Our Privacy & Cookie Policy

1. OUR COMMITMENT TO PROTECT YOUR PRIVACY

We understand how important it is to protect your personal information. This document sets out our privacy commitment in respect of personal information we hold about you and what we do with that information.

It is important to us that you are confident that any personal information we hold about you will be treated in a way which ensures protection of your personal information.

Our commitment in respect of personal information is to abide by the Privacy Principles set out in the Privacy Act 2020 (or any successor legislation) (the Privacy Act) and all other applicable laws. Where we deal with clients ordinarily resident outside New Zealand (including the United Kingdom, European Union, Australia and Singapore), we also have regard to applicable data protection laws in those jurisdictions, including the UK GDPR and EU GDPR. This Privacy Policy applies in addition to, and does not limit, our rights and obligations under the Privacy Act and other applicable laws.

2. WHO WE ARE

References in this Privacy Policy to "we", "us" and "our" mean Stewart & Lord Limited (FSP666631), a licensed Financial Advice Provider, acting through its financial advisers and through its Authorised Body Keystone Limited (trading as New Zealand Mortgages), which operates the website www.newzealandmortgages.co.nz.

Contact email for privacy enquiries: hello@newzealandmortgages.co.nz

3. YOUR AUTHORISATION

By providing us with personal information, engaging us to provide you with services, or by using our website, you consent to the collection, use, storage and disclosure of personal information in accordance with this Privacy Policy.

4. CHANGES TO OUR PRIVACY POLICY

We may change our Privacy Policy from time to time, by publishing an updated version on this page, to reflect changes in the law and also our business needs so long as the changes do not disadvantage you. By continuing to engage us or use our website you will be deemed to have accepted the updated Privacy Policy.

5. WHAT PERSONAL INFORMATION DO WE COLLECT?

When we refer to personal information we mean information that identifies, or is capable of identifying, you. This includes, for example, your name, date of birth, address, contact details, account details and occupation.

If you engage us to provide services to you, we may collect personal information about your financial situation or goals in order to recommend mortgage and insurance products that we are permitted to advise on (Products).

We may also collect technical information automatically when you use our website, including your IP address, device type, browser, pages visited, session duration and referral source.

6. WHY DO WE COLLECT YOUR PERSONAL INFORMATION?

We collect your personal information for the purposes of our and relevant third parties' services and relationship with you (refer to section 9 below: "Who do we disclose your personal information to?"). For example:

• responding to your requests or enquiries;

• providing services to you (e.g. to enable us to recommend Products to you);

• sending communications and direct marketing to you about products and services we think may be of interest to you (whether through mail, telephone or electronic means, including email and SMS/MMS);

• measuring website performance and the effectiveness of our digital marketing campaigns;

• market research; and

• any other purpose authorised by you or the Privacy Act.

If you do not wish to receive marketing information, you may 'opt out' at any time by notifying us.

We may also collect personal information (including credit information and health information) on behalf of the lenders, insurers and other providers of Products that you choose to apply for (Product Providers). Product Providers will have their own Privacy Policy that applies to the information that we collect on their behalf.

7. HOW DO WE COLLECT YOUR PERSONAL INFORMATION?

Generally we will collect your personal information directly from you. For example, we collect your personal information directly from your use of our website and the information that you submit through enquiry or contact forms. We also collect your personal information if you use the "contact us" functionality on our website and during conversations between you and us.

We may also collect your personal information from:

• NZ Financial Services Group Limited (NZFSG) and its related bodies corporate;

• credit reporting agencies;

• with your authorisation, banks (e.g. through the use of illion Bank Statements) and employers;

• Product Providers (e.g. during the term of any loan or insurance we have arranged on your behalf, in order to answer your queries or assist you with your financial arrangements as your circumstances change). If applicable, the Product Providers may also periodically disclose your loan balance or premium to us in connection with the payment of ongoing commission to us over the term of your loan or insurance; and

• any other person authorised by you or the Privacy Act.

If we collect your personal information from someone other than you, we will take reasonable steps to notify you of the collection and the required statutory matters as soon as reasonably practicable, unless an exception under the Privacy Act applies.

If you provide any personal information about anyone else to us, you confirm that you have collected that personal information in accordance with the Privacy Act and that the individual concerned has:

• authorised the disclosure to us and the collection, use and disclosure of their personal information by us in accordance with this Privacy Policy; and

• has been informed of their right to access and request correction of their personal information.

8. UPDATING YOUR PERSONAL INFORMATION

We will generally rely on you to ensure the information we hold about you is accurate. If any of your details change, please let us know as soon as possible by contacting us at hello@newzealandmortgages.co.nz.

9. WHO DO WE DISCLOSE YOUR PERSONAL INFORMATION TO?

We may disclose your personal information to the following people if we consider it necessary to do so for the purposes described in section 6 above:

• NZFSG and its related bodies corporate.

  We share personal information with NZ Financial Services Group Limited (NZFSG), in the course of our being a member of their financial services group. This includes information that you provide to us directly, and information we collect or create during the course of our engagement with you including your identity, contact details, and sensitive financial data. This sharing enables us to provide you with our services and allows NZFSG to meet its monitoring, oversight, and assurance obligations under the Financial Markets Conduct Act 2013 and the Privacy Act. NZFSG acts as an agency collecting and holding this information. You can view their full Privacy Policy, including their physical address and details on how to exercise your rights to access and correct your information, at www.nzfsg.co.nz/privacy-policy. Please note that this sharing is a condition of our service; if you do not agree, we cannot provide services to you because NZFSG's oversight is a condition of our membership within their financial services group.

• Product Providers and other prospective lenders, third parties or other intermediaries in relation to your finance or insurance requirements (including a prospective lender's mortgage insurer (if any), any person with whom a lender or insurer proposes to enter into contractual arrangements, any person who provides a guarantee or security and any trustee and any assignee or potential assignee of a lender's or insurer's rights);

• our referral partners who can help you with other services;

• contractors or service providers, including our website host, analytics and digital marketing providers (such as Google Analytics 4, Google Ads and Meta);

• investors, or any entity that has an interest in our business or any entity to whom we consider assigning or transferring any of our rights or obligations or selling all or part of our business;

• anyone who we are legally required or authorised to share your information with, including regulators and government agencies;

• to auditors (such as NZFSG) to ensure we are providing services to you that are in your best interests, and in accordance with current regulations;

• your employer and referees, as well as credit reporting and identity verification agencies; and

• any other person or entity authorised by you or the Privacy Act.

You acknowledge and agree that credit reporting agencies may hold your credit information (including default information) on their systems and use such information to provide their credit reporting services, which may include providing your credit information (including default information) to their customers.

We do not sell your personal information.

Prior to disclosing any of your personal information to another person or organisation, we will take all reasonable steps to satisfy ourselves that the person or organisation has a commitment to protecting your personal information at least equal to our commitment.

10. . DO WE DISCLOSE YOUR PERSONAL INFORMATION TO ANYONE OUTSIDE NEW ZEALAND?

We may use cloud storage to store the personal information we hold about you. The cloud storage and the IT servers may be located outside New Zealand. We may also disclose personal information to NZFSG and its related bodies corporate, and third party suppliers and service providers (including our website, analytics and advertising providers) located overseas for some of the purposes listed above.

Where we transfer personal information of individuals located in the United Kingdom or European Union, we rely on standard contractual clauses or equivalent safeguards as required by the UK GDPR or EU GDPR.

11. . OUR WEBSITE

Cookies and IP addresses

When you access our website, we may send a "cookie" (which is a small summary file containing a unique ID number) to your computer. This enables us to recognise your computer each time you visit our website. We also use cookies to measure traffic patterns, to determine which areas of our website have been visited, to measure transaction patterns, to analyse trends, administer the website, track users' movements and gather broad demographic information. We use this to research our users' habits so that we can improve our website and our service offering. Our cookies may record information such as your Internet Protocol (IP) address (that is, the electronic addresses of computers connected to the internet), your device and browser type, operating system, the pages or features of our site to which you have browsed and the time spent on those pages or features, the frequency with which the site is used by you, the search terms that you have used, the links on our site that you have clicked on or used, and other usage statistics.

The categories of cookies we use are:

• Necessary: cookies required for basic site functionality and security.

• Analytics: anonymous usage data via Google Analytics 4 (deployed via Google Tag Manager).

• Marketing: cookies used by Google Ads conversion tracking and the Meta (Facebook) Pixel to measure marketing performance and deliver relevant advertising.

While our cookies do not collect personal information, if you submit your name and email address as part of your usage, then we will link that personal information with the cookies information that we have previously collected from you.

You can accept, reject, or manage cookies via our cookie banner, or set your browser so that your computer does not accept them.

Security

As our website is linked to the internet, and the internet is inherently insecure, we cannot provide any assurance regarding the security of transmission of information you communicate to us online. We also cannot guarantee that the information you supply will not be intercepted while being transmitted over the internet. Accordingly, any personal information or other information which you transmit to us online is transmitted at your own risk.

We use secure servers, encryption, and access controls to protect the personal data we hold.

Links and third party advertisements

Our website may contain links to other websites operated by third parties. Our website may also display advertisements, which are hosted by third parties.

We make no representations or warranties in relation to the privacy practices of any third party website or advertisement providers and we are not responsible for other privacy policies or the content of any third party website or advertisements. Third party websites are responsible for informing you about their own privacy practices.

Our online advertising network partner may use cookies, web beacons or other web tracking techniques to collect non-personally identifiable information about your activities on the website and other websites that you may visit to provide you targeted advertising based upon your interests.

12. . ARE YOU REQUIRED TO PROVIDE PERSONAL INFORMATION TO US?

You are not required to provide any personal information to us but if you choose not to it might affect our ability to provide services to you and your ability to obtain finance, insurance and other Products from Product Providers.

In most circumstances it will be necessary for us to identify you in order to successfully do business with you. However, where it is lawful and practicable to do so, we will offer you the opportunity of doing business with us without providing us with personal information, for example, if you make general enquiries about interest rates or current promotional offers.

You may choose to interact with our website anonymously, but we will not be able to contact you unless you provide your personal information.

13. . RETENTION OF YOUR PERSONAL INFORMATION

We keep your personal information only for as long as necessary for the purposes set out in this Privacy Policy, or as required by law. Form submissions and enquiry communications may be retained in our secure email and document storage for up to 24 months unless you request earlier deletion or we are required by law to retain them for longer.

14. . ACCESS AND CORRECTION TO YOUR PERSONAL INFORMATION

You may access and request correction of any of the personal information that we hold about you at any time by contacting us at hello@newzealandmortgages.co.nz. We may charge a fee for our reasonable costs of retrieving and supplying the information to you.

Depending on where you live, you may also have additional rights under applicable data protection laws, including the right to withdraw consent for marketing or analytics, and the right to lodge a complaint with a privacy regulator (for example, the Office of the New Zealand Privacy Commissioner, or the UK Information Commissioner's Office).

15. . FURTHER INFORMATION

If you have any questions on our Privacy Policy or your personal information please contact us at hello@newzealandmortgages.co.nz.

This Privacy Policy was last updated in April 2026.