Privacy Policy

Effective June 2026 | Replaces all prior versions

Introduction

This Privacy Policy is issued by Cohabit Technology Group Pty Ltd (ABN 93 688 293 736) as the head company of the Cohabit Group. In this Policy, 'we', 'us' and 'our' refers to Cohabit Technology Group Pty Ltd and each of its related body corporates listed below (together, the 'Cohabit Group' or 'Cohabit').

Cohabit Technology Group Pty Ltd (ABN 93 688 293 736) — head company
Cohabit Holdings Pty Ltd (ABN 53 688 294 377)
Cohabit Platforms Pty Ltd (ABN 97 688 294 500)
Cohabit Insurance Pty Ltd (ABN 77 694 152 308)
O'Connors Property Reports Pty Limited (ABN 51 056 002 941)

Each entity in the Cohabit Group may collect, hold, use, and disclose personal information in connection with its own products and services. This single Policy applies to all entities. Where an entity operates under a distinct brand or product (for example, O'Connors Property Reports), references to 'Cohabit' in this Policy include that entity and its branded services. We take privacy seriously across every part of the Cohabit Group. Whether you engage us for insurance advice, property reports, platform services, or any other offering, we are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, and manage personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our services, website, or applications, you agree to the practices described in this Policy.

If you do not agree, please cease using our services and contact us. 'Personal information' means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether true or not and whether recorded in a material form or not.

Personal Information We Collect

The personal information we collect depends on how you interact with us.

A. Insurance & Service Information

Full name, address, and contact details
Date of birth
Property, asset, and financial details
Insurance history and claims data
Health information (where relevant to underwriting, with consent or as permitted by law)
Identity verification documents (e.g. driver's licence, passport)
Payment and billing details

B. Account & Platform Information

Account login credentials
User preferences and settings
Communication history
Uploaded documents
Support enquiries

C. Employment Information

If you apply for a position with us, we may collect employment history, academic background, references, and background screening information where permitted by law. This Policy does not apply to the records of current or former employees to the extent such records are exempt from the Privacy Act.

D. Device & Technical Information

When you use our website or apps, we may automatically collect:

IP address and approximate location
Device type, operating system, and browser type
App version and device identifiers
Log data, crash reports, and usage analytics
Session data and page-view statistics

E. Location Data

Our apps may request access to precise or approximate location data where required for service functionality. You can disable location permissions at any time in your device settings.

F. Sensitive Information

We only collect sensitive information (including health information) where reasonably necessary for our insurance services and either with your consent or as otherwise permitted by law. We do not collect information about racial origin, political opinions, or religious beliefs unless required by law.

How We Collect Personal Information

We collect personal information in the following ways:

Directly from you via online forms, account registration, telephone, email, or in-person interactions
When you arrange insurance or manage a claim with us
Through cookies, analytics tools, and native app SDKs
From insurers, underwriting agencies, and other service providers
From identity verification and credit reference providers
From related entities or authorised representatives
From publicly available sources

If you provide personal information about another person (for example, a co-insured), you confirm that you are authorised to do so, that you have made that person aware their information will be shared with us, and that they consent to our handling of their information in accordance with this Policy.

You may interact with us anonymously or using a pseudonym for general enquiries. However, we may be unable to provide our services if we cannot identify you.

How We Use Personal Information

We use personal information to:

Arrange, manage, and renew insurance products and provide advice
Process claims and recover unpaid amounts (including engaging debt collection agencies where necessary)
Verify your identity and administer your account
Process payments and manage billing
Communicate updates, renewals, policy changes, and support information
Improve our services, platform, and user experience
Conduct research and analytics (including combining behavioural data with personal information)
Comply with legal, regulatory, and reporting obligations
Detect and prevent fraud, misuse, or security threats
Consider employment applications

If you do not provide necessary information, we may be unable to deliver requested services.

Sharing Your Information

We may disclose personal information to:

Insurers, reinsurers, underwriting agencies, and insurance reference bureaus
Third-party service providers who assist us in operating our business and platform (including IT, cloud hosting, analytics, security, payment processors, and communications providers)
Identity verification and credit reference agencies
Professional advisers including lawyers, accountants, and auditors
Debt collection agencies, where necessary to recover unpaid amounts
Related companies within our corporate group
Prospective purchasers or investors in our business or assets
Courts, law enforcement agencies, regulators, and government bodies, as required or permitted by law
Any third party you have specifically authorised

We do not sell personal information to third parties. We require all third parties to whom we disclose personal information to handle it in accordance with applicable privacy laws and contractual obligations.

Marketing, Profiling, and Personalisation

We may use your information to send you service updates, newsletters, and information about relevant products and offers. We may personalise website and app content and combine behavioural data with your personal information to improve the relevance of communications.

Marketing communications may be sent by email, SMS, mail, push notification, or telephone in accordance with the Spam Act 2003 (Cth) and other applicable marketing laws.

You can opt out of marketing at any time by:

Using the opt-out link in any electronic communication
Deactivating push notifications in your device settings
Contacting us at compliance@cohabit.com.au

Opting out of marketing does not affect service-related or transactional communications.

Automated Decision-Making

Some insurance underwriting decisions are made by insurers using automated systems. Where we facilitate the provision of your information into those systems, we will inform you of this where required by law.

Cohabit does not independently use automated decision-making that produces legal or similarly significant effects on individuals without meaningful human oversight and the ability for you to request a human review.

Where any automated processing is material to a decision affecting you, you have the right to:

Request an explanation of the decision
Express your point of view
Request human review of the decision

Mobile Applications (iOS and Android)

App permissions

Our apps may request access to:

Camera (for document uploads)
File storage
Notifications
Location services (where required for service functionality)

You can manage all permissions at any time in your device settings.

