Updated 21 October 2025

iD4me Pty Ltd (ABN 74 632 754 726) and its related and associated bodies corporate (us, we, our) have developed this Privacy Policy in accordance with the Privacy Act 1988 (Cth) (Australia) and the Privacy Act 2020 (NZ) (referred to the in this policy as the Privacy Act, as applicable based on your location). This Privacy Policy governs how we collect, store, use and share your personal information. This Privacy Policy applies to information provided to us whether via this website (website) or any other means and explains how we will comply with the Privacy Principles under the applicable Privacy Act.

Although we will comply with this Privacy Policy in respect of information provided to us by persons under the age of 18 years, those persons must obtain the consent of a parent or guardian prior to using the website and the parent or guardian will be responsible for appropriately supervising the person’s use of the website.

If you have questions or would like more information on our practices and Privacy Policy, you can contact us by using our details set out at the end of this policy and on our website at https://id4me.biz/find.

1. What personal information do we collect?

When you contact us or use any of our services, the kinds of personal information we collect include:

• your name, email address, postal address and other contact details;
• your gender and date of birth; and
• any other information we need so we can provide you with our services.

In order to provide our services, we also indirectly receive your personal information from related third-party websites and apps that collect the information, and other data compilers. This information will generally be collected online, and by way of consent or voluntary registration over the internet, phone, facsimile, and email. We may also collect your personal information from publicly available sources, or otherwise as permitted by law.

We do not collect any sensitive information, which is subject to additional requirements under the Privacy Act, such as information about your:

• race or ethnicity;
• political opinions;
• religious or philosophical beliefs;
• trade union memberships (if any); or
• health or any disabilities.

Exceptions to the collection of sensitive information are if:

• you have given us your permission to collect this information and it is reasonably necessary to allow us to provide our services;
• using this information is required or authorised under Australian law or a court or tribunal order; or
• the information is necessary to start, enforce or defend a legal claim.

2. How we approach collecting personal information
   • Direct collection

If it is reasonable and practical to do so, we will collect personal information directly from you. This will include contact details and other information relevant to providing services to you. We may collect information when you call us, send us an email or letter, visit our offices, or when you enter into an agreement to use our services.

• Indirect collection

We also collect personal information from third parties such as your representatives, publicly available sources of information, our related companies, and other third parties you have given consent to collect your personal information. We rely on these third parties to notify you and obtain your consent to collect and use your data for the purpose set out at section 4 below. We only collect information that is reasonably necessary to help us provide our services.

The sources of that Personal Information include those listed below, depending upon the purpose for which it is being collected:

• our related companies;
• third party service / data providers;
• your representatives
• Real estate agents and real estate platforms/websites;
• Australian or New Zealand Electoral Commission;
• Market research organisations;
• Direct marketing companies;
• Law Court records;
• Surveys and competitions;
• Australian Communications and Media Authority;
• our service providers;
• Other third parties or authorised parties

We also may collect Personal Information about our customers, or employees or officers of our customers and prospective job applicants, so that we can meet internal operational requirements, complete business transactions, conduct research, deliver products and services, administer accounts, provide customer support or meet regulatory requirements.

If someone other than you provides us with your personal information that we did not ask for and we determine that we could have collected this information from you, we will notify you, as soon as practicable. However, we will not notify you if to do so would be in breach of an obligation of confidence. If we could not have collected this personal information, we will lawfully destroy or make that personal information anonymous.

We will not collect personal information unless the information is reasonably necessary for or directly related to one, or more of our functions or activities. If we are unable to collect personal information we reasonably require, we may not be able to do business with you or the organisation with which you are connected.

3. Cookies

When you visit our website the server may attach a "cookie" to your computer's memory. “Cookies” allow us to track and store information on how you use the website and the pages that may be of most interest.

We may use cookies occasionally to:

• monitor how you use our website;
• improve your experience on our website;
• provide you with a better service when you use our website;
• allow only registered users to access our website; and
• recognise you when you return to our website.

This information may be used to provide users of your computer with information that we think may interest the users of your computer. However, this information is not linked to any personal information you may provide and cannot be used to identify you. You may be able to configure your computer so that it disables “cookies” or refuse to accept them. However, disabling cookies may affect your experience on our website and you might not be able to use certain functions.

4. Use and disclosure of information

We will use your personal information for the primary purpose of providing you and/or our clients with our services, and for purposes for which you would reasonably expect us to use that information, including sending you information about new developments, products, services and special offers by post, telephone or any form of electronic communication. We may use any email address or other personal information you provide to us at any time for this purpose.

Some of the purposes for which we collect, use and disclose your personal information are:

• To assist our clients with:
  • customer marketing and sales operations, including targeted digital advertising;
  • market research and modelling;
  • client prospecting in the finance and real estate sectors;
  • locating missing debtors;
  • conducting identity verification; and
  • cleansing and validating existing data such as addresses, email addresses and phone numbers using reference data;
• To aid our operations, specifically to:
  • Respond to you if you have requested information (including via our website or via an email or other correspondence you send to us);
  • enrich data with additional attributes;
• for analytics, product development, research and benchmarking;
• to include in one or more of our databases so that we can provide it to our customers as part of a product or service they select;
  • enhance your use of the website;
  • improve the website; and
  • to keep you informed of relevant upcoming events and our activities. It is also collected to allow the functions and services offered on the website to be provided to you.

