On this page
About this policy
YP Securities Limited (ACN 647 627 889 | ABN 41 647 627 889), holder of Australian Financial Services Licence No. 531729, is bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. In this policy, we, us and our mean YP Securities Limited.
This policy explains how we collect, hold, use and disclose personal information, how you can access and correct the information we hold about you, and how to complain if you think we have mishandled it. It applies to information collected through this website, through our authorised representatives, and in the ordinary course of providing our services.
Information we collect
The personal information we collect depends on our relationship with you. It may include:
- Identity information — your name, date of birth, residential and postal address, and the details of identification documents such as a passport, driver licence or Medicare card.
- Contact information — email address, telephone numbers and preferred method of contact.
- Financial information — details of your financial situation, assets and liabilities, income, investment holdings, tax file number where you choose to provide it, and bank account details.
- Relationship information — details of beneficial owners, directors, trustees, partners and controlling persons where our client is a company, trust, partnership or other non-individual entity.
- Professional information — qualifications, employment history, professional memberships, criminal history and reference checks, where you are or apply to become a representative of ours.
- Interaction records — correspondence, file notes, recordings of telephone calls where you have been notified, and records of complaints.
We collect sensitive information only where it is reasonably necessary for our functions and you have consented, or where the collection is required or authorised by law.
How we collect it
Wherever it is reasonable and practicable to do so, we collect personal information directly from you — through application and onboarding forms, correspondence, telephone conversations, meetings and this website.
We may also collect personal information about you from third parties, including our authorised representatives, your financial adviser or accountant, your attorney or authorised signatory, identity verification and credit reporting bodies, product issuers and platform operators, publicly available registers such as those maintained by ASIC, and sanctions and politically-exposed-person screening providers.
If we collect personal information about you from someone other than you, we will take reasonable steps to make you aware of the collection unless doing so would be inconsistent with our obligations under another law.
Why we collect, hold, use and disclose it
We collect and use personal information to:
- establish and verify your identity, and satisfy our obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth);
- assess applications, open and administer accounts, and provide the financial services authorised under our licence;
- appoint, supervise and monitor our authorised representatives and their representatives;
- meet our obligations as an Australian financial services licensee, including record-keeping, monitoring and supervision, breach reporting and regulatory correspondence;
- respond to enquiries, requests and complaints;
- comply with our obligations under the Corporations Act, taxation law, and any other applicable law or regulator request.
If you do not provide the personal information we request, we may be unable to provide services to you, and in some cases we are prohibited by law from doing so.
Anti-money laundering and counter-terrorism financing
As a reporting entity, we are required to identify and verify our customers and, where applicable, their beneficial owners; to conduct ongoing customer due diligence; and to report certain matters to the Australian Transaction Reports and Analysis Centre (AUSTRAC).
Where we are required to submit a suspicious matter report, the law prohibits us from telling you that we have done so. We may also be required to delay, refuse or discontinue a transaction or a relationship without explaining why. Nothing in this policy overrides those obligations.
Who we disclose personal information to
We may disclose personal information to:
- our authorised representatives and their representatives, where relevant to the services being provided to you;
- service providers who perform functions on our behalf — including identity verification providers, technology and data hosting providers, custodians, registries, mail houses, professional advisers, auditors and archival services;
- regulators and government agencies, including ASIC, AUSTRAC, the Australian Taxation Office and law enforcement, where required or authorised by law;
- the Australian Financial Complaints Authority, where a complaint has been referred to it;
- your nominated adviser, accountant, attorney or other representative you have authorised;
- a prospective purchaser or successor in the event of a sale or restructure of our business, subject to appropriate confidentiality arrangements.
We require our service providers to protect personal information consistently with this policy and the Australian Privacy Principles, and to use it only for the purpose for which it was provided.
Overseas disclosure
Some of our service providers, and some of the technology platforms we use, may store or process personal information outside Australia. Where that occurs, we take reasonable steps to ensure the recipient handles the information in a manner consistent with the Australian Privacy Principles.
[Countries in which recipients are likely to be located — to confirm and list here.]
Direct marketing
We may use your contact details to tell you about our services and about developments relevant to your relationship with us. You can opt out at any time by using the unsubscribe facility in any electronic message, or by contacting us at privacy@ypsecurities.com.au. We do not sell personal information, and we do not disclose it to third parties for their own direct marketing purposes.
Data quality and security
We take reasonable steps to ensure the personal information we hold is accurate, up to date, complete, relevant and not misleading, and to protect it from misuse, interference and loss, and from unauthorised access, modification or disclosure. Those steps include access controls, staff training and confidentiality obligations, secure storage and transmission, and contractual protections with our service providers.
We retain personal information for as long as it is needed for the purposes described in this policy and for as long as we are required to retain it by law — which, for records relating to the provision of financial services and for AML/CTF records, is generally at least seven years. When information is no longer required, we take reasonable steps to destroy it or to ensure it is de-identified.
If we suffer a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
Access and correction
You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Please make your request in writing to privacy@ypsecurities.com.au. We may need to verify your identity before we act on the request.
We will respond within a reasonable period, ordinarily within 30 days. We do not charge for making a request, though we may charge a reasonable fee for the cost of providing access. If we refuse access or correction we will tell you why in writing, and explain how you can complain about that decision.
Website, cookies and analytics
When you visit this website our web server may record your IP address, the date and time of your visit, the pages you accessed, the browser and operating system you used, and the site you came from. This information is used in aggregate to administer and improve the website.
We may use cookies — small text files placed on your device — to enable site functionality and to understand how the site is used. You can configure your browser to refuse cookies or to notify you when one is set, though some parts of the site may not function properly if you do.
[If analytics, advertising or third-party tracking tools are used on the site, they must be identified here — to confirm.]
Privacy complaints
If you believe we have breached the Australian Privacy Principles or otherwise mishandled your personal information, please contact us at privacy@ypsecurities.com.au. We will acknowledge your complaint promptly, investigate it, and respond in writing — ordinarily within 30 days.
If you are not satisfied with our response, you may refer the matter to the Office of the Australian Information Commissioner: 1300 363 992, oaic.gov.au, GPO Box 5218, Sydney NSW 2001. Where your privacy complaint relates to a financial service we have provided, you may instead refer it to the Australian Financial Complaints Authority — see our complaints policy.
Changes to this policy
We may update this policy from time to time to reflect changes in our practices or in the law. The current version is always available on this website, and the version number and date appear at the top of this page.
Contact us
Privacy enquiries, access and correction requests, and privacy complaints should be directed to the Privacy Officer at privacy@ypsecurities.com.au.