Privacy Policy

WHO WE ARE

Switch Smart (ARC Ventures Pty Ltd) in Australia, ACN 667 417 030. Our registered address is Switch Smart, Level 210, 90 Lorimer Street, Docklands, VIC 3008, Australia.

OUR COMMITMENT TO YOUR PRIVACY

At Switch Smart we take your privacy seriously. Our guiding philosophy is that your personal information should be used for your own benefit. We will always handle your personal information in accordance with applicable laws.

ABOUT THIS POLICY

This policy explains:

1. What is the personal information we collect from you
2. How we collect and store your personal information
3. How we use your personal information
4. When and to whom will we disclose your personal information
5. Your right of access to your personal information
6. Your right to inspect and correct the personal information that we hold about you
7. Your right to have your privacy complaints investigated and resolved
8. Your right to have your personal information protected from misuse or unauthorised access
9. Your right to be informed about data breaches

WHAT IS THE PERSONAL INFORMATION WE COLLECT FROM YOU

Switch Smart is a retail energy plan comparison and switching facilitation service. Some Personal information is required to use the Switch Smart service. To use the Switch Smart service, you must provide personal information:

1. You must provide your full name;
2. You must upload your energy bill energy bills contain customer name, energy supply address, and may also include a separate billing address;
3. You must provide an email address;

HOW WE COLLECT AND STORE YOUR PERSONAL INFORMATION

We collect the information you provide to us when you utilise the free bill check service and/or complete your subscription to the Switch Smart service. This information may include personally identifying information such as your name, address, telephone number, mobile number, e-mail address, driver license number or other information. We store your personal information in secure data centres, operated by reputable cloud service providers. All information is stored in Australia. Access to our information systems is controlled through identity authorisation, passwords and 2FA tokens.

HOW WE USE YOUR PERSONAL INFORMATION

We use your personal information to enable provision of our services:

1. To provide our services or information you request, and to process and complete any transactions;
2. To respond to your emails, submissions, questions, comments, requests, and complaints and provide customer service;
3. To monitor and analyse site usage and trends, and to personalise and improve our site and our users’ experiences on our site;
4. To send you confirmations, updates, security alerts, and support and administrative messages and otherwise facilitate your use of, and our administration and operation of, our site;
5. For any other purpose for which the information was collected and related purposes which would be reasonably expected by you;
6. To find, procure, provide to other companies or to otherwise search for other products and services that we send to you that may be of interest for you;
7. For other purposes to which you have consented; and
8. As otherwise authorised or required by law.

WHEN AND TO WHOM WILL WE DISCLOSE YOUR PERSONAL INFORMATION

We will not share the personal information we collect from you with third parties, except as described in this privacy policy or as otherwise disclosed to you as permitted by law. For example, we share personal information as follows:

1. With service providers who are working with us in connection with the operation of our sites or our services;
2. When you give us your consent to do so, including if we notify you on our site that the information you provide will be shared in a particular manner, and you provide such information;
3. When we are lawfully authorised or required to do so or where doing so is reasonably necessary or appropriate to comply with the law or legal processes or respond to lawful requests or legal authorities, including responding to lawful subpoenas, warrants, or court orders;
4. To enforce or apply our privacy policy, our terms of use or our other policies or agreements;
5. In connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition, or in any other situation where personal information may be disclosed or transferred as one of the business assets of us; and
6. Otherwise, as permitted or required by law.

YOUR RIGHT OF ACCESS TO YOUR PERSONAL INFORMATION

We will support your right to access and view any personal information we hold about you. To request access to your personal information, please contact privacy@Switch Smart.com.au. Proof of identity will be required and if legally permitted, a fee may be charged for processing.

YOUR RIGHT TO INSPECT AND CORRECT THE PERSONAL INFORMATION THAT WE HOLD ABOUT YOU

We will support your right to update or correct any personal information we hold about you. To request corrections and updates to the personal information we hold about you, please contact privacy@Switch Smart.com.au. Proof of identity will be required and if legally permitted, a fee may be charged for processing.

YOUR RIGHT TO HAVE YOUR PRIVACY COMPLAINTS INVESTIGATED AND RESOLVED

We strive to meet or exceed the highest standards to protect your privacy and support your personal data sovereignty. Please contact us at privacy@Switch Smart.com.au If you believe we have mishandled your personal information or have otherwise infringed your statutory privacy rights or the requirements of the privacy frameworks we adhere to. Any complaint must be made in writing. We will treat privacy complaints with the highest priority, and we commit to respond to any such complaint within 14 days.

YOUR RIGHT TO HAVE YOUR PERSONAL INFORMATION PROTECTED FROM MISUSE OR UNAUTHORISED ACCESS

The Switch Smart service is hosted in secure data centres operated by reputable cloud service providers. To help protect the privacy of data and personal information we collect and hold, we maintain physical, technical and administrative safeguards. We train our employees about the importance of confidentiality and maintaining the privacy and security of your information. Access to your personal information is restricted to employees who need it to provide benefits or services to you.

YOUR RIGHT TO BE INFORMED ABOUT DATA BREACHES

We will adhere to the Notifiable Data Breaches scheme (NDB scheme) in Part IIIC of the Privacy Act which requires us to notify affected individuals and the Privacy Commissioner about ‘eligible data breaches’. An eligible data breach occurs when the following criteria are met:

1. There is unauthorised access to or disclosure of personal information held by an entity (or information is lost in circumstances where unauthorised access or disclosure is likely to occur).
2. This is likely to result in serious harm to any of the individuals to whom the information relates.
3. The entity has been unable to prevent the likely risk of serious harm with remedial action.
Under the NDB scheme, we must also conduct an assessment if it is not clear if a suspected data breach meets these criteria. The assessment will determine whether the breach is an ‘eligible data breach’ that triggers notification obligations.