Privacy Statment
In this Privacy Statement, ‘we’, ‘us’ and ‘our’ means The Insurance Advice Company Limited. For more information, read our full privacy policy.
We are committed to protecting the privacy of your personal information. This Privacy statement sets out how we collect, store, use and share your personal information, in accordance with the Privacy Act 2020.
By submitting your details on our website, you consent to the use of your personal information in accordance with this Privacy Statement.
What personal information we collect
In New Zealand, under the Privacy Act 2020, “personal information” means information about an identifiable individual. We collect certain types of personal information about you, including:
- information in relation to the application for, provision and administration of insurance, such as your contact details, date of birth, employment details, health information, details of previous insurances and past insurance claims and criminal records;
- financial, billing and invoicing information;
- if you visit our website, we will collect personal information that you submit, such as via online forms; and
- any other personal information you otherwise provide to us.
If you do not provide us with the information that we need, we or any of our third party service providers may not be able to provide you with products or services.
How we collect your personal information
We may collect personal information in a number of ways, including:
- directly from you via our website, telephone, in writing or email; and/or
- indirectly from third parties, if necessary. For example, your employer, referees, insurers, premium funders and other third party service providers or publicly from available sources.
You authorise us to contact such third parties for the purposes of providing you with the information or services that you have requested.
Sometimes we collect personal information about you from someone else. This may include information we receive from your professional advisers; service providers we work with; organisations you have authorised to share information with us; and publicly available sources, such as public registers or information available online.
If we collect personal information about you from someone else, we will take reasonable steps to let you know, unless an exception applies.
When we do this, we will tell you:
- The fact of collection — that we have collected, or will collect, personal information about you from someone else.
- Purpose — why we collected your information and how we plan to use it. The purpose will be specific enough to be meaningful.
- Intended recipients — who your information may be shared with. We will name specific organisations where practicable. Our Indirect Collection Source Schedule lists those organisations.
- Who we are — the identity of the organisation collecting and holding your information, and our contact details.
- Legal basis — where collection of your information is authorised or required by a particular law, we will name that law.
- Your access and correction rights — that you can request access to your information and ask for it to be corrected.
Privacy contact: jarrod@insuranceadvicecompany.nz
Where possible, we will provide this notice before or at the time we collect your information. Where that is not practicable, we will let you know as soon as reasonably possible afterwards.
In some limited situations, we may not be able to tell you that we have collected your personal information from someone else. This may happen if:
- Letting you know would be impossible or not reasonably practicable.
- We are legally required or permitted to collect the information without notifying you.
- Telling you would create a serious risk to someone’s safety or national security.
- The information is publicly available.
These exceptions are narrow and we will always notify you wherever it is reasonably possible to do so. In all cases, we will continue to handle your personal information in line with this privacy statement.
What do we use your personal information for?
We collect and use your personal information to provide the information and services that you request from us, and to provide you with information about other services we consider appropriate. Such purposes include:
- assessing and managing your insurance application and statement;
- managing and processing payments;
- communicating with you about our products and services;
- conducting market or customer research;
- administering claims;
- developing, establishing and administering alliances and other arrangements with other organisations in relation to the promotion,
- administration and use of our services;
- telling you about our other service offerings which we believe may be relevant (if you have requested to receive this);
- statutory or regulatory reporting;
- internal or external audit; and
- any other purpose notified to you at the time your personal information is collected.
When necessary, we may also use your information to:
- Comply with our legal and regulatory obligations
- Defend or enforce our rights — for example, to collect money owed to us.
These purposes apply whether your personal information is collected directly from you or from someone else. We do not use personal information collected from other sources in unexpected or unfair ways.
Who do we share your personal information with?
Besides our staff, we may share your personal information with third parties who enable us to provide you with our services, including:
- insurers, reinsurers, other insurance intermediaries, insurance reference bureaus and industry bodies;
- assessors appointed by insurers to assess or investigate your claims;
- others named on your policy as co-insureds;
- service providers engaged to provide services to you in relation to your insurance (such as providing repairs);
- third parties who help manage our business and provide our services, including our third party service providers, such as payment system operators, IT suppliers, lawyers, accountants, other advisers and financial institutions;
- any other entities notified to you at the time of collection; and
- courts, law enforcement, regulators and other government agencies to comply with all applicable laws, regulations and rules.
Other than when required or permitted by law, as specified in this Privacy Statement or where you have provided your consent, we will not disclose your personal information.
