Privacy Policy - New Zealand

At Avanti, we understand privacy is important, and we are committed to managing your Personal Information in a way that is both secure and consistent with relevant legislation, including the Privacy Act 2020 (Privacy Act) and the Credit Reporting Privacy Code 2020 (Privacy Code) (where applicable). We have created this Privacy Policy to outline and help you understand how Avanti Finance Limited and its Related Companies (including as named below) (Avanti/we/us/our) collect, disclose, use, store, or otherwise handle Personal Information. “Related Companies” has the meaning set out in the Companies Act 1993. The Avanti group of companies includes, but is not limited to, the following: Avanti Finance Limited, Galatos Funding Limited, Bexhill Funding Group Limited, My Art Limited, Trident Auto Limited,  Motorcentral Technologies Limited and Avanti Funds Management Limited (Avanti Group).

This Privacy Policy explains:

• The kinds of Personal Information we collect, how we collect it, and the purposes for which we do that;
• How we manage Personal Information once we collect it;
• How you can seek access to and correction of Personal Information; and
• Where required, how you can make a complaint concerning our handling of Personal Information.

This Privacy Policy applies to any individuals who deal with Avanti in New Zealand, whether in relation to the provision of credit or otherwise, including in relation to our finance products and services (such as borrowers, guarantors, and introducers (for example, our brokers, advisers, and motor vehicle dealers)), our employees and contractors, candidates who apply for a role at Avanti, and wholesale investors. As such, not all of this Privacy Policy will necessarily apply to everyone.

“Personal Information”, as referred to in this Privacy Policy, has the meaning set out in the Privacy Act. It means information about an identifiable individual (for example, name and date of birth), and it also includes “Credit Information” as defined in the Privacy Code  (for example, your payment history, amount of credit provided and credit scores).

The Personal Information we may collect about you will depend on the circumstances, including, for example, your relationship with Avanti (e.g. whether you are a customer, investor or an employee) and (if applicable) the type of financial product or service being applied for or provided.

The information we may collect could include:

• Key Personal Information such as your full name (and any other previous names you have been known by), date of birth, residential, business and postal addresses, telephone numbers, email and other electronic addresses, copies of your identity documents (e.g., your passport or driver licence), or just your driver licence number or passport number;
• Financial, credit and related information such as:
  • Your occupation, income and type of employment or the type of work you do, your expenses, assets and liabilities (including those over which we may take security), dependants, financial and business position and dealings, and other relevant events;
  • Bank account and bank/credit card details (including card number, account number and expiration date);
  • Your transaction/repayment history with us or relevant third parties (and the capacity in which you dealt with them or us); and
  • Information about your credit history, the amount of credit extended by other lenders, credit scores and any information obtained to carry out a credit check.
• Other relevant information connected with one of the purposes described in Section 5 – depending on the circumstances, this may include health and medical information (e.g. if it is relevant to a hardship request), membership of professional bodies, tax file number information, other government identifiers (e.g. to verify your identity), and any other information you share with us about your personal or business situation;
• Transactional information – for example, information relating to:
  • Your use of our product(s);
  • Your interactions with us, including when you call or otherwise correspond with us; and
  • Your payment history.
• Behavioural biometric data that includes behavioural analytics on how you use and access our websites and any mobile apps that we use now or may develop for use in future;
• Online/device information – information collected if you use our websites, customer portal and/or apps (if available) and social media profiles, which can include: your social media handles; session data that is automatically collected and transmitted by our apps, such as your device IP address and geolocation data (using GPS data of your device, the nearest Wi-Fi access points and mobile networks), the operating system and browser your device used to view the website or app, brand and model of your device, unique identifiers of your device, name and parameters of your network connection, time, duration and date of your visit and pages you viewed, device call history, and information and metadata about other applications installed on your device including application names, application identifiers and version, device identifier and checksum.

Information we collect directly

We will generally collect your Personal Information directly from you or from someone who authorised by you to act on your behalf (e.g., your professional advisors such as an accountant or lawyer).

Information we collect indirectly

Sometimes we need to collect personal information about you from a third party.  We only do this where we are permitted to do so by applicable law.  The kinds of information we may collect, where we get it from and why we need it are summarised below.

Depending on the circumstances and the nature of your relationship with us, we may collect, store, use, disclose and retain the following types of information about you, which we collect from third parties:

We may also use third party service providers to collect such information from you on our behalf (for example, if you are employed with us, you may provide information to us via our third party payroll provider and employee platforms).

We also collect Personal Information about you from your device(s) when you access our websites, portals or apps (if available), or social media profiles and when you contact our call centre(s). Some of this information may be collected using cookies (please see Section 11) or other tracking technology.

Personal Information we collect about you will only be held, used and disclosed as is reasonably necessary for our business purposes and as permitted by applicable law. Purposes for which we’ll usually hold, use and disclose your Personal Information, depending on the circumstances and the nature of the products and services you’re obtaining from us, include:

• Providing products and services to you;
• Deciding whether to provide a product or service requested or applied for, including verifying your credit history, evaluating your creditworthiness, or deciding whether to accept you as a guarantor (if applicable);
• The ongoing monitoring of creditworthiness, including relating to your current credit obligations and financial position, your payments and any defaults;
• Detecting and preventing instances of fraud, unlawful conduct, and other risks to you or our products and services;
• Providing other related products or services to you, by us and/or relevant and trusted third parties;
• Responding to certain enquiries relating to any insurance policy or other credit-related policy offered by a third-party service provider in connection with our products or services;
• Ensuring fast and accurate approval and processing of applications and requests;
• Managing the products and services that we provide to you and managing any account you have with us;
• Dispute and complaint resolution, and assisting other credit providers to do the same;
• Where you are an investor with Avanti, administering and managing your investments;
• Where you are employed by Avanti, complying with our obligations as an employer under applicable law and under your employment agreement, and otherwise administering and managing your employment relationship with us;
• Enforcing our rights, including the collection of outstanding payments and, where necessary, initiating legal proceedings;
• Complying with our obligations under the Privacy Code, including ongoing participation in the credit reporting system by providing Credit Information to credit reporting agencies (such as Experian and Centrix). Information about you disclosed by us to credit reporting agencies may be listed in their systems and databases, used by them to provide their credit reporting services or other information services, and supplied to their customers on an ongoing basis in line with the Privacy Code);
• Assisting customers in meeting their credit-related obligations;
• Dealing with serious credit infringements and assisting other credit providers to do the same;
• Verifying your identity as may be required from time to time by AML Act;
• Providing your behavioural biometric data to a third party for digital identity protection and fraud prevention;
• Verifying your identity using electronic sources. To do so, we’ll ask you for your details (such as your name, address and date of birth) and details of your identification documents, which will be passed to external organisations to electronically match your information with identification data on their databases;
• Complying with New Zealand laws and regulations that may specifically require us to collect your Personal Information and any overseas laws where collecting your information is necessary for us to comply with our obligations;
• Sharing Personal Information with law enforcement agencies where we reasonably believe it’s necessary to comply with the law or to assist in the prevention, detection or investigation of fraud, money laundering or other criminal offences;
• Assisting us in managing our businesses, undertaking review and maintenance of our systems and infrastructure, complying with our internal operational requirements, such as for credit or risk management, product or system development and planning, insurance, audit and administration purposes;
• Undertaking securitisation activities and other activities relating to capital and funding requirements, including fulfilling reporting requirements;
• Improving the quality of and ensuring the safety of our websites, portals and apps (where applicable) and of the services provided;
• Identifying you and your device so that we can make our products and services available to you;
• Customer data analytics, which may be provided to or shared with third parties which we have an alliance, partnership or arrangement with;
• Improving the products and services we provide you. This may include, for example, using Personal Information, including transaction data, to obtain customer insights and monitor customer trends;
• Undertaking research and development regarding potential future products and services;
• Compiling statistical data, e.g. credit scoring information;
• For training, quality control and verification purposes;
• For recruitment purposes, including assessing a candidate’s suitability for a position with us;
• Developing an understanding of the products and services you may be interested in receiving from us (Avanti), our related entities, and trusted partners or third parties with which we do business; and
• Marketing products and services provided by us, our related entities, and trusted partners or third parties, including by sending notifications, requests, and other information (including, for example, by mail, email, telephone (including SMS), in portal or app messages/notifications and social media platforms) about the products and services we or they provide, unless you tell us, or them, not to.

Where the Privacy Act permits, we may share your Personal Information (including Credit Information) with third parties for the purposes outlined above. These external organisations will record, use and disclose your information in accordance with their own privacy policies and legal obligations. Some organisations to whom we may disclose your Personal Information (including your Credit Information or credit eligibility information) will be located overseas (known as cross-border disclosure). The countries where overseas recipients may be located include Australia, India, Ireland and the United States. Third parties that we may share your Personal Information with include:

• As applicable, any co-applicant, co-borrower and/or guarantor or security provider, or to the extent required by law, any other party who otherwise has an interest in the product or the service we have provided to you or the security related to that product or service;
• Third parties you authorise to act on your behalf or that are otherwise connected with you (such as a financial adviser, your accountant or legal representative, a referee or an access seeker acting on your behalf to obtain your credit report);
• For the avoidance of doubt, any members of the Avanti group of companies, including those identified in this Privacy Policy;
• Our related entities and trusted partners or third parties with which we do business, including those with which we have a partnership, affiliation, arrangement or agreement;
• Entities that wish to be involved in our business or acquire an interest in our business;
• Entities or persons involved in arrangements that provide funding to us, including investors, advisers, trustees and rating agencies (including whom we may be required to provide reporting to periodically);
• Credit reporting and rating agencies (including Experian and Centrix), including on an ongoing basis;
• Entities that provide services to us, such as external communication providers (i.e. mailing, email or SMS services), social media platforms, IT providers, professional advisers, providers of financial services to us, market research and data providers, and insurance providers;
• Introducers (including advisers, brokers, motor vehicle dealers and retailers);
• The supplier of any goods or services financed with credit and/or services we provide;
• Our assignees or potential assignees, or where we act as an agent for, or otherwise on behalf of, another person, to the principal or that other person;
• Other financial institutions or entities such as banks and other credit providers;
• Insurers, assessors, underwriters;
• Identification service and fraud prevention providers (including those set out in Section 4);
• Debt collection agencies and other enforcement bodies;
• External dispute resolution schemes, for example, if a complaint is made about us;
• Organisations involved in debt assignment or securitisation and other relevant funding arrangements;
• Government regulatory bodies in New Zealand and overseas; and
• Law enforcement agencies.

Where the Privacy Act permits it, we may disclose your Personal Information and Credit Information to credit reporting agencies (such as Experian and Centrix) for the purposes outlined above. Credit reporting agencies may use your information to provide services to us and their other customers. If you fail to meet your payment obligations to us or commit a serious credit infringement, we may be entitled to disclose that information to credit reporting agencies. Credit reporting agencies must comply with the Privacy Code – further information on the Privacy Code and your rights with respect to the credit reporting system can be found at www.privacy.org.nz

Centrix and Experian will use and disclose your credit information in accordance with their privacy policies which you can access here:

Centrix:  www.centrix.co.nz/privacy-statement

Experian: www.experian.co.nz/privacy-policy

You have rights of access to and correction of credit information held by Centrix and Experian as set out in their privacy policies.

We will hold your Personal Information in electronic form on our systems, but we may also hold some paper or other physical records. Service providers may also hold Personal Information on our behalf. Your Personal Information is protected by various physical, electronic and procedural safeguards. Where a service provider holds your information, we require them to adhere to our approved standards of security and confidentiality to ensure your Personal Information is protected. Staff who handle your Personal Information are provided with training on how to do so appropriately. Our procedures ensure that your Personal Information is available only to staff when necessary. We will also only keep your Personal Information for as long as necessary to achieve the purpose for which it was collected or as required by law. If we no longer need your Personal Information, we’ll destroy the information or remove any identifying information so it can no longer be linked to you.

You have the right to request access to and correction of any Personal Information we hold about you, subject to certain exceptions under the Privacy Act. You’re entitled to specify how you wish to access your Personal Information so long as this is reasonable and practicable. We take every reasonably practicable step to ensure that the Personal Information we collect, use and disclose is accurate, complete and up-to-date. If you want access to your Personal Information or make a request for correction of Personal Information, you can contact us via the channels outlined below in Section 13 of this Privacy Policy.

We verify the identity of anyone requesting access to Personal Information to ensure that we don’t provide that information to a person or people who don’t have the right to access that information. If we don’t agree to your request for correction or are unable to provide you with access to certain Personal Information we hold about you for legal reasons, we’ll give you notice of this, outlining our reasons and what next steps you can take. We may charge you our reasonable costs of providing you copies of your Personal Information and/or attaching a statement of correction to your Personal Information. If you provide us with Personal Information about any other person, for example, a referee, a co-applicant, your next of kin,  a person authorised to speak with us on your behalf, another director, a shareholder or a beneficial owner, you confirm that, before disclosing information about them to us, you have received their consent to do so. You also confirm that, before disclosing their Personal Information to us, you have made them aware of:

• The fact that you’re providing this information to us;
• The reason you’re providing their information to us; and
• This Privacy Policy, including, in particular, our reasons for collecting, using and disclosing Personal Information and our contact details.

A. Cookies

A cookie is a small text file that a website places on your internet-connected device to capture information about your visit. Cookies allow us to recognise you when you return. They also help us provide a customised experience. In many cases, the information we collect using cookies and other tools is only used in a non-identifiable way, without reference to Personal Information. For example, we use the information we collect about website users to optimise our websites and to understand website traffic patterns. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to websites. Google’s use of the DART cookie enables it and its partners to serve advertisements to you based on your visit to sites on the Internet. You may opt out of the use of the DART cookie by visiting Google’s advertising opt-out page. (Alternatively, you can opt out of a third-party vendor’s use of cookies by visiting the Network Advertising Initiative opt-out page. You can use Ads Settings to manage the Google ads you see and opt out of interest-based ads. Even if you opt out of interest-based ads, you may still see ads based on factors such as your general location derived from your IP address, your browser type and recent, previous searches related to your current search.)

B. Use of cookies for advertising and analysis

Our websites and mobile apps may use a range of third-party cookies, such as those from digital platform plugins and Google Analytics, as remarketing tools to advertise to you online or understand your website browsing behaviours.

The information may be used to serve you relevant ads or content in relation to our products or services when you visit our websites and third-party websites and apps. The information we collect and share with third parties is anonymous and aggregated. It does not include personal information which is likely to identify you.

C. Opting out

You can control the tailored advertising you see online by changing the cookie settings on your social media accounts or the websites you visit.

You may need to turn cookies off separately on each device and browser you use to access online content. You can generally do this via your browser settings.

It’s worth knowing that turning cookies off may mean the websites you visit have limited functionality and the advertising you see is generic (or less relevant to you).

Our websites or communications you receive from us may contain links to other websites. These websites may have their own privacy policies in relation to your Personal Information, and we have no responsibility for linked websites or their communications with you and provide them solely for your information and convenience. We encourage you to be aware when you leave our websites and to read the privacy policy or statement of each website you visit.

If you have any questions about this Privacy Policy and/or a concern or complaint about the way we have handled your Personal Information, please contact us using the details below:

Email:    [email protected]

Post:
Avanti Finance Limited
Attention: Privacy Officer
Private Bag 11917
Auckland 1542

Once we receive your complaint, we’ll respond to you within a reasonable period of time, usually within 20 working days. Please note that where your complaint relates to your Credit Information, we may consult with a credit reporting body or other credit provider to investigate and resolve your complaint. Depending on the type of complaint, it may also be necessary for us to consult with other third parties. If we don’t satisfactorily handle your complaint, you may wish to contact the Privacy Commissioner at www.privacy.org.nz.