NEW ZEALAND
This Privacy Policy (“Policy”) describes how Protecta Insurance New Zealand Limited (a company incorporated in New Zealand under Company Number 312700) (including its related companies which handle personal information collected by Protecta in New Zealand) (“Protecta"), with registered office at 110 Symonds Street, Auckland, 1010, New Zealand, collects, holds, uses and discloses your personal information in compliance with and pursuant to the Privacy Act 2020 (“Act”).
Protecta is part of the Assurant, Inc. group companies, a global provider of risk management solutions.
In this Policy, the terms “We”, “Us”, “Our” each refer to Protecta which handle personal information collected by Protecta in New Zealand, as applicable. Further, the terms “You” and “Your” refer to, as applicable, Our sales channels (including motor vehicle dealers, finance brokers and finance companies), sub-agents, customers and policyholders or persons who enter into agreements or arrangements with Us or through Us as agent and who have provided their personal information to Us.
1. Introduction
We collect and use Your personal information, which You have directly provided to us or that we have obtained from other sources (each as described below in section 2), for purposes of considering the issue of, issuing or administering (including handling claims under) an insurance product, service contract, master policy or similar product which You have obtained, or requested to obtain from Us directly or through Our business partners (“Product”) or in connection with an agreement or arrangement either with Us or through Us as agent or with Our business partner. The information collected is held by Us and is used by Us and our respective contractors and agents to administer the Product which You have obtained from Us or in connection with an agreement or arrangement either with Us or through Us as agent or with Our business partner.
If You do not provide this information, We may decline Your application to take out a Product; We may decline a claim; or we may not agree to enter into an agreement or arrangement either with Us or through Us as agent or with Our business partner. You have the right to request access to, and correction of this information, subject to the provisions of the Act.
This Policy also serves as notification to individuals of the matters required to be notified by the Information Privacy Principles under the Act (“IPPs”). An individual who provides personal information to Us, either directly or through a business partner, distributor or referrer, agent or service provider who sells or is involved with selling Our Products or who enters into an agreement or arrangement either with Us or through Us as agent or with Our business partner, is given access to this Policy. By providing personal information to Us and having access to this Policy an individual consents to Us collecting, holding, using and disclosing personal information in accordance with this Policy.
If You do not wish for Us to process Your personal information, as set forth in this Policy, do not provide Your personal information to Us.
2. The personal information We collect:
Personal information We collect, from time to time, will include: first, middle and last names; phone numbers; home and postal addresses; e-mail addresses; information contained in or on identification documents (including, without limitation, passport and driver’s licence) and copies of such documents, date of birth; gender; personal history (including criminal, insurance and claims history; information about individuals from financial institutions); credit card details and bank account details (as provided below).
We may also collect the following additional information if a claim is made by You or on Your behalf, in relation to a Product: bank account details (for claim settlements where we are paying the settlement or portion of to the client directly); criminal history; driver history; insurance and claims history (including for claims involving medical event, suspect alcohol or drugs); health and medical history (including for claims involving medical event); passport / visa permit (including for claims where driver on an overseas licence); statement of accounts and loan contract (including for claims where Our payments are based on a loan balance outstanding or an instalment amount) and such other information as may be requested on Our claim form documentation from time to time.
Credit card and bank payments:
When processing a credit card transaction, We will ask you to provide the following information: credit card number, date of credit card expiration, cardholder name, security code, and then confirm the amount of transaction.
This cardholder information is entered directly into a secure, encrypted payments web page for authentication. This payments page is hosted by Windcave who provide an encrypted electronic payment service that is certified secure by both VISA and Mastercard. They provide this service to 15,000+ merchants (including Us) and process over $20,000,000,000 worth of transactions every year.
The Windcave Privacy Policy is available at https://sec.windcave.com/pxmi3/privacy-policy, or at such other url as advised to You.
Upon authentication by Your bank, Windcave provides back to Us only an authorisation number, card type, card name and a ‘truncated’ card number.
We do not hold or store your full Credit Card number at any stage.
We also offer a bank account payment option. This option is only available for paying the full, annual amount of your insurance premium, and it uses the Windcave Account2Account service for processing the payment.
