We are a service provider that provides know-your-customer and customer due diligence services (such as identity verification, know-your-customer checks, customer due diligence checks) (KYC/CDD Services) to businesses who are regulated as “reporting entities” under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth). References to our “Client/s” in this policy are references to those businesses/reporting entities who have engaged us to provide KYC/CDD Services to them.
Tic has obligations concerning the collection, use, disclosure and storage of personal information. These obligations are set out in the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) (Privacy Act), and other applicable State and Territory privacy laws.
In this Privacy Policy, references to “Tic“, “we“, “us” and “our” are to Trust, Integrity & Compliance Limited (trading as TICCOMPANY Limited) (ABN 76 701 371 806) and our “related entities”.
Tic may be related to other companies and entities (related entities). This Privacy Policy applies to the collection and handling of your personal information by us and our related entities, to the extent we or our related entities are doing business in Australia. Our related entities may also do business in other jurisdictions (such as New Zealand) and have their own privacy policies which set out additional information about their privacy practices in the context of doing business in those overseas countries. If there is an inconsistency between this Privacy Policy and a privacy policy of a related entity, this privacy policy prevails to the extent of the inconsistency in relation to the doing of business in Australia.
We will review and update this Privacy Policy from time to time. Any changes to our policy will be published on our Website (defined below). You may obtain a copy of our current Privacy Policy from our Website [www.ticcompany.com.au] or by contacting us using the contact details below.
The ’employee records’ exemption set out in the Privacy Act applies to our acts and practices in relation to the handling of employee records by us in relation to current and former employment relationships. This Privacy Policy does not apply to our acts and practices to the extent that the ’employee records’ exemption applies.
“Personal information” is information or an opinion about an identified individual or reasonably identifiable individual, whether true or not and whether recorded in material form or not.
“Sensitive information” is a sub-category of personal information which includes information about an individual’s racial or ethnic origin, political opinions, membership of political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association or trade union, sexual orientation or practices, criminal record, health information, genetic information or certain biometric information.
We collect information about you and your interactions with us. The types of personal information we may collect about you will depend upon the nature of our interaction with you.
Specifically, if you are interacting with us because our Clients have engaged us to perform KYC/CDD Services about you, the personal information we collect about you may include:
If you are interacting with us as our Client, our supplier, our staff or prospective staff, the personal information we collect and hold about you may include:
With your consent or if permitted by law, Tic may collect sensitive information, including:
We collect personal information about individuals such as:
We may collect personal information directly from you or from a third party or from publicly available sources. We will usually only collect your personal information from a third party if it is unreasonable or impracticable to collect this information directly from you or if we are otherwise permitted to do so. For example, in the context of performing KYC/CDD Services, we may need to collect personal information from independent third party sources in order to independently verify information that you have provided to us.
We will collect information from third parties such as:
We may collect this information when you communicate with us through the Websites, by telephone, by e-mail or through a written application. In some circumstances the collection of personal information may be required by law.
Specifically, we may collect your personal information when:
You can choose to deal with us anonymously or by using a pseudonym.
However, please note that if you choose to remain anonymous, or use a pseudonym, this may affect your ability to access or use certain functions of the Websites or services. If you choose to deal with us anonymously or using a pseudonym (and we therefore cannot identify you), we will also be unable to complete some KYC/CDD Services which may affect your ability to receive products and services from our Clients.
If you wish to remain anonymous or use a pseudonym when dealing with us via a telephone call, please advise the call operator assisting you. Providing your personal details enables us to provide you with a contact record reference number which allows you, and other authorised persons, to retrieve information about that call at a later date.
We collect, hold, use and disclose your personal information for one or more of the following purposes:
We will use your personal information to offer you products and services we believe may interest you, but we will not do so if you tell us not to. These products and services may be offered by us, our related companies, our other business partners or our service providers.
When you receive electronic marketing communications from us, you may opt out of receiving further marketing communications by following the opt-out instructions provided in the communication.
We may disclose your personal information to the following third parties for the purposes listed above:
We may also disclose your personal information to a purchaser or potential purchaser in connection with the sale or potential sale of Tic, our business or any of our assets, including in insolvency, in circumstances which require the purchaser or potential purchaser to use such personal information consistently with this Privacy Policy.
We may disclose personal information in other circumstances, where the person concerned has consented to the disclosure, or where we are expressly permitted to do so by the Privacy Act or another law. These other disclosures may include where:
We may collect, use and disclose your personal information for other purposes not listed in this Privacy Policy. If we do so, we will make it known to you at the time we collect or use your personal information and we will seek consent if required by law to do so.
We may disclose your personal information to recipients located outside Australia. The countries in which those third party recipients may be located include New Zealand and the United States of America.