App Tracking Transparency (iOS)

Our iOS applications comply with Apple's App Tracking Transparency framework. Where required, we will request your permission before tracking your activity across apps or websites owned by other companies for targeted advertising purposes.

Third-party SDKs

Our apps may use third-party SDKs for analytics, performance monitoring, security, push notifications, and crash reporting. These providers may collect device-level information in accordance with their own privacy policies. We select SDK providers carefully and review their privacy and security practices.

Cookies, Tracking Technologies & Advertising

We use cookies, pixels, web beacons, and similar technologies on our website to:

Analyse usage trends and improve functionality
Enhance security and prevent fraud
Measure advertising performance
Provide a personalised experience

Third parties (such as analytics or advertising partners) may also place cookies on our website. You can manage cookie preferences through your browser settings; disabling some cookies may affect functionality.

We respond to legally required opt-out signals (such as Global Privacy Control) where applicable.

For more information about cookies and how to manage them, visit www.aboutcookies.org or www.allaboutcookies.org.

Cross-Device & Cross-Platform Data

Where you are logged into your Cohabit account, we may link data collected across devices and platforms to provide a consistent user experience. We do not engage in unlawful cross-context behavioural advertising.

Overseas Disclosure & Data Hosting

Although we operate in Australia, some of our service providers and technology partners are based overseas. We may disclose personal information to:

Overseas insurers, reinsurers, and underwriting agencies (for example, Lloyd's of London syndicates)
Cloud hosting and technology providers
Support and administrative service providers

Countries to which your information may be disclosed include the Philippines, Vietnam, and the United States. If we seek insurance terms from an overseas insurer, we will advise you of the country in which that insurer is located at the time of the advice. This list may change as our operations evolve.

Before disclosing personal information overseas, we take reasonable steps under APP 8 to ensure the overseas recipient does not breach the APPs in relation to that information — for example through contractual obligations or adequacy assessments. In circumstances where such steps are not practicable, we will seek your consent before disclosing your information.

You may contact us at any time to request information about the safeguards we have in place for overseas disclosures.

Data Retention

We retain personal information only for as long as necessary to:

Provide our services and manage your account
Meet legal, regulatory, and reporting obligations
Resolve disputes and enforce our agreements

Insurance and financial services regulations may require extended retention periods beyond the end of your relationship with us. When personal information is no longer needed, we destroy or de-identify it using secure methods.

Security

We implement reasonable technical and organisational safeguards to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. These include:

Encryption of data in transit and at rest
Firewalls and intrusion detection
Multi-factor authentication
Role-based access controls
Secure hosting environments
Confidentiality obligations for all staff and contractors

No internet transmission is completely secure, and we cannot guarantee absolute security. Please protect your own login credentials and notify us immediately if you suspect any unauthorised access to your account.

Data Breach Response

If we experience a data breach likely to result in serious harm to affected individuals, we will comply with our obligations under the Notifiable Data Breaches (NDB) scheme, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.

Your Rights and How to Exercise Them

Access and correction

Under the Privacy Act 1988 (Cth), you have the right to access and correct the personal information we hold about you. To make a request, contact us at compliance@cohabit.com.au with enough detail to identify the information sought. We will provide access unless we are lawfully permitted to withhold it, and we will explain any refusal in writing. We may need to verify your identity before processing a request. Access is generally provided at no charge; however, where records are archived, a reasonable retrieval fee may apply and we will advise you in advance.

Withdrawal of consent

Where we rely on your consent to collect or use personal information, you may withdraw that consent at any time by contacting us. Withdrawal will not affect anything we have already done in reliance on your consent, but we may be unable to continue providing certain services without it.

Office of the Australian Information Commissioner

If you are not satisfied with how we have handled your personal information, you may contact the OAIC at www.oaic.gov.au or by calling 1300 363 992.

We may refuse requests where permitted by law and will provide reasons.

Third-Party Websites and Links

Our website and apps may contain links to third-party websites, social media platforms, or embedded tools. We are not responsible for the privacy practices of those third parties. We recommend you review the privacy policy of any third-party site you visit.

Website Content and Online Forms

The information provided on our website is general in nature and does not constitute professional advice. We make no warranty as to the accuracy, completeness, or currency of website content, and you should seek independent advice before acting on any information published on our site.

Our website allows visitors to submit information via online forms (for example, quote requests, contact forms, and claim notifications). Please be aware that information submitted via online forms or email may not be encrypted in transit. If you are concerned about transmitting sensitive information electronically, please contact us by telephone instead.

Children

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children without appropriate parental or guardian consent. If you believe we have inadvertently collected information from a child, please contact us and we will promptly delete it.

Changes to This Policy

We may update this Policy from time to time to reflect changes to our services, technology, or legal obligations. Where changes materially affect your rights, we will take reasonable steps to notify you in advance (for example, by email or an in-app notification). The latest version will always be available on our website.

Complaints

If you believe we have breached this Policy or applicable privacy laws, please contact our Privacy Officer with your name, contact details, and a clear description of your concern:

Privacy Officer — Cohabit Technology Group Pty Ltd

Email: compliance@cohabit.com.au

We will acknowledge your complaint within 24 hours and aim to provide a substantive response within 30 days. If we require additional time, we will advise you.

If we need to refuse a complaint outcome or an access request, we will explain the reasons in writing.

If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.

Your Consent

By using our services, website or apps, you consent to the collection, use and disclosure of your information as described in this Privacy Policy.

Contact Us

For any privacy-related questions, access or correction requests, or to exercise any right described in this Policy:

Cohabit Technology Group Pty Ltd

Email: compliance@cohabit.com.au

Website: cohabit.com.au