Privacy Statement

Cosmic Recoveries Privacy Statement

Why This Matters

This policy explains how Tapanda Group Pty Ltd (trading as Cosmic Recoveries) ABN 91 632 485 440 (‘Cosmic’, ‘we’, ‘our’) handles your personal information. We follow the Privacy Act 1988 (Cth), our AFSL (Licence 548613) obligations, and the ISO/IEC 27001:2022 standards for information security.

Who This Applies To

We collect and manage personal information about:

  • Customers, claimants, and other people involved in claims

  • Insurance and repairer partners

  • Suppliers and contractors

  • Our employees and job applicants

What Counts as Personal Information

Personal information is anything that can identify you. This includes:

  • Your name, phone number, address, date of birth

  • Insurance policy and claim details

  • Driver’s licence, rego, or vehicle ID

  • Payment or banking information

  • Photos, call recordings, CCTV or dashcam footage

We may also collect sensitive information, like health details or criminal history, but only if we really need to, and we handle it with extra care. That includes:

  • Using it only for what it was collected for

  • Getting your OK (when we need it)

  • Complying with the law

How We Collect Your Information

We might get your information via:

  • Phone calls, emails, online forms, or websites

  • Third-party partners (like insurers or repairers)

  • Public information (like business websites or directories)

  • Cookies and website tracking tools

If we get your information from someone else, we’ll let you know. We only collect what’s relevant to do our job properly.

Why We Collect Your Information

We collect personal information to:

  • Manage insurance claims and recoveries and work with insurers, repairers, and partners

  • Prevent fraud and support investigations

  • Meet legal and compliance obligations (like under AFSL and ISO 27001)

  • Improve how we work and deliver services

Who We Share It With

We may share your information with:

  • Insurers, repairers, and expert partners

  • Tech providers, auditors, and regulators

  • Legal and compliance bodies (when required)

We don’t sell your information, ever. And we make sure anyone we do share it with keeps it safe. We also do our best to make sure your information is accurate and current. If you spot something that’s out of date or wrong, let us know and we’ll fix it fast.

Keeping Your Information Safe

We follow ISO/IEC 27001 standards to protect your information. That means:

  • Strong encryption and system access controls

  • Monitoring who accesses what and when

  • Holding onto your information for at least 7 years or as the law requires

  • Securely destroying it when we no longer need it

Accessing or Updating Your Information

Want to check what information we’ve got about you? Or fix something? Just ask.
We may need you to confirm your identity. There’s no charge for simple requests, but we might apply a small fee for large or complex ones.

Sometimes your insurer or repairer gives us your information directly, if that happens, we’ll take steps to make sure you’re aware.

Marketing & Cookies

We might send you marketing updates, but only where the law says we can. You can opt out anytime. We also use cookies on our website to improve your experience and understand how people use our site.

Got a Question or Complaint?

Reach out to us at:

1800 960 170

hello@cosmicrecoveries.com.au

www.cosmicrecoveries.com.au

We review this privacy statement regularly and update it when needed. The latest version is always on our website.