Privacy Policy

Privacy Policy

1. Introduction

This Privacy Notice is intended to describe the practices EY follows in relation to (“Website”) with respect to the privacy of all individuals whose personal data is processed and stored because of their use of the Website.

2. Who manages the Website?

“EY” refers to one or more of the member firms of Ernst & Young Global Limited (“EYG”), each of which is a separate legal entity and can act as a data controller in its own right. The entity that is acting as data controller by providing this Website from which your personal data will be processed and stored is Ernst & Young Community Impact Services Pty Limited. The information you provide is being collected by EY, as a service provider to Optus.

The personal data you provide on the Website may be shared by Ernst & Young Community Impact Services Pty Limited with one or more member firms of EYG (see “Who can access your information” section below).

The Website is hosted on servers in Australia.

3. Why do we need your information?

The Website provides information about the Optus Digital Thumbprint program.

Your personal data processed from the Website is used as follows:

  1. To respond to your enquiry or expression of interest in the program;
  2. To contact you in order to book the program; or
  3. To contact you to invite you to events or for other direct marketing purposes.

EY relies on the following basis to legitimize the processing of your personal data: You have given consent to the processing of your personal data for one or more specific purposes.

The provision of your personal data to EY is optional. However, if you do not provide all or part of your personal data, we may be unable to carry out the purposes for processing.

4. What type of personal data is processed?

The Website processes these personal data categories: First name, last name, email and telephone number.

This data is sourced from you directly.

5. Sensitive Personal Data

Sensitive personal data reveals your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or data concerning sex life or sexual orientation. EY does not intentionally collect any sensitive personal data from you via the Website. The Website’s intention is not to process such information.

6. Who can access your information?

Your personal data is accessed by the following persons/teams: The program team, including facilitators or programs and administrative staff.

From time to time, we may also share your personal data with our clients (or other third parties) who may be providing, offering, sponsoring or otherwise assisting in the conduct of, the program you are participating in or expressed your interest to participate in. In relation to the Digital Thumbprint program, this may include sharing your information with Optus and other Digital Thumbprint Program stakeholders.

Unless it is not reasonably practicable for us to do so, we will notify you before we disclose your personal information to our clients.

The access rights detailed above involves transferring personal data in various jurisdictions (including jurisdictions outside the European Union) in which EY operates (EY office locations are listed at EY will process your personal data from the Website in accordance with applicable law and professional regulations in your jurisdiction. Transfers of personal data within the EY network are governed by EY’s Binding Corporate Rules (

7. Data retention

All information collected via the Website is retained in accordance with EY Global Records Retention policies and procedures.

Your personal data will be retained in compliance with privacy laws and regulations. After the end of the data retention period, your personal data will be deleted.

8. Security

EY is committed to making sure your personal data is secure. To prevent unauthorized access or disclosure, EY has technical and organizational measures to safeguard and secure your personal data. All EY personnel and third parties EY engages to process your personal data are obliged to respect your data’s confidentiality.

9. Controlling your personal data

EY will not transfer your personal data to third parties (other than any external parties referred to in section 6 above) unless we have your permission or are required by law to do so.

You are legally entitled to request details of EY’s personal data about you. To confirm whether your personal data is processed from the Website or to access your personal data collected from the Website, contact your usual Digital Thumbprint representative or email your request to or

10. Rectification, erasure, restriction of processing or data portability

You can confirm your personal data is accurate and current. You can request rectification, erasure, restriction of processing or a readily portable copy of your personal data by contacting your usual Digital Thumbprint representative or by sending an e-mail to or

11. Our Privacy Statement

Our Privacy Statement provides more information about how we manage and protect the personal information we hold about individuals.

12. Complaints

If you are concerned about an alleged breach of privacy law or any other regulation, contact EY’s Global Privacy Officer, Office of the General Counsel, 6 More London Place, London, SE1 2DA, United Kingdom or via email at or via your usual Digital Thumbprint representative. An EY Privacy Officer will investigate your complaint and provide information about how it will be handled and resolved.

If you are not satisfied with how EY resolved your complaint, you have the right to complain to your country’s data protection authority. You can also refer the matter to a court of competent jurisdiction.

13. Contact us

If you have additional questions or concerns, contact your usual Digital Thumbprint representative or email or

Date last revised: March 2020

Digital Thumbprint © 2023. All rights reserved. | T: 1800 334 036 | E: | Privacy Policy