Privacy Policy
Table of contents
- Policy Statement
- What kinds of personal information does TH collect?
- How TH collects personal information?
- Cookies & other technologies
- How does TH hold personal information?
- What happens if a member does not provide TH with their personal information?
- Purposes for which TH collects, holds, uses and discloses personal information
- Disclosure of personal information
- How is personal information managed when a member receives services from Teachers Healthcare Services?
- Dealing with TH anonymously or using a pseudonym
- Direct marketing
- Access to and correction of personal information
- Making a complaint
- Who this Privacy Policy does not apply to
- Changes to this Privacy Policy
1. Policy Statement
Teachers Federation Health Ltd (ABN 86 097 030 414) (trading as Teachers Health, UniHealth and Nurses & Midwives Health) and our subsidiaries (referred to as ‘us’, ‘we’ and ‘our’) (TH Group) care deeply about our members and prospective members (collectively ‘you’ and ‘your’). That means we care about keeping your personal and sensitive information confidential and private. We are strongly committed to this.
We are guided by the Privacy Act 1988 (Cth) (the Privacy Act) and manage all personal and sensitive information in line with Australia's strict privacy laws.
This Privacy Policy explains what you need to know – so it’s really important to read it and understand it all. If you have any questions after reading it, get in touch – our staff will be happy to answer any questions you may have.
2. What kinds of personal information do we collect?
We collect personal and sensitive information:
- Personal information includes any information about or relating to a person where the person is, or can be, identified.
- Sensitive information is a special subset of personal information which includes health information and information relating to relevant union membership.
In this Privacy Policy, any references to ‘personal information’ includes ‘sensitive information’.
We collect personal information to provide you with private health insurance and healthcare services. This may include:
- name, date of birth, family members, contact details, claims history, income tier, bank account details and where relevant, payroll numbers;
- details of relevant union membership including union membership number and status of membership – to assess whether you are eligible for membership;
- details related to services provided to members such as claims history, including medical procedure and hospital attendances, provision of ancillary health services and medical history and other health or lifestyle information; or
- Government-issued identifiers such as a member’s Medicare number – which is required for reporting purposes.
When you visit our websites and apps, we also collect information such as the IP address, browser type and language, Internet Service Provider, referring and exit pages, operating system, data/time stamp and clickstream data.
3. How do we collect personal information?
We mostly collect personal information directly from you, including where you:
- provide it to us directly by visiting a Teachers Health Centre or Member Care Counter, by phone, or in writing such as by completing our forms;
- use our products and services;
- visit any website operated by us, or on our behalf; or
- use our online or mobile member services.
We may also collect personal information when our business development officers visit educational and hospital facilities and events, from aggregators, business partners or from member referrals.
In some situations, we may collect personal information from third parties such as:
- from our partner organisations, including relevant trade unions, employer organisations and aggregators;
- from hospitals, Medicare, medical and ancillary providers, financial institutions and health care service providers, where a member has made a claim or intends to make a claim;
- from your previous health fund, if you transfer your health insurance policy to us;
- from selected tracking technologies and remarketing services (refer to section 4. Cookies & other technologies); and
- through social media management tools when you engage with us on social media.
We use selected service providers including Google Analytics to collect personal information such as your IP address based on interactions with our websites and apps, use of our online services such as the quote and comparison tools and clicking on our advertisements.
4. Cookies & other technologies
We use tracking technologies and remarketing services on our websites and apps such as cookies, pixel tags and other technologies to:
- better understand user behaviour, by telling us which parts of our websites you have visited and improve the online experience for visitors to our websites;
- remember personal information when you use our websites, online and mobile services and apps;
- customise the user experience based on your previous usage of our websites;
- display personalised content and advertising (targeted advertising and online behavioural advertising); and
- send marketing materials that we think will be of interest to you.
By using our websites, online and mobile member services and apps, you agree to the collection and use of your information as described in Google’s Privacy Policy. We do not transfer personal information to Google Analytics or other such third-party vendors.
