This document is the Privacy and Credit Reporting Policy (Policy) of Lumo Energy Australia (ABN 69 100 528 327) and its related entities listed at the end of this document (Lumo Energy, we, us or our). It provides you with information about how we collect, store, use and disclose your personal and credit-related personal information and how you may request access to your personal and credit-related personal information. This policy also applies to the use of the website operated by Lumo Energy under the domain name www.lumoenergy.com.au (website). If you have any questions regarding this Policy, you should contact the Lumo Energy Privacy Officer in any of the ways specified under "Contact us" below.
We reserve the right to change this Policy at any time by posting an updated version of this Policy on our website. You should visit this page periodically to review this Policy for changes.
"Personal information" is information or an opinion, whether true or not and whether recorded in a material form or not, about an identified individual, or an individual who is reasonably identifiable, and includes sensitive information. "Sensitive information" has the same meaning as in the Privacy Act 1988 (Cth) (Privacy Act). It includes information or an opinion about an individual’s racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual orientation, criminal record, and health or biometric information.
We will only collect personal information about you if you provide it to us knowingly or otherwise in accordance with this Policy. We collect your personal information to allow us to conduct our business functions and to market and sell our products and services, as well as the specific purposes for which we collect your personal information as set out in the section entitled “Using your personal information" below. If you do not provide certain personal information, we may not be able to provide some of our services to you.
We may also collect and disclose personal information that is not sensitive information (unless you have agreed that we can collect and disclose such sensitive information) about you from and to our related companies, including (but not limited to) where you are a customer of ours and also a customer of our related companies.
Such personal information about you may include, but is not limited to, records of your non-payment of any bills issued by us or our related companies, details of overdue payment on your account(s) or a disconnection (including due to your non-payment). When you register with us, acquire services, visit our website (see below), request information about us or our products or otherwise contact us, we may collect personal information about you, including (but not limited to) your full name, email address, telephone number, address, date of birth, driver licence details, concession card information, mobile device information, National Metering Identifier , Meter Installation Registration Number and Delivery Point Identifier, information about your energy consumption and information about your income and payment preferences.
Where we engage with you multiple times over a short period in relation to the same matter (such as a billing enquiry), we may not provide you with a separate notice about privacy each time we engage with you.
We may record phone conversations for quality, compliance and training purposes.
We may keep a record of visits to our website, using "cookies" and "log files" to store your preferences, record session information and collect information on how you visit and access our web pages.
This information is collected automatically whenever you use the website. A cookie is a small amount of data (which may include information about a user's identity, browser type or website visiting patterns) that is sent to your Internet web browser from our web server and stored on your computer. If you do not wish to receive cookies, you can set your browser so that your computer does not accept them. If you disable the use of cookies on your web browser or remove or reject specific cookies from our website or linked sites then you may not be able to gain access to all of the content and facilities in those websites.
We may also log IP addresses (i.e. the electronic addresses of computers connected to the Internet) to analyse trends, administer the website, track users movements on the website, and gather broad demographic information for aggregate use and for advertisers and business partners.
Our website may contain links to other sites. We are not responsible for the privacy policies of such sites. We recommend that you examine the privacy policy for all third party websites you visit to understand their procedures for collecting, using and disclosing personal information.
This Privacy and Credit Reporting Policy also applies to the use of our Mobile App and any personal information that you provide to us when using our Mobile App.
When you use our Mobile App we collect the following information about your mobile device: Your IP Address, coarse device location and information, along with your user activity, which allows us to monitor how you use our Mobile App, in order for us to make improvements to the App. We use a service called Google Analytics for Firebase to do this.
You can request deletion of your digital profile by selecting the ‘Delete Your Profile’ option within our Mobile App as set out in the section of this policy entitled ‘Access, deletion and correction of your personal information and credit-related personal information.’
