Effective Date: 27 November 2025

Insuretech Services Pty Ltd (trading as WeatherIt), ABN 26 683 621 285 (“WeatherIt”, “we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and manage your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

WeatherIt is an Authorised Representative (AR 001317725) of Mitsui Sumitomo Insurance Company Ltd, ABN 49 000 525 637, AFS License Number: 240 816, providing rain insurance products to consumers purchasing a diverse array of accommodation and outdoor experiences.

1. What Personal Information We Collect

We collect personal information that is reasonably necessary to provide our services and carry out our business activities.

We may collect personal information such as:

• Full name
• Contact details (email address, phone number)
• Accommodation or outdoor experience details (type, date, location)
• Payment information
• Insurance policy and claims information

We only collect personal information that is reasonably necessary for the direct undertaking of our business activities.

2. How We Collect Personal Information

We collect personal information:

• Directly from you through partner websites, forms, email, or phone
• When you purchase a rain insurance policy
• When you submit a claim or make an enquiry
• From third parties such as insurers, accommodation providers, or service providers

3. Why We Collect, Hold, Use and Disclose Personal Information

We use your personal information to:

• Provide rain insurance products and services
• Issue insurance policies and manage claims
• Communicate with you about policies, claims, and updates
• Comply with legal and regulatory obligations
• Conduct marketing (with your consent)
• Improve our products, services, and customer experience
• Analyse website usage and user behavior (using cookies and analytics tools) to improve user experience.
• We may also use aggregated or de-identified information (which does not identify you) for research, analytics, or business insights. This data is not considered personal information under applicable privacy laws.

For users in New Zealand, we collect and use your personal information in accordance with the Information Privacy Principles (IPPs) set out in the Privacy Act 2020 (NZ), including where the collection is necessary for a lawful purpose connected with our services.

4. Data Retention

We retain your personal information only for as long as necessary to provide our services and meet legal requirements. When it is no longer needed, we will securely destroy or de-identify it.

5. How We Store and Protect Your Personal Information

We protect your personal information with:

• Secure cloud-based storage with restricted access
• Encryption in transit and at rest
• Access controls and regular audits
• Staff training on privacy obligations

6. Disclosure of Personal Information

We may disclose your personal information to:

• The insurer underwriting your policy
• Your accommodation provider or outdoor experience provider (to link your policy)
• Service providers (IT, payment processors, cloud hosting)
• Legal, regulatory, or government authorities
• For Australian customers, if we transfer your information overseas (e.g. cloud services), we ensure compliance with the APPs or equivalent safeguards.
• For Australian users, where your personal information is disclosed to an overseas recipient, we will take reasonable steps to ensure the recipient does not breach the APPs (other than APP 1), unless an exception under APP 8.2 applies.
• For New Zealand customers: Where your personal information is transferred outside of New Zealand (e.g. to cloud service providers), we will ensure that the overseas recipient is subject to privacy protections that are comparable to those under New Zealand law, or we will seek your express consent before doing so.

7. Access to and Correction of Your Personal Information

You have the right to access the personal information we hold about you and to request corrections if it is inaccurate, out-of-date, incomplete, or misleading.

You may request access to or correction of the personal information we hold by contacting us at [email protected]. We will respond within a reasonable timeframe.

8. Marketing Communications

We may send marketing communications where you have consented. You may opt out at any time using the unsubscribe link or by contacting us.

9. Data Breaches

If we experience a data breach that is likely to result in serious harm (which may include physical, psychological, emotional, financial, or reputational harm), in line with guidance issued by the Office of the Australian Information Commissioner (OAIC), WeatherIt will comply with all applicable notification requirements. This includes:

• Notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) under Australia’s Notifiable Data Breaches (NDB) scheme; and

• Notifying affected individuals and, where required, the New Zealand Privacy Commissioner under the New Zealand Privacy Act 2020.

10. Link to Our Underwriter’s Privacy Policy

This Privacy Policy should be read together with Mitsui Sumitomo Insurance Company’s Privacy Policy which may be found at: https://www.msi-oceania.com/privacy/.

11. Cookie Policy

WeatherIt uses cookies and similar technologies to enhance your browsing experience and understand how you interact with our website.

Cookies are small text files stored on your device when you visit a website. We use:

• ‘Essential cookies – to enable website functionality’.
• ‘Analytics cookies – to measure usage and performance (e.g., using tools like Google Analytics)’.
• ‘Preference cookies – to remember settings you choose’.

We do not use cookies to collect personal information or to serve third-party marketing ads without your consent.

You can manage your cookie preferences through your browser settings, including deleting or blocking cookies. For more detailed control, you may also install browser add-ons that manage cookie behavior or opt-out of certain analytics tools.

By using our website, you consent to our use of cookies as outlined here.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

13. Contact Us

If you have any questions or complaints about how we handle your personal information, or would like to make a privacy-related request, you may contact our Privacy Officer at:

Email: [email protected]
Website: www.weatherit.ai

If you are not satisfied with our response, Australian users may contact the Office of the Australian Information Commissioner (OAIC), and New Zealand users may contact the New Zealand Privacy Commissioner.

Document Control

Version: 1.4
Date: 27 November 2025
Reviewed by: WeatherIt Operations
Next Review Date: November 2026