Purpose

We know how we collect, use, disclose and protect your information is important to you, and we value your trust. That’s why protecting your information and being clear about what we do with it is a vital part of our relationship with you.

The purpose of this Privacy Policy is to inform our clients and any users of our digital platforms (i.e. our website & facebook page) about how we comply with the requirements of the New Zealand Privacy Act 2020 (“the Privacy Act”) in managing personal information.

Consent to Privacy Policy

Please note that when you contact us through our website and social media you are agreeing to this Privacy Policy. If you do not agree with this Privacy Policy, please do not contact us through any of my digital platforms but call us on +6496105810 or Email us on admin@vcfinance.co.nz.

Collection of personal information

We collect personal information about you in the course of providing mortgage advisory and related financial services.

The types of personal information we collect may include:

• Details such as your email address, postal address, and phone number
• Details relating to your use of any product and/or service offered by us
• Details of your enquiry
• Details of any preferences you tell us about (such as subscription preferences)

We may also collect personal information about you from:

• Publicly available sources (e.g. via the internet or public registers);
• Credit reporting agencies;
• Product providers such as lenders and insurers;
• Your professional advisers;
• Identity verification providers and government agencies (for AML/CFT compliance).

We collect your personal information from the above parties (other than publicly available sources) where we have received your express consent to do so. We are not responsible for the privacy or security practices of the above parties and the parties described above are not covered by this Privacy Policy.

Indirect Collection of Personal Information (IPP3A)

In some circumstances, we may collect personal information about you from third parties (rather than directly from you).

This may occur where it is necessary to:

• Verify your identity
• Assess your eligibility for financial products
• Comply with legal obligations, including the Anti-Money Laundering and Countering Financing of Terrorism Act (AML/CFT)
• Obtain information required to provide accurate financial advice

When we collect your personal information in this way, we will take reasonable steps to notify you as soon as reasonably practicable, in accordance with the Privacy Act 2020 (including Information Privacy Principle 3A).

This notification will include:

• The fact that your personal information has been collected.
• The purpose of the collection.
• The intended recipients of the information.
• The name and address of the agency collecting and holding the information.
• Any legal authority for the collection (where applicable).
• Your rights to access and correct your personal information.

In some circumstances, we may not be required to notify you where:

• You have already been made aware of the collection; or
• An exception under the Privacy Act 2020 applies.

Online device information and cookies

If you are visiting us through our website or social media, we collect information about your use and experience on these by using cookies. Cookies are small pieces of information stored on your hard drive or on your mobile browser. They can record information about your visit to the site, allowing it to remember you the next time you visit and provide a more meaningful experience.

The cookies we send to your computer, mobile phone or other device cannot read your hard drive, obtain any information from your browser or command your device to perform any action. They are designed so that they cannot be sent to another site or be retrieved by any non-Sai Finance Ltd website.

When you interact with us through my website or social media the information collected through cookies may include:

• The date and time of visits
• Website page(s) viewed
• The website from which you accessed the internet
• How you navigate and interact with the website
• Information about your location
• Information about the device used
• IP address and browser type

We will not ask you to supply personal information publicly over social media platforms. Where appropriate, we may invite you to provide details via private or secure channels, and we will obtain your consent where required.

Purpose of collection and use of personal information

Any personal information you provide to us may be used to:

• Check whether you are eligible for the products or services offered.
• Facilitate those services.
• Provide information that you request.
• Provide you with further information about other products and services.

We may also collect, use or share your information to:

• Verify your identity.
• Comply with legal and regulatory obligations, including AML/CFT requirements.
• Obtain information necessary to provide accurate financial advice.

We also have an obligation to maintain personal information to disclose to regulatory and similar bodies.

Storage and protection of your personal information

We may electronically record and store personal information which we collect from you. We will take all reasonable steps to keep it secure and prevent unauthorised disclosure.

However, we cannot guarantee that unauthorised access will never occur. If we provide you with passwords or security devices, you must keep them confidential.

Your information may be stored:

• In paper files;
• Electronically on physical drives;
• In cloud systems managed by third-party providers.

We use a range of security measures including:

• Access controls
• Secure premises
• Secure data transfer arrangements
• Regular compliance monitoring

We only keep information as long as required by law or for business purposes.

Cloud-based service providers

We use third-party providers (e.g. cloud storage services) to store and process personal information. These providers are subject to appropriate security and confidentiality obligations.

Timeframes for keeping personal information

Client records are secure and protected from loss, unauthorised access, disclosure and are kept for 7 years.

We do not keep records longer than required 7 years from the later of: the date the record was made; and the date the financial advice to which the record relates was given.

The date any later record is made that refers or relies upon info in the record; and The date of the conclusion of the life of the financial product that the advice relates to.

If there is a privacy breach

If a privacy breach occurs that is likely to cause serious harm, we will:

• Contain and assess the breach
• Notify affected individuals where appropriate
• Notify the Privacy Commissioner
• Take steps to prevent recurrence

Disclosure of your personal information

We may disclose your personal information where:

• Necessary to provide services
• Required by law
• You have consented
• Permitted under the Privacy Act 2020

Parties may include:

• Service providers
• Regulators
• Dispute resolution bodies
• Credit reporting agencies

We will never sell your personal information.

Third party websites

We are not responsible for third-party websites linked from our platforms. Please review their privacy policies separately.

Right to access, correct and delete personal information

You may request access to, correction of, or deletion of your personal information by contacting:

admin@vcfinance.co.nz

We may require identification before processing your request. Some legal limitations may apply.

What happens if you do not provide information?

If you do not provide requested information, we may be unable to provide services.

Changes to this Privacy Policy

We may update this policy from time to time. The latest version will be available on our website.

Privacy Policy queries and complaints

If you have concerns, contact:

admin@vcfinance.co.nz

If unresolved, you may contact the Office of the Privacy Commissioner (New Zealand).