You can opt out of Google Analytics by disabling cookies in your web browser or using the opt-out service provided by Google. Once you have disabled cookies, certain features of our websites will no longer be available to you.
5. How do we hold personal information?
The personal information we collect is generally entered into and held in a centralised digital secure repository. We will take reasonable steps to protect the personal information we hold from misuse, interference and loss and unauthorised access, modification or disclosure. We will ensure that appropriate technical and organisational security measures, consistent with standard industry practice, are in place to attempt to safeguard the security and confidentiality of the personal information we collect. In the event of a data breach incident, we have a Data Breach Response Plan in place to respond.
TH does not guarantee that the website or the online and mobile member services are totally protected from hackers or misuse and it will not be responsible for any breach of security caused by third parties. TH does not use any form of encryption (encoding software) to protect information you send from your computer to TH over the internet through the use of feedback, enquiry and appointment forms and emails. Encryption software is applied when using online or mobile member services as well as all web forms hosted on TH Group domains such as the online join form.
For Teachers Health Centres, the eyecare appointment booking form is offered through 1stGroup Limited and hosted on an external secure domain, ‘MyHealth1st’. 1st Group Limited’s Privacy Policy (https://www.myhealth1st.com.au/privacy-policy/) applies to personal information collected through the eyecare appointment booking form.
6. What happens if you do not provide us with your personal information?
You do not have to provide us your personal information. However, if you do not provide us with requested personal information, this may affect our ability to provide you with services, including:
- we may not be able to provide you with health insurance or manage your insurance policies;
- we may not be able to process, manage or pay out on an insurance claim;
- we may not be able to provide you with health services such as eye care and dental services, and care coordination services or chronic disease management programs;
- we may not be able to properly assess a member’s health and lifestyle needs and consequently may not be able to provide healthy lifestyle or chronic disease management programs; and
- members may not be able to access our online or mobile member services.
7. Purposes for which we collect, hold, use and disclose personal information
We may collect, hold, use and disclose personal information for a number of purposes such as:
- to provide health insurance and related products and services;
- to confirm your eligibility to become a member;
- to respond to eligibility checks from hospitals and other medical providers;
- to pay health insurance claims;
- to manage our relationship with you;
- to analyse personal information and determine which products or services may be of interest to you;
- for the purposes related to the reason you gave the information;
- to manage risks and help identify and investigate illegal activity, such as fraud;
- to provide or arrange for associated services to be provided such as dental services, eye care services, allied services or travel insurance and other insurance or health-related services;
- to assess your general health and wellbeing needs and to continue to meet those needs through a care coordination services or chronic disease management program;
- to provide our online and mobile member services;
- as may be required by law or as permitted under the Privacy Act; and
- we may conduct data analytics or disclose personal information to third parties to conduct data analytics to gain insights into the membership base including prospective members, develop our offerings and improve your experience. Disclosure of personal information will be subject to a confidentiality agreement between TH and the third party.
We develop programs and initiatives from time to time to assist our members with day-to-day health and wellbeing issues such as diet and exercise, as well as assistance with illnesses suffered by members. Members may choose to sign up to such programs from time to time. Members are not obliged to join any such programs. If they do join any such programs, we may use personal information already collected from them so that they can get the most benefit from such programs. For instance, if the member has diabetes and chooses to join a program that assists with their diabetes treatment, we may use earlier personal information collected from them to advise them on their treatment program.
We may also use your contact details to send information about us or our products, services, or programs. If you do not wish to receive this information, then you have the opportunity to tell us when we collect your personal information (refer to section 11. Direct marketing).
8. Disclosure of personal information
We will never sell your personal information. We will not disclose your personal information, except:
- to our related companies, business partners, and providers of wellbeing, chronic disease management programs or care coordination services;
- to our suppliers, third-party service providers or subcontractors (as necessary to enable them to help provide our services and any member programs);
- to relevant unions to verify eligibility for membership;
- to hospitals, healthcare providers, Medicare or other government agencies or financial institutions as required to manage your membership;
- entities established to help identify illegal activities and prevent fraud;
- where personal information has been successfully de-identified;
- as required by law or as permitted under the Privacy Act; or
- with your consent.
