Privacy Policy Fullstack Property Limited ("we," "us," or "our") values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and disclose your personal information in accordance with the Privacy Act 2020 and Privacy Amendment Act 2025. By engaging our services, you consent to the collection, use, and disclosure of your information as described in this policy. 1. Type of Information We Collect - Personal and Non-Personal We treat your information according to whether it is personal or non-personal: Non-personal information is data that cannot identify you as an individual. Examples include: - Browser type and version - Operating system - Pages visited on our website - Time and date of visit As defined in the Privacy Act 2020, personal information means information about an identifiable individual. We may collect the following types of personal information from you: - Name, date of birth, and contact details (email, phone, address) - Identification documents (passport, driver's license, proof of address) - Financial information (bank details, income, mortgage information) - Property preferences and requirements - Transaction history and communications with our agency - Credit information from credit reporting agencies - Other information necessary to provide our services We only collect information necessary for the purposes outlined in this Policy. 2. How We Collect Your Information We may collect non-personal information automatically as you navigate our website. Non-personal information does not identify you and may include aggregated or anonymised data such as website usage statistics. We may use and share this non-personal information for purposes such as improving our website, measuring performance, and generating marketing insights. We collect personal information in the following ways: Personal information collected directly from you: - Forms, applications, or agreements - Email, phone, and in-person communications - Our website or online portals Personal information collected from third parties (with your consent where required): - Credit reporting agencies and other third-party services We may also collect personal information indirectly (from third parties) where permitted or required by law. In line with Information Privacy Principle 3A (Privacy Amendment Act 2025), we will take reasonable steps to notify you when personal information is collected indirectly, including why we are collecting it, who is collecting it, and your rights to access and correct your information. 3. Purpose of Collection and Use of Personal Information We collect and use personal information to: - Provide property consultant and project management services, including property searches, negotiations and renovations - Assess your eligibility for services or financial arrangements - Verify your identity and conduct due diligence - Conduct credit checks and facilitate debt collection through third-party service providers, where applicable - Comply with legal obligations, including tax, anti-money laundering, and credit reporting - Communicate with you about our services, offers, or updates - Improve our services and website functionality We will only use your personal information for the purposes for which it was collected, unless another use is permitted or required by law. For clarity, this purpose limitation applies to personal information only. Non-personal, aggregated, or anonymised information may be used and shared for analytics, service improvement, and marketing insights, as permitted by law. 4. Storage and Protection of Your Personal Information We store personal information securely and implement appropriate physical, electronic, and administrative safeguards to protect it. Reasonable steps are taken to minimise the risk of: - Unauthorised access, use, or disclosure - Loss, theft, or corruption - Improper or accidental destruction Some of your personal information may be stored in paper files, but the majority is stored electronically on physical hard drives and/or in the cloud via cloud-based service providers. While we take all reasonable steps to protect your personal information, no system is completely secure. You must keep any passwords or access codes confidential and notify us if they are compromised. 5. Who We May Disclose Your Information To We may share your personal information with third parties when necessary to deliver our services or when required by law. These include: - Service providers and contractors: such as IT and cloud-storage providers, CRM platforms, or marketing partners who support our business operations. - Financial institutions and lenders: mortgage brokers, banks, and insurers, to help with financing or insurance related to property acquisition. - Professional advisors: such as lawyers, accountants, valuers, and property inspectors who assist in your transaction. - Credit reporting agencies: with your consent, to obtain or share credit-related information. - Related companies: our affiliates or group entities where relevant to your engagement and service. - Regulatory or government bodies: when required by law, regulation, or to fulfill legal obligations. - Debt recovery agencies: if required to recover unpaid amounts under our agreement. - Others as authorised by you: anyone you explicitly ask us to share your information with. All third parties are contractually obligated to protect your personal information and only use it for the purpose of providing services to us. 6. Cookies Our website, and any third-party service providers we engage (if applicable), may use cookies and similar technologies to improve user experience, analyse site traffic and performance, or remember preferences and login information. Cookies are small text files placed on your device (computer, tablet, or smartphone) when you visit our website. When you browse our website or social media pages, cookies may collect information such as: - the date and time of your visits; - which website pages you viewed; - how you navigate through our site; - details of your device, operating system and browser; and - other interaction data (such as pages where you complete forms). We may engage third parties for analytics, marketing, or advertisements. These parties use cookies to improve their services and track trends. We do not control these third-party cookies; please review their privacy policies. You may disable cookies in your browser, but some features of our website may not function properly if you do. 7. Links to Other Websites Our website and social media pages may contain links to external websites that are not operated or controlled by us. These third-party sites may have their own privacy and security practices, which differ from ours and for which we are not responsible. You access them at your own risk, and we strongly encourage you to review their privacy policies before providing them with any personal information. We do not make any representations or warranties about the content, security, or availability of these linked websites. The inclusion of a link does not imply endorsement, recommendation, or sponsorship by us of anything found on those sites. You should not rely on any information on third-party websites as if it were provided by us. Furthermore, because these external sites are independent, we cannot monitor or control their content, and we accept no liability for any loss, damage, or risk you may incur through accessing, using, or relying on them. 8. Public Discussions and Forums Any information you post in public forums or discussions on our site becomes public. We are not responsible for how third parties may use that information. Users must comply with our terms and avoid posting sensitive information. 9. International Data Transfers If we need to transfer your personal information outside New Zealand, we will ensure it is protected in line with the Privacy Act 2020, including using contractual or other safeguards. 10. Retention We retain your personal information only for as long as necessary to: - Provide our services - Comply with legal and regulatory obligations (including tax and accounting record-keeping requirements) - Resolve disputes - Enforce agreements Where we collect or generate information relating to fees, commissions, invoices, payments, or other financial transactions, we may be required to keep relevant records for at least 7 years from the end of the tax year to which they relate, in line with Inland Revenue record-keeping requirements. After the applicable retention period, your information is securely deleted or anonymised. 11. Privacy Breach We work diligently to protect your personal information using robust security measures, however, there is no guarantee that our security will not be breached. In the event of a suspected privacy breach, we will: - Assess the nature and impact of the breach; - Take steps to contain and mitigate the breach; and - Notify affected individuals and the Office of the Privacy Commissioner if required by law. 12. Disclosure of Your Personal Information We may disclose your personal information to third parties where necessary to provide our services, including: - Credit reporting agencies - Mortgage brokers, lenders, or insurers - Legal or financial advisors - Property inspectors, valuers, or agents - Debt collection agencies - Our related companies (if applicable) All third parties are required to handle your information securely and in accordance with the Privacy Act (2020). 13. Your Right to Access, Correct and Delete Your Personal Information You have the right to: - Access your personal information - Request corrections to ensure it is accurate and up-to-date - Request deletion of personal information where it is no longer necessary for the purposes it was collected - Withdraw consent for certain uses of your information (where legally permissible) You can do so by contacting us at......(address) Or via email at.... 14. Consequences of Not Providing Information If you do not provide requested information, we may not be able to: - Provide our full range of services; - Conduct due diligence or property transactions on your behalf; - Comply with legal and regulatory obligations. 15. Changes to This Privacy Policy We reserve the right to update this Privacy Policy at any time. Any updates will be published on our website, and the effective date will be revised. We encourage you to review this policy periodically. This privacy policy was last updated on [date]. 16. Privacy Policy Queries and Concerns If you have any concerns about how your personal information is handled, please contact us. Contact Details: Full Stack Property Limited Email: jason@fullstackproperty.nz Address: 110 Laird Place, Te Awamutu 3800, New Zealand You also have the right to contact the Office of the Privacy Commissioner if you are unsatisfied with our response.