Privacy Policy

About this Privacy Policy

This Policy is about you, your information and what RECOVER MY IDENTITY requires about you to perform our services. We have tried to write it in a way that uses plain language. In this Policy, we inform you about the personal information we collect, retain, use and share with others. It’s important to us that you understand this, and that if you object, the ways you can tell us.

Business Purpose

Privacy laws mention terms like “business purpose” when it comes to collecting personal information. RECOVER MY IDENTITY’s primary business purpose is providing services to community members impacted by identity theft, cyber crimes, scam and data breaches. We do this in a few ways, including the App (working with individuals to respond to risks), response and protection services (how we can proactively engage others on your behalf to reduce risks relating to the misuse of your identity).That’s why a big part of what we do is educational – informing people about what’s occurring, how to prevent, and how to respond.

What We Collect, Why and How

To perform our business purpose, RECOVER MY IDENTITY collects personally identifiable information in the following ways:

Website Usage

RECOVER MY IDENTITY’s websites (www.RecoverMyIdentity.com and www.Recover MyIdentity.co.nz) stores cookies on your computer. These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information in order to improve and customise your browsing experience and for analytics and metrics about our visitors to our websites and social media platforms. Users may disable cookies when on these sites.

Identity Verification (including the App)

Where clients seek RECOVER MY IDENTITY’s assistance to respond on their behalf in the protection of their personal, account and/or credential information, clients will be required to complete a formal identity verification process (‘Verification’). This process requires RECOVER MY IDENTITY to verify an individual’s identity, document or related data. Verification data can include the capture of some or all of the following:

Facial image;
Full name;
Date and place of birth;
Residential address;
Telephone number (Mobile and a Landline);
Email address;
Employer’s name;
Passport number and expiry date (if no Australian or New Zealand Driver Licence);
Driver licence number, card number, and expiry date;
Proof of Age Card (if no Australian or New Zealand Passport or Driver Licence);
ImmiCard (if no Australian or New Zealand driver licence);
New Zealand Certificate of Identity (if no New Zealand driver licence);
Medicare number and Expiry Date.

We request this information so that we can verify the identity of our clients in order to act on their behalf with external responding organisations when an identity is at risk of misuse. Verification processes also rely on searching personally identifiable information, provided to RECOVER MY IDENTITY by individuals against third party information sources, including identity validation and verification services.

Additional protection and response services may be offered and accessible to individuals via the App. These services, if requiring additional action by users, such as the completion of online forms and the application of response measures by third parties on behalf of clients, are subject to separate RECOVER MY IDENTITY or third party (if delivered by third parties) Terms & Conditions. Where such services rely on responses by third parties, such as Credit Reporting Agencies, law enforcement, financial institutions, and identity credential issuers, individual users will be subject to the third-party Terms & Conditions and Privacy Policy provisions. This will be made clear in the relevant RECOVER MY IDENTITY Terms & Conditions.

RECOVER MY IDENTITY operates a "defence in depth" approach to the information it collects, stores and communicates, including, but not limited to:

All data transmitted over the internet is done over HTTPS;
Cloudflare is used extensively to block potentially malicious requests. Rate limits on APIs are implemented at both the code level and via Cloudflare;
Regular security scans are performed to identify code or configuration vulnerabilities;
Firewalls are employed to limit access to services running on Microsoft Azure;
All handling of personal information by staff is subject to specific policies and guidelines which are reviewed regularly for compliance;
Data at rest is encrypted;
Staff are regularly assessed and educated about cyber security threats and threat response;
Any and all investigations performed of malicious code, sites and dark net actions are performed using external networks, interfaces and unattributable settings.

Direct Marketing

‍‍Unless otherwise stated in the Terms & Conditions of a specific service, RECOVER MY IDENTITY shall not use the personal information acquired for the purposes of direct marketing. Should an individual client or organisation request of RECOVER MY IDENTITY to perform protection and response services involving a third party or if RECOVER MY IDENTITY recommends actions that involve a individual client or organisation engaging another party, then RECOVER MY IDENTITY is not responsible for any subsequent direct marketing that party may perform or have performed by others. These conditions will be subject to the third party’s Terms & Conditions and any related Privacy Policy they have.

Overseas Collection & Sharing of Personally Identifiable Information

RECOVER MY IDENTITY as a trans-Tasman organisation shall at times require information be stored or backed-up on either side of the Tasman (Australia and New Zealand). This means that personally identifiable information collected from or on Australians and New Zealanders in the course of delivering our business purpose may be stored in Australia or New Zealand. RECOVER MY IDENTITY individual client and organisational subscriber services may also require that such information, as per this privacy policy, be shared with third parties that operate on either side of the Tasman (Australia and New Zealand) in order to achieve our business purpose.

Retention of Personally Identifiable Information

RECOVER MY IDENTITY only retains personal information for as long as is it is required for the purposes protecting and responding to risks relating to such information. Individuals may request at any time that information RECOVER MY IDENTITY has collected about them is corrected or permanently deleted (see next section). Case information is anonymised (de-identified) and retained for statistical analysis, such as time series analysis. This information is backed-up periodically and stored in a non-networked or Internet-enabled environment.

Access, Deletion, Correction, Feedback and Complaints

If you wish to access information collected by RECOVER MY IDENTITY relating to your circumstances, seek correction of information held about these circumstances, have your personally identifiable information deleted, or make a complaint about how we have dealt with your matter, please send a written request, including your case number, to:

Privacy Officer RECOVER MY IDENTITY PO Box Caloundra QLD Australia 4551.

Requests may also be emailed using our feedback form, with the words “Attn: Privacy Officer” in the subject line accessed at www.Recover My Identity or by emailing direct recovermyidentity@outlook.com

RECOVER MY IDENTITY will inform you via your preferred contact channel of the result of your request within 30 days.

If we have not resolved your issue to your satisfaction and within our responsibilities, complaints about RECOVER MY IDENTITY and the handling of your personal information may be made to the relevant Privacy Commissioners in Australia and New Zealand: (www.oaic.gov.au/ ph: 1300 363 992 and www.privacy.org.nz/ ph: 0800 803 909). These organisations have extensive materials about your privacy rights and response considerations.