Privacy Statement
Last updated: 15 February 2024
About this Privacy Statement
At Sharesies, we take your privacy seriously and want to ensure that your personal information is protected. This Privacy Statement (this Statement) describes how your personal information is collected and handled by Sharesies Australia Limited (ABN 94 648 811 830) and its relevant subsidiaries, individually or collectively referred to as Sharesies (we, our or us).
When we say “your information” in this Statement, we mean personal information as defined in the Privacy Act 1988 (Cth). Any personal information you provide to us will be collected, and handled in accordance with this Statement, and in compliance with our obligations under the Privacy Act 1988 (Cth).
We may update this Statement without notice—you should review it periodically for any changes. Our latest Statement can always be found on our website or in the Sharesies app.
This Statement is read in conjunction with our Collection Notice.
Download a PDF version of this Privacy Statement.
Collection, use, and sharing
Typically, we acquire personal information directly from you. However, occasionally we may gather information about you from third parties, such as service providers who help us to verify your identity, process payments, or deliver marketing services.
Some of the personal information we collect is needed to meet our legal obligations, whilst other personal information we may collect from you to be able to provide our products and services. You do not have to give us all the information we ask for, however, it could stop us from providing our products and services to you if we need that information. In some cases we may need to close your Account, for example, to comply with anti-money laundering requirements (we’ll try to contact you before doing that).
We collect your information when you:
sign-up to the Sharesies platform
place buy or sell orders for investments
visit our website or use our app
top-up a Sharesies account or buy a gift card
sign-up up to receive education content
join Beta Club, or a feature or product waitlist
participate in other activities we offer such as competitions or surveys
contact us to make an enquiry, give us feedback or make a complaint
otherwise provide your information to us
The type of personal information we collect depends on which Services or Sharesies features you use but may include:
Personal details and contact information
The kind of personal information that might be involved:
name
residential and/or postal address
email address
phone number
images of your face and ID
date of birth
Government identifiers and identity documents
The kind of personal information that might be involved:
Tax File Number and country of tax residency
Securityholder Reference Number (SRN) or Holder Identification Number (HIN)
Medicare card, passports, driver licence or pension card copies and information
birth, death, citizenship and marriage certificates
Foreign Government Identifiers and Identity Documents
The kind of personal information that might be involved:
foreign passport/s and drivers licence
tax identification numbers and country of tax residency
Financial information
The kind of personal information that might be involved:
bank account numbers
credit card numbers
financial and investment holdings and trade history
copies of bank statements or utilities bills (proof of address)
nature and purpose of your investing
source of funds
Transaction information
The kind of personal information that might be involved:
information regarding your activity on your Sharesies account such as buying or selling, top-ups, logins
Interaction Information
The kind of personal information that might be involved:
details of your interactions with us, including when you contact us, make an inquiry, provide feedback, make a complaint or call us.
call recordings, where we monitor and record our calls with you. We will let you know if we are recording your call.
Digital information
The kind of personal information that might be involved:
IP addresses
device and browser identifiers
Geo-location
Types of authentication used (example touch or face ID)
Socio-demographic information
The kind of personal information that might be involved:
Marital status
age
gender
number of dependents
occupation
nationality.
For example, when we’re undertaking investor surveys.
Behavioural information
This includes information we generate about how you use Sharesies, for example, habitual investing with regular investments of similar amounts, search terms in-app, or lump sums investments less frequently.
Information you provide to us
The kind of personal information that might be involved:
records of your enquiries or communications with us
customer survey responses
mailing-list or waitlist sign-ups
competition entries
Sensitive Information
We may collect and handle certain sensitive information, including:
race or ethnicity, for example where you may speak with us or provide us with documents in another language or
Criminal history and political affiliation, where we need to know this information for our regulatory or legal obligations
Biometric information (such as fingerprints or face) where we use this information for the purposes of biometric identification
Information regarding your Personal Circumstances
In order to support you during our interactions with you, we may ask you to provide information about your personal circumstances, including significant life events, details of injury, illness, gambling or addition, and/or unexpected changes to your financial situation.
