(1) This privacy collection statement describes how Ampol Australia Petroleum Pty Ltd (ABN 17 000 032 128) and its related bodies corporate (referred to as “Ampol”, “we”, “our”) collect, use and disclose personal information that you provide to us when we verify your identity. This information is referred to in this privacy collection statement as “Identification Information” and includes:
(a) personal information contained in your identity documents, such as your name, date of birth, document number;
(b) copies of your identity documents (such as photos of your passport, driver’s licence or Medicare card), including any sensitive information such as health information or information about your ethnicity which appears on your identity documents;
(c) information about the outcome of an identity verification request in relation to you;
(d) your facial image, a biometric template derived from such an image or a result of biometric comparison involving such an image; and
(e) your geolocation data.
Why we collect this information and our legal obligations
2. We collect Identification Information to verify your identity, process your application and reduce the risk of fraud in our operations. In collecting, using and disclosing such information, we comply with the requirements of the Privacy Act 1988 (Cth), the Identity Verification Services Act 2003 (Cth) and a special purpose Document Verification Services Participation Agreement with the Commonwealth, which governs our use of the Commonwealth Government's Document Verification Service (“DVS”). Our approved DVS gateway service providers also comply with the requirements of the Privacy Act 1988 (Cth), the Identity Verification Services Act 2003 (Cth) and their own DVS Participation Agreement with the Commonwealth in relation to the collection of your Identification Information.
Who we share your Identification Information with and why
3. We may share your Identification Information with one or more of the following third parties:
(a) our service providers, including approved DVS gateway service providers and their data centre service providers, who access and use the DVS on our behalf to confirm whether the Identification Information you have provided matches the information held by government bodies. These service providers may use the results of any verification assessment to assist with monitoring and improving the services they provide to us (such as checking for systems outages and rectifying errors) and may share these results with us. You can find more information about how the DVS operates and is managed by the DVS Hub and the Framework Administrator at https://www.idmatch.gov.au/
(b) government bodies and database owners to confirm whether the identity information you have provided matches the information they hold
(c) identity verification service providers and their data centre service providers who may help us process and assess your personal information, including any sensitive information (such as photos or video recordings of your face), to verify your identity as part of your application with us.
4. Your identity check is performed by LexisNexis Risk Solutions’ IDVerse platform that will:
(a)confirm your ID document is genuine and read the details on it
(b) use your selfie to make sure you're a real person and that it biometrically matches your ID photo
(c) store your biometric information securely for 7 days only
(d) use your device's location to help prevent fraud
(e) not use your personal data to train its systems.
Your rights
5. You have the right to request access to, and correction of, your Identification Information that we collect, use and disclose in connection with our identity verification activities. You can also express your concerns or make a complaint about how we collect, use or disclose your Identification Information. Our Privacy Policy contains more information about how you can exercise these rights. IDVerse’s Privacy Policycontains more information about the collection and processing of your Identification Information and your rights.
What happens if you do not consent
6. If you do not consent to the use of your Identity Information for identity verification, we will not be able to provide you with our products and services.
3 November 2025