VERIFII

VERIFII

Privacy Policy

Privacy Policy

1. About This Policy

VERIFII.au (“we”, “us”, “our”) is an identity verification service operated by REFRESHWEB GROUP PTY LTD ABN:51 611 831 059. This Privacy Policy explains how we collect, use, hold, disclose, and protect your personal information in accordance with the Privacy Act 1988 (Cth) (Privacy Act), the Australian Privacy Principles (APPs), and our obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) (AML/CTF Act) and associated rules administered by the Australian Transaction Reports and Analysis Centre (AUSTRAC).

We are committed to protecting your privacy and handling your personal information responsibly and transparently. This policy applies to individuals whose personal information we collect in connection with our identity verification services.

2. What Personal Information Do We Collect?

We may collect the following types of personal information (including sensitive information such as biometric data where required for verification):

  • Identification details: Full name, date of birth, residential address, and government-issued identifiers (e.g., passport number, driver’s licence number, Medicare number where applicable).
  • Contact information: Email address, phone number.
  • Identity verification data: Scans or photos of identity documents, facial images or biometric data (e.g., for liveness detection and face matching), and any other information needed to verify identity.
  • Verification results: Outcomes of checks against government databases or other authoritative sources.
  • Other information: Any additional details you provide or that are reasonably necessary for the verification process.

We only collect personal information that is reasonably necessary for the purposes outlined in this policy.

3. How Do We Collect Your Personal Information?

We primarily collect your personal information:

  • Directly from you, via our website, mobile app, API integrations, or verification portals (e.g., when you upload documents or complete a verification session).
  • From the partner organisation (e.g., a business or service provider) that has requested verification from you.
  • From third-party sources authorised for identity verification, such as government databases (via the Document Verification Service or equivalent), where permitted by law.

We will generally notify you at or before the time of collection (or as soon as practicable) about the purposes for which we collect your information.

4. Why Do We Collect, Use, and Disclose Your Personal Information?

We collect, use, and disclose your personal information primarily to:

  • Provide identity verification and related services to you and/or the requesting partner organisation.
  • Enable compliance with AML/CTF obligations, including customer due diligence (CDD), know-your-customer (KYC) requirements, and fraud prevention.
  • Fulfil our legal and regulatory obligations under the AML/CTF Act and other applicable laws.

Specific AUSTRAC Compliance Statement

We securely store your personal information in accordance with our obligations under the Australian Federal Government’s AUSTRAC framework. We take reasonable steps to protect your information from misuse, interference, loss, unauthorised access, modification, or disclosure (APP 11).

We will never distribute, sell, disclose, or share any of your personal information with anyone apart from:

  • The partner organisation who has requested a verification from you (for the purpose of that specific verification); and
  • The Australian Federal Government (including AUSTRAC or other authorised agencies) where this verification has been mandated by law.

We do not use your information for direct marketing unless you have consented or it is otherwise permitted by law. We do not sell your personal information.

5. Disclosure to Third Parties

Your information may be disclosed to:

  • Service providers and contractors who assist us with verification services (e.g., secure hosting, biometric processing), under strict confidentiality and security agreements.
  • Regulatory bodies or law enforcement agencies as required or authorised by law.
  • The requesting partner organisation (limited to the verification outcome and necessary details).

Any overseas disclosures (if applicable) will comply with APP 8. We do not routinely disclose to overseas recipients except where necessary for the service and with appropriate safeguards.

6. Security of Your Personal Information

We implement robust technical, administrative, and physical security measures to protect your information, consistent with AUSTRAC and Privacy Act requirements. Access is restricted to authorised personnel on a need-to-know basis. Data is stored securely in Australia or in jurisdictions with equivalent protections.

7. Retention of Personal Information

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations (including AML/CTF record-keeping requirements, typically 7 years), or as otherwise permitted by law. Once no longer required, we take reasonable steps to destroy or de-identify it (APP 11).

8. Access, Correction, and Complaints

You have the right to:

  • Request access to the personal information we hold about you.
  • Request correction of inaccurate information.
  • Lodge a complaint about how we have handled your information.

To exercise these rights, please contact us at privacy@verifii.au. We will respond within a reasonable time (usually 30 days) and may require identification. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC).

9. Updates to This Policy

We may update this Privacy Policy from time to time. The current version will be posted on our website (verifii.au). We encourage you to review it periodically. Material changes will be notified where required by law.

10. Contact Us

For any privacy-related enquiries or requests:

Email: privacy@verifii.au

By using VERIFII.au services, you consent to the collection, use, and disclosure of your personal information as described in this Policy.