We collect personal information about you for the purpose of undertaking our business activities, including enabling us to:
You consent to us using your personal information in the above ways. We may collect and use your personal information for other purposes not listed above. If we do so, we will make it known to you at the time we collect such information.
We will not use personal information provided by you to us in a manner inconsistent with the Privacy Act or the Australian Privacy Principles or any other relevant laws or guidelines.
We may disclose your personal information:
Generally, we will only disclose your personal information to these parties:
We will not sell, rent or lease your personal information to any other party.
We may collect all types of credit information and credit reporting information (collectively, credit-related personal information) as described below:
"Credit information" is the basic category of personal information in the credit reporting system. It includes the following types of information collected by us that we may give to a credit reporting body:
Credit information does not include sensitive information, for example criminal records or medical history.
"Credit reporting information" means credit information that a credit reporting body holds and discloses to us about a customer or the information derived by us from the credit reporting information, for example a credit score.
We collect credit-related personal information when you apply for and open an account with Lumo Energy in relation to any energy, telecommunications and other products and services.
Subject to the Privacy Act for the purposes of assessing an application to open an account, we may:
We may disclose your credit-related personal information to the following credit reporting bodies:
Some of your personal information or credit-related personal information may be disclosed, processed or stored overseas by us or by our third party service providers. In particular, as at the date this Policy was most recently updated, your personal or credit-related personal information will be disclosed to recipients in Fiji, New Zealand, the Philippines, India, and other countries from time to time. This may happen if our service providers are located overseas, or if transactions, information, services or products have an overseas connection. Where such parties are located overseas, you may have rights to enforce such parties' compliance with applicable data protection laws, but you may not have recourse against those parties under the Privacy Act in relation to how those parties treat your personal information.
You agree to the disclosure and use of your personal information and credit-related personal information in accordance with this Policy, and consent to such personal information and credit-related personal information being disclosed overseas and its use by third parties, including service providers, in New Zealand, the Philippines, India, and such other countries in which those parties or their computer systems may be located from time to time, where it may be used solely for the purposes described in this Policy, without us being responsible for such use (or for any breach). You agree to these disclosures in accordance with the safeguards in this Policy (consequently Australian Privacy Principle 8.1 will not apply to such disclosures).
By signing up with us or where you provide us with your details on this website, you agree that we (or any of our Australian related companies, service providers or other business partners) may contact you by any means (including by telephone, SMS or email) for an indefinite period (even if you cease being a customer of or otherwise cease acquiring services from us) to let you know about goods, services, promotions, competitions or special offers which may be of interest to you. We may also disclose your information to other persons or entities who assist us in providing our services or running competitions or promotions or with other companies who provide prizes for competitions. If you do not wish for your personal information to be used for marketing, special offers or promotional purposes, you can opt-out by contacting our Customer Service Team on 1300 115 866, emailing us at [email protected] or filling out the form at www.lumoenergy.com.au/contactus.
We will take reasonable steps to preserve the security of your personal information, credit-related personal information and other information or data collected by us.
Unfortunately, no data transmission over the Internet can be guaranteed as perfectly secure. As a result, although we strive to protect your personal information and credit-related personal information, we cannot guarantee the security of any information you transmit to us over the Internet. You transmit such information at your own risk.
You are entitled to access personal information or credit-related personal information that we hold about you. If you request access to your personal information or credit-related personal information, in ordinary circumstances we will give you full access and we may charge you a fee for accessing your personal information. However, there may be some legal or administrative reasons to deny access. If we refuse your request to access your personal information and credit-related personal information, we will provide you with reasons for the refusal unless it is unreasonable to do so.
If you believe that personal information we hold about you is incorrect, incomplete or inaccurate, then you may request the amendment or deletion of this information by contacting Lumo Energy using the details in the ‘Contact Us’ section below. We will consider if the information requires amendment or deletion. If we do not agree that there are grounds for amendment or deletion, then we will add a note to the personal information stating that you disagree with it.
