New South Wales Treasury Corporation - Privacy


This Privacy Policy applies to all publicly accessible pages on the TCorp website and Client Portal.

Users of this site are advised that any information collected as a result of that use will be treated in accordance with TCorp’s privacy responsibilities and obligations. TCorp’s privacy practices in respect of the public website and Client Portal are regulated by the Privacy and Personal Information Protection Act 1988 (NSW) (PPIP Act).

TCorp does not have any responsibility for the privacy policies or practices of third-party sites linked to this site. If you have any questions about this site, the application of this Privacy Policy, or a request for access to information held by TCorp, please contact us using our online form and your request will be passed to the Privacy Officer.

What information do we collect? 

When you visit this website or download information from it, our servers may record a range of information including (but not limited to):
  • The user’s server (IP) address and machine name
  • Location details such as longitude, latitude, city, region and country
  • Date and time of visit to the site
  • Top level domain name
  • Pages accessed and documents downloaded
  • The previous site or page visited
  • Search terms used
  • Type of browser used. 

Cookies - IP address tracking

A cookie is a small data file transferred by a website to your computer’s hard drive. TCorp will send cookies when you:
  • View pages on this website
  • Send a request to TCorp
  • Register yourself on our website to be sent information and/or updates.
A cookie does not give us access to your personal information, but we may use the cookie to identify your computer.
Cookies can be either ‘persistent’ or session-based. A persistent cookie is stored on your computer, contains an expiration date, and may be used to track your browsing behaviour upon return to the issuing website. Session cookies are short-lived, used only during a browsing session, and expire when you shut down your browser.
This website uses persistent cookies. They record your preferences in relation to the use of this site and provide us with information about your enquiry that allows us to recognise your browser if you return to the TCorp website in the future. 
The cookies on this site do not read the information on your hard drive. They do not make your computer perform any actions or transfer information from your computer  to any other computer via the internet. TCorp does not attempt to associate cookies with users’ names or identities. The TCorp server cannot find out your name or email address, or anything about your computer, by using cookies.

Managing cookies on your computer

Most browsers are set by default to accept cookies, but you can configure your computer to interact with cookies across the internet in accordance with your preferences. You can set your browser to notify you when you receive a cookie, so you can decide whether or not to allow each cookie on to your hard drive, or block cookies completely. If you decide not to accept cookies on this site, some of the webpages may not display properly, or you may not be able to access certain information.

You can also set your browser so that the cookies set by this website are destroyed when your browser shuts down and no browser information is maintained which might identify you if you visit this site at a later time. In this way, persistent cookies will effectively function as session cookies.


TCorp will collect, use and disclose more extensive information than outlined above in the following circumstances:

  • Unauthorised attempts to access files that are not publicly available
  • Unauthorised tampering or interference with files on the website
  • Unauthorised attempts to index the contents of the website
  • Attempts to intercept messages of other users of the website
  • Communications which are defamatory, abusive, vilify individuals or groups or which give rise to a suspicion that an offence is being committed
  • Attempts to otherwise compromise the security of the web server, breach the laws of the state of New South Wales or Commonwealth of Australia, or interfere with the use of the website by other users.
TCorp reserves the right to make disclosures to relevant authorities where use of the website raises a suspicion that an offence is being, or has been, committed. In the event of an investigation, TCorp will provide access to data to any law enforcement agency that may exercise a warrant to inspect our logs. 

Google Analytics

The TCorp website uses Google Analytics, a reporting service provided by Google Inc. (Google) and its subsidiaries. Google Analytics uses cookies to help TCorp analyse how users use the site. The information generated by the cookie about your use of the site (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the site, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. 

Google may also transfer this information to third parties, where required to do so by law or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browse, but this may mean you will not be able to use the full functionality of the website. For more details visit

Online forms

To subscribe or log in to some parts of the TCorp website, you must provide a valid email address or specific username and password. These details will only be used for the purpose for which they have been provided, and will not be added to any other mailing lists unless you specifically request it. Email address lists are stored on a separate server and can only be accessed by authorised employees.

By submitting any personal information through online forms you are consenting for the purposes of the PPIP Act to your personal information being disclosed to us for the purposes of responding to your request and also for administrative, regulatory and other purposes.

When you log in to the Client Portal there will be specific terms and conditions relating to the specific service - you should refer to the relevant collection statement and terms and conditions of that service when you log in to the Client Portal.

Quality and security

The TCorp website is hosted in Australia on a third-party server with best practice certification including ISO270001. We take reasonable steps to protect personal information we hold against loss, unauthorised access, use, modification or disclosure, and other misuse. We also have procedures to respond to any data breaches of personal information. 

We train our employees about the importance of confidentiality and maintaining the privacy and security of your information. Access to your personal information is restricted to employees who require access to it to discharge their responsibilities. The personal information we collect is only used for the purposes for which it is collected. We will not use or disclose any personal information for any purpose without your consent. If we do, it will only be disclosed to another party as required by law. 

Access and accuracy

We take reasonable steps to ensure all personal information we collect is accurate, up to date, and complete. This includes updating your personal information when you advise us that it has changed, and at other times as necessary.

If you wish to have access to or amend any information that we hold about you please contact us via our online contact form or on +61 2 9325 9325 or by writing to us at Level 7, Deutsche Bank Place, 126 Phillip Street, Sydney NSW 2000.

We will have to verify your identity before meeting your requests, which we will process in a reasonable time.

Please contact us if you have any questions or comments.


If you have a concern about personal information held by us, which may include a breach of our obligations in relation to your privacy you should contact: 

If you are not satisfied with our response, we will advise you on your options for further progressing any complaint.