Introduction

Savvy Mortgages Ltd (we, us, our) complies with the New Zealand Privacy Act 2020 (the Act) when dealing with personal information. Personal information is information about an identifiable individual (a natural person).

This policy sets out how we will collect, use, disclose, and protect your personal information.

This policy does not limit or exclude any of your rights under the Act. If you wish to seek further information on the Act, you can contact our Privacy Officer at nitin@savvynz.co.nz or visit www.privacy.org.nz for further information.

Changes to This Policy

We may change this policy by uploading a revised version onto the website. The changes will apply from the date that we upload the revised policy.

What Is Personal Information?

Personal information is information about an identifiable individual. It includes (but is not limited to):

• Name
• Address
• Contact details
• Date of birth
• Occupation
• Payment details
• Employment history and details
• Education and qualifications
• Financial information
• Testimonials and feedback
• Evidence of source of funds or source of wealth (in some cases)
• Any other relevant information

Third-Party Collection of Information

Where we collect your personal information from someone other than you, we will take reasonable steps to notify you of:

• The fact that we have collected your personal information
• The purpose of the collection
• The intended recipients of the information
• The name and address of the agency collecting and holding the information
• Whether the collection is authorised or required by law (and the relevant law)
• Your right to access and request correction of that information

This will be done unless an exception applies under the Privacy Act 2020.

How We Use Your Personal Information

We will use your personal information to:

• Verify your identity
• Provide services and products to you
• Market our services and products to you, including contacting you electronically (e.g. call, text, or email)
• Improve the services and products that we provide
• Respond to communications from you, including complaints
• Protect and/or enforce our legal rights and interests, including defending any claim
• Carry out any other purpose authorised by you or the Act

Disclosing Your Personal Information

We may disclose your personal information to:

• Other companies or individuals who assist us in providing services or perform functions on our behalf (e.g. mailing houses, hosting providers, data storage providers, consultants, legal advisers)
• Product providers (including lenders and insurance companies)
• Financial advisers and financial advice providers who may use our services
• Companies or individuals who perform compliance checks, audits, or verification services
• Agencies that maintain identity verification databases (e.g. New Zealand Department of Internal Affairs, New Zealand Transport Agency)
• Social media platforms where we maintain a presence
• Courts, tribunals, and regulatory authorities (e.g. Financial Markets Authority, Ministry of Justice)
• Office of the Ombudsman (where applicable)
• Human Rights Commission (where applicable)
• CERT NZ (for managing privacy breaches)
• Overseas privacy regulators (where applicable)
• Any person or agency that may assist in responding to a serious privacy breach
• Any other party you authorise us to disclose information to

Except as described above, we will not disclose your personal information without your consent unless required by law.

Protecting Your Personal Information

We will take reasonable steps to protect your personal information from loss, unauthorised access, or misuse.

Our systems are subject to regular audits to ensure they meet security standards. All data is encrypted in transit and at rest and is accessible only through secure network connections.

Storing Your Personal Information

We will retain personal information only for as long as necessary for lawful purposes.

• All online data is securely backed up and recoverable in case of data loss
• Some data may be stored on-premise at:
  59A Caronia Crescent, Lynfield, Auckland
  (if provided outside of our software systems)

Accessing and Correcting Your Personal Information

Subject to certain grounds for refusal under the Act, you have the right to:

• Access your personal information
• Request correction of your personal information

We may require proof of identity before processing your request.

If a correction is reasonable and possible, we will make the correction. If not, we will record your requested correction alongside the information.

To make a request, email: nitin@savvynz.co.nz
Include proof of identity and details of your request.

Data Breaches

Our Privacy Officer has processes in place to manage data breaches. If a breach occurs, we will promptly identify, report, and investigate it.

Internet Use

While we take reasonable steps to maintain secure internet connections, any personal information you provide online is at your own risk.

If you follow links to third-party websites, those sites will have their own privacy policies. We recommend reviewing them before providing personal information.

We use cookies (small identifiers stored on your device) to:

• Recognise your browser
• Monitor website usage

You can disable cookies in your browser settings, but this may affect website functionality.

We may also use third-party services to monitor and protect our systems. These providers may have access to:

• Usage data
• System logs
• Information processed through our website and systems