Free · Confidential · No obligation

Privacy Policy

Last updated: April 2025

1. About this policy

This Privacy Policy explains how ClassActions.com.au (ABN 77 672 009 764) collects, uses, discloses, and protects personal information in connection with the Medibank Data Breach — medibankclassaction.com.au operated through medibankclassaction.com.au.

We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information we collect

We may collect the following personal information:

  • Name, email address, phone number
  • Date of birth, address, and other contact details
  • Details relevant to the matter (e.g. account information, affected products or services)
  • Device and browser information, IP address, and usage data
  • Information provided during intake or eligibility assessment

3. How we collect information

We collect information:

  • Directly from you via forms, phone, SMS, or email
  • From our registration and eligibility assessment processes
  • Automatically via cookies, analytics, and device fingerprinting for fraud prevention
  • From third parties such as public registers, partner law firms, or referral sources

4. How we use your information

We use your information to:

  • Assess your eligibility or relevance to the Medibank Data Breach — medibankclassaction.com.au
  • Send updates, notices, and communications about this matter
  • Refer you to partner law firms where appropriate
  • Prevent fraud and verify identity
  • Improve our services and user experience
  • Comply with legal obligations

5. Disclosure of information

We may share your information with:

  • Partner law firms relevant to your matter
  • Service providers (hosting, SMS, email, analytics)
  • Courts or regulatory bodies where required by law

We will not sell your personal information to third parties.

6. Data security

We take reasonable steps to protect your personal information from unauthorised access, modification, disclosure, or destruction. This includes encryption in transit and at rest, access controls, and regular security reviews.

7. Your rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your information (subject to legal requirements)
  • Opt out of communications at any time
  • Lodge a complaint with the OAIC if you believe your privacy has been breached

8. Contact

For privacy-related enquiries, contact us at privacy@classactions.com.au.