While this list is not exhaustive, any use or disclosure outside of this list will be consistent with those permitted under privacy laws.

The clients to whom we may provide your personal information include real estate agencies and debt collection agencies. This disclosure of your information to our clients and the corresponding collection of information by them is not required by law, and you can opt out of such disclosure at any time by contacting us using the contact details below. You have the right to access and request correction of any information that our clients hold about you.

To provide our services to you, we may share your personal information to our third-party service providers, such as partners, data suppliers, data processors, registries, custodians or Courts and regulatory authorities as agreed or authorised by law. We will not disclose information that personally identifies you to any third party other than as set out in this Privacy Policy.

In the event of a security incident involving unauthorised access, use or disclosure of personal information where a third party with whom we share personal information is involved, we will seek to work cooperatively with them to protect the personal information we have shared with them.

• Opting Out of iD4me Marketing

You can, at any time, opt out of receiving iD4me marketing material by using the following Unsubscribe tool, or by sending a response via the channel you received the material to request to be removed from our distribution list.

You agree and acknowledge that even if you opt out of receiving marketing material, we will still send you essential information that we are legally required to send you relating to the services we provide. Once you opt out of receiving marketing material from us, you agree and acknowledge that this removal from our distribution lists may take several business days after the date of your request to be removed, and removal from our distribution list will not result in the removal of your data from third parties.

5. Accuracy of your information

We take all reasonable steps to ensure that your personal information held by us is accurate, up-to-date, complete, relevant and not misleading. If you believe that any of your personal information is not accurate, up-to-date, complete, relevant and not misleading, please contact us and we will take all reasonable steps to correct it within a reasonable time.

6. Third parties and your information

We will only use personal information as set out in this Privacy Policy unless we are required by law to protect our rights or property (or those of any third party), or to avoid injury to any person.

When we share your personal information with third parties, including our service providers, we will do everything reasonably possible to make sure that:

• those service providers meet strict privacy responsibilities in relation to protecting your personal information; and
• we only share relevant information that it is accurate, complete and up to date.

When we receive your personal information from third-party sources, such data is limited to information that has been collected with your prior consent.

Although our website may link directly to third-party websites (known as linked sites) we do not run these sites. You should always read the privacy policy that applies to any linked site. We are not responsible for the content or practices of any linked sites or their privacy policies.

7. Disclosure of information overseas

We may share some of your personal information with some of our service providers overseas to fulfil the purposes set out in this Privacy Policy. For example, we engage various cloud service providers who may store and access backup data overseas. We consider these service providers are bound to legislation similar to the Privacy Act and we have a contractual mechanism with them to enforce your rights.

Your personal information may also be transferred overseas if you are visiting our website from a country outside of Australia or New Zealand. In many cases the transfer will be necessary to provide our services.

8. Storage and security

We will use all reasonable endeavours to keep your personal information in a secure environment, however, this security cannot be guaranteed. We maintain physical security over paper and electronic data storage. All personal information about individuals is stored on servers that sit behind a firewall and are physically housed within a secure data centre. These security measures are designed to ensure your personal information is not subject to unauthorised access, loss or misuse. If you reasonably believe that there has been unauthorised use or disclosure of your personal information, please contact us (see below).

We will only store your personal information for as long as we need it for the reasons given in this privacy policy or to meet our legal and regulatory responsibilities. If we no longer need your personal information, we will take reasonable steps to destroy it or make it anonymous, in accordance with our document and information retention policy, unless we are required by law or a court or tribunal order to retain it.

Unfortunately, data security can be breached. If this happens, we have in place procedures to quickly investigate the incident and see if your personal information has been leaked. If necessary, we will tell anyone affected by a breach in line with the requirements for the mandatory data breach notification, under the Privacy Act.

9. Access to information we hold about you

You can ask to see the personal information we hold about you, and you can request correction of any such personal information. We will respond to your request within a reasonable period of time and, where it is reasonable and practical, we will give you access to the information in the format you requested, and as allowed by the Privacy Act. You may request this information by writing to:

Privacy Officer, iD4me
Floor 3
15-17 Queen St
Melbourne VIC 3000
or by telephone at 1800 566 030 or by e mail at customersupport@id4me.me

We may charge a reasonable fee for the work involved in providing you with this information and for any associated costs.

When contacting us you have the option to either not identify yourself or to use a pseudonym, provided this is practical for us to communicate with you that way.

10. Complaints information

If you have a complaint or concern about this Privacy Policy, or if you think we may not have met our responsibilities under the Privacy Act, please contact us using our details above. We will respond to all questions and concerns within a reasonable time.

If you are unhappy with how we handled your complaint, you can refer your complaint with the Australian Information Commissioner at this site: https://www.oaic.gov.au/privacy/privacy-complaints/lodge-a-privacy-complaint-with-us or to the Office of the Privacy Commissioner in New Zealand at https://www.privacy.org.nz/tuhono-connect/contact-us/ .

11. Variation

We may change the terms of this Privacy Policy at any time. You should check this Privacy Policy regularly so that keep up to date with any changes. By continuing to use our website or our services, you are agreeing to any changes. To see the most current privacy policy, please visit our website or contact us using our details above.