Some of the programs that a member may join are managed by third parties to provide the best service to the member. To ensure the efficient administration of such programs, we may need to disclose a member’s personal information to these third parties. Disclosure of a member’s personal information will be subject to a confidentiality agreement between TH and the third party. We will endeavour to ensure that third-party program administrators will not disclose a member’s personal information to any third parties.
If a member joins programs through us which are managed by third parties, the member may need to disclose personal information to these third parties. The third parties do not disclose this information to us without the member’s consent. A member’s disclosure of personal information directly to such third parties would be subject to their privacy policies.
If the membership policy covers the main policy holder as a main contributor and a partner or children, we will only contact the main policy holder regarding anyone else covered on the policy.
We rely on the main policy holder having made all persons covered aware of the matters dealt with in this Privacy Policy and having obtained consent on these matters.
We may disclose personal information to service providers that are located outside of Australia. In these instances, we will conduct due diligence on the service providers’ information security systems and incorporate contractual privacy clauses to protect personal information.
Where a member purchases insurance products through our business partners, such as travel, general and life insurers, the member’s relationship with the business partner is independent from us and the business partner’s privacy policy applies.
9. How is personal information managed when a member receives services from Teachers Healthcare Services?
This section applies only to health-related services provided to our members by Teachers Healthcare Services (THS), a subsidiary of the TH Group. THS may provide services to our members including telephone services, care coordination services, chronic disease and health management programs and online health-related services.
THS may collect and use personal information to provide these services to members including:
- to contact the member for management and follow up purposes;
- to manage, review, develop and improve health-related services and business and operational processes and systems;
- to resolve any legal and/or commercial complaints or issues; and
- to perform any of their other services or activities.
If a member uses health-related services, THS may disclose personal information to other parts of the TH Group for us to pay benefits and to review, develop and improve services.
To perform the above services, THS may disclose personal information to third parties such as health service providers, persons authorised by or responsible for the member, and to other parties to whom they are authorised or required by law to disclose information including government agencies.
THS may also use and disclose personal information:
- to assess from what other services a member may benefit and to facilitate the provision of such services;
- so it may have an integrated view of members and provide a better and personalised service; and
- to contact members (including by telephone call, text message or email) regarding its health-related services.
Participation in any programs offered by THS is entirely voluntary and a member may withdraw their consent to the sharing of personal information or to being contacted about health-related services by contacting us (refer to section 11. Direct Marketing).
If you require access to your health-related service records managed by THS, you may do so by contacting the Clinical Operations Manager directly on 1300 728 578 or by email on info@teachershealthcare.com.au.
10. Dealing with us anonymously or using a pseudonym
As a general rule, you may only contact us anonymously in limited circumstances – for example, to enquire generally about our goods and services, or to complete a retail transaction at a Teachers Health Centre by paying for goods in cash.
11. Direct marketing
We use personal information that we hold to identify services and products that may be of interest to you.
We may contact you by email, text message, phone or by post to let you know about promotions or any new or existing products or services. We also use internet-based marketing including targeted online advertising and online behavioural marketing.
We may disclose your personal information to our subsidiaries such as THS to tell you about our products or services.
To opt out of direct marketing, please contact us as set out below:
- Teachers Health
- Call us on 1300 728 188; or
- Email us at unsubscribe@teachershealth.com.au
- UniHealth
- Call us on 1300 367 906
- Email us at unsubscribe@unihealth.com.au
- Nurses & Midwives Health
- Call us on 1300 344 000
- Email us at unsubscribe@nmhealth.com.au
We will give effect to your request as soon as reasonably practicable and, in any case, within 30 days of the request being received.
