CITI INTERNET PRIVACY STATEMENT

Citi Internet Privacy Statement

This explains our cookie policy and online data gathering information practices when you visit this site. This online data policy may be modified at our sole discretion at any time by changing the notice you see here. This online data policy is consistent with and remains subject to the Privacy Act and Citi's Privacy Policies.

Cookies

A cookie is a piece of information which a web server may place on your computer when you visit a website. Cookies are commonly used by websites to improve the user experience and have not been known to transmit computer viruses or otherwise harm your computer. Many cookies last only through a single session, or visit. Others may have an expiration date, or may remain on your computer until you delete them.

How We Use Cookies

We use cookies for a number of purposes - for example, to maintain continuity during a user session, to gather data about the usage of our website for research and other purposes. Our cookies can only be used to track your online activity on our website. They cannot be used to track your other Internet activity. Cookies set by us cannot be read by and are not shared with any non-Citi website, although we may share some of the cookie information we gather with other Citi companies.

Our cookies typically do not gather personally identifiable information. However, if you agree, we may combine our cookie data with personally identifiable information that you provide to us (such as your email address) so that you may receive marketing offers specifically suited to your needs.

Cookie Filters

You can decide if and how your computer will accept a cookie by configuring your preferences or options in your browser. However, if you choose to reject cookies, you may not be able to use some of our online services or website features.

Your browser software may contain a feature, which is intended to notify you of the cookie policies of the various websites you visit. For example, the Microsoft® Internet Explorer 6 browser software contained in Microsoft® Windows® XP contains a version of such a cookie-filtering device, commonly known as P3P. To learn more about P3P and how it may affect your online experience go to www.w3.org/P3P. Citibank has attempted to make our websites compatible with the P3P privacy filtering tool. However, P3P is still an evolving standard and therefore, we are not responsible for any problems you experience when using a P3P filter, or any discrepancies between the machine-coded statement of our privacy policy which are read by the P3P tool and the human readable policy which you see here and in the Privacy Notice of the Citi affiliate which maintains your account. This Online Data Policy and your Citi affiliate's Privacy Notice are the controlling documents to which you should refer if you have questions about Citibank's privacy policies.

Cookies of Other Companies

Citibank uses third party 'cookies' to collect information to perform statistical analysis of aggregate user behaviour, but those analyses are not based on personal information. Citibank uses such analysis to measure advertising effectiveness and relative consumer interest in the various areas of the website. The companies we use are obliged not to use these cookies for their own internal purposes or share the information gathered with anyone other than Citibank, in accordance with the terms of the contracts they have signed with us.

Further information on the type of companies we use to collect information on how you utilise the Citibank website can be found at Nielsen/NetRatings (Find out more about Nielsen/NetRatings)

General Website Practices

Aside from the cookies themselves we also record other details about what you do when using our website: which of our website's pages you try to open; and any information you may choose to submit through forms or dialog boxes. In some cases we offer you a choice as to whether the information you have entered will be stored and re-used - typically to save yourself the trouble of entering it again later.

The information we gather includes all internet banking activity, fund transfer requests and online applications; e.g. to open a new account. Passwords, PINs and 'secret answers' are only stored after being encrypted irreversibly; all other details may be made accessible for analysis or review but only to Citi employees (or approved agencies) who have been individually authorised on a strictly need-to-know basis.

Our information sharing practices with affiliates and outside companies is the same with respect to data collected both online and offline, and is governed by Citi's Privacy Policy and the Privacy Act.

Security

Citibank currently uses strong encryption (128-bit) security to help safeguard your financial information. All transmission of customer information through Citi websites is encrypted using 128-bit encryption technology. Citibank does this through the use of special server software and server certificates that allow us to establish secure 128-bit encryption sessions.

To the extent permitted by law, Citi shall not be responsible or liable for any loss of privacy, disclosure of information, harm, damage or loss that may result from your transmission of any information to us in any connection with this Website.

Links to other websites

When you use a link to go from a Citi website to another organisation's website, this Internet Privacy Policy will no longer apply. Citi is not responsible for the privacy policies of other organisations or the content of their websites.

Email Address

If you receive an e-mail from us, you should only re-transmit, distribute or commercialise the material or information in the e-mail if you are authorised to do so (under the Privacy Act or otherwise).

If you send us an e-mail, we may store and make use of your name, address and other information about you contained in your e-mail and in any attachments. When you submit feedback or questions via e-mail, it is very important that you do not disclose any details that could be used by others to gain access to sensitive personal information. This includes private details such as your usernames and passwords.

If you are a customer of one of our online services such as citibank.com.au, CitiDirect or Citi Wealth Advisors Access, we may use your e-mail address to advise you of any upgrades or changes to these services. We may also use your e-mail address to send out regular communications that provide financial services information, updates on new services and special offers.

It is our policy to e-mail our customers with direct marketing material only when we have your express consent to do so. If you consent to direct marketing e-mail, we will give you the option each time of not receiving further e-mail direct marketing communications.

Where specified in the relevant terms and conditions of certain accounts, we may require you to receive important information solely by e-mail and not by conventional mail. Informational e-mail messages will not give you the option to stop receiving them, and will continue to be sent regardless of whether you have chosen not to receive marketing e-mail communications.