Similar to how the Credit Card option works, the bank account option also uses a secure, encrypted payment web page for authentication. This is also hosted by Windcave, and this service is certified by ANZ, ASB, BNZ, Kiwibank and Westpac. You will be asked for your internet banking details, then to confirm the account You wish the payment to come out of as well as the transaction amount.
This information is verified by Your bank, within the Windcave system, and once the payment has been processed the confirmation of successful or unsuccessful payment is provided back to the Protecta website.
We do not have access to your internet banking details at any stage.
3. How We collect and store personal information:
We collect personal information from You in a variety of ways, including when You interact with Us electronically or in person, through our sales channels (including motor vehicle dealers, finance brokers and finance companies), when you access our website or an app and when we provide Our services to You. We may receive personal information about You from third parties in connection with the administration of a Product or in connection with an agreement or arrangement either with Us or through Us as agent or with or with Our business partner. If We do, We will protect it as set out in this Privacy Policy.
We collect the personal information of individuals directly from those individuals when selling Products to those individuals or in connection with agreements or arrangements either with Us or through Us as agent or with Our business partner, as well as from Our business partners, distributors or referrers, agents, or service providers who sell or who are involved with selling the Products, We collect personal information from other parties such as financial institutions and medical and health professionals in connection with claims made by individuals. We also collect personal information directly from an individual when the individual makes an inquiry or claim about a Product.
We will, from time to time, receive and store personal information You enter onto Our website, or an app or provide to Us directly or via Our business partners or given to Us in other forms. We may collect additional information at other times, including but not limited to, when You provide feedback, when You provide information about Your personal or business affairs, change Your content or email preference, respond to surveys and/or promotions, provide financial or credit card information, or communicate with Our customer support.
Additionally, We may also collect any other information you provide while interacting with Us or Our business partners.
Personal information received by Us is held electronically on Our information technology systems, which are password and access-level protected and may only be accessed by Our authorised employees and contractors who require access in connection with the purposes described in this Policy. Some personal information is held in hard copy such as files created when a claim or complaint is made relating to Products, which are accessible to Our claims and complaint-handling employees, their managers and the organisation which is contracted by Us to store and secure that information. Other hard copy personal information may be held for internal purposes and administration of Our business.
Purposes:
Personal information will be collected, held, used and disclosed by Us for the purposes of:
• providing the Product for an individual.
• handling inquiries about the Product.
• checks to verify the identity of an individual.
• administering claims under Products.
• providing ancillary services in relation to Products or claims under Products (including road service assistance).
• handling complaints.
• completing matters as relate to agreements or arrangements with Us or with Our business partner.
• administering the information technology systems used by Us.
• as required by law or a court or tribunal order.
• providing you with information and updates about our Product and our services or to make You aware of new and additional products, services and opportunities available to You; and
• any related, secondary, or ancillary purposes.
We will hold personal information for as long as necessary in order to meet the purposes described in this Policy and as required by law. For example, personal information in connection with Products will be held for at least the life of the Product which includes the period when claims may be notified or made after the Product expires.
We will not disclose an individual’s personal information for any other purpose unless the individual has provided Us with consent or as described in this Privacy Policy. There may be other purposes where We may disclose an individual’s personal information other than those mentioned above. We will only do this if it would be reasonably expected of Us to do so in the circumstances.
We may contact you by a variety of measures including, but not limited to telephone, email, sms/text or mail for purposes related to the administration of any Product which you have obtained from Us or in connection with an agreement or arrangement either with Us or through Us as agent or with Our business partner.
4. Disclosure of personal information (including overseas recipients):
We may disclose personal information to Our business partners including those who provide services for Us and third-party service network providers including, claims handlers, call centres, repairers, assessors and loss adjusters to perform activities in connection with the purposes described in this Policy. We may disclose Your personal information to any of Our employees, officers, insurers, professional advisers, agents, suppliers, or subcontractors and third parties with whom We have agreements insofar as reasonably necessary for the purposes set out in this Policy.