Nothing in this Privacy Statement prevents us from using and disclosing to others de-personalised aggregated data.
We will only share your personal information with third parties where it is necessary to help us do what we collected your information for, where it is required by law, or where you give us authority to. We require these third parties to adhere to our strict confidentiality requirements for handling personal information and we seek to ensure that they comply with the Privacy Act 2020.
Transfer of personal information overseas
We may disclose your personal information to third party service providers and/or insurers who may process your personal information either on our behalf or otherwise for one or more of the above-stated purposes.
Some of the third party service providers to whom we disclose personal information are located in countries outside New Zealand, such as United Kingdom, USA, Australia and India. In this regard, unless exempted by the Privacy Act 2020, we would have sought your express authorisation to do so prior to the transfer of your personal information overseas. Overseas disclosure of your personal information will only be made for one or more of the purposes specified in this Privacy Statement.
We will take appropriate steps to ensure that transfers of personal information are in accordance with applicable law and carefully managed to protect your privacy rights, such as by ensuring disclosures are limited to recipients who are subject to privacy laws which are recognised as providing a comparable level of legal protection as the Privacy Act 2020, or where we can be satisfied that alternative arrangements are in place to protect your privacy rights.
Where do we store your personal information?
We use third party cloud service providers to store and process the information we collect. We ensure that our cloud-based service providers are subject to appropriate security and information handling arrangements and that the information stored or processed by them remains subject to confidentiality obligations.
Your obligations when you provide personal information of others
You must not provide us with personal information of any other individual unless you have the express authorisation of that individual to do so. If you do provide us with such information about another individual, before doing so you:
- must tell that individual that you will be providing their information to us and that we will handle their information in accordance with this Privacy Statement;
- must provide that individual with a copy of (or refer them to) this Privacy Statement; and
- warrant that you have that individual’s consent to provide their information to us. If you have not done this, you must tell us before you provide any third party information.
Your obligations when we provide you with personal information
If we give you, or provide you access to, the personal information of any other person, you must only use it:
- for the purposes we have agreed to; and
- in compliance with applicable privacy laws (including the Privacy Act 2020) and this Privacy Statement.
You must also ensure that your agents, advisers, employees and contractors meet the above requirements.
What are your rights?
You do not have to provide information to us. If you choose not to provide necessary personal information when requested, we may be unable to provide certain information or services to you.
We take reasonable steps to ensure that your personal information is accurate, complete and up-to-date whenever we collect, use or disclose it. However, we also rely on you to advise us of any changes to your personal information.
You have the right to ask for a copy of any personal information we hold about you, and to ask for it to be corrected if you think it is wrong. You have the right to ask where your personal information came from if it was not collected directly from you.
Please contact us using our contact details below as soon as possible if there are any changes to your personal information or if you believe the personal information we hold about you is not accurate, complete or up-to-date.
If you have any questions about this Privacy Statement or you’d like to ask for a copy of the information we hold on you, or to have it corrected, please contact us at the details below. If you make an access request, we will provide you with access to the personal information we hold about you unless otherwise required or permitted by law. We will notify you of the basis for any denial of access. We may charge a fee where permitted by law.
Security of your personal information
We take reasonable steps to protect any personal information that we hold from misuse, interference and loss, and from unauthorised access, alteration and disclosure. However, data protection measures are never completely secure and, despite the measures we have put in place, we cannot guarantee the security of your personal information. You must take care to ensure you protect your personal information. You should notify us as soon as possible if you become aware of any security breaches. Where required by law, we will notify you of any notifiable privacy breach concerning your personal information.
Updates of Privacy Statement
We reserve the right to amend our Privacy Statement from time to time to ensure we properly manage and process your personal data.
How to make a complaint
If you wish to make a complaint about a breach of this Privacy Statement or any breach of applicable privacy laws, you can contact us using the contact details below. You will need to provide us with sufficient details regarding your complaint together with any supporting evidence and information. You can also complain to the Privacy Commissioner (see www.privacy.org.nz).
How to contact us
If you wish to gain access to your personal information, want us to correct or update it, have a complaint about a breach of your privacy or any other query relating to our Privacy Statement, please contact us at:
The Insurance Advice Company Limited
9-11 Kings Crescent, Lower Hutt 5010
Phone: 0800 MAC IAC (0800 622 422)
Email: info@insuranceadvicecompany.nz
This document was last updated: 22 July 2026