Your privacy is important to DCT Finance Ltd (FSP10781). We collect, use, store and disclose your personal information in accordance with the Privacy Act 2020 and its amendments, including the Privacy Amendment Act 2025 (which introduces Information Privacy Principle 3A (IPP3A), effective 1 May 2026). Where applicable, we also comply with the Health Information Privacy Code 2020 and the Credit Reporting Privacy Code 2020.

You have the right to ask for a copy of any personal information we hold about you, and to ask for it to be corrected if you think it is wrong. To request a copy of your information, to have it corrected, or to ask any question about this Privacy Policy, please contact us.

As a general rule, we will collect your personal information directly from you. However, there may be exceptions to this, such as where it is not reasonably practicable to do so in the circumstances, or if any of the other exceptions set out under the Privacy Act 2020 apply.

We may also receive your personal information from other sources, such as public databases or registers, acquired contact lists, professional bodies (for example under reciprocal arrangements), referrers, your employer or FAP, regulators, government and statutory bodies, credit reporting agencies, electronic identity verification providers, Product Providers, and our service providers.

Providing information is optional, but if you choose not to it might affect our ability to provide services to you and your ability to obtain finance, insurance, and other Products from Product Providers.

In most circumstances it will be necessary for us to identify you to successfully do business with you. However, where it is lawful and practicable to do so, we will offer you the opportunity of doing business with us without providing us with personal information, for example, if you make general inquiries about interest rates or current promotional offers.

You may choose to interact with our website anonymously, but we will not be able to contact you unless you provide your personal information.

When we refer to personal information, we mean information that identifies, or is capable of identifying, you. This includes, for example, your name, date of birth, address, contact details, account details and occupation.

If you engage us to provide services to you, we may collect personal information about your financial situation or goals in order to recommend mortgage and insurance products that we are permitted to advise on (Products). For insurance applications, this may include health information, which we handle in accordance with the Health Information Privacy Code 2020.

We collect your personal information for the purposes of our and relevant third parties' services and relationship with you. For example:

If you do not wish to receive marketing information, you may 'opt out' at any time by notifying us.

We may also collect personal information (including credit information and health information) on behalf of the lenders, insurers and other providers of Products that you choose to apply for (Product Providers). Product Providers will have their own Privacy Policy that applies to the information that we collect on their behalf.

Generally, we will collect your personal information directly from you. We may also collect it from:

If you provide any personal information about anyone else to us, you confirm that you have collected that personal information in accordance with the Privacy Act and that the individual concerned has authorised the disclosure to us and has been informed of their right to access and request correction of their personal information.

We may record phone conversations between us and you, and may also save written communications through email, text and other SNS communications (e.g. KakaoTalk).

We keep your personal information only for as long as it is needed for the purposes set out in this Policy, or for as long as we are required to retain it by law. In particular, we are required to retain certain client and transaction records for a minimum of seven (7) years under the AML/CFT Act and other applicable financial services legislation. When personal information is no longer required and we are no longer legally obliged to keep it, we will take reasonable steps to securely destroy or de-identify it.

We take reasonable steps to protect the personal information we hold from loss, misuse, unauthorised access, modification or disclosure. These steps include restricting access to personal information to staff who need it to perform their role, confidentiality obligations on our staff, secure storage of physical and electronic records, and the use of access controls and reputable IT and cloud providers.

In the event of a privacy breach that is likely to cause serious harm, we will notify the affected individuals and the Office of the Privacy Commissioner as required by the Privacy Act 2020.

We will generally rely on you to ensure the information we hold about you is accurate. If any of your details change, please let us know as soon as possible by contacting us.

We may disclose your personal information to the following people if we consider it necessary to do so:

Prior to disclosing any of your personal information to another person or organisation, we will take all reasonable steps to satisfy ourselves that the person or organisation has a commitment to protecting your personal information at least equal to our commitment.

We may store the personal information provided by you in cloud-based systems, such as Google Drive. Additionally, your information may be processed using AI assistants like Google Gemini or NotebookLM to analyse data, generate reports, and facilitate our communication. We use professional-grade AI tools that do not utilise your personal data for training their AI models, ensuring your information remains private and secure.

The cloud storage and IT servers may be located outside New Zealand (for example, in countries where Google operates data centres). Before disclosing your personal information to a person or entity overseas, we take reasonable steps to ensure that the recipient is required to protect your information in a way that provides comparable safeguards to those under the New Zealand Privacy Act 2020 (IPP12).

We may change our Privacy Policy from time to time. We will publish an updated version on our website, to reflect changes in the law and also our business needs so long as the changes do not disadvantage you. By continuing to engage us or use our website you will be deemed to have accepted the updated Privacy Policy.

Cookies & IP Addresses

When you access our website, we may send a "cookie" (which is a small summary file containing a unique ID number) to your computer. This enables us to recognise your computer each time you visit our website. We also use cookies to measure traffic patterns and determine which areas of our website have been visited, in order to improve our website and service offering.

While our cookies do not collect personal information, if you submit your name and email address as part of your usage, then we will link that personal information with the cookies information that we have previously collected from you.

If you do not wish to receive cookies, you can set your browser so that your computer does not accept them.

Security

As our website is linked to the internet, and the internet is inherently insecure, we cannot provide any assurance regarding the security of transmission of information you communicate to us online. Any personal information which you transmit to us online is transmitted at your own risk.

Links to Other Websites

Our website may contain links to other websites operated by third parties. We make no representations or warranties in relation to the privacy practices of any third-party website and we are not responsible for the privacy policies or the content of any third-party website.

You may access and request correction of any of the personal information that we hold about you at any time by contacting us at help@shalomdct.com or 0508 328 328.

If you have any concern about how we have handled your personal information, please contact us first at help@shalomdct.com or 0508 328 328 so that we can try to resolve it. If you are not satisfied with our response, you have the right to make a complaint to the Office of the Privacy Commissioner (0800 803 909 · www.privacy.org.nz).