We may from time to time need to disclose personal information to comply with a legal requirement, such as a law, regulation, court order, warrant, in the course of a legal proceeding or in response to a law enforcement agency request.
We may also use your personal information to protect copyright, trademarks, legal rights, property or safety of Us, Our customers or third parties.
Also, as We are a member of the Assurant group of companies, a member of the group (whether in New Zealand or overseas) may share and access personal information in connection with the purposes described in this Policy and in accordance with IPP 12 of the Act.
Some of the organisations to which We disclose personal information are located outside New Zealand. They are located in the U.K, U.S.A, South Africa, China, Singapore, Japan, India, South Korea, the Philippines and Australia, which may not have data protection regimes equivalent to New Zealand. By purchasing a Product, making a claim, or entering into an agreement or arrangement either with Us or through Us as agent or with Our business partner you consent to Us managing personal information in this way and in accordance with this Policy.
We will take reasonable steps to ensure that overseas recipients do not breach the IPPs in relation to the information and when we disclose information outside New Zealand, we will do so in accordance with the IPPs.
If there is a change of control in our business or a sale or transfer of business assets, We reserve the right to transfer to the extent permissible at law our user databases, together with any personal information and non-personal information contained in those databases. This information may be disclosed to a potential purchaser under an agreement to maintain confidentiality. We would seek to only disclose information in good faith and where required by any of the above circumstances.
5. Accuracy and protection of personal information:
An individual will need to ensure that the personal information which is provided to Us is accurate, complete and up-to-date at the time it is provided and must notify Us of any changes. We will take reasonable steps to protect the personal information that We hold from misuse and loss and from unauthorised access, modification, or disclosure.
6. Access to personal information:
An individual may exercise their privacy rights by contacting Our Privacy Officer by phone, email or post at the contact number and addresses at set out in section 7 below. You may request access to and/or a copy of Your personal information that We hold by contacting Our Privacy Officer at the same contact number and addresses. If an individual is able to establish that their personal information is not accurate, complete and up-to-date, then on request We will take reasonable steps to correct it. If We are unable to agree whether personal information is accurate, complete or up-to-date, then an individual may ask Us to place with the information a statement claiming that particular information is not accurate, complete or up-to-date. An individual who seeks to exercise their privacy rights of access and correction may contact Us as set out below. If We decline an individual’s access request or do not amend the personal information, We will provide Our reasons together with details about how the individual can access Our complaints process.
7. Questions and complaints:
If You have any questions about the information collected about You, please contact Us at nz.contact@assurant.com.
If you would like to make a complaint about the way your information has been handled, please contact our Privacy Officer directly:
by phone, 0800 443 881
by email, nz.contact@assurant.com; or
by post, Level 7, 110 Symonds Street, Auckland, 1010, New Zealand
In addition, we welcome your questions or comments regarding this Privacy Policy at the Assurant Global Privacy Office. Please write to Us at Assurant Global Privacy Office, 260 Interstate North Circle SE, Atlanta, Georgia 30339, USA or send Us an email at ThePrivacyOffice@assurant.com.
You also have the right to file a complaint directly with the Office of the New Zealand Privacy Commissioner under applicable local data protection law. Please refer to https://www.privacy.org.nz/.
Website
We may from time to time use cookies on our website. Cookies are very small files which a website uses to identify you when you come back to the site and to store details about your use of the site. Cookies are not malicious programs that access or damage your computer. Most web browsers automatically accept cookies, but you can choose to reject cookies by changing your browser settings. However, this may prevent you from taking full advantage of our website. Our website may from time to time use cookies to analyses website traffic and help us provide a better website visitor experience. In addition, cookies may be used to serve relevant ads to website visitors through third party services such as Google Adwords. These ads may appear on this website or other websites you visit.
Third party sites. Our site may from time to time have links to other websites not owned or controlled by us. These links are meant for your convenience only. Links to third party websites do not constitute sponsorship or endorsement or approval of these websites. Please be aware that We are not responsible for the privacy practices of other such websites. We encourage our users to be aware, when they leave our website, to read the privacy statements of each and every website that collects personal identifiable information.
© 23 July 2024