Image
Contact us

2025

Privacy Policy – Envest Group and Subsidiary Companies

Effective Date: 26 November 2025

1. Overview

Your privacy matters to us. This Privacy Policy explains how Envest Group Pty Ltd (ABN 73 645 319 820) and all of its subsidiary and associated companies (collectively referred to as "Envest", "we", "our", or "us") collect, use, store, and disclose your personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and the Information Privacy Principles (IPPs) under the Privacy Act 2020 (NZ).

We are committed to protecting your privacy and ensuring that your personal information is handled in a secure, respectful, and lawful way. This policy applies to all our products, services, websites, mobile applications, and customer interactions.

When you interact with one of our subsidiaries or associated companies, they may provide you with further information about how they handle personal information in the course of their specific operations. This information is contained in a Privacy Statement published on their respective websites.

2. Definitions

  • “Personal Information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not, and whether recorded in a material form or not.
  • “Sensitive Information” is a sub-category of personal information and includes information about an individual’s:
    • racial or ethnic origin
    • political opinions or memberships
    • religious or philosophical beliefs
    • trade or professional association memberships
    • union membership
    • sexual orientation or practices
    • criminal record
    • health, genetic or biometric information
  • “Related Companies” has the same meaning as in section 50 of the Corporations Act 2001 (Cth) and includes our group companies and corporate partners.
  • “You” or “Your” refers to any person whose personal information is collected, held, used, or disclosed by us, including users of our websites or services.

3. Our Commitment

We are bound by the APPs contained in the Privacy Act 1988 (Cth) for services provided in Australia, and the IPPs contained in the Privacy Act 2020 (NZ) for services provided in New Zealand. The APPs and IPPs set minimum standards for how we collect, store, use, disclose, and protect your personal information. A copy of the APPs is available from the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au. A copy of the IPPs is available from the Office of the Privacy Commissioner (OPC) at www.privacv.org.nz/.

4. What We Collect and Why

We may collect personal information including:

  • Names, contact details, and addresses
  • Email addresses and phone numbers
  • Date of birth and gender
  • Employment or business details
  • Policy, claim, or transaction information
  • Your identity documents
  • Information contained in the CVs of individuals applying for a role with us
  • Video of individuals applying for a role with us

We may collect sensitive information including:

  • Health information
  • Union, trade or professional association memberships

We collect this information for purposes including:

  • Providing and managing our products or services
  • Managing client and customer relationships, underwriting, and claims
  • Internal business operations such as training, auditing, and analytics
  • Legal and regulatory compliance
  • Direct marketing and promotions
  • Product and service improvement through research and analysis
  • Assessing suitability for employment with us

5. How We Collect Personal Information

We collect your personal information:

  • Directly from you (e.g. through forms, emails, calls, applications, in-person)
  • Automatically via our websites using cookies and tracking tools
  • Through social media or other public sources
  • From third parties, such as brokers, advisers, employers, or partners
  • Via electronic communications and referral networks

If we collect personal information from a third party, we will take reasonable steps to ensure you are made aware of the collection, including the purpose and your rights.

6. Information We Are Required to Collect

We are required to collect some information by law, including:

  • Taxation laws
  • Superannuation laws
  • Anti-Money Laundering and Countering Financing of Terrorism laws

7. What Happens If You Don’t Provide Information

Unless the collection of personal information is required by law, the collection of your personal information is voluntary. However, if you do not provide requested information, we may be unable to:

  • Provide you with our products or services
  • Respond to your enquiry or application
  • Process a claim or request
  • Comply with legal obligations

8. Use and Disclosure of Your Information

We use and disclose your personal information for the same purposes for which it was collected, including:

  • Providing and managing our products or services
  • Managing client and customer relationships, underwriting, and claims
  • Internal business operations such as training, auditing, and analytics
  • Legal and regulatory compliance
  • Direct marketing and promotions
  • Product and service improvement through research and analysis
  • Assessing suitability for employment with us
  • Other uses with your consent or where required or authorised by law

We may disclose your personal information to:

  • Other companies within the Envest Group
  • Insurance underwriters, claims assessors, and loss adjusters
  • Government agencies, regulators, and law enforcement
  • Financial institutions and brokers
  • Marketing and analytics service providers
  • Professional advisers (accountants, auditors, lawyers)
  • Medical or health service providers (where relevant)
  • IT service providers, data hosts, and cloud providers
  • Dispute resolution bodies
  • Any other person or organisation you authorise

We do not sell your personal information.

