This policy explains how we collect, use, share and protect your personal information. It covers everything we do under the 1Cover Travel Insurance brand, including our website, quotes and purchases, our contact centre and claims.
1Cover Travel Insurance is a brand of 1Cover Pty Ltd ABN 91 105 954 265. In this policy, “we”, “us” and “our” mean 1Cover Pty Ltd.
We arrange and administer travel insurance as an authorised representative of Coffre-Fort Pty Limited ABN 66 125 358 518, AFS Licence 472457.
We must comply with the Privacy Act 1988 (Cth), including the Australian Privacy Principles.
Your policy is underwritten (issued) by HDI Global Specialty SE – Australia. If you bought your policy before 11 October 2023, it may have been underwritten by Lloyd’s of London or Arch Insurance, and your information may also have been given to that insurer.
If you have any questions about this policy, contact our Privacy Officer (section 19).
What we collect depends on how you deal with us.
When you get a quote or buy a policy, we collect your name, date of birth and contact details, your trip destination and dates, who is travelling with you, and your payment details.
If anyone travelling has an existing medical condition, we ask some medical questions. A medical screening service assesses your answers so we can tell you whether the condition can be covered.
When you contact us, we keep a record of the contact and what you tell us. Phone calls are recorded (see section 12).
When you make a claim, we collect details of what happened, supporting documents such as receipts, reports and invoices, and your bank details so we can pay you. If your claim involves injury or illness, we also collect health information from you and from the doctors, hospitals and other providers who treated you.
Identity check when you claim. Before we pay a claim, we ask you to upload a photo ID document and take a photo or short video of your face. An identity verification service checks that they match. We keep copies of the document and the images with your claim. The images of your face are biometric information.
When you use our website, we collect information about your visit (see section 11).
If you apply for a job with us, we collect the information in your application and anything you or your referees tell us.
Some information is treated as sensitive under privacy law and has extra protection. The sensitive information we collect is:
health information: your answers to our medical questions, and the medical records, reports and certificates provided with a claim; and
biometric information: the images of your face and your photo ID taken for the identity check when you claim.
We only collect sensitive information when we need it for the purposes in this policy, and with your consent unless the law allows otherwise. For example, the law may allow us to collect, use or share it without your consent where this is needed to establish, exercise or defend a legal claim. This most often comes up when we are assessing a claim.
When we ask for your consent, we will explain at the time what we are collecting and why.
Most of the information we hold comes directly from you, through our website, by phone, email or live chat, or on a claim form.
We also collect information from others, including:
If you give us information about someone else, such as a travelling companion, family member, beneficiary or emergency contact, we handle it under this policy.
Before you do, please tell them you are giving us their information and point them to this policy. Where required, we may also contact them directly about how we handle their information.
We use your personal information to:
If you do not give us the information we ask for, we may not be able to give you a quote, issue a policy or assess a claim.
Some decisions about you are made by our systems without a person reviewing them first. They are:
What these decisions use. They use your age and date of birth, your destination and travel dates, the cover you choose, your answers to the medical questions, and the details and documents in your claim, along with information already on your record from earlier quotes, policies and claims.
How we use AI tools. We use AI tools to help us read and sort the information you send us, draft replies and letters, summarise calls and claims, and match the documents you upload to the expenses in your claim. A person is responsible for the outcome in each case, except document matching, which is applied automatically.
If you disagree with a decision. If we tell you that we cannot cover you or a medical condition, or that your claim payment is being held for review, you can ask us why. Contact us (section 19) and a person will review the decision, explain the reason where our system recorded one, and reconsider it. If no reason was recorded, which can happen when no price is shown, a person will assess your situation instead. You can also make a complaint (section 16).
From 10 December 2026 the Privacy Act will require us to explain automated decisions in this policy. We have chosen to do so now.
We share your personal information with:
We do not sell your personal information.
Our insurer has its own privacy policy explaining how it handles your information. It is summarised in your Product Disclosure Statement, and you can click here to read it in full.
Your personal information is sent outside Australia. This is a normal part of how we operate: our main systems are hosted overseas, and the businesses behind your insurance and claims are in several countries.
Where your information is likely to go, and why:
| Where |
Why |
|---|---|
|
United States |
Our main systems are in the United States. This includes the database that holds your policy and claim, storage for documents, identity images and call recordings, our data warehouse, our email, SMS and phone systems, and our website analytics and session-recording tools. |
|
Germany |
Our insurer’s head office. |
|
Australia, the United Kingdom and the European Union |
Our insurer’s reinsurers. |
|
European Union |
Identity checks when you make a claim. |
|
Asia-Pacific region |
Medical condition screening. |
|
New Zealand |
Emergency assistance and claims management. |
|
United Kingdom (Wales) |
Authorised personnel of our UK-based claims support provider may access personal information through our controlled systems to assist with claims management. Information remains within our systems and access is restricted to authorised personnel. |
|
Any country you travel to |
If you need medical treatment, help or repatriation while travelling, we and our providers will deal with doctors, hospitals, insurers and others in that country. |
When we send your information to someone overseas, we take reasonable steps to make sure they handle it in line with the Australian Privacy Principles, usually through our contract with them. We cannot control how an overseas doctor, hospital or authority handles information you give them directly, and privacy laws in the country you are visiting may be different from Australia’s.
