The Company uses personal information to respond to enquiries, provide general information about insurance needs planning, manage user relationships, and operate and improve drevaliqo.com. This includes using contact details to send responses, clarifications, or administrative messages, and using contextual information to prepare high-level summaries or examples that address the themes raised in user communications.

Technical and usage data are used to maintain site security, diagnose issues, monitor performance, and understand how visitors interact with content. This helps the Company refine the structure and clarity of information about insurance needs planning. Personal information may also be used to comply with legal obligations, manage records, and enforce applicable terms and policies. Marketing communications are sent only in accordance with consent requirements and can be adjusted or withdrawn using the mechanisms provided.

The Company may share personal information with carefully selected service providers that assist with operating drevaliqo.com, managing communications, performing data hosting, or supporting analytics and security. These providers are required to handle personal information in accordance with contractual obligations and applicable privacy laws, and may only use it for the purposes specified by the Company.

Personal information may also be disclosed where required or authorised by law, in connection with regulatory or law enforcement requests, to protect the rights, property, or safety of the Company or others, or in the context of a business restructure or transfer. The Company does not sell personal information. Where information is transferred outside Australia, reasonable steps are taken to ensure that appropriate safeguards are in place, consistent with relevant legal requirements and industry practice.

The Company implements administrative, technical, and physical safeguards designed to protect personal information against unauthorised access, alteration, disclosure, or loss. Measures may include access controls, encryption in transit where appropriate, secure storage environments, and staff protocols governing the handling of personal information. Service providers that process data on behalf of the Company are required to apply comparable protections.

Despite these efforts, no method of transmission or storage can be guaranteed as completely secure. Users are encouraged to take their own precautions, such as using up-to-date security software, keeping login details confidential where accounts exist, and avoiding the inclusion of unnecessary sensitive information in open-form fields. The Company will respond to identified incidents in line with applicable legal obligations, including any mandatory notification requirements.