Information that is publicly available
There may be times where we collect and handle information that is in the public domain, such as information from:
Websites, social media sites (including Facebook, Twitter, YouTube, TikTok and Instagram)
Public registers
Podcast and webinar platforms
We may use cookies and similar technology to remember your preferences and settings, improve our security, analyse traffic and measure the effectiveness and popularity of product features or marketing. While this technology links to your device, it does not identify you personally. We may link this information to other information we collect about you to provide analytics.
How do we use your information?
We use your information to deliver our Services. How we use and disclose your personal information depends on the purpose for which we collected it, but may include:
Providing and personalising the delivery of our Services
We use your personal information for:
delivering our products and services to you
creating and updating your Account
processing trading, top-ups, withdrawals and payments
managing fees and charges on our products and services
communicating with you, providing customer support and managing our relationship with you
enable you to access our website and app
providing legal notice
notifying you of Account activity or upcoming investment opportunities that you are eligible to participate in, for example, a rights offer
collecting and recovering any money owed to us
responding to complaints
managing our security holder records
any other purpose which you have consented to or that is necessary to provide our products and services to you
Improving Sharesies
We use your personal information for:
reviewing customer feedback
testing, validating and research of products, services and systems
quality assurance of our interactions with you, including online chat, complaint purposes
protecting and optimising our website, products and service, users’ experience and business
resolving operational problems and address or escalate customer concerns
detecting and preventing fraud or crime
Creating market data and behavioural analytics
We may use de-identified records about our customers and their activity to:
provide information about the market and our investors;
improve the products and Service we offer;
develop a Service that better meet our customers’ needs and preferences; and
understand and manage our risks
Marketing
We use your personal information to send marketing or promotional messages about our products or Service, or other third-party products or services that we think might be of interest to you. You can opt out of these communications at any time by using the unsubscribe functionality.
Managing our business
We might use your information to help use run our business. Such as managing our financial position, capital requirements, business capability and testing, managing communications and audits.
Managing our security, risk, and crime prevention
We might use your information to:
Prevent, identify, and investigate suspicious or fraudulent activities
Uplift our systems to prevent cyber-attacks, unauthorised access and other criminal or malicious activities.
Complying with our legal obligations
We use your personal information to:
confirm your identity and address
monitor account activity and alert relevant authorities of potential criminal activity such as fraud, terrorist financing and money laundering
share information where required by law, for example with regulators, law enforcement agencies or tax authorities
any other purpose that is required or permitted by law or court order
De-identifying information
Sometimes we de-identify your personal information to provide insights and analytics services and share information that is de-identified with businesses and governments to help learn about generalised characteristics of customers and provide useful insights to enhance the delivery of products and services to you.
Who we share your information with
We may share your information with third parties for any of the purposes we’ve outlined above, or as permitted or required by law. The types of third parties are listed below:
Other members of the Sharesies Group
We might share your information between members of the Sharesies Group in connection with any purpose set out in this Statement.
The Sharesies Group is comprised of the various entities ultimately owned by Sharesies Group Limited (NZBN 9429048719322), this includes, but isn’t limited to the below members of the Sharesies Group:
Sharesies Australia Nominee Pty Limited (NZ) (NZBN 34 650 402 314), who supports us with providing custodial services;
Sharesies Limited (NZ) (NZBN 9429045952838), who support us with providing our products and services; and
Sharesies Nominee Limited (NZ) (9429046108982), who supports us with providing custodial services.
Our suppliers or service providers
To provide you with our products and services, and to use your information for the purposes mentioned in this Statement, we may need to liaise with third parties, some of which are based overseas and not within Australia. This includes:
stock exchanges and share registry service providers
biometric technology providers
Financial institutions, including banks
identity verification databases
investment providers
in-app messaging service providers
card payment processors
business strategy advisors
data analytics or research partners
mail-out and marketing providers, including third parties
cloud storage providers and data warehouse suppliers
our engaged advisors, consultants, auditors and business partners
Regulators and law enforcement agencies
The Australian Transaction Reports and Analysis Centre (AUSTRAC)
Australian Securities and Investments Commission
Federal Police
any other domestic or international regulatory authority where disclosure is required or permitted by law
Authorised third parties
your power of attorney
the executor or administrator of your estate
your attorney or legal representative
your legal guardian
Sending information overseas
Some of the entities we send information to are based overseas. This includes but isn’t limited to Sharesies Group members located in New Zealand and third parties operating and storing data outside of Australia, including those in New Zealand and the United States of America.
