Privacy policy

Last updated 20 September 2026

This policy explains how personal information is handled on plaincover.com.au. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).

Who we are

Plain Cover is a website operated by Exolead Media Pty Ltd (ABN 34 669 875 281). In this policy, "we", "us" and "Plain Cover" mean Exolead Media Pty Ltd (ABN 34 669 875 281).

Privacy questions and requests go to [email protected].

What we collect

When you use the quote form. Your first name, last name, email address and phone number, together with the answers you give in the form: whether you hold cover now, your current insurer, who needs cover, the type of cover, your state and your age.

When you email us. Your email address, your name if you give it, and whatever is in your message.

When you read the site. Standard web information: the pages you view, the date and time, your browser and device type, your IP address, and the site or search engine you arrived from. This is collected through Google Analytics and by our hosting provider.

We do not ask for and do not want your Medicare number, your tax file number, your bank or card details, or your health records. Do not send them to us.

Why we collect it

• To pass a quote request to our commercial partner so a consultant can contact you about cover.
• To answer your email, correct a figure you have reported, or handle a complaint.
• To understand which guides are read and which are not, so the site gets more useful.
• To meet our legal obligations and to keep a record of what was sent and when.

Who receives your information

Our commercial partner. When you submit the quote form, your details and your answers are sent to a commercial partner who arranges health cover. A consultant from that partner contacts you by phone, SMS or email about cover. We may be paid a fee for that referral. Once your details reach the partner, their own privacy policy governs what they do with them, and you deal with them directly rather than with us.

Service providers who run the site for us. Each one holds information only to do the job we use it for:

• Our hosting provider, which serves the pages and receives the usual server request data.
• The database service where a quote request is stored when you submit it.
• The automation service that moves a quote request from that database to our partner.
• The email service we use to send and receive messages about a request.
• Google Analytics, for the reading statistics described above.

Nobody else. We do not sell your information for advertising, and we do not hand it to other advertisers or list brokers. We may disclose information where the law requires it, where it is needed to deal with a legal claim, or to a buyer if the business is sold, in which case the buyer would be bound by this policy.

Information held or processed overseas

Some of the service providers above operate outside Australia, including in the United States, so your information may be stored or processed overseas. Where that happens we take reasonable steps to ensure the provider handles it consistently with the Australian Privacy Principles.

Cookies and analytics

The site uses Google Analytics, loaded through Google Tag Manager, to count visits and see which pages are read. It sets cookies in your browser.

The site also stores a small record in your browser for up to 30 days noting how you first arrived, for example from a search engine or another website. If you then submit the quote form, that record is sent with your request so we know which page produced it. It holds no name, email address or phone number.

You can block or delete cookies in your browser settings, and you can opt out of Google Analytics with Google's own browser add-on. The site works with cookies disabled.

How we keep it secure

Information is sent over an encrypted connection and held in access-controlled systems. We take reasonable steps to protect it from misuse, loss and unauthorised access. No transmission over the internet can be guaranteed to be completely secure, and we cannot promise otherwise.

If a data breach occurs that is likely to result in serious harm, we will notify the people affected and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

How long we keep it

A quote request is kept while it is being acted on and afterwards as a record of what was sent and when. Reading statistics are kept in aggregate. When information is no longer needed for the purpose it was collected for, and we are not required to keep it, we take reasonable steps to destroy it or remove anything that identifies you.

Access, correction and deletion

You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Email [email protected]. We may need to verify who you are first. The Privacy Act allows 30 days to respond to an access request, and sets out the limited grounds on which access can be refused. If we refuse, we will tell you why.

To stop marketing email, use the unsubscribe link in the message. If a consultant from our partner is contacting you, tell them to stop, or email us and we will pass the request on.

Complaints

If you think your privacy has been mishandled, email [email protected] with what happened and what you would like done about it. Our complaints page explains how a complaint is handled.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner, which handles privacy complaints free of charge.

Other websites

Our guides link to government sources, funds and other organisations. Those sites have their own privacy policies and we are not responsible for how they handle your information.

Changes to this policy

We update this page when what we collect or who receives it changes. The date at the top shows when it last changed, and the version on this page is the one that applies.