Privacy policy
In this Privacy Policy, "we", "us" and "our" means CIS Brokers Limited. We respect the privacy of your personal information. This Privacy Policy sets out how we collect, store, use and disclose your personal information, which we do in accordance with the Privacy Act 2020.
What personal information we collect
In New Zealand, under the Privacy Act 2020, "personal information" means information about an identifiable individual. We collect certain types of personal information about you, including:
- information in relation to the application for, provision and administration of insurance, such as your contact details, date of birth, employment details, health information, details of previous insurances and past insurance claims and criminal records;
- financial, billing and invoicing information;
- if you visit our website, personal information that you submit, such as via online forms; and
- any other personal information you otherwise provide to us.
If you do not provide us with the information that we need, we or any of our third party service providers may not be able to provide you with products or services.
How we collect your personal information
- directly from you via our website, telephone, in writing or email; and/or
- indirectly from third parties, if necessary. For example, your employer, referees, insurers, premium funders and other third party service providers, or from publicly available sources.
You authorise us to contact such third parties for the purposes of providing you with the information or services that you have requested.
Our purposes for using and disclosing your personal information
We use and disclose your personal information for the purposes of providing our services to you and related purposes, including:
- assessing and managing your insurance application and policy;
- managing and processing payments;
- communicating with you about our products and services;
- conducting market or customer research;
- administering claims;
- developing, establishing and administering alliances and other arrangements with other organisations in relation to the promotion, administration and use of our services;
- telling you about our other service offerings which we believe may be relevant, if you have asked to receive this;
- statutory or regulatory reporting;
- internal or external audit; and
- any other purpose notified to you at the time your personal information is collected.
Disclosure of your personal information
We will disclose your personal information to:
- insurers, reinsurers, other insurance intermediaries, insurance reference bureaus and industry bodies;
- assessors appointed by insurers to assess or investigate your claims;
- others named on your policy as co-insureds;
- service providers engaged to provide services to you in relation to your insurance, such as providing repairs;
- third parties who help manage our business and provide our services, including payment system operators, IT suppliers, lawyers, accountants, other advisers and financial institutions;
- any other entities notified to you at the time of collection; and
- courts, law enforcement, regulators and other government agencies, to comply with all applicable laws, regulations and rules.
Other than when required or permitted by law, as specified in this Privacy Policy, or where you have provided your consent, we will not disclose your personal information. Nothing in this Privacy Policy prevents us from using and disclosing to others de-personalised aggregated data.
Transfer of personal information overseas
We may disclose your personal information to third party service providers and/or insurers who may process your personal information either on our behalf or otherwise for one or more of the above purposes. Some of these providers are located outside New Zealand, including Australia, the United Kingdom, the United States of America, India, Singapore, Malaysia, the Philippines and Vietnam. Unless exempted by the Privacy Act 2020, we will have sought your express authorisation before transferring your personal information overseas, and any overseas disclosure will only be made for the purposes specified in this Privacy Policy.
We take appropriate steps to ensure that transfers of personal information comply with applicable law and are carefully managed to protect your privacy rights, such as limiting disclosures to recipients subject to privacy laws that provide comparable protection to the Privacy Act 2020, or where alternative arrangements are in place to protect your privacy rights.
Your obligations when you provide personal information of others
You must not provide us with personal information of any other individual unless you have the express authorisation of that individual to do so. Before doing so you must tell that individual that you will be providing their information to us and that we will handle it in accordance with this Privacy Policy, provide them with a copy of (or refer them to) this Privacy Policy, and warrant that you have their consent. If you have not done this, you must tell us before you provide any third party information.
Your obligations when we provide you with personal information
If we give you, or provide you access to, the personal information of any other person, you must only use it for the purposes we have agreed to and in compliance with applicable privacy laws, including the Privacy Act 2020, and this Privacy Policy. You must also ensure that your agents, advisers, employees and contractors meet these requirements.
Accuracy, access and correction
We take reasonable steps to ensure that your personal information is accurate, complete and up to date whenever we collect, use or disclose it. We also rely on you to tell us about changes. Please contact us as soon as possible if your details change or if you believe the information we hold is not accurate, complete or up to date.
You can ask to access your personal information or to have it corrected by contacting us using the details below. We will provide access unless otherwise required or permitted by law, and we will tell you the basis for any refusal. We may charge a fee where permitted by law.
Security of your personal information
We take reasonable steps to protect the personal information we hold from misuse, interference and loss, and from unauthorised access, alteration and disclosure. Data protection measures are never completely secure, so we cannot guarantee the security of your personal information, and you should take care to protect it yourself. Please tell us as soon as possible if you become aware of a security breach. Where required by law, we will notify you of any notifiable privacy breach concerning your personal information.
Updates to this policy
We may amend our Privacy Policy from time to time to ensure we properly manage and process your personal information. The current version is always published on this page.
How to make a complaint
If you wish to complain about a breach of this Privacy Policy or applicable privacy laws, contact us using the details below with sufficient detail and any supporting information. You can also complain to the Privacy Commissioner at privacy.org.nz.
How to contact us
To access or correct your personal information, make a privacy complaint or ask anything about this policy, email privacy@cis.co.nz, phone 07 868 7301, or write to CIS Brokers Limited, 452 Pollen Street, Thames 3500.