Article 1: Identification of the Data Agency
This Privacy Policy delineates the rigorous data processing protocols maintained by Invest New Zealand ("the Platform", "we", "us", or "our"), headquartered at the Majestic Centre, 100 Willis Street, Wellington 6011, New Zealand. We operate as a registered "Data Agency" governed by the New Zealand Privacy Act 2020. To ensure absolute data integrity, regulatory alignment, and strict compliance with the Information Privacy Principles (IPPs), we have appointed a dedicated Chief Privacy Officer (CPO) reachable at [email protected].
Article 2: Categories of Personal Information Collected
To deliver institutional-grade market analytics and maintain an impenetrable security environment, we collect information strictly in accordance with the principle of data minimization:
Identity Metrics: Full legal name, date of birth, nationality, and official government-issued identification required for mandatory Know Your Customer (KYC) and Anti-Money Laundering (AML) verification.
Financial Telemetry: Information regarding source of wealth, transaction histories, investment horizons, and detailed user risk profiles.
Digital Footprint & Analytical Interaction: IP addresses, device hardware specifications, geographical routing data, and granular logs of interactions with our predictive interfaces.
Article 3: Legal Basis and Purposes of Collection
In strict compliance with New Zealand statutory frameworks, our collection and utilization of information are founded upon:
Contractual Necessity: Essential for provisioning your account and delivering our core proprietary financial services.
Statutory Obligations: Mandatory compliance with the Anti-Money Laundering and Countering Financing of Terrorism (AML/CFT) Act 2009 and directives from the Financial Markets Authority (FMA).
Legitimate Business Interests: Required for proactive fraud prevention, network security enhancement, and the continual optimization of our technical models via anonymized data aggregates.
Authorised Marketing: For the delivery of personalized market insights where explicit opt-in has been provided, in accordance with the Unsolicited Electronic Messages Act 2007.
Article 4: Advanced Security and Data Sovereignty
Invest New Zealand deploys enterprise-grade security architecture:
AES-256 Encryption: All data at rest is stored utilizing military-grade cryptographic protocols.
TLS 1.3 Protocols: All data transmission between the user's client and our servers is secured via end-to-end encryption.
Cross-Border Transfers (IPP 12): Where data is stored or processed on offshore cloud infrastructure, we guarantee that the receiving entity is contractually bound to protect the information with safeguards directly comparable to, or exceeding, those mandated by the NZ Privacy Act 2020.
Article 5: Retention and Archiving Policy
We retain your personal information only for the duration strictly necessary:
Active Data: Maintained for the full duration of your active contractual relationship with the Platform.
Statutory Archives: Identity and financial records are retained in a secure, immutable archive for a minimum of seven (7) years following account closure, strictly to satisfy New Zealand Inland Revenue (IRD) and AML statutory requirements.
Article 6: Your Rights and Access
Under the Privacy Act 2020, you possess sovereign rights to request access to, and correction of, any personal information we hold about you. You may exercise these rights at any time by contacting our CPO at [email protected]. Should our resolution not meet your expectations, you retain the right to lodge a formal complaint with the Office of the Privacy Commissioner (OPC) in Wellington.