Policy

Privacy policy

What we collect, why we collect it, and who we share it with.

Last Updated: 2025/06/04

ABN: 84 646 637 372
ACN: 646 637 372


1. Introduction

Expressewa (“Expressewa”, “we”, “our”, “us”) is bound by the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs). We recognise the importance of protecting your personal information and ensuring its confidentiality and security.

All third parties (including clients, service providers, and associates) who access or use personal information collected by Expressewa must adhere to this Privacy Policy.

This Privacy Policy is available free of charge and can be downloaded from our website: expressewa.com.au


2. What kind of personal information do we collect and hold?

We may collect and hold a range of personal information to provide our services, including:

  • Full name
  • Date of birth
  • Proof of address (e.g. utility bills)
  • Phone number
  • Email address
  • Purpose of Sending
  • Beneficiary bank account detail

  • Government-issued photo ID (e.g. Australian Driver’s Licence, International Passport)


3. Why do we collect Personal Identity information?

We collect this information:

  • In order to verify your identity and comply with our customer identification obligations as required and authorised by the Anti-Money Laundering and Counter-Terrorism Financing Act 2006;
  • To meet verification of identity requirements under Australian states and territories real property and electronic conveyancing laws;
  • To prevent, detect and investigate suspicious, fraudulent, criminal or other activity that may cause you, us or others harm, including in relation to our products and services;
  • To process your application; and
  • To provide and manage your product or service.

You are not required to provide us with your identity information online. If you do not wish to provide your identity information online, you can attend a branch with your identity documents to verify your identity. If you do not verify your identity either online or in a branch, we will need to reject your application and will not be able to provide, or continue to provide, you with our products or services.


4. How do we collect personal information?

We primarily collect personal information directly from you through application forms, digital onboarding, or communication via email, phone, or through our mobile app and website.

We may also collect personal information from third parties including identity verification providers such as GBG, electronic verification services, referrers, and marketing agencies. If we do, we take reasonable steps to inform you and provide access to this Privacy Policy.

We use the Document Verification Service (DVS) to validate that your ID matches official government records and is not expired or cancelled. If automated verification fails, we may request additional documentation (e.g. a selfie with ID).

It is not possible to deal with Expressewa anonymously or under a pseudonym, due to AML/CTF legal requirements.


5. Unsolicited Personal Information

Any unsolicited personal information received by Expressewa that is not relevant to our business will be destroyed or de-identified unless legally required or necessary for lawful purposes.


6. Who do we collect personal information about?

We may collect and hold personal information about:

  • Clients
  • Beneficiaries
  • Agents


7. Website Collection

We collect personal information when users fill out forms on our website. We may also use cookies and third-party analytics tools to monitor site traffic. This data is anonymous unless combined with identifiable information.

Cookies may be used to enhance your experience. You may refuse or delete cookies through your browser settings, although this may limit your ability to use certain features of our website. All cookie-related data is deleted every 30 days.


8. When May We Share or Disclose Your Personal Information?

We do not sell, rent, or share personal information for promotional purposes. We may disclose your information to:

  • Third-party service providers (e.g., GBG for ID verification)
  • Banks/Financial Institutions to complete transactions
  • Regulators (e.g., AUSTRAC to meet legal obligations
  • In the event of a business acquisition or restructure, where permitted
  • Law enforcement or government agencies, in response to legal obligations (e.g., subpoenas, court orders)


9. Management of Personal Information

We apply strict security measures to safeguard your information:

  • Encryption of data in transit and at rest
  • Restricted staff access
  • Regular audits and system logging
  • Password protection and access controls
  • Security protocols for remote work, including two-factor authentication and device safety

Unauthorized access or disclosure may result in disciplinary action.


10. Direct Marketing

We may use your information for direct marketing if:

  • It is not sensitive
  • You would reasonably expect it
  • You have not opted out
  • We provide a clear opt-out option

We do not use information from third parties for direct marketing unless we have your consent or it is impractical to obtain it.


11. Identifiers

We do not adopt government-issued identifiers (e.g., driver’s licence numbers) as internal references unless permitted under the Privacy Act.


12. Keeping Personal Information Accurate

We take reasonable steps to ensure your data is accurate and up-to-date. You can contact us to correct any inaccurate data. We will update this information within 30 days and inform any third parties who have received incorrect data.


13. Accessing Your Personal Information

You may request access to the personal information we hold about you. Requests should be made to our Privacy Officer. Access is generally provided within 30 days, and we may charge a small administrative fee. Verification of identity will be required.


14. Updates to this Privacy Policy

This Privacy Policy may be reviewed and updated to reflect legislative changes or improvements to our processes. The latest version will always be available on our website.


15. Responsibilities

Management is responsible for ensuring staff and relevant third parties are aware of and comply with this Privacy Policy. Employees receive regular training. Non-compliance may lead to disciplinary action.


16. Non-Compliance and Disciplinary Actions

All privacy breaches must be reported. Failure to comply with this policy, including negligence or misconduct, may result in disciplinary action.


17. Incidents/Complaints Handling

We have a complaint process in place to address privacy concerns and ensure compliance:

  • Identifying systemic issues
  • Maintaining trust with clients
  • Taking corrective action promptly


CONTACT US

If you have any questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact us:

Email: compliance@expressewa.com.au
Phone: +61 406 176 408
Address: 17 Ashwini Glade Boxhill, NSW 2150, Australia