privacy policy

Access the HESTA Privacy Policy

privacy collection statement

 

This Privacy Collection Statement relates to personal information collected by H.E.S.T. Australia Limited as trustee for HESTA (ABN 64 971 749 321) (referred to in this Policy as "us", "our", or "we") or by our service providers on our behalf.

 

 HESTA
Call1800 813 327
Emailhesta@hesta.com.au 
OnlineHESTA complaints

Collection of Personal Information

 

We collect and hold information about you when it is necessary for us to carry out one or more of our functions and activities as a superannuation trustee and provider of financial products and services. The information we collect and hold about you may include:

 

Types of personal informationDescription
Personal and contact details

Your name, date of birth, gender, signature, mailing and residential address, phone number and email address.

 

Beneficiary information

This may include personal details about your beneficiaries, e.g., spouse, child or dependent, guardianship or Power of Attorney.

 

Sensitive information

We may ask for sensitive information about you on occasion. This may include:

  • health information where this is relevant for insurance purposes or a claim;
  • the languages you speak (if a translator is requested), or if you require assistance to communicate with us.

We will obtain your consent to collect and hold any sensitive information.

 

Australian Government related identifiers and other identification documents

This may include:

  • Tax File Number
  • Australian passport details
  • Driver licence details
  • Medicare details
  • Name change documents (eg Marriage certificate, Deed poll, Change of name certificate, Divorce decree or Registered relationship certificate)
  • Centrelink Customer Reference Number
  • Foreign passport and Australian visa details

These may be needed to verify your identity or for processing certain applications or requests.

 

Financial and employment information

Information about your employment status and employer, bank account details, bank statements, general financial information, government support income, superannuation contributions and withdrawals, and investment preferences.

 

Call recordings

We monitor and record our calls with you. We will let you know if we are doing this.

 

Digital information

When you access our website, digital applications or emails, we may collect the following information:

  • Location
  • Geo-location
  • Device ID
  • Computer and network information
  • Page view data
  • Site traffic
  • Ad information
  • IP address
  • Web logging data

The digital information we collect is generally aggregated or deidentified.

Personal circumstance information

We may ask for information about your personal circumstances when the information is necessary and relevant to the provision of advice, handling of insurance claims, processing your requested transaction/s such as split requests, applications, or complaints.

If we consider any information to be sensitive in nature, we will obtain your consent for the collection and holding of sensitive information.

 

 

 

We collect personal information in a fair and lawful manner. Personal information is generally collected directly from you, however, from time to time we may collect personal information about you from others.

 

We generally collect personal information directly from you in the following ways:

  • via forms or over the phone when you are applying for our products and services;
  • through access and use of our website including registering for our online services;
  • when you enter promotions, competitions or respond to surveys;
  • when you sign up to join any of our online communities;
  • with your express consent when you access any applications within HESTA's social media accounts;
  • when you download and use any of our digital publications or mobile applications;
  • during conversations with our HESTA representatives; and
  • through emails and written communications.

 

We may collect your information from the following third-party sources:

  • your employer when they contact us directly relating to a superannuation product or service or when they send us a superannuation contribution;
  • government agencies, such as ATO and Centrelink, when we process your application or request to access our products and services;
  • another superannuation trustee when you roll over your superannuation funds to or from HESTA;
  • your representatives or financial advisers when they are authorised to act on your behalf;
  • your insurers or health and medical practitioners when processing your insurance claim or assessing an application for changes to your insurance cover;
  • our online community (for example, Have A Say) hosted on a third-party platform when you participate in our surveys, competitions, promotions or any market research related activities; and
  • our service providers who collect information on our behalf relevant to our business functions and activities and who you would reasonably expect us to collect from, you may find more information about our service providers in section 6 and section 7 of this policy.    

 

We may collect personal information about you through analytical processes that generate inferences, predictions and derived insights from data we possess. This may include identifying the presence of risk factors for vulnerability.

 

Sensitive information may be collected from the person to whom the information relates, from insurers, medical practitioners or from employers, but only where it is reasonably necessary and the person has given consent. In the event that we are required to collect sensitive information, we will notify you of this at the point of collection and obtain your consent to collect and hold this sensitive information.

 

If you provide us personal information about other individuals (such as a spouse/partner, dependants or nominated beneficiaries), you are responsible for:

  • telling them that you have provided their personal information to us; and
  • giving them our Privacy Collection Statement and this Privacy Policy so they understand how we will use their information and what their privacy rights are.

 

For some types of information we request, you can choose not to provide it. However, if we are unable to collect the information, or the information provided is not complete or accurate, this may:

  • prevent or delay the processing of requests;
  • affect eligibility for insurance cover or insurance benefits;
  • prevent us from contacting you;
  • affect the personalisation of our services to you; or
  • have taxation or legal consequences.

 

Use or Disclosure of Personal Information

 

We may use and disclose your personal information that we have collected for the purpose of carrying out our functions and activities as a superannuation trustee and provider of financial products and services. These functions and activities may include the following:

  • providing you with information, products or services you have requested;
  • establishing membership with HESTA and verifying identity;
  • managing, administering, investing, and paying or transferring superannuation benefits;
  • assessing eligibility for insurance cover or insurance benefits;
  • assessing potential insurance and/or death benefit claims;
  • managing and resolving complaints made;
  • providing financial education and advice;
  • providing mandatory disclosures such as significant event notices and account statements;
  • improving our business and the products and services we offer;
  • personalising and customising your experiences on our website or applications, including displaying content and information relevant to you;
  • marketing and advertising our products and services to you (which you may opt out of at any time);
  • conducting market research and analysis on our member data and the products and services we offer;
  • complying with our legal obligations, responding to legal process requests, court or tribunal orders or requests from law enforcement bodies in accordance with relevant laws, including (but not limited to):

-Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth);

-Income Tax Assessment Act 1936 (Cth);

-Superannuation Industry Supervision Act 1993 (Cth); and

-Family Law Act 1975 (Cth);

  • for any other use required or permitted by law or any other purpose communicated to you at the time that the personal information was collected or for which you provided your consent.

 

Dis-aggregated or de-identified information may be used for the purposes of data analysis, research, reporting and advocacy.

 

If we collect or use personal information in ways other than as stated in this Policy, we will do so in accordance with the Privacy Act. This includes employing artificial intelligence (AI) solutions to support and improve our operational processes, enhancing member personalisation, or protecting information security.

 

Disclosure Of Personal Information to External Parties

 

In some circumstances your personal information may be disclosed to and/or stored by third parties outside of Australia, including where we engage a third-party service provider located outside of Australia, or, where an Australian third-party service provider engages a sub service provider located outside of Australia.

 

This includes:

Our fund administration services provider:

  • Our current fund administration services provider: Grow Super Ops Pty Ltd ABN 83 617 346 568 (subsidiary of Grow Inc.). The countries your personal information may be disclosed to by Grow Inc. are listed in GROW Inc. Privacy Policy: https://www.grow.inc/legal/privacy-policy; and
  • Our former fund administration services provider: MUFG Pension & Market Services Holdings Limited ABN 62 003 429 114 (MUFG), ceased providing administration services on our behalf from 19 April 2025. However, for records up to and including 19 April 2025, MUFG will continue to retain records for a limited period.  The countries your personal information may be disclosed to by MUFG are listed in the MUFG Privacy Policy: https://www.mpms.mufg.com/en/policy-statements/privacy/mufg-pension-market-services-privacy-policy/.

 

Our insurance provider: AIA Australia Limited ABN 79 004 837 861 (AIAA). The countries your personal information may be disclosed to by AIAA are listed in the AIAA Privacy Policy: https://www.aia.com.au/en/privacy-policy.

 

Microsoft, who provide various services to HESTA, may process your personal information in any of their global data centres. 

 

We may share your information with other service providers who store data or operate overseas, such as the United States of America. If we do this, we will make sure that there are appropriate contractual obligations and protections to safeguard the security of your personal information and compliance with the APPs.

 

Our Privacy Policy

More information is available free of charge in our Privacy Policy (PDF) or by calling HESTA. It also contains information about how you can get access to information we hold about you, how to seek correction of that information, how to make complaints about privacy and how we will deal with those complaints.