We send marketing by email and SMS. We may also contact you about a quote you started but did not finish.
We only send you marketing where you have opted in, or where the law otherwise allows. We do not sell or rent your contact details to anyone for their own marketing.
To stop marketing, you can:
Email and SMS are currently handled separately, so you may need to unsubscribe from each. We will act on your request as soon as we can, and within five business days.
Some messages are not marketing and will continue after you unsubscribe, such as your policy documents, changes to your policy and claim updates. If you want to stop these too, contact us and we will explain what that means for your cover.
How we choose what to send you. We use your quotes, what you have bought, when and where you travel, whether your cover is current, how you use our website and how you respond to our messages to decide which messages to send you. We do not use your claims information or your health information for marketing.
Our website uses cookies and similar technologies.
Some are needed to make the site work and keep it secure. Others record how the site is used, such as the pages you visit, where you came from, how far you get through a quote, where you stop and what you click.
Session recording. Some tools record your visit, including the pages you see, your mouse movements, scrolling and typing, so we can replay it and see where people have trouble. Payment card fields are hidden from these recordings. Other fields are not.
This information can identify you. If you give us your email address, for example by saving a quote, buying a policy or logging in, we link your earlier browsing to your customer record. Once linked, we treat it as personal information and this policy applies to it.
We also use:
The analytics, advertising and session-recording tools are provided by businesses based in the United States. The marketing platform stores its information in Australia.
You can block or delete cookies in your browser settings, but parts of our site may then not work properly. For details of each tool we use, contact our Privacy Officer.
Calls are recorded. If you call us or we call you, the call is recorded and stored. We use recordings to check your details, resolve any disagreement about what was said, train our staff and check the quality of our service.
Recordings may include anything you tell us on the call, including health and payment details. They are stored in the United States, and only staff with the right system permissions can access them.
We keep live chat transcripts, and the SMS messages we send and receive.
We take reasonable steps to protect your personal information from misuse, interference and loss, and from unauthorised access, change or disclosure.
These steps include encrypting information when it is sent and when it is stored, limiting what each staff member can see based on their role, and requiring our service providers to protect information under their contracts with us.
No system is completely secure. We cannot guarantee that information you send us over the internet is secure until it reaches us.
We keep your personal information for as long as we need it for the purposes in this policy, and for as long as the law, our regulators or our insurer require.
In practice, we keep policy, claim and health records for several years after your cover ends, because we are required to. We keep quotes, website activity and marketing information for shorter periods.
Asking us to delete your information. Contact our Privacy Officer. We can remove the details that identify you from your marketing and website activity information, and delete copies that are not part of your insurance records. We cannot delete the core insurance records we are required to keep. Information in our backups is overwritten over time rather than deleted on request. We will tell you what we can and cannot do in your case.
You can ask for a copy of the personal information we hold about you, and ask us to correct anything that is inaccurate, out of date or incomplete.
Contact our Privacy Officer. There is no charge to make a request or to have your information corrected. If giving you access involves significant work, we may charge a reasonable fee for that work, and we will tell you the amount first.
We will respond within 30 days, and usually sooner.
In limited cases the law allows us to refuse, for example where giving you access would unreasonably affect someone else’s privacy, or where the information relates to expected legal proceedings. If we refuse, we will tell you why in writing and how to complain.
If you think we have mishandled your personal information, please tell us. Contact our Privacy Officer (section 19).
We will acknowledge your complaint, look into it and give you our response within 30 days.
If you are not happy with our response, you can contact:
If personal information we hold is lost, or accessed or disclosed without authorisation, and this is likely to cause you serious harm, we will assess what happened. Where the Notifiable Data Breaches scheme requires it, we will tell you and the OAIC.
We review this policy at least once a year and update it when our practices change. The current version is always on our website, with the date it was last updated at the top.
If we make a change that significantly affects how we handle your information, we will tell you by email if we have your email address, or by a notice on our website.
Privacy Officer (Risk & Compliance Manager)
1Cover Pty Ltd
PO Box 6798, Baulkham Hills NSW 2153, Australia
Email: privacy@1cover.com.au
Last reviewed 26 October 2026