Privacy Policy

Our Commitment to Privacy

At Health Insurance Comparison NZ, your privacy matters. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our services in accordance with the Privacy Act 2020 and other applicable New Zealand privacy laws.

We are committed to protecting your privacy and handling your personal information in compliance with the 13 Privacy Principles set out in the Privacy Act 2020.

Information We Collect

In accordance with Privacy Principle 1 (Purpose of collection), we collect personal information only for lawful purposes connected with our function as a health insurance comparison service. We may collect:

Personal Information:

• Name and contact details (email address, phone number, location)
• Date of birth and age
• Insurance preferences and requirements
• Health or lifestyle information relevant to health insurance quotes
• Any additional details you voluntarily provide during the quote process

Technical Information:

• IP address and device information
• Browser type and version
• Pages visited and time spent on our website
• Cookies and similar tracking technologies (with your consent)

How We Use Your Information

Under Privacy Principle 2 (Source of personal information) and Principle 3 (Collection of information), we use your information only for the purposes disclosed at the time of collection and other directly related purposes.

Primary Uses:

• To provide personalized health insurance quotes and comparisons
• To connect you with suitable licensed insurance providers or brokers registered on the FSP Register
• To facilitate communication between you and potential insurance providers
• To improve your user experience and provide customer support

Secondary Uses (with your consent where required):

• Website analytics and service improvements
• Regulatory compliance under Financial Markets Conduct Act 2013
• Fraud prevention and system security monitoring
• Marketing communications (only with explicit consent)

Who We Share Your Information With

In accordance with Privacy Principle 11 (Limits on disclosure), we only disclose your personal information in the following circumstances:

• Licensed insurance providers and brokers — including Evolve Group Limited (FSP711891) and other licensed providers registered on the Financial Service Providers Register (FSP) to deliver quotes and offers relevant to your needs. We may share your information with one or more of these partners depending on your location, insurance needs, and partner availability
• Authorized service providers — who help operate our platform under strict confidentiality agreements (e.g., hosting, form handling, analytics)
• Regulators or legal authorities — when required by law, court order, or to prevent fraud, including Financial Markets Authority or Privacy Commissioner
• Related entities — within our corporate group, subject to the same privacy protections

All third parties we work with are required to:

• Be registered on New Zealand's Financial Service Providers Register (where applicable)
• Comply with the Privacy Act 2020 and other applicable laws
• Use your information only for the specified purposes
• Maintain appropriate security measures

We do not sell your personal information to unrelated third parties for advertising or marketing purposes.

Data Security

In compliance with Privacy Principle 5 (Storage and security), we implement reasonable security measures to protect your personal information against:

• Loss, unauthorized access, use, disclosure, copying, or modification
• Cyber security threats and data breaches
• Accidental damage or destruction

Our security measures include:

• SSL/TLS encryption of data in transit
• Secure data storage with access controls
• Regular system monitoring and vulnerability assessments
• Staff privacy training and confidentiality agreements
• Incident response procedures for data breaches

While we take reasonable steps to protect your information, no system is completely secure. We cannot guarantee absolute security of your data transmitted over the internet.

Your Rights Under the Privacy Act 2020

Under Privacy Principle 6 (Access to personal information) and other provisions, you have the following rights:

Access Rights:

• Request access to your personal information we hold
• Ask how we collected your information and why
• Request information about who we've shared your data with

Correction Rights (Privacy Principle 7):

• Request correction of inaccurate or outdated information
• Update your contact details and preferences
• Request a note be attached if correction is disputed

Other Rights:

• Withdraw consent for marketing communications
• Request deletion of your data (subject to legal and business requirements)
• File a complaint with the Privacy Commissioner if you believe we've breached the Privacy Act
• Seek compensation through privacy proceedings if you suffer harm from a privacy breach

To exercise any of these rights, or if you have privacy concerns, please contact us at:

Data Retention and Disposal

In accordance with Privacy Principle 9 (Retention of personal information), we retain your personal information only as long as necessary for the purposes for which it was collected, or as required by law.

• Quote requests: Retained for up to 2 years to facilitate follow-up services
• Contact information: Retained until you withdraw consent or request deletion
• Technical data: Generally retained for 12 months for security and analytics
• Compliance records: Retained as required under applicable financial services regulations

When information is no longer needed, we securely dispose of it in accordance with Privacy Principle 9.

Cross-Border Data Transfers

Some of our service providers may be located overseas. In accordance with Privacy Principle 12 (Cross-border disclosure), when we transfer your information overseas, we ensure:

• The overseas recipient is subject to privacy laws substantially similar to the Privacy Act 2020, or
• We have taken reasonable steps to ensure your information will be protected, or
• You have consented to the transfer after being informed of the risks

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will:

• Publish the updated policy on our website
• Update the "Last updated" date below
• Notify you of significant changes if we have your contact information

We encourage you to review this policy periodically to stay informed about how we protect your information.