Access and Correction of Personal Information

APP 12 — Your right to access

Under Australian Privacy Principle 12, individuals have the right to access personal information that Merion holds about them. This includes the right to know what information is held, to receive a copy of it, and to understand how it has been used.

How to make an access request

Contact Merion by:

• Email: [email protected] — include "Privacy Access Request" in the subject line.
• Phone: (08) 6325 5761 during business hours.

Merion will acknowledge the request promptly and provide a substantive response within 30 days. Identity verification will be required before access is provided, to ensure that information is not disclosed to the wrong person.

A note for debtors

Debtors who are uncertain what information Merion holds about them may contact Merion directly. Merion will confirm what information it holds in its system relating to the debtor's account. You do not need to be a current portal user or to have an active account to make an access request.

When access may be declined

APP 12 permits Merion to decline an access request in certain circumstances, including where:

• Providing access would be likely to prejudice a current or anticipated legal proceeding.
• Providing access would pose an unreasonable impact on the privacy of other individuals.
• The request is frivolous or vexatious.
• Other specific grounds set out in APP 12.3 apply.

If Merion declines an access request, it will give reasons for the refusal in writing and explain how to make a complaint.

APP 13 — Your right to correction

Under Australian Privacy Principle 13, individuals have the right to ask Merion to correct personal information that is inaccurate, out-of-date, incomplete, irrelevant, or misleading.

If Merion agrees that the information is inaccurate, it will correct it. If Merion does not agree — for example, because the information was accurately recorded from a creditor's documentation — it will note the individual's request for correction in its records and explain in writing why it has not made the change.

Correction requests can be submitted through the same channels as access requests: [email protected].

Complaints

If you believe Merion has interfered with your privacy — including by failing to respond appropriately to an access or correction request — you may make a complaint:

• To Merion directly: email [email protected]. Merion will acknowledge within five business days and respond substantively within 30 days.
• To the OAIC: if you are not satisfied with Merion's response, you may refer the matter to the Office of the Australian Information Commissioner at oaic.gov.au.

Related pages

For an overview of what personal information Merion collects, see Collection of Personal Information. For Merion's full Privacy Policy, visit merion.com.au/privacy-policy/.