TCorp's privacy policy

TCorp Online Privacy Statement

This Privacy Statement applies to all publicly accessible pages on the TCorp website and Client Portal.

Protecting your personal information is important to New South Wales Treasury Corporation (“TCorp”, “we”, “us” or “our”). This Privacy Statement details how we collect, use, disclose and handle your personal information in accordance with our obligations under the Privacy and Personal Information Protection Act 1988 (NSW) (PPIP Act). We may update this Privacy Statement when required to reflect changes in our services, legislation or technology.

TCorp does not have any responsibility for the privacy policies or practices of third-party sites linked to our websites.

If you have any questions about the application of this Privacy Statement, or want to request access to information held by TCorp, please contact us using our online form and your request will be passed to our Privacy Officer.

What personal information do we collect?

We aim to limit the types of personal information collected to that which is necessary for the intended purpose. We may directly collect personal information such as your name, contact details or job title. However there may be circumstances where we may collect your personal information indirectly, for example from the client organisation that has designated you as an authorised user or authorised signatory. There may also be circumstances when information is collected automatically through cookies on our website.

Why do we collect the personal information?

The ways that we may use or disclose your personal information are outlined below.

Purpose	How your personal information is used
Provide services	We use your personal information to deliver services including: facilitating the provision of services to you directly or to the client organisation; establishing your access as an authorised signatory or authorised user for a client organisation account or Client Portal; changing the client organisation bank account details or undertaking settlements for foreign exchange or derivative transactions; sending communications that you have subscribed to, such as market updates, events and newsletters.
Manage our operations	We use your information to manage our operations including: responding to any enquiries or complaints; administering and operating our website and Client Portal; our internal business management; communicating information relating to services provided or transactions undertaken for the client organisation such as statements, transaction confirmations, reporting and other communications; engaging with external service providers such as IT or server providers or website developers. In addition security providers or a mailing house; engaging with professional consultants or advisers such as legal, security or financial advisors and auditors.
Managing security, risk and fraud prevention	We use your information to: prevent, detect and investigate suspicious or fraudulent activities or transactions undertaken for the client organisation; support the management of our information security and network controls to prevent cyber attacks, unauthorised access and other criminal or malicious activities.
To meet our legal obligations	Where required we may disclose information to comply with the law and our regulatory obligations including to: confirm your identity; or for law enforcement purposes.

Cookies and IP address tracking

When you visit this website or download information from it, our servers may record a range of information such as:

your server’s (IP) address and machine name;
your location details such as longitude, latitude, city, region and country;
top level domain name;
pages accessed and documents downloaded;
search terms used; and
type of browser used.

Some pages on our website use cookies which is a small data file transferred by a website to your computer’s hard drive. TCorp uses cookies when you:

view pages on our website;
send a request to TCorp; or
register yourself on your website to be sent information or updates.

Most internet browsers are pre-set to accept cookies. The cookies on our website do not read information on your hard drive. TCorp does not attempt to associate cookies with user’s names or identities. The TCorp server cannot find out your name or email address or anything about your computer by using cookies. You can set your browser to notify you when you receive a cookie, so you can decide whether to allow each cookie or block cookies completely. If you do not allow cookies on our website, some of the webpages may not display properly or you may not be able to access certain information.

TCorp will collect, use and disclose more extensive information than outlined above in the following circumstances where we detect:

unauthorised attempts to access files that are not publicly available;
unauthorised tampering or interference with files on our website;
unauthorised attempts to index the contents of our website;
attempts to intercept messages of other users of our website;
communications which are defamatory, abusive, vilify individuals or groups or which give rise to a suspicion that an offence is being committed;
attempts to otherwise compromise the security of the web server, breach the laws of the state of New South Wales or Commonwealth of Australia, or interfere with the use of the website by other users.

Google Analytics

TCorp uses Google Analytics a reporting service provided by Google Inc. (Google) and its subsidiaries. Google Analytics uses cookies to help TCorp analyse how users use our website. The information generated by the cookie about your use of our website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.

Google may also transfer this information to third parties, where required to do so by law or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browse, but this may mean you will not be able to use the full functionality of the website. For more details visit www.google.com/analytics/terms/us.html.

Online forms

To log in to some parts of the TCorp website, you must provide a valid email address or specific username and password. These details will only be used for the purpose for which they have been provided, and will not be added to any other mailing lists unless you specifically request it. Email address lists are stored on a separate server and can only be accessed by authorised employees.

By submitting any personal information through online forms you are consenting for the purposes of the PPIP Act to your personal information being disclosed to us for the purposes of responding to your request and also for administrative, regulatory and other purposes.

When you log in to the Client Portal there will be specific terms and conditions relating to the specific service – you should refer to the relevant personal information collection statement and terms and conditions.

Quality and security

The TCorp website is hosted in Australia on a third-party server with best practice certification including ISO270001. We take reasonable steps to protect personal information we hold against loss, unauthorised access, use, modification or disclosure, and other misuse. We also have procedures to respond to any data breaches of personal information.

We train our employees about the importance of confidentiality and maintaining the privacy and security of your information. Access to your personal information is restricted to employees who require access to it to discharge their responsibilities. The personal information we collect is only used for the purposes for which it is collected. We will not use or disclose any personal information for any purpose without your consent. If we do, it will only be disclosed to another party as required by law.

Access and accuracy

We take reasonable steps to ensure all personal information we collect is accurate, up to date, and complete. This includes updating your personal information when you advise us that it has changed, and at other times as necessary.

If you wish to have access to or amend any information that we hold about you please contact us via our online contact form or on +61 2 9325 9325 or by writing to us at Level 7, Deutsche Bank Place, 126 Phillip Street, Sydney NSW 2000.

We will have to verify your identity before meeting your requests, which we will process in a reasonable time.

Please contact us if you have any questions or comments.

Complaints

If you have a concern about personal information held by us, which may include a breach of our obligations in relation to your privacy you should contact: compliance@tcorp.nsw.gov.au. If you are not satisfied with our response, we will advise you on your options for further progressing any complaint.