Privacy statement

1. Who is responsible for your information?

Dyson Financial Services Limited, trading as MyChange (“MyChange”, “we”, “us” or “our”), is the agency collecting and holding your personal information for the purposes described in this statement.

Our privacy officer is Nathan Dyson. You can contact him at Nathan@MyChange.co.nz, by telephone on 022 022 7803, or through MyChange in Paraparaumu, New Zealand.

2. What information do we collect?

The information we collect depends on how you interact with us. It may include:

• your name, email address, telephone number and preferred contact details;
• the financial or property change you are considering and the information you provide about your current position;
• identity, employment, income, expenses, assets, liabilities, property and lending information when you choose to proceed with advice or an application;
• documents and correspondence you provide to us;
• records of our advice, communications, consents and services; and
• basic technical information generated when you use our website, such as IP address, browser information and security or server logs.

Please do not submit identity documents, bank statements or other highly sensitive material through the public enquiry form. We will provide an appropriate method if those documents are required later.

3. How do we collect it?

We usually collect personal information directly from you through our website, email, telephone or video conversations, application forms and documents you provide.

With your authority, or where otherwise permitted by law, we may also collect information from a joint applicant, your representatives, lenders, credit reporters, identity-verification providers, government agencies or other parties involved in your application. If we collect personal information about you indirectly, we will take reasonable steps to ensure you are aware of the collection as required by the Privacy Act 2020, unless an exception applies.

4. Why do we collect and use it?

We collect and use personal information where reasonably necessary to:

• respond to your enquiry and understand what change you are working toward;
• assess your circumstances and provide financial advice or lending assistance;
• prepare, submit and manage applications you authorise;
• communicate with you and manage our client relationship;
• meet legal, regulatory, professional and record-keeping obligations;
• protect our clients, website and business from fraud, misuse and security threats; and
• improve our services using aggregated or de-identified information where practical.

Providing information through the public enquiry form is voluntary. If you do not provide the required information, we may be unable to respond meaningfully or provide the requested service.

5. Who may receive your information?

We may disclose personal information only where reasonably necessary for the purpose it was collected, where you have authorised us, or where disclosure is otherwise permitted or required by law. Recipients may include:

• lenders and other financial-service providers relevant to an application;
• our aggregator, compliance advisers and professional advisers;
• identity, credit, document, communication, technology and website-service providers;
• your authorised representatives and other applicants; and
• regulators, dispute-resolution schemes, courts or government authorities when legally required.

We do not sell or rent your personal information.

6. Storage, security and overseas providers

We use reasonable technical and organisational safeguards appropriate to the sensitivity of the information we hold. These may include access controls, secure systems, encryption, backups, staff procedures and limiting access to people who need the information for their work.

Some technology providers may store or process information outside New Zealand. Where information is disclosed to an overseas recipient, we will take reasonable steps required by New Zealand privacy law to ensure appropriate privacy safeguards apply, or otherwise rely on an applicable legal basis such as your informed authorisation.

No internet service is completely risk-free. If a privacy breach occurs that has caused, or is likely to cause, serious harm, we will notify the Office of the Privacy Commissioner and affected people as soon as practicable where required by law.

7. How long do we keep it?

We retain personal information only for as long as it is reasonably required for the purposes above, including any applicable legal, regulatory, professional or dispute-resolution requirements. We then securely delete, destroy or de-identify it where reasonably practicable.

Unsuccessful or preliminary enquiries may be retained for a reasonable period so we can respond, maintain appropriate records and manage follow-up, unless a longer period is required or authorised.

8. Website technology and cookies

Our website may use essential technology needed to operate securely and reliably. Hosting and security providers may generate technical logs. We will update this statement and provide appropriate choices before introducing non-essential advertising or behavioural-tracking cookies.

Links to third-party websites are governed by those organisations’ own privacy practices.

9. Accessing and correcting your information

You have the right to ask whether we hold personal information about you, request access to it and ask us to correct it. If we do not make a requested correction, you may ask us to attach a statement of correction to the information.

Email Nathan@MyChange.co.nz with enough information for us to identify you and understand your request. We may need to verify your identity before responding. We will respond in accordance with the Privacy Act 2020.

10. Questions and complaints

Please contact our privacy officer first so we can try to resolve your concern:

If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner at privacy.org.nz.

11. Changes to this statement

We may update this statement when our services, technology or legal obligations change. The current version and its effective date will always be published on this page. If a change materially affects how we use information already collected, we will take reasonable steps to notify affected people where appropriate.