G3 Client Privacy Policy

Online device information and cookies

If you are visiting us through our website, at this time we do not use cookies to collect information about your use and experience. Cookies are small pieces of information stored on your hard drive or on your mobile browser. They can record information about your visit to the site, allowing it to remember you the next time you visit and provide a more meaningful experience.

If we change this process in the future, we will update this policy accordingly.

Purpose of collection and use of personal information

Any personal information you provide to us may be used to:

• Check whether you are eligible for the product or services offered by us
• Facilitate those services
• Provide information that you request; and / or
• Provide you with further information about our other products and services

We also have an obligation to maintain personal information to disclose to regulatory and similar bodies – see  ‘Disclosure of your personal information’ below.  These bodies have a legal right to such information.

Storage and protection of your personal information

We may electronically record and store personal information which we collect from you. When we do so, we will take all reasonable steps to keep it secure and prevent unauthorised disclosure.

However, we cannot promise that your personal information will not be accessed by an unauthorised person (e.g. a hacker) or that unauthorised disclosures will not occur. If we provide you with any passwords or other security devices, it is important that you keep these confidential and do not allow them to be used by any other person. You should notify us immediately if the security of your password or security device is breached, this will help prevent the unauthorised disclosure of your personal information.

Some information we hold about you will be stored in paper files, but most of your information will be stored electronically on the cloud, by cloud service providers – see ‘Cloud based service providers’ below.

We use a range of physical and electronic security measures to protect the security of the personal information we hold, including:

• Access to information systems is controlled through identity and access management
• Our buildings are secured with a combination of locks and alarms to prevent unauthorised access
• Employees are bound by internal information security policies and are required to keep information secure
• Employees are required to complete training about information security and privacy
• When we send information overseas or use service providers to process or store information, we put arrangements in place to protect your information
• We regularly monitor and review our compliance (and our service providers’ compliance) with internal policies and industry best practice
• We only keep information for as long as we need it, or as long as the law requires us to. We have a records management policy that governs how we manage our information and records to make sure we destroy any information that is outdated, irrelevant or unnecessary.

If there is a privacy breach

We work hard to keep your personal information safe. However, despite applying strict security measures and following industry standards to protect your personal information, there is still a possibility that our security could be breached. If we experience a privacy breach, where there is a loss or unauthorised access or disclosure of your personal information that is likely to cause you serious harm, we will, as soon as we become aware of the breach:

• Seek to quickly identify and secure the breach to prevent any further breaches and reduce the harm caused
• Assess the nature and severity of the breach, including the type of personal information involved and the risk of harm to affected individuals
• Advise and involve the appropriate authorities where criminal activity is suspected
• Where appropriate, notify any individuals who are affected by the breach (where possible, directly)
• Where appropriate, put a notice on our website advising our clients of the breach; and
• Notify the Privacy Commissioner

Disclosure of your personal information

We may disclose your personal information to others outside G3 Financial Freedom Ltd where:

• It is necessary to enable us to achieve the purpose that we collected the information for
• We are required or authorised by law or where we have a public duty to do so
• You have expressly consented to the disclosure or your consent can be reasonably inferred from the circumstances; or
• We are permitted to disclose the information under the Privacy Act 2020

Parties we may disclose your information to

Your personal information may be used by us for the purpose of providing advice and services to you and may also be used by agencies such as, but not limited to:

• Any out-sourced service provider who assists in the services we are required to carry out such as auditors and external compliance reviewers
• Our external dispute resolution service
• The Regulator
• Credit reporting and debt collecting organisations
• G3 Financial Freedom Limited’s related companies, such as the Financial Advice Provider licence holder G3 Financial Freedom Limited

If we do not need to share your information with a third party in order to provide advice and services to you, we will not pass on your information to them without your consent. Under no circumstances will we sell or receive payment for disclosing your personal information.

Sending your information overseas

We may send your personal information outside New Zealand, including to overseas service providers or other third parties who process or store our information, or provide certain services to us.

Where we do this, it does not change any of our commitments to you to safeguard your privacy.

We make sure that appropriate security and information handling arrangements are in place and the information remains subject to confidentiality obligations.

All countries have different privacy laws and information protection standards. If we need to send your personal information to a country that has lower standards of information protection than in New Zealand, we will take appropriate measures to protect your personal information. Where it is not possible to ensure that appropriate security and information handling arrangements are in place, we will let you know and gain your consent prior to sending your personal information overseas.

Third party websites

Through our website or any other social media pages we may have, you may be able to link to other websites which are not under our control.  We are not responsible for the privacy or security practices of those third-party websites and the sites are not covered by this Privacy Policy. Third party websites should have their own privacy and security policies and we encourage you to read them.

In addition, we have no knowledge of (or control over) the nature, content, and availability of those websites. We do not sponsor, recommend, or endorse anything contained on these linked websites. We do not accept any liability of any description for any loss suffered by you by relying on anything contained or not contained on these linked websites.

Right to access, correct and delete personal information

You have the right to request access to, correct and, in some circumstances, delete your personal information. You can do so by contacting us at:

G3 Financial Freedom Limited

PO Box 13563

Tauranga 3141

New Zealand

Or via email at admin@g3freedom.co.nz

When you contact us with such a request, we will take steps to update or delete your personal information, provide you with access to your personal information and/or otherwise address your query within a reasonable period after we receive your request. To protect the security of your personal information, you may be required to provide identification before we update or provide you with access to your personal information.

We are only able to delete your personal information to the extent that it is not required to be held by us to satisfy any legal, regulatory, or similar requirements.

There is no fee for requesting that your personal information is corrected or deleted or for us to make corrections or deletions. In processing your request for access to your personal information, a reasonable cost may be charged. This charge covers such things as locating the information and supplying it to you.

There are some circumstances in which we are not required to give you access to your personal information.  If we refuse to give you access or to correct or delete your personal information, we will let you know our reasons, except if the law prevents us from doing so.

If we refuse your request to correct or delete your personal information, you also have the right to request that a statement be associated with your personal information noting that you disagree with its accuracy.

If we refuse your request to access, correct or delete your personal information, we will also provide you with information on how you can complain about the refusal.

What happens if you do not provide us your information?

If you do not provide information we have requested, you may be unable to obtain or access our services for which the information is required. Please ask us if you are unsure what information is important and how this might affect you.

Changes to this Privacy Policy

We review this Privacy Policy periodically to keep it current and available on our website. If the changes are significant, we may advise you directly. You may also obtain a copy of the latest version by calling us on 07 571 5333.

Privacy Policy queries and concerns

If you are concerned about how your personal information is being handled or if you feel that we have compromised your privacy in some way, please contact us at:

 G3 Financial Freedom Limited

PO Box 13563

Tauranga 3141

New Zealand

Email at admin@g3freedom.co.nz

Phone at 07 571 5333

We will acknowledge your complaint within three working days of its receipt. We will let you know if we need any further information from you to investigate your complaint.

We aim to resolve complaints as quickly as possible. We strive to resolve complaints within five working days, but some complaints take longer to resolve. If your complaint is taking longer, we will let you know what is happening and a date by which you can reasonably expect a response.

If you are not satisfied with our response to any privacy related concern you may lodge a complaint on the Privacy Office website (www.privacy.org.nz) or send a complaint form to  the Privacy Commissioner at:

Office of the Privacy Commissioner

P O Box 10-094

Wellington 6143, New Zealand

Fax: 04- 474 7595

Email: enquiries@privacy.org.nz

Telephone: 0800 803 909

Website: www.privacy.org.nz