Website security and privacy

This security and privacy statement applies to this website which is operated by Australia and New Zealand Banking Group Limited (ABN 11 005 357 522) ("ANZ") under the domain names www.anz.com and anz.com.au ("ANZ website"). The ANZ website is operated on behalf of ANZ and its related bodies corporate (together called the "Australia and New Zealand Banking Group"). The information described in this security and privacy statement may be shared between members of the Australia and New Zealand Banking Group.

This security and privacy statement may also apply to services offered by ANZ on websites hosted by third parties. If so, express reference to this security and privacy statement will be made on those websites.

ANZ understands and appreciates that you, as an ANZ website visitor, are concerned about your privacy and about the confidentiality and security of information we may gain about you online. ANZ is committed to protecting your privacy. This ANZ security and privacy statement explains how your personal information will be treated as you access and interact with the ANZ website.

As the ANZ website develops and as technology evolves, ANZ will continue to strive to provide you with better and more customised services and with a more effective website. ANZ encourages you to review the security and privacy statement periodically because the security and privacy statement may change from time to time.

The ANZ Privacy Policy (PDF) explains how ANZ generally protects your privacy and confidentiality. The principles set out in the ANZ Privacy Policy also apply to ANZ websites.

In addition to the provisions of this security and privacy statement, there may also be specific and additional privacy provisions which apply to certain sections of the ANZ website. Because those specific and additional provisions also relate to your privacy protection, you should review them wherever they are accessible by you on the ANZ website. In the event of any inconsistency between the provisions of this security and privacy statement and those other specific and additional provisions, the specific and additional provisions will prevail.

ANZ takes reasonable steps to preserve the security of cookie and personal information in accordance with the ANZ website terms of use and this security and privacy statement. If your browser is suitably configured, it will advise you whether the information you are sending us will be secure (encrypted) or not secure (unencrypted). If secure transmission is indicated, ANZ currently uses 128 bit TLS encryption as a minimum.

ANZ regularly reviews developments in security and encryption technologies. Unfortunately, no data transmission over the Internet can be guaranteed as totally secure. Accordingly, although ANZ strives to protect such information, ANZ cannot ensure or warrant the security of any information you transmit to us or from our online products or services and you do so at your own risk. Once we receive your transmission, we take reasonable steps to preserve the security of the information in our own systems.

The information that ANZ collects about you is dependent on how you use the facilities offered by the ANZ website.

If you visit an unsecure area of the ANZ website (that is, an area where you are not required to log on) to read, browse or download information, our system will record the date and time of your visit to our site, the pages viewed and any information downloaded.

The ANZ website offers a number of interactive facilities including tools such as budget planners and home loan calculators, as well as online surveys and application forms.

If you use any of the tools such as the budget planner or home loan calculator we generally do not capture any personal information that you may enter when using these tools. Exceptions to this are:

• when there is information on the page informing you that we might save your responses or your personal information; or
• when the tool allows you to suspend or save your plan and retrieve the details at a later time. In that case the information is stored on our systems so that you may recover the information when you resume your plan. Any information stored in a suspended or saved budget planner or other similar tool will not be viewed by ANZ.

If you decide to complete an online application form, ANZ may collect the personal information entered into this application form before it is submitted. ANZ may use this personal information to (amongst other things) progress your incomplete application, including contacting you or any other person about whom you provide personal information.

If you decide to complete an online survey, the information that you enter into the survey will generally only be collected by ANZ if you submit your survey. If at any stage you cancel your application or log out prior to submitting your survey, the information you have entered up to that point will be automatically deleted. An exception to this is when there is information on the page informing you that we might save your responses or personal information.

Third party websites

The ANZ website also contains links to the websites of third party providers of goods and services ("Third Party websites"). If you have accessed Third Party websites through the ANZ website and if those third parties collect information about you, ANZ may also collect or have access to that information as part of our arrangements with those third parties.

Where you access a Third Party website from the ANZ website, cookie information, information about your preferences or other information you have provided about yourself may be shared between us and the third party. You cannot usually be identified from the information that is shared; if you can be identified from this information, your information will only be disclosed and/or used where permitted by our contract with you and where relevant, your preferences about how we manage your personal information.

Third Party websites should contain their own privacy statements and those third parties are responsible for their own privacy practices.

ANZ uses Liveperson Inc. to deliver its live chat facility (LiveChat). This facility is intended to be for the benefit of users wishing to make inquiries about a banking product in the Australian market. If you decide to participate in LiveChat, ANZ (via Liveperson Inc) may collect any personal information provided or otherwise made accessible via LiveChat.

ANZ may use/disclose this information to respond to your query, for administrative and operational purposes (including to help improve our quality of service and for staff training and coaching) and for any other purpose which is required or authorised by law.

