1. Our Commitment to Your Privacy
The Australian Postal Corporation (Australia Post) and its subsidiaries (including StarTrack) are committed to respecting your privacy and protecting the security of the personal information you entrust to us. This statement explains how we collect, use, disclose, and safeguard personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
2. What Information We Collect
Depending on how you interact with our services, we may collect:
- Contact & Delivery Details: Name, physical delivery address, email address, phone number, and recipient delivery instructions.
- Identity Verification: Driver licence numbers, passport details, date of birth, and biometric ID photos when you apply for passports, Police Checks, or Working With Children verifications.
- Payment Information: Credit card or payment gateway tokens when you purchase products, pay bills via Post Billpay, or perform Bank@Post transactions.
- Digital Usage Data: IP addresses, browser types, cookie identifiers, and device location data when using the MyPost app or tracking tools.
3. How We Use Your Information
We use personal information exclusively for purposes including:
- Delivering letters, parcels, freight, and providing real-time tracking updates via SMS and email.
- Verifying identity for government agencies (Australian Passport Office, Department of Home Affairs, state police).
- Processing Bank@Post deposits, withdrawals, and Post Billpay transactions with participating financial institutions.
- Preventing postal fraud, phishing scams, and maintaining cybersecurity defenses.
4. Disclosure of Information
Australia Post will never sell your personal information to third parties. Information is only disclosed to authorized delivery contractors, law enforcement agencies where legally required by warrant or Australian law, and overseas postal administrations belonging to the Universal Postal Union (UPU) to facilitate international delivery.
5. Data Security & Retention
We maintain industry-standard physical, electronic, and procedural safeguards, including 256-bit TLS encryption, ISO 27001 certified data centres, and role-based access controls to safeguard your records against unauthorized access, loss, or disclosure.
6. Accessing & Correcting Your Information
You have the right to request access to the personal information we hold about you and to request corrections if the data is inaccurate or outdated. To make a privacy request, please contact our Privacy Officer: