Personal information is information or an opinion, whether true or not and whether recorded in a material form or not, about an individual who is identified or reasonably identifiable.

The types of personal information we may collect about you include:

As a user of our software (User) or as a visitor to our website:

• your name;
• your contact details, including
  • email address, mailing address and/or telephone number;
• your date of birth;
• your credit card or other payment details (through our third party payment processor);
• your health information as set out below;
• information you provide to us, including through feedback, customer survey or otherwise;
• details of products and services we have provided to you and/or that you have enquired about, and our response to you;
• your browser session and geo-location data, device and network information, statistics on page views and sessions, acquisition sources, search queries and/or browsing behaviour;
• information about your access and use of our Services, your communications with our online Services, the type of browser you are using, the type of operating system you are using and the domain name of your Internet service provider;
• additional personal information that you provide to us, directly or indirectly, through your use of our Services and/or associated applications from which you permit us to collect information.

Insurance Policy Information

As part of our Services, we also collect information contained in your insurance policy documents that you choose to upload to our platform. This may include:

• your insurer and policy details;
• your policy type, cover amounts, and renewal dates;
• property details associated with your insured assets (such as vehicle make, model, and registration, or residential property address, year of build, floor area, and number of stories);
• any other information contained within your uploaded policy documents.

Health Information is a sub-set of personal information that is given a higher level of protection. Health information means information relating to your health, including your medical history, any disabilities that you have or have had, any health or disability services you are receiving or have received or information that is collected in the course of or incidental to the provision of health and disability services.

The types of health information we may collect about you include:

As a User:

• information relating to your mental and physical health, including your current medications;
• information related to your medical history;
• information contained in your insurance policies, past and present;
• any other health information you choose to share with us.

Unless otherwise permitted by law, we will not collect sensitive information about you without first obtaining your consent.

We collect personal information about you from:

• you, when you provide that personal information to us, including via the website and any related service, through any registration or subscription process, through any contact with us (e.g. telephone call or email), or when you buy or use our services and products.
• third parties, where you have authorised this or the information is publicly available.

Third-Party Data Sources: Where you provide us with a vehicle registration plate number or residential property address as part of using our comparison and quoting services, we may use third-party services to retrieve publicly available information about that vehicle or property (such as vehicle year and make, or property build year, floor area, and number of stories). We do not send your name, email address, or other personal contact information to these third-party services. This information is used solely to assist in generating insurance quotes on your behalf.

If possible, we will collect personal information from you directly. Where it is not possible, we will only collect information from a third party where we have your consent or are permitted to do so by law.

Where we collect personal information about you from a third-party source, we will take reasonable steps to notify you of such collection, including the purpose for which the information has been collected, the intended recipients of the information, and the name and address of the agency holding the information, as required by law.

Where our platform extracts information from policy documents you upload, or retrieves quote data from insurers on your behalf, that collection is carried out at your direction and with your authorisation as part of using our Services. By using our Services, you authorise us to collect information from these sources on your behalf for the purposes set out in this Privacy Policy.

We may collect, hold, use and disclose personal information for the following purposes:

• to verify your identity;
• to provide services and products to you;
• to market our services and products to you, including contacting you electronically (e.g. by text or email for this purpose);
• to improve the services and products that we provide to you;
• to respond to communications from you, including a complaint;
• to conduct research and statistical analysis (on an anonymised basis);
• to protect and/or enforce our legal rights and interests, including defending any claim;
• for any other purpose authorised by you or the Act.

Retargeting and Digital Advertising: We may use your email address to conduct retargeting campaigns via third-party digital advertising platforms, including but not limited to Google and Facebook/Meta. This involves uploading a list of customer email addresses to those platforms, which then encrypt or hash that data and use it to identify and serve our advertisements to you when you are active on those platforms.

We do not share your name or other personal contact information with these platforms beyond your email address for this purpose. The hashing and encryption of your email address is managed by the relevant platform in accordance with their own privacy practices.

You may opt out of receiving targeted advertising from us at any time by adjusting your advertising preferences directly within the relevant platform (e.g. Google Ads Settings or Facebook Ad Preferences).

Use of Artificial Intelligence: We use artificial intelligence (AI) tools to assist with certain internal business functions. All AI tools we use operate within closed, private systems.

At present, we do not input your personal information into any AI system. If this changes in the future, we will update this Privacy Policy accordingly and ensure that any use of personal information in connection with AI tools is conducted securely, within private and controlled environments, and in accordance with the Act.

Health Information disclosures: We only collect, hold, use and disclose health information for the following purposes:

• any purposes you consent to;
• the primary purpose for which it is collected, including managing your health and related insurance policies, providing insurance quotes and putting you in touch with insurance advisors;
• secondary purposes that are directly related to the primary purpose for which it was collected, including disclosure to the below listed third parties as reasonably necessary to provide our Services to you; and
• if otherwise required or authorised by law.

We may disclose your personal information to:

• any other person authorised by you;
• third party service providers, such as insurance advisors and insurance providers, for the purpose of enabling them to provide you with quotes and services and for us to provide you with our Services;
• third party service providers for the purpose of enabling them to provide their services to us, including (without limitation) any person that hosts or maintains any underlying IT system or data centre, such as Amazon Web Services, debt collectors, couriers, maintenance or problem-solving providers, marketing or advertising providers, professional advisors and payment systems operators;
• our employees, contractors and/or related entities;
• our existing or potential agents or business partners;
• anyone to whom our business or assets (or any part of them) are, or may (in good faith) be, transferred;
• courts, tribunals and regulatory authorities, in the event you fail to pay for goods or services we have provided you;
• courts, tribunals and regulatory authorities and law enforcement officers, as required or authorised by law, in connection with any actual or prospective legal proceedings, or in order to establish, exercise or defend our legal rights;
• third parties to collect and process data, such as Google Analytics (To find out how Google uses data when you use third party websites or applications, please see www.google.com/policies/privacy/partners/ or any other URL Google may use from time to time); and
• any other third parties as required or permitted by law, such as where we receive a subpoena.

Disclosure to Insurers: Where you use our comparison and quoting services, we will share relevant (but non-identifying) information with insurers to obtain quotes on your behalf. This may include your date of birth, driving history, vehicle details, and property information, but will not include your name, email address, or other personal contact details unless and until you choose to proceed with a purchase.

Where you choose to purchase a policy directly through our platform, we will share your full personal information with the relevant insurer as necessary to complete that transaction.

Overseas Disclosure: Where we disclose your personal information to third parties listed above, these third parties may store, transfer or access personal information outside of New Zealand, including but not limited to Australia, which may not have an equivalent level of data protection laws as those in New Zealand. Before disclosing any personal information to an overseas recipient, we will comply with Information Privacy Principle 12 and only disclose the information if:

• you have authorised the disclosure after we expressly informed you that the overseas recipient may not be required to protect the personal information in a way that, overall, provides comparable safeguards to those in the Privacy Act;
• we believe the overseas recipient is subject to the Privacy Act;
• we believe that the overseas recipient is subject to privacy laws that, overall, provide comparable safeguards to those in the Privacy Act;
• we believe that the overseas recipient is a participant in a prescribed binding scheme;
• we believe that the overseas recipient is subject to privacy laws in a prescribed country; or
• we otherwise believe that the overseas recipient is required to protect your personal information in a way that, overall, provides comparable safeguards to those in the Privacy Act (for example pursuant to a data transfer agreement entered into between us and the overseas recipient).

We store personal information on Amazon Web Services (AWS), with servers located in Australia. We have taken steps to ensure that AWS handles personal information in a manner consistent with the requirements of the Act.

Please read this Privacy Policy carefully. If you provide personal information to us, you understand we will collect, hold, use and disclose your personal information in accordance with this Privacy Policy. You do not have to provide personal information to us, however, if you do not, it may affect our ability to provide our Services to you and your use of our Services.

Sign-Up and Acceptance: By signing up to use our platform, you agree to this Privacy Policy and our Terms and Conditions. A link to this Privacy Policy is provided at the point of sign-up. You should read this Privacy Policy before completing your registration.

Subject to certain grounds for refusal set out in the Act, you have the right to access your readily retrievable personal information that we hold and to request a correction to, or deletion of, your personal information and account.

Before you exercise this right, we will need proof to confirm that you are the individual to whom the personal information relates. In respect of a request for correction, we will take reasonable steps to promptly correct any information found to be inaccurate, out of date, incomplete, irrelevant or misleading.

If you want to exercise either of the above rights, please email us at team@quashed.co.nz.

Your email should provide evidence of who you are and set out the details of your request (e.g. the personal information, or the correction, that you are requesting).

An administrative fee may be payable for providing to you copies of any such information or correcting that information.

To object to processing for direct marketing / unsubscribe from our email database or opt-out of communications (including marketing communications), please contact us using the details below or opt-out using the opt-out facilities provided in the communication.

We have internal policies and procedures in place to identify, assess, and respond to privacy breaches. Where a privacy breach occurs that is likely to cause serious harm to any affected individual, we will notify the Office of the New Zealand Privacy Commissioner and the affected individual(s) as required under the Act.

If you believe your personal information held by us has been compromised, please contact us immediately at team@quashed.co.nz.

We are committed to ensuring that the personal information we collect is secure and we take reasonable steps to keep your personal information safe from loss, unauthorised activity, or other misuse. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures, to safeguard and secure personal information and protect it from misuse, interference, loss and unauthorised access, modification and disclosure.

While we take reasonable steps to maintain secure internet connections, if you provide us with personal information over the internet, the provision of that information is at your own risk.

If you post your personal information on the website’s message board/chat room, you acknowledge and agree that the information you post is publicly available.

Our Services may contain links to other websites. We do not have any control over those websites and we are not responsible for the protection and privacy of any information which you provide whilst visiting those websites. Those websites are not governed by this Privacy Policy, and we suggest you review that site’s privacy policy before you provide personal information.

We use an alphanumeric identifier that we transfer to your computer’s hard drive so that we can recognise your browser (Cookies) to monitor your use of our Services. Cookies, by themselves, do not tell us your email address or other personally identifiable information but they do allow third parties to cause our advertisements to appear on your social media and online media feeds as part of our retargeting campaigns. If and when you choose to provide our online Services with personal information, this information may be linked to the data stored in the cookie.

You may disable cookies by changing the settings on your browser, although this may mean that you cannot use all or parts of the features of our online Services.

This Privacy Policy is governed by the laws of New Zealand. Our Services are directed at New Zealand residents and we only work with New Zealand-based insurers. While individuals located outside New Zealand may technically access our platform, we do not specifically target users outside New Zealand and our Services are not designed for use by non-New Zealand residents.