Depending on your inquiry, if you do not provide your personal information, ANZ may not be able to assist you with your request.

ANZ may disclose this information to other parts of ANZ and ANZ’s related entities; ANZ’s agents, contractors and/or service providers; regulatory bodies, government agencies, law enforcement bodies and courts and other parties we are authorised or required by law or court/tribunal order to disclose information to (some of which may be based overseas).

We won’t ask you for sensitive information, account numbers or passwords, and for your security, please don’t provide this information.

ANZ’s Privacy Policy contains information about any laws that require or authorise ANZ to collect certain information from you, further details on when ANZ may collect your information from other sources (including from a third party), details about the location of offshore recipients, how to access the personal information ANZ holds about you,  how you can seek to correct it, how you can raise concerns if you believe that ANZ has breached the Privacy Act or an applicable Code, and how ANZ will deal with these matters.

Before you provide us with personal information about someone else, we require that you show them a copy of this notice so that they can understand how ANZ intends to handle their personal information.

General online security

ANZ uses trusted third-party online security service providers to protect your online security when using ANZ Internet Banking and ANZ Transactive Global. As part of this service, the third party collects and analyses information from your browser session to detect security threats or vulnerabilities that may be on or associated with your computer or device. The information collected by the online security service is collected from your browser. It may include IP address, a unique session identifier, web-browser type and version, HTTP headers and malicious software data.

If no vulnerabilities or threats are detected, ANZ has arranged that the information collected from your browser should be deleted by the third party within 24 hours. If vulnerabilities or threats are detected, the information is provided by the third party to ANZ for security purposes. This information is held by the third party in Australia. If vulnerabilities or threats are detected, the information may also be transferred to and held by the third party in the United States for the purposes of providing better online security threat detection services.

Behavioural biometrics

To help protect you from fraud and minimise security risks, we’ve enhanced the security in ANZ Internet Banking with behavioural biometrics.

ANZ and its trusted service providers collect behavioural information about how you use ANZ Internet Banking— information like typing speed, browsing patterns, scrolling, or swiping patterns. We will use this information, along with other relevant personal information that we may already hold or collect about you, to help us detect when someone other than you is accessing your account.

This behavioural information is securely collected and shared with our trusted security partners.

This behavioural information will never be used (by ANZ or any other party) for marketing or promotional purposes.

Users to take their own precautions

Security tools used by ANZ should not be considered a substitute for or alternative to customers undertaking their own precautions and protective measures including maintenance of appropriate anti-virus software.

Your IP address is the identifier for your computer or device when you are using the internet with regards to geo-locations, network domains and servers.

ANZ collects your IP address when you interact with various parts of the ANZ website and other digital solutions (e.g. Internet Banking and ANZ Transactive Global).

We collect and store your IP address for security and audit purposes and as described under the heading Information collected by online security service below. For instance, ANZ collects and stores your IP address when you log onto an Electronic Banking Channel. ANZ uses this information when we attempt to detect and prevent fraudulent transactions in its Electronic Banking Channels.

ANZ uses advertising companies (e.g. Google and Facebook) to deliver online advertising where ANZ banner advertisements are placed on Third Party websites.

When you view an ANZ advertisement on a Third Party website, the advertising company uses cookies and in some cases ‘web beacons’ to collect information such as:

• the server your computer is logged onto
• your browser type
• the date and time of your visit
• the performance of their marketing efforts

When you access the ANZ website after viewing an ANZ advertisement on a Third Party website, the advertising company may collect information on how you use the ANZ website (e.g. which pages you view) and whether you complete an online application.

In addition, ANZ also uses web analytics service providers to collect information on how you use the ANZ website, using cookies to collect information similar to that collected by the advertising company.

The advertising companies and ANZ use this information to perform statistical analyses of aggregate user behaviour.

ANZ uses these analyses to measure advertising effectiveness and relative consumer interest in the various areas of the ANZ website.

This information is also used to present content on ANZ.com and Third Party websites that ANZ believes may be relevant to you.

We may preserve the content of any electronic messages (e.g. email or live chat messages) that you send us. This message content may be monitored by ANZ for security issues. Our response to you may also be monitored for quality assurance.

We will only use or disclose personal information or information generated by cookies in accordance with our contract with you, the ANZ Privacy Policy (PDF), any specific and additional provisions relating to privacy which apply to certain areas of the ANZ website and as otherwise set out in this security and privacy statement.

You agree and accept that your use of the ANZ website indicates your acceptance of the ANZ website terms of use and the security and privacy statement.

This is the current security and privacy statement. It replaces any other security and privacy statement for the ANZ website published on the ANZ website to date. ANZ may at any time vary the security and privacy statement by publishing the varied security and privacy statement on the ANZ website. You accept that by doing this, ANZ has provided you with sufficient notice of the variation.