9. Sensitive Information

We only collect and handle sensitive information if:

  • You have given consent
  • It is necessary for a primary function (e.g., insurance claims)
  • It is required or authorised by law

10. Overseas Disclosure

Some of our service providers and data partners are located overseas. Your personal information may be disclosed to third parties located in:

  • United Kingdom (UK)
  • Malaysia
  • South Africa
  • Singapore


We take reasonable steps to ensure overseas recipients handle your information in accordance with Australian privacy standards. For an up-to-date list of overseas recipients, please contact us using the details in Section 17.

11. Direct Marketing

Unless you opt out of marketing communications, we may use your personal information to send you:

  • Product and service updates
  • Newsletters, offers, or promotions
  • Information from related companies or partners

You may receive these communications from Envest Group, or from one of our one of our subsidiaries or associated companies.

When you interact with one of our subsidiaries or associated companies, they may provide you with further information about how they will use your personal information to directly market to you. This information is contained in a Privacy Statement published on their respective websites.

You may opt out of marketing communications at any time by following the unsubscribe instructions or contacting us directly.

We may also use third-party services for campaign management and data analytics. These providers are subject to strict contractual confidentiality obligations.

12. Website Tracking and Cookies

We use cookies and similar technologies to:

  • Monitor website performance and traffic
  • Customise and improve user experience
  • Enable remarketing and targeted advertising

You can disable cookies via your browser settings, but doing so may limit certain website functionality.

13. Automated Decisions

Automated decisions are processes in which a decision is made either entirely or substantially by a computer program.

We may use personal information in making the following types of automated decisions:

  • Product pricing
  • Claims processing
  • Product recommendations
  • Recruitment

These decisions will not be made solely using computer programs; however, computer programs may assist us in making these decisions.

The kinds of personal information we use in operating the computer programs that make these automated decisions include:

  • Employment or business details
  • Your relationship status and information on your dependents
  • Information about your financial position
  • Information about your lifestyle, where this is relevant to insurance products
  • Details about events that have led to the submission of an insurance claim
    Policy, claim, or transaction information
  • Information about risk factors that are relevant to the pricing of the insurance product you have applied for, which can include your age, address, and medical history
  • Information contained in the CVs of job applicants.

14. Accessing and Correcting Your Information

You may request:

  • Access to the personal information we hold about you
  • Correction of inaccurate, incomplete, or outdated information

To do so, contact us in writing (see Section 17). We may need to verify your identity. We do not charge a fee for access requests but may charge for physical copies.

15. Data Security and Retention

We take reasonable steps to protect your personal information from:

  • Misuse, interference, or loss
  • Unauthorised access, modification, or disclosure

When your personal information is no longer required, we will securely destroy or de-identify it. Some information may be retained for legal or regulatory reasons (e.g., for 7 years or more).

16. Making a Privacy Complaint

If you believe we have breached your privacy rights, please contact us using the details below.

We will:

  • Acknowledge your complaint within a reasonable time
  • Investigate and respond in a timely manner
  • Inform you of any further options if you are not satisfied with our response

You may also contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au for complaints related to our handling of your personal information under the Privacy Act (Cth) or the Office of the Privacy Commissioner (OPC) at www.privacy.org.nz for complaints related to our handling of your personal information under the Privacy Act (NZ).

17. Contact Us

For all privacy enquiries, requests or complaints, please contact:

Suite 1, Level 7, 545 Queen Street
Brisbane, QLD 4000

Email: communications@envest.com.au
Website: https://www.envest.com.au/privacy-policy/

18. Policy Updates

This policy is current as of 26 November 2025. We may update this Privacy Policy from time to time to reflect changes in legal obligations or business practices. The latest version is always available on our website.