When using a digital platform or service to login to MyAccount or our Mobile App, we will authenticate your login details. You may request that we delete your digital profile for MyAccount and our Mobile App at any time by contacting Lumo Energy using the details in the ‘Contact Us’ section below or by selecting the ‘Delete Your Profile’ option within our Mobile App. By actioning such a request any personal information stored within your digital profile will be deleted and you will no longer have access to MyAccount or our Mobile App. This will not impact your energy account (including any other information we hold about you) or your agreement with Lumo Energy or result in the closure of your energy account or disconnection of your energy supply.
We take all reasonable steps to ensure that credit-related personal information we collect and use is accurate, complete and up-to-date. If you believe that any credit-related personal information we hold about you is incorrect, incomplete or inaccurate, then you may request the correction (including the deletion) of that information. We will give you a written acknowledgement of your query or complaint within 7 days of it being made. We will then consider if the credit-related personal information requires amendment and take reasonable steps to correct the credit-related personal information within 30 days from the day on which the request is made or such longer period as you have agreed in writing. In certain circumstances, we may also need to consult another party in order to respond to you. If we are required to correct any of your credit-related personal information which we have previously disclosed to a third party, we will give each recipient of the credit-related personal information written notice of the correction within a reasonable period, unless we consider it impracticable to do so. If you are not satisfied with our response to your query or with our resolution of your complaint, then you may make a further complaint to the Office of the Australian Information Commissioner (OAIC) (see www.oaic.gov.au for more information on how to do this). If your complaint relates to credit information, you may also make a complaint to a third party dispute resolution provider instead of the OAIC. We will advise you of the name and contact details of this third party when we contact you to discuss your complaint. Alternatively you can access further details about third party dispute resolution bodies in our Complaint and Dispute Resolution Policy which is accessible at lumoenergy.com.au/about-us/contact-us/.
To assist us in the provision of energy and other products and services, we may need to collect personal information (including credit information) about you.
By providing your personal information, you agree to its use and disclosure in accordance with this statement and our Privacy and Credit Reporting Policy. If you do not agree, you must not provide your personal information, and as a result we may not be able to provide our products or services to you.
We will try to collect your personal information only from you, but in some cases we may collect personal information about you from third parties. If this happens, we will take reasonable steps to ensure that you are aware that your personal information has been provided to us and of the matters contained in this privacy statement.
We may also ask you for the personal information of third parties (such as a joint account holder or in relation to a request by you for connection of energy to a rental property, contact details for the property owner or the owner’s agent). If we do not collect this personal information, we may not be able to provide our products or services to you to the same standard or at all. If you provide us with the personal information of another person, you must make them aware of the matters set out in this collection statement.
We may also collect and disclose personal information that is not sensitive information about you (unless you have agreed that we can collect and disclose such sensitive information) from our related companies including (but not limited to) where you are a customer of ours and also a customer of our related companies.
We may disclose your personal information to other parties, including our related companies, credit reporting bodies for the purpose of conducting credit checks or reporting defaults, third parties who provide us services in connection with our business (e.g. our call centre operators, IT service providers and debt collection agencies), regulatory or government authorities and authorised representatives.
From time to time, these third parties may be located (and therefore your personal information may be disclosed) overseas, including Fiji, India, the Philippines and New Zealand.
We may use and disclose your personal information for direct marketing purposes, unless you opt out.
Our Privacy and Credit Reporting Policy is available at www.lumoenergy.com.au/privacy/. It contains information about how you may access and seek deletion or correction of your personal information, how you may complain about a breach of your privacy, how we will deal with that complaint and credit reporting and credit reporting bodies we use.
If you have any questions about our Privacy Collection Statement, please call Lumo Energy on 1300 115 866.
If you would like to access the personal information or credit-related personal information that we hold about you, have a query or complaint or would like further information about our Policy, you can contact us by:
Last updated: 12 August 2024
This Privacy and Credit Reporting Policy also applies to the following companies: