Internet Privacy Policy

The Rock's privacy policy stated below applies to your use of the web site at www.therock.com.au and it also extends to your use of the Bank's facilities via the web site.

The purpose of this Privacy Policy Statement is to provide you with the assurance that information collected by The Rock Building Society Limited (ABN 16 067 765 717 hereinafter referred to as "The Rock"), is collected, distributed and used in accordance with the recently enacted privacy laws effective 21 December 2001.

Your privacy is our concern and we are committed to ensure the privacy and confidentiality of information provided by you.

Described below is an outline of how The Rock :

1. collects information
2. discloses information
3. discloses information to agents
4. Maintains personal information
5. ensures the security of your information stored on our computer systems will assist you in exercising your rights regarding personal information provided to us via this website
6. applies conditions to this collection
7. uses Cookies on sites
8. applies changes to this statement
9. is able to be contacted

Personal information collected

The following personal information is collected and maintained by The Rock:

1. name,
2. address,
3. age group,
4. account numbers,
5. contact details,
6. drivers licence details
7. employment details
8. income details
9. credit rating (covered under loan applications only)
10. insurance cover
11. tax file number

We also collect optional information regarding your personal preferences and various other marketing details, which is subject to your written consent. This information is collected when opening a new account with The Rock.

We may also forward marketing material to you, however, should you wish to discontinue receiving any further marketing material, you can request in writing for The Rock not to send you any marketing information or indicate under MARKETING INFORMATION, see below, what your preference is.

We do not collect information about anyone's political or religious beliefs, ethnic background or sexual preferences.

Disclosure of personal information

To ensure that you receive effective, efficient and personalised service, we may have to share your personal information between companies within The Rock Group. However, we will not share your personal information with other companies within the Group, if you instruct us in writing to retain your information.

The Rock undertakes not to sell, rent or trade your personal information.

We will not disclose information about you unless the disclosure is:

1. required by law;
2. authorised by law; or
3. you have consented to our disclosing the information about you.
4. we need to protect our interest (e.g. in legal proceedings to which we are a party).
   the disclosure is required in the public interest.

Disclosure of personal information to Third Party agents

The Rock uses the services of third party agents to perform certain primary functions. Third Party Agents that we use are:

1. Credit rating agencies
2. Mortgage Insurers
3. Legal Practitioners
4. Mortgage Originators
5. Australian Payments Clearing Associations Limited
6. Australian Settlements Limited
7. Medical Aid Providers
8. Insurance Underwriters
9. Personal Loans Finance Houses
10. Credit Card Providers
11. Stockbrokers
12. Asset Managers
13. Administrators of WRAP accounts
14. Parties that provide securitisation transactions

These agents act on behalf of The Rock and do not disclose the information provided to them to fourth parties, unless required by law or having received direct consent from you.

Legislation

1. We may also ask for additional personal information because we are required to collect it for legal reasons. Legislation such as the Anti-Money Laundering and Counter-Terrorism Financing Act (AML/CTF) may require us to ask you for additional information to check your identity (e.g. by referring to your driver's licence, birth certificate or passport).
2. If you don't provide this requested information, we may not be able to provide you with the product or service you want.
3. We may be required to disclose personal information collected from you by law.
We may be required to release information regarding internet banking transactions to Australian or overseas regulators.

Maintenance of Personal information

It is the objective of The Rock to ensure that your personal information is accurate, complete and up-to-date. However, should your personal information details change or be incomplete or inaccurate, we would appreciate it if you could assist us by informing us of such changes. We will take all reasonable steps to update your personal information.

Security of personal information

The security and confidentiality of client information is of paramount importance.

Under no circumstances is client information accessible in public areas. Our staff are trained to ensure that confidential information is only disclosed to the client or other parties authorised by the client to receive such information.

All staff sign a confidentiality declaration confirming that under no circumstances will they disclose client information to outside parties unless authorised to do so.

The Rock's computer systems are appropriately secured by a combination of physical and logical access controls so as to prevent outside access to client information. The Rock's I-Bank Internet banking system uses 128-bit SSL encryption technology to provide the best protection available to ensure all information is protected from unauthorised access.

Access and openness to personal information

You can ask us to provide you with access to your personal information. Lodging a request or requests for information, or information that is not currently in use, will not attract a fee, however collecting and providing you with large amounts of information may attract a fee. In certain instances, we are entitled under the National Privacy Principles to refuse to give you access to your personal information. This includes circumstances where giving you access would prejudice negotiations we are having with you, prejudice investigations of unlawful activity or prejudice activities carried out by or for a law enforcement agency. If we deny your request for access, we will inform you of the reason.

Conditions

Where the client applies for:

1. any type of finance
2. insurance cover or quote
3. any type of account
4. service
   

with The Rock, whether sought by you alone or with others, The Rock will be collecting personal information about you for the purposes of either, and or:

1. Assessing your application for finance sought with The Rock,
2. Assessing your risk profile and needs to provide you with the appropriate insurance cover or quote,
3. Assessing your investor profile and needs to provide you with the appropriate advice, plan or product,
4. Opening or closing an account,
5. Complying with legislative and regulatory requirements,
6. Administrative and operational procedures,
7. ATM transactions,
8. For new product development;
9. Benchmarking,
10. Security and access control,
11. Direct marketing, i.e. to inform you of any new products and developments which may be of benefit to you
12. To deliver superior service
    As indicated in this policy.
    

Without the provision of your personal information to The Rock, we may be unable to process or accept your application.

Cookies

A 'cookie' is a packet of information that allows the server to identify and interact more effectively with your computer. When you use our web site, we send you a temporary cookie that gives you a unique identification number. A different identification number is sent each time you use our web site. Cookies do not identify individual users, although they do identify a user's browser type and your Internet Service Provider (ISP).

To evaluate the effectiveness of our web site advertising, we may use third parties to collect statistical data. No personal data will be collected on these occasions. You can configure your browser to accept all cookies, reject all cookies, or notify you when a cookie is sent. Please refer to your browser instructions or help screens to learn more about these functions. At the end of your interaction with our web site, the cookie "crumbles". This means it no longer exists on your computer and therefore it cannot be used for further identification or access to your computer.

Marketing information

The Rock strives to provide our customers with the latest in leading products and services. On occasions, we mail information and offers on these products to you. If you do not want to receive these, please e-mail us with your request at rock@therock.com.au

Changes to this statement

The Rock may make changes to this Privacy Statement from time to time for any reason. We will publish those changes on our web site. This Privacy Statement was last amended on 22 April 2002.

To contact us about privacy

If you would like further information regarding this Privacy Statement or if you think we have breached any aspect of this Privacy Statement, please contact us by:

e-mail rock@therock.com.au or
phone us at 1800 806 645 between 8.30 am and 5pm Monday to Friday, or
write to the address below.
Manager: Internal Audit
The Rock Building Society Limited
PO Box 562,
Rockhampton, QLD, 4700