Where we disclose information outside of Australia, we will take reasonable steps to ensure that any such person to whom personal information is disclosed will deal with that information in a way that is consistent with the APPs.
This Privacy Policy applies to the personal information that Tic collects through the following websites:
A “cookie” is a small file stored by the web browser software on your computer when you access our Websites. An explanation of cookies can be found on the Office of the Australian Information Commissioner’s (OAIC) website.
We use session cookies for maintaining contact with a user throughout a web browsing session. Session cookies expire when the browsing session comes to an end or a user shuts down their computer.
We use persistent cookies for statistical purposes and to improve our Websites.
You may accept all cookies, reject all cookies or be notified when a cookie is set. However, if refuse the use of cookies by selecting the appropriate settings on your browser, this may prevent you from using the full functionality of the Websites.
We will deal with any personal information collected by cookies in the same way we handle other personal information under this Privacy Policy.
The website communications generated from using and/or registering on this Website, such as promotional emails, may contain electronic images known as “web beacons”. Web beacons generally work in conjunction with cookies, and we may use them with cookies to, for example, count the number of visitors to the Websites or see whether you have acted on an email or clicked on a link, for example where this is a condition of entering a competition.
Our Websites use Google Analytics, a web analytics service provided by Google Inc. (Google). Google Analytics uses cookies to help analyse how users use the Websites. Google Analytics anonymously tracks how users interact with the Websites, including where they came from, what they did on the Websites and whether they completed any transactions on the Websites.
The information generated by the cookie about your use of the Websites (including their IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of compiling reports on the Websites’ activity and providing other services relating to the Websites and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate a person’s IP address with any other data held by Google.
You can opt out of the collection of information via Google Analytics by downloading the Google Analytics Opt-out browser add-on here.
When you visit our Websites, a record is made of your visit, including the following information:
We analyse this non-identifiable Website traffic data (including through the use of third party service providers) on an aggregated basis to improve our services and for statistical purposes.
No attempt will be made to identify users or their browsing activities except in the unlikely event of an investigation, where a law enforcement agency may exercise a warrant to inspect the Internet Service Provider’s log files.
Third party websites
The Websites may link to other websites which are outside our control, and other websites outside our control may link to the Websites. Whilst we try to ensure that we link only to websites which share our privacy and security standards, once you have left a Website we cannot be responsible for the protection and privacy of any information which you provide on other websites. You should exercise caution and review the privacy statement applicable to the website in question.
We store most information about you in computer systems and databases operated by either us or our external service providers. Some information about you may be recorded in paper files that we store securely.
We implement and maintain processes and security measures to protect personal information which we hold from misuse, interference or loss, and from unauthorised access, modification or disclosure. This includes:
However, we advise that there are inherent risks in transmitting information across the internet, including the risk that information sent to or from a website may be intercepted, corrupted or modified by third parties. If you have security concerns, or wish to provide personal information by other means (e.g. by telephone or paper), you may contact us using the contact details set out at the bottom of this Privacy Policy.
We endeavour to take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. Such steps may include:
If the information we store is no longer required by us for any purpose for which it was collected and is no longer required or authorised by law to be retained by us, we will destroy or de-identify the information. One of the most effective ways we protect your information is by not holding more than we need. By collecting only what is necessary and destroying it when it is no longer required, we reduce the risk and potential impact of any breach.
For example:
You may access or request correction of the personal information that we hold about you by contacting us. Our contact details are set out below. There are some circumstances in which we are not required to give you access to your personal information.
There is no charge for requesting access to your personal information, but we may require you to meet our reasonable costs in providing you with access (such as photocopying costs or costs for time spent on collating large amounts of material).
We will respond to your requests to access or correct personal information in a reasonable time and will take all reasonable steps to ensure that the personal information we hold about you remains accurate and up to date.
If we refuse to provide you with access to your record or to update your record in the way you request, we will provide you with written reasons.
Please note that where we have completed KYC/CDD Services, we may not always be able to correct relevant records due to regulatory and/or audit constraints. If we refuse to correct or update your information, you may request (or we may choose) that we make a note on your record that you are of the opinion that the information is inaccurate, incomplete, out of date, irrelevant or misleading, as the case may be.
If you have a complaint or concern regarding our handling of your personal information or think that your privacy has been affected, you should contact us using our contact details set out below to raise your complaint or concern.
We will consider your complaint and determine whether it requires further investigation. We will notify you of the outcome of this investigation and any subsequent internal investigation.
If you remain unsatisfied with the way in which we have handled your privacy complaint or concern, you may approach an independent advisor or contact the OAIC. See the OAIC website for more information about how to make a complaint.
If you:
This policy was last updated: August 2026.
