Privacy Policy

This policy explains how Compare That Holdings Pty Ltd (ABN 25 700 956 074) (CompareThat, we, us, our) manages personal information. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We may update this policy from time to time by publishing the amended version on this website.

The information we collect

We only collect personal information that is reasonably necessary for our functions as a product comparison service. Depending on how you interact with us, this may include:

• Contact details: such as your name and email address, if you email us with an enquiry, feedback or a complaint;
• Usage and device data: such as your IP address, device and browser information, the pages you view and the products you click through to, collected through our analytics;
• Your search settings: the figures and options you enter, such as a loan amount, term or postcode, are kept in your own browser and in the page address so they follow you from page to page. We don’t store them in our database or link them to you. Our analytics don’t record the figures you type into our calculators or filters: loan amounts, deposits, balances, income, expenses, your current rate, fee or energy usage, or your postcode. We remove them before anything reaches our analytics. For some filters we record only the broad band a figure falls in (for example $20,000 to $50,000), never the figure itself. Options you choose, such as a loan term or a product type, may be recorded as part of usage data; and
• Correspondence: the content of enquiries, feedback and complaints you send us.

We do not ask you for, and you should not send us, sensitive information or financial application details (such as income, account numbers or government identifiers). If you apply for a product, you do that directly with the provider, under their privacy policy, not ours.

How we collect it

We usually collect personal information directly from you, for example when you contact us. We also collect usage data automatically through our analytics when you use the Website. While we take reasonable steps to protect information sent over the internet, no transmission can be guaranteed to be completely secure, and you send it at your own risk.

Why we collect and use it

We collect, hold and use personal information to:

• operate, maintain and improve the Website and our comparison services;
• respond to your enquiries, feedback and complaints;
• understand how the Website is used, through aggregated analytics; and
• prevent misuse and fraud, and comply with our legal obligations.

Holding and securing your information

We hold personal information in systems operated by us or by service providers on our behalf, and take reasonable steps to protect it from loss, misuse and unauthorised access. We keep it only as long as needed for the purposes above or as required by law, and take reasonable steps to destroy or de-identify it when it is no longer needed.

Disclosing your information

We do not sell your personal information. We may disclose it to:

• service providers who help us run the Website (for example hosting, database and analytics), bound to use it only for those services;
• our professional advisers (legal, accounting, audit and compliance);
• a party that acquires, or proposes to acquire, all or part of our business; and
• others where you consent, or where required or authorised by law.

Our service providers

The providers we use, or may use, to run this website are:

• Vercel Inc.: website hosting and content delivery. Our functions run in Vercel’s Sydney region, but Vercel is a United States company and its network and support operations may access data from the United States.
• Supabase: our database, hosted in the Sydney (ap-southeast-2) region.
• OVHcloud: provides the server in Sydney that runs our self-hosted analytics. It supplies the server only; it does not operate our analytics or receive reports from it.
• Google LLC: we may use Google Tag Manager to load measurement tags on the Website, such as Google Analytics. If we do, usage data from those tags (for example the pages you visit, your IP address, and your browser and device details) is sent to Google, a United States company, and may be stored and processed in the United States and other countries where Google operates.

Our main analytics software, Matomo, is self-hosted on that server in Sydney, so the usage data Matomo collects is not disclosed to an analytics company and is not sent overseas.

Where a provider stores or processes data outside Australia, we take reasonable steps under APP 8 to ensure your information is handled consistently with the Australian Privacy Principles. By using this website you acknowledge that these disclosures occur.

Data breaches

If we become aware of unauthorised access to, or disclosure or loss of, personal information we hold, and that is likely to result in serious harm, we will assess it and notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth).

Cookies and analytics

We use your browser’s local storage to remember your preferences, such as your search settings and the products you have added to compare. To understand how the Website is used in aggregate we mainly use Matomo, analytics software we host ourselves in Sydney. This includes recording when you click through to a provider’s website, so we can measure which comparisons are useful.

Matomo runs without cookies. Instead, a random identifier is stored in your browser’s local storage so we can recognise repeat visits. It is not linked to your name, email address or any account, and we do not use it to build a profile about you or to target advertising. You can clear it, along with your saved preferences, at any time by clearing your browser’s site data for this website. If we use Google’s tags, this identifier may also be sent to Google.

We may also use Google Tag Manager, which loads measurement tags such as Google Analytics. Those tags may set cookies and send usage data to Google, as described under “Our service providers” above. We do not use them, or allow Google to use them, to target advertising. You can stop them with a tracker or content blocker, limit their cookies in your browser settings, or install the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout).

Marketing

We don’t run a mailing list and we don’t send marketing. If we offer one in future it will be opt-in, and we will update this policy before we do.

Accessing and correcting your information

You may ask us for access to the personal information we hold about you, and ask us to correct it if it is inaccurate, in line with APP 12 and APP 13. There is no charge to make a request, though a reasonable cost-recovery charge may apply to providing access. Contact our Privacy Officer at privacy@comparethat.com.au.

Complaints

If you believe we have breached the Australian Privacy Principles, please contact us first at privacy@comparethat.com.au so we can investigate. We will acknowledge your complaint, give you an estimated response time, and respond as soon as we reasonably can.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au, phone 1300 363 992, GPO Box 5218 Sydney NSW 2001.

Contact us

Privacy Officer · privacy@comparethat.com.au
Post · Compare That Holdings Pty Ltd (ABN 25 700 956 074), Suite 1157, Level 1, 241 Adelaide Street, Brisbane City QLD 4000