Our Privacy Policy

This privacy policy is provided by GARD Insurance Pty Ltd (GARD), ABN 96 605 493 454, AFSL 479125

At GARD, we are committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

This Policy describes our current policies and practices in relation to the collection, handling, use and disclosure of personal information. It also explains how you can complain about a breach of the privacy laws and how you can access and correct the personal information we hold.

What information do we collect and how do we use it?

The information we collect and hold depends on the products and services being provided and the circumstances in which we deal with you. In general, we collect information that is reasonably necessary to assess insurance risks, issue and administer insurance policies, manage, assess and settle insurance claims. This includes:

• contact details
• date of birth
• insurance history, including claims history
• employment details (where relevant)
• payment or billing information.

In certain circumstances, we may also collect sensitive information such as:

• health information
• criminal history
• membership of professional or trade associations.

We only collect sensitive information where it is necessary for our functions or activities and where it is required or permitted by law or collected with your consent.

Where a claim is made, we may collect information from you and from others, including loss adjusters, investigators, medical providers, witnesses and repairers.

What if you don’t provide some information to us:

We may not be able to issue insurance, administer a policy or properly assess a claim if all relevant information is not provided. Insurance laws also require you to provide insurers (including their agents) with the information they need to decide whether to insure you and on what terms.

You have a duty to disclose information that is relevant to an insurer’s decision to insure you.

When do we disclose your information overseas

In issuing and administering insurance policies and managing claims, we disclose personal information to the insurers we represent. Some of these insurers are located outside Australia. GARD commonly uses Underwriters at Lloyd’s, which may result in disclosure of personal information to recipients in the United Kingdom, where privacy protections apply that are broadly comparable to those under the Privacy Act.

The insurers we represent acquire reinsurance from reinsurance companies located throughout the world, and in some cases your information may be disclosed them to assess risks or provide reinsurance. We do not make this disclosure; it is made by the insurer as part of its reinsurance arrangements.

We may also disclose personal information to overseas third parties such as professional advisors, technology service providers, or other service providers that assist us in operating our business. Please note that the Privacy Act and the Australian Privacy Principles may not apply to these organisations.

How do we hold and protect your information?

We strive to maintain the reliability, accuracy, completeness, and currency of the information we hold and to protect its privacy and security. We retain information only for as long as reasonably necessary for the purposes for which it was collected or to comply with legal or regulatory requirements.

Information may be stored in physical or electronic format, including cloud-based systems. We take reasonable steps to ensure personal information is securely stored.

Information may initially be held in a working file and later electronically imaged and stored, after which paper records are securely destroyed. In some cases, files are archived with an external data storage provider. We only use storage providers located in Australia that are regulated by the Privacy Act.

We protect personal information against unauthorised access, modification or disclosure through physical security measures, secure premises and IT safeguards such as firewalls, user identifiers and passwords.

Will we disclose the information we collect to anyone?

We do not sell, trade, or rent personal information to others.

We may disclose personal information to contractors and service providers who assist us, such as data storage providers or policy and claims administration system providers. We may also disclose personal information as part of a corporate sale, merger, reorganisation, dissolution, or similar event.

We take reasonable steps to ensure third parties protect personal information in accordance with the Privacy Act.

We may also disclose personal information where required by law, where you consent, or where otherwise permitted by privacy laws.

How can you check, update or change the information we are holding?

You may request access to the personal information we hold about you or request correction of inaccurate, out-of-date or incomplete information by contacting our Privacy Officer:

We do not charge for access or correction requests unless the request is complex and required significant resources, in which case any charge will be discussed with you beforehand.

In limited cases, access or correction may be refused where permitted by law. If this occurs, we will explain our reasons.

What happens if you want to complain?

If you have concerns about whether we have complied with the Privacy Act or this Privacy Policy, please contact our Privacy Officer using the details above.

Your complaint will be considered by us through our Internal Complaints Resolution process and acknowledged within one business day.

If your complaint cannot be resolved to your satisfaction, you may refer the matter to the Australian Financial Complaints Authority (AFCA):

Your consent

By asking us to provide insurance or insurance terms, to assess a claim , or by providing information to us (directly or via an insurance broker), you consent to the collection, use and disclosure of your personal information for the purposes described in this Privacy Policy.

Are cookies used on the GARD website?

We collect anonymous information about website usage, such as server address, date and time of visits, pages accessed and browser type. This information does not identify individuals and is used for statistical analysis and website improvement.

We may use cookies to enhance website functionality. Cookies do not identify individuals and cannot be used to discover your identity. You may configure your browser to notify you when cookies are used or to reject them, although this may limit website functionality.

Tell us what you think

We welcome questions and comments about privacy. If you have any concerns or complaints, please contact our Privacy Officer using the details above.

How often is this notice updated?

We may update this Privacy Policy from time to time to reflect legal requirements or changes to our business practices. By continuing to use our services or otherwise dealing with us, you accept this Privacy Policy as amended from time to time.

This Privacy Policy was last updated 17 April 2026.