12. Access to and correction of personal information
We will take reasonable steps to ensure that all personal information we collect or use is accurate, complete, up to date and stored in a secure environment and is accessed only by authorised personnel for permitted purposes.
If you wish to access or correct any personal information which we hold about you, or requests its removal from our records, you can contact us by post or email, in person at a Member Care Counter or over the phone with a member of the Membership Services team.
If you require access to your eye care records, eye test results or dental records, you may do so by contacting the eye care or dental care provider directly.
If you require access to your health-related service records managed by THS, you may do so by contacting the Clinical Operations Manager on 1300 728 578 or by email on info@teachershealthcare.com.au (refer to section 9. How is personal information managed when a member receives services from Teachers Healthcare Services?).
We will respond to your access request as soon as practicable and, in any case, within 30 days of the request being received. We will either respond by providing you with the access or amendments you have requested, or by providing you with the reasons for refusing to do so.
If we refuse to amend your health information you may request that we attach a statement of the amendment sought to your health information, and in that case, we must take reasonable steps to do so.
There are exceptions to your right to access your personal information, including:
- where we reasonably believe that giving access would pose a serious threat to the life, health or safety of any individual, or to public health or public safety;
- giving access would have an unreasonable impact on the privacy of other individuals;
- the information relates to existing or anticipated legal proceedings between us and you, and would not be accessible through the discovery process in those proceedings;
- giving access would be unlawful;
- denying access is required or authorised by or under an Australian law or a court/tribunal order;
- where we have reason to suspect that unlawful activity, or misconduct of a serious nature, that relates to our functions or activities has been, is being or may be engaged in and giving access would be likely to prejudice the taking of appropriate action about the matter; and
- giving access would be likely to prejudice one or more enforcement related activities conducted by, or on behalf of, an enforcement body.
In some circumstances, we may charge a fee to cover administrative costs in respect of retrieving and providing your personal information. We will let you know if any such costs are likely to be incurred.
13. Making a complaint
We view complaints as an opportunity to maintain and enhance customer loyalty and approval and enhance our competitiveness by continuous review and improvement. We have a Customer Complaint Handling and Dispute Resolution Policy in place for handling complaints. A copy of this policy is available through our websites.
If you would like to make a complaint about a breach of privacy, you can contact the designated Privacy Officer:
(a) by email:
- Teachers Health
privacyofficer@teachershealth.com.au
- UniHealth
privacyofficer@unihealth.com.au
- Nurses & Midwives Health
privacyofficer@nmhealth.com.au
(b) by post:
Address: TH Group Privacy Officer
Teachers Federation Health Limited
GPO Box 9812
SYDNEY NSW 2001
The complaint should first be made in writing. We will respond as soon as reasonably practicable and, in any case, within 30 days. All complaints are handled under the Customer Complaint Handling and Dispute Resolution Policy which is available through our websites.
In the event that you are not satisfied with our response, you may take your complaint to the Office of the Australian Information Commissioner (OAIC). The OAIC can be contacted at:
(c) by email: enquiries@oaic.gov.au
(d) by post:
GPO Box 5218
Sydney, NSW 2001
(e) by phone: 1300 363 992
See also the OAIC website for further details: https://www.oaic.gov.au/privacy/privacy-complaints/
14. Who this Privacy Policy does not apply to
This Privacy Policy does not apply:
- to corporate information (unless it is also about any identifiable person); or
- if you access another website through a link from our websites. In this case the privacy policy of the owner of the other website (if any) will apply. We cannot and do not make any warranty or representation as to the practices of any linked websites in the handling of personal information.
15. Changes to this Privacy Policy
The Privacy Policy is reviewed at least annually to ensure it reflects our ways of working and is aligned with privacy best practices. We will notify such changes by posting an updated version of this Privacy Policy on our websites. Your continued use of this website constitutes your agreement to any changes to this Privacy Policy.
Privacy Policy
Date: March 2023
Version: 15