Privacy Policy

When you use the services of NZ Risk Services Ltd, you trust us with your personal and financial information. We take this responsibility seriously and are committed to protecting your privacy in accordance with the Privacy Act 2020. This policy outlines how we collect, use, store, and protect your personal information and your rights regarding that information

​

NZ Risk Services Ltd | FSP1005152

Effective: 1 July 2025

We adhere to the 13 Privacy Principles set out in the Privacy Act 2020, which guide how personal information must be collected, stored, used, and disclosed.

These include:

• Collecting information only when it is necessary and for a lawful purpose

• Collecting it directly from you unless exceptions apply

• Informing you about how and why the information is being collected

• Ensuring the information is accurate, up to date, and securely stored

• Giving you the right to access and correct your information

• Only disclosing information when legally permitted or with your consent

We collect personal information when you:

• Engage our services or request financial advice

• Complete a form or provide information via phone, email, or our website

• Interact with us as an employee, contractor, or referral partner

Most information is collected directly from you. If we need to collect it from another source, we will inform you where possible.

We only use your personal information to:

• Provide you with financial advice and services

• Communicate with you

• Meet legal and regulatory obligations

• Improve our service offering

•  

We do not sell, trade, or rent your personal information to others.

Your personal information is stored securely on our internal systems and cloud-based platforms. These platforms may be hosted overseas; however, we ensure that all providers comply with New Zealand’s privacy laws.

Only authorised staff have access to your information, and we take all reasonable steps to protect it from loss, misuse, or unauthorised access.

We retain personal information only as long as necessary and dispose of it securely when no longer required.

You have the right to:

• Request access to personal information we hold about you

• Request correction of any incorrect or outdated information

• Add a statement of correction if we disagree with your requested correction

We will respond to access or correction requests within 20 working days.

In some instances, we may need to disclose personal information to service providers or partners based overseas. Before doing so, we ensure those providers meet New Zealand’s privacy standards. If they do not meet our requirements, we will not allow them to hold your data.

If a privacy breach occurs, we act quickly to:

1. Contain the breach

2. Assess the level of risk

3. Notify affected individuals and the Office of the Privacy Commissioner (if serious)

4. Prevent recurrence through improved systems and training

Breaches are logged in our internal register and reviewed regularly.

Our Privacy Officer is responsible for ensuring our compliance with the Privacy Act. If you have any concerns or questions, or wish to make a privacy request or complaint,

please contact: complaints@nzrisk.nz

If you're unhappy with how your information has been handled, please contact us first. If we can’t resolve your concern, you may contact the Office of the Privacy Commissioner:

​

https://www.privacy.org.nz

0800 803 909

We review this privacy policy annually to ensure it remains up to date. Any changes will be published on our website.

​

This policy was last updated on 1 July 2025.