Privacy Policy
Introduction
At Mortgage Design Limited (we, us, our), we are committed to protecting your personal information and complying with the New Zealand Privacy Act 2020. Personal information refers to any details about an identifiable individual. This policy explains how we collect, use, disclose, and safeguard your personal information.
This policy does not limit your rights under the Act. For more information about your rights, you can contact our Privacy Officer at privacy@mortgagedesign.co.nz or visit www.privacy.org.nz.
Changes to this policy
We may update this policy from time to time by posting a revised version on our website. Any changes will apply from the date the revised policy is uploaded.
What is personal Information
Personal information includes, but is not limited to, your name, address, contact details, date of birth, occupation, payment information, employment history, education and qualifications, financial details, testimonials, feedback, and in some cases, evidence of the source of funds or wealth.
How We Use Your Personal Information
We use your personal information to:
Verify your identity
Provide our services and products to you
Communicate and market our services and products, including via calls, texts, or emails
Improve the services and products we provide
Respond to your inquiries, including complaints
Protect and enforce our legal rights
Any other purpose authorised by you or permitted under the Act
Disclosing Your Personal Information
We may share your personal information with:
- Companies or individuals who assist us in providing services, such as mailing houses, data hosting providers, legal advisers, and consultants
- Product providers, including lenders and insurance companies
- Financial advisers or related service providers
- Entities performing compliance or audit checks on our behalf
- Government agencies such as the New Zealand Department of Internal Affairs, NZ Transport Agency, courts, tribunals, and regulatory authorities
- Social media platforms where we maintain a presence
- CERT NZ or other privacy regulators, where applicable
- Any person or agency you authorise us to disclose information to
We will not disclose your personal information beyond these purposes without your consent, except where required by law.
Protecting Your Personal Information
We take reasonable steps to keep your personal information secure against loss, unauthorised access, or misuse. All data stored in our systems is encrypted in transit and at rest and can only be accessed through secure network connections. Our software undergoes regular audits to ensure it meets security requirements.
Storing Your Personal Information
We retain personal information only as long as necessary for the purposes it was collected. Online data is backed up regularly to prevent loss or corruption. Some data may be held on-premise at a local adviser’s office if provided outside our software.
Accessing and Correcting Your Personal Information
You have the right to access and request corrections to your personal information, subject to certain legal grounds for refusal. We may require evidence to confirm your identity before processing any requests.
If we agree that a correction is reasonable, we will update your information. If not, we will note your request on the record.
To request access or correction, email privacy@mortgagedesign.co.nz with evidence of your identity and details of your request.
Data Breaches
Our Privacy Officer maintains systems and processes to manage data breaches. In the event of a breach, we will promptly identify, report, and address it in line with regulatory requirements.
Internet Use
While we use reasonable measures to secure internet connections, providing personal information online is at your own risk. External websites linked from our site have their own privacy policies, which we encourage you to review.
We use cookies to improve website functionality and monitor usage. You may disable cookies in your browser settings, but some features may not be available.
We may use information about your website and IT system usage to prevent unauthorised access or security threats. Third-party suppliers assisting with monitoring will have access to this information as necessary to provide their services.