensitive information
We only collect sensitive information (including health information) where reasonably necessary for our insurance services and either with your consent or as otherwise permitted by law. We do not collect information about racial origin, political opinions, or religious beliefs unless required by law.
How we collect personal information
We collect personal information in the following ways:
- Directly from you via our website enquiry form, telephone, email, or in-person interactions
- When you arrange insurance or manage a claim with us
- Through cookies and analytics tools on our website
- From insurers, underwriting agencies, and other service providers
- From identity verification and credit reference providers
- From related entities within the Cohabit Group or authorised representatives
- From publicly available sources
If you provide personal information about another person (for example, a co-insured), you confirm that you are authorised to do so, that you have made that person aware their information will be shared with us, and that they consent to our handling of their information in accordance with this Policy.
You may interact with us anonymously or using a pseudonym for general enquiries. However, we may be unable to provide our services if we cannot identify you.
How we use personal information
We use personal information to:
- Arrange, manage, and renew insurance products and provide advice
- Respond to enquiries submitted through our website
- Process claims and recover unpaid amounts (including engaging debt collection agencies where necessary)
- Verify your identity
- Process payments and manage billing
- Communicate updates, renewals, policy changes, and support information
- Improve our services and website
- Comply with legal, regulatory, and reporting obligations
- Detect and prevent fraud, misuse, or security threats
- Consider employment applications
If you do not provide necessary information, we may be unable to deliver requested services.
Sharing your information
We may disclose personal information to:
- Insurers, reinsurers, underwriting agencies, and insurance reference bureaus
- Our licensee, Bellrock Advisory Pty Ltd (AFSL 520 281)
- Third-party service providers who assist us in operating our business and website (including IT, cloud hosting, analytics, security, payment processors, and communications providers)
- Identity verification and credit reference agencies
- Professional advisers including lawyers, accountants, and auditors
- Debt collection agencies, where necessary to recover unpaid amounts
- Related companies within the Cohabit Group
- Prospective purchasers or investors in our business or assets
- Courts, law enforcement agencies, regulators, and government bodies, as required or permitted by law
- Any third party you have specifically authorised
We do not sell personal information to third parties. We require all third parties to whom we disclose personal information to handle it in accordance with applicable privacy laws and contractual obligations.
Marketing
We may use your information to send you service updates and information about relevant products and services. Marketing communications may be sent by email, SMS, mail or telephone in accordance with the Spam Act 2003 (Cth) and other applicable marketing laws.
You can opt out of marketing at any time by using the opt-out link in any electronic communication or by contacting us at compliance@contega.com.au.
Opting out of marketing does not affect service-related or transactional communications.
Automated decision-making
Some insurance underwriting decisions are made by insurers using automated systems. Where we facilitate the provision of your information into those systems, we will inform you of this where required by law.
Contega does not independently use automated decision-making that produces legal or similarly significant effects on individuals without meaningful human oversight and the ability for you to request a human review.
Cookies, fonts and analytics
We use cookies and similar technologies on our website to analyse usage, improve functionality and enhance security. You can manage cookie preferences through your browser settings; disabling some cookies may affect functionality.
Our website loads fonts from Google Fonts, a service provided by Google. When a page loads, your browser connects to Google's servers, which receive your IP address. Google's handling of that information is described in its own privacy policy.
We use Google Analytics to understand how visitors use our website, such as which pages are viewed, how visitors arrive and which links and buttons are used, including when an enquiry is sent. Google Analytics uses cookies and collects information such as your browser and device type, approximate location and pages visited. It does not record your name or the contents of any enquiry. Google processes this information, including outside Australia, under its own privacy policy. You can opt out by installing the Google Analytics opt-out browser add-on or by blocking cookies in your browser.
Overseas disclosure and data hosting
Although we operate in Australia, some of our service providers and technology partners are based overseas. We may disclose personal information to:
- Overseas insurers, reinsurers, and underwriting agencies (for example, Lloyd's of London syndicates)
- Cloud hosting and technology providers
- Support and administrative service providers
Countries to which your information may be disclosed include the Philippines, Vietnam, and the United States. If we seek insurance terms from an overseas insurer, we will advise you of the country in which that insurer is located at the time of the advice. This list may change as our operations evolve.
Before disclosing personal information overseas, we take reasonable steps under APP 8 to ensure the overseas recipient does not breach the APPs in relation to that information, for example through contractual obligations or adequacy assessments. In circumstances where such steps are not practicable, we will seek your consent before disclosing your information.
Data retention
We retain personal information only for as long as necessary to provide our services, meet legal, regulatory, and reporting obligations, and resolve disputes. Insurance and financial services regulations may require extended retention periods beyond the end of your relationship with us. When personal information is no longer needed, we destroy or de-identify it using secure methods.
Security
We implement reasonable technical and organisational safeguards to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. These include encryption of data in transit and at rest, access controls, multi-factor authentication, secure hosting environments and confidentiality obligations for all staff and contractors.
No internet transmission is completely secure, and we cannot guarantee absolute security.
Data breach response
If we experience a data breach likely to result in serious harm to affected individuals, we will comply with our obligations under the Notifiable Data Breaches (NDB) scheme, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.
Your rights and how to exercise them
Access and correction
Under the Privacy Act 1988 (Cth), you have the right to access and correct the personal information we hold about you. To make a request, contact us at compliance@contega.com.au with enough detail to identify the information sought. We will provide access unless we are lawfully permitted to withhold it, and we will explain any refusal in writing. We may need to verify your identity before processing a request. Access is generally provided at no charge; however, where records are archived, a reasonable retrieval fee may apply and we will advise you in advance.
Withdrawal of consent
Where we rely on your consent to collect or use personal information, you may withdraw that consent at any time by contacting us. Withdrawal will not affect anything we have already done in reliance on your consent, but we may be unable to continue providing certain services without it.
Website content and online forms
The information provided on our website is general in nature and does not constitute professional advice. You should seek independent advice before acting on any information published on our site.
Please be aware that information submitted via online forms or email may not be encrypted in transit. If you are concerned about transmitting sensitive information electronically, please contact us by telephone instead.
Third-party websites and links
Our website may contain links to third-party websites or social media platforms. We are not responsible for the privacy practices of those third parties. We recommend you review the privacy policy of any third-party site you visit.
Changes to this Policy
We may update this Policy from time to time to reflect changes to our services, technology, or legal obligations. The latest version will always be available on our website.
Complaints
If you believe we have breached this Policy or applicable privacy laws, please contact our Privacy Officer with your name, contact details, and a clear description of your concern at compliance@contega.com.au.
We will acknowledge your complaint within 24 hours and aim to provide a substantive response within 30 days. If we require additional time, we will advise you.
If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.
Contact us
For any privacy-related questions, access or correction requests, or to exercise any right described in this Policy:
- Contega Pty Ltd trading as Contega Risk Advisory
- Email: compliance@contega.com.au
- Address: Level 9, 32 York Street, Sydney NSW 2000