Privacy Policy

Effective Date: 12th September 2026

Insuretech Services Pty Ltd (trading as WeatherIt), ABN 26 683 621 285 ("WeatherIt", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy applies to personal information collected by WeatherIt in Australia and New Zealand and complies with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the New Zealand Privacy Act 2020.

In Australia, WeatherIt is an Authorised Representative (AR 001317725) of Mitsui Sumitomo Insurance Company Ltd, ABN 49 000 525 637, AFS License Number: 240 816. In New Zealand, WeatherIt (Registration No. 9394774, NZBN 9429053384041), acts as an agent of Mitsui Sumitomo Insurance Company Limited (NZBN 9429039809810, FSP No. 20661) providing rain insurance products directly to consumers and through Distribution Partners (as defined below).

“Distribution Partner” means any business through which you access or purchase a WeatherIt product otherwise than directly from WeatherIt, including but not limited to: accommodation and outdoor experience providers; tour and activity operators; sporting clubs and venues; event, festival, and ticketing platforms; and insurance brokers or intermediaries. References in this Policy to purchasing “through a Distribution Partner” cover any product accessed or purchased in this way, regardless of the type of business involved.

1. What Personal Information We Collect

We collect personal information that is reasonably necessary to provide our services and carry out our business activities.

We may collect personal information such as:

• Full name
• Contact details (email address, phone number)
• Details of the protected activity (date and location), and, where you purchase through a Distribution Partner, details of the linked booking or product
• Payment information
• Insurance policy and claims information

We only collect personal information that is reasonably necessary for the direct undertaking of our business activities.

2. How We Collect Personal Information

We collect personal information:

• Directly from you, whether you purchase through WeatherIt's own website or app (direct), or through a Distribution Partner's website, forms, email, or phone (embedded)
• When you purchase a rain insurance policy
• When you submit a claim or make an enquiry
• Where you purchase through a Distribution Partner, from that Distribution Partner or its related service providers

For New Zealand customers: if you purchase through a Distribution Partner, we may collect your information indirectly, and will notify you of the matters required under Information Privacy Principle 3A of the Privacy Act 2020 (NZ) as soon as reasonably practicable, unless an exception applies. If you purchase directly from WeatherIt, this Policy serves as our notice under Information Privacy Principle 3.

3. Why We Collect, Hold, Use and Disclose Personal Information

We use your personal information to:

• Provide rain insurance products and services.
• Issue insurance policies and manage claims.
• Communicate with you about policies, claims, and updates.
• Comply with legal and regulatory obligations.
• Conduct marketing (with your consent).
• Improve our products, services, and customer experience.
• Analyse website usage and user behavior (using cookies and analytics tools) to improve user experience.
• We may also use aggregated or de-identified information (which does not identify you) for research, analytics, or business insights. This data is not considered personal information under applicable privacy laws.

For users in New Zealand, we collect and use your personal information in accordance with the Information Privacy Principles (IPPs) set out in the Privacy Act 2020 (NZ), including where the collection is necessary for a lawful purpose connected with our services.

Automated decision-making: WeatherIt uses an automated parametric weather-trigger system to determine whether a payout is due under your policy, without individual claims assessment. Where this use of an automated system could reasonably be expected to significantly affect your rights or interests, we will provide information about it in this Policy, consistent with the Australian Privacy Principles, including the automated decision-making transparency requirements under APP 1.7 to 1.9, which commence on 10 December 2026.

4. Data Retention

We retain your personal information only for as long as necessary to provide our services and meet legal requirements. When it is no longer needed, we will securely destroy or de-identify it.

5. How We Store and Protect Your Personal Information

We protect your personal information with:

• Secure cloud-based storage with restricted access.
• Encryption in transit and at rest.
• Access controls and regular audits.
• Staff training on privacy obligations.

6. Disclosure of Personal Information

We may disclose your personal information to:

• The insurer underwriting your policy.
• Where you purchase through a Distribution Partner, that Distribution Partner (to link your policy).
• Service providers (IT, payment processors, cloud hosting).
• Legal, regulatory, or government authorities.
• Where practicable, the countries in which your personal information may be held or accessed by overseas recipients include Japan (our underwriter's parent group), the United States (our pricing and risk-calibration partner), and Australia. We will update this list if our overseas recipients or their locations change.
• For Australian customers, if we transfer your information overseas (e.g. cloud services), we ensure compliance with the APPs or equivalent safeguards. Where your personal information is disclosed to an overseas recipient, we will take reasonable steps to ensure the recipient does not breach the APPs (other than APP 1), unless an exception under APP 8.2 applies.
• For New Zealand customers: Where your personal information is transferred outside of New Zealand (e.g. to cloud service providers), we will ensure that the overseas recipient is subject to privacy protections that are comparable to those under New Zealand law, or we will seek your express consent before doing so.

7. Access to and Correction of Your Personal Information

You have the right to access the personal information we hold about you and to request corrections if it is inaccurate, out-of-date, incomplete, or misleading.

You may request access to or correction of the personal information we hold by contacting us at hello@WeatherIt.ai. We will respond within a reasonable timeframe. For Australian customers, this will in any event be within 30 days of receiving your request. For New Zealand customers, this will in any event be within 20 working days of receiving your request, in accordance with the Privacy Act 2020 (NZ).

8. Marketing Communications

We may send marketing communications where you have consented. You may opt out at any time using the unsubscribe link or by contacting us.

9. Data Breaches

If we experience a data breach that is likely to result in serious harm (which may include physical, psychological, emotional, financial, or reputational harm), in line with guidance issued by the Office of the Australian Information Commissioner (OAIC), WeatherIt will comply with Australia's Notifiable Data Breaches (NDB) scheme. Separately, for New Zealand customers, a breach will be treated as notifiable where it is reasonable to believe that the breach has caused, or is likely to cause, serious harm to an affected individual, being the test under section 113 of the Privacy Act 2020 (NZ). In either case, this includes:

• Notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) under Australia’s Notifiable Data Breaches (NDB) scheme; and
• Notifying affected individuals and the Office of the Privacy Commissioner, where the breach meets the notifiable privacy breach threshold under section 113 of the Privacy Act 2020 (NZ).

10. Cookie Policy

WeatherIt uses cookies and similar technologies to enhance your browsing experience and understand how you interact with our website.

Cookies are small text files stored on your device when you visit a website. We use:

• Essential cookies - to enable website functionality.
• Analytics cookies - to measure usage & performance (e.g., using tools like Google Analytics).
• Preference cookies - to remember settings you choose.

We do not use cookies to collect personal information or to serve third-party marketing ads without your consent.

You can manage your cookie preferences through your browser settings, including deleting or blocking cookies. For more detailed control, you may also install browser add-ons that manage cookie behavior or opt-out of certain analytics tools.

By using our website, you consent to our use of cookies as outlined here.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

12. Contact Us

If you have any questions or complaints about how we handle your personal information, or would like to make a privacy-related request, you may contact our Privacy Officer at:

Email: hello@weatherit.ai
Subject Line: Attn: Privacy Officer

If you are not satisfied with our response, Australian users may contact the Office of the Australian Information Commissioner (OAIC), and New Zealand users may contact the New Zealand Privacy Commissioner.

Document Control
Version: 1.6
Date: 12 September 2026
Reviewed by: WeatherIt Operations
Next Review Date: March 2027