The reasons we might send your information overseas include completing international transactions and providing our products and services, or to comply with laws and assist government agencies and law enforcement.
Where we send your information overseas, we ensure there are appropriate privacy and data handling arrangements in place to protect your information.
We may share your information if we sell or merge some or all of our business or assets with another company.
We can use and share information that does not identify you for any purpose.
Storing your information
We take all reasonable steps to protect your information from misuse, interference and loss, as well as unauthorised access, modification or disclosure.
We hold your information in electronic or hard copy form on secure systems and within secure buildings. Your information is encrypted in transit and at rest using industry standard encryption practices. We use techniques such as hashing, maskings and tokenising (replacing personal information with a randomised identifier) to avoid unnecessarily displaying your information.
We have an in-house security team responsible for maintaining and continuously improving our security position. Our staff undergo information security training and your information is configured within our secure system to ensure it is only available to the people or systems that need it. Our systems undergo regular penetration testing, audits and security testing by third-party specialists to verify that systems are working as intended and we are prepared as a business to weather disruptive events with resilient architecture, backups and recovery plans.
Despite all our measures, we cannot guarantee the security of the transmission or storage of your information.
Retaining and deleting your information
We may keep your information for as long as you have an Account and for a minimum period of seven years after your Account is closed to comply with regulatory, tax, insurance and other requirements. Beyond that period we may keep your information for as long as we believe necessary for the purposes set out in this Statement, for example, we may keep your information for an indefinite time if we believe it is necessary for the purposes of fraud prevention.
Accessing your information
Most of your information held by Sharesies can be accessed through your Account. You may request that we correct inaccurate information by contacting us using the contact details set out on this Statement or contacting us through the app. If we don’t think the information needs correcting, we will let you know why.
We will take reasonable steps, consistent with our privacy obligations in the Privacy Act, to correct or update information.
Requesting access to specific information
Where you seek information that is not already available through your Account, you can request access to the specific information by contacting us using the contact detail on this Statement or contacting us through the app. We may charge an administration fee to cover the time we spend gathering the information you want. We’ll let you know how much any administration fee it is likely to be before fulfilling your request.
If you’ve made a request, we’ll try to make the requested information available to you within 30 days. If we can’t, we will let you know why we need longer.
Sometimes we are unable to share certain information with you or destroy certain information you request us to destroy because of legal reasons.
Contact us
If you have any questions about our Privacy Statement or wish to access or amend your information that we hold, please contact us at:
Email: help@sharesies.com.au.
If you have concerns that we have not met our obligations to you as required by the Privacy Act, you may contact us using the email listed above.
We value your feedback and appreciate you letting us know when you have a complaint. If you have a complaint, you can contact us, and we will take a look and try to resolve it.
You can get in touch with us via the help icon or the complaints button in the Sharesies app or through one of the below channels.
Email: help@sharesies.com.au
Mail: PO Box Q1410, Queen Victoria Building, NSW 1230
Phone: 1800 959 366 (toll-free)
Where we have not resolved your complaint to your satisfaction, you can contact the Australian Financial Complaints Authority (AFCA), our external dispute resolution provider.
AFCA provides a fair, free and independent dispute resolution for financial complaints. The details of AFCA are:
website: www.afca.org.au
Email: info@afca.org.au
Phone: 1800 931 678 (toll-free)
Post: Australian Financial Complaints Authority, GPO Box 3, Melbourne VIC 3001.
More information about your rights and our obligations in respect to privacy and information on making a privacy complaint are available from the Office of the Australian Information Commissioner at:
Website: www.oaic.gov.au
Phone: 1300 363 992
Email: enquiries@oaic.gov.au
Mail: GPO Box 5218, Sydney NSW 2001