Privacy Policy

Last updated: May 2026



1. Introduction

 

Simplicity NZ Limited and its related companies (“Simplicity”, “we”, “us”, “our”) respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, disclose and protect your personal information in accordance with the Privacy Act 2020 and other applicable New Zealand laws.

 

This policy applies to:

  • our websites and mobile applications;
  • our KiwiSaver, investment, home loan and other financial products and services;
  • prospective, current and former customers;
  • visitors to our websites;
  • people who interact with us through customer support, marketing or events.

 

Personal information means information about an identifiable individual.



2. What information we collect

 

Depending on the products or services you use, we may collect:

 

 

Identity and contact information
  • name;
  • date of birth;
  • address;
  • email address;
  • phone number;
  • IRD number;
  • passport or driver licence details;
  • proof of address documentation.

 

 

Financial and transaction information
  • bank account details;
  • investment balances and transaction history;
  • KiwiSaver information;
  • income and employment information;
  • credit-related information;
  • mortgage or lending information.

 

 

Verification and compliance information
  • AML/CFT verification information;
  • source of funds or wealth information;
  • sanctions screening information;
  • tax residency information.

 

 

Technical and website information
  • IP address;
  • browser type and device information;
  • cookies and analytics information;
  • website usage information;
  • mobile app usage data.

 

Communications information
  • records of calls, emails, chats and other communications with us;
  • feedback, survey responses and complaints.



3. How we collect your information

 

We may collect personal information:

  • directly from you;
  • through our website, apps or online forms;
  • when you contact us;
  • from identity verification providers;
  • from your employer (for workplace KiwiSaver arrangements);
  • from financial advisers or intermediaries;
  • from government agencies, regulators or publicly available sources;
  • from credit reporting agencies;
  • from other organisations where you have authorised this.

 

Where we collect your information from another source rather than directly from you, we will take reasonable steps to provide you with the information required under the Privacy Act 2020 unless an exception applies.



4. Why we collect and use your information

 

We collect and use personal information for purposes including:

  • providing and administering our products and services;
  • verifying your identity;
  • complying with AML/CFT, tax, financial services and other legal obligations;
  • processing transactions and payments;
  • managing investments and member accounts;
  • communicating with you;
  • responding to enquiries and complaints;
  • improving our products, services and customer experience;
  • conducting analytics, research and product development;
  • detecting and preventing fraud, cyber threats and other unlawful activity;
  • marketing products and services that may interest you;
  • enforcing our legal rights and obligations.

 

We will only collect personal information that is reasonably necessary for these purposes.



5. Marketing communications

 

We may send you information about products, services, updates or promotions that may interest you.

You can opt out of marketing communications at any time by:

  • clicking the unsubscribe link in emails;
  • updating your communication preferences;
  • contacting us directly.

 

We may still send you important service or regulatory communications even if you opt out of marketing.



6. Cookies and analytics

 

Our websites and apps may use cookies and similar technologies to:

  • enable website functionality;
  • remember your preferences;
  • improve website performance;
  • understand website usage;
  • support security and fraud prevention.

 

We may use analytics providers and advertising technologies to help us understand user behaviour and improve our services.

You can control cookies through your browser settings, although disabling cookies may affect website functionality.



7. Who we share your information with

 

We may disclose your personal information to:

  • related companies within the Simplicity group;
  • custodians, trustees, fund administrators and service providers;
  • banks and payment providers;
  • identity verification and AML/CFT providers;
  • cloud hosting and IT providers;
  • professional advisers, auditors and insurers;
  • regulators, government agencies and law enforcement agencies;
  • credit reporting or fraud prevention agencies;
  • other organisations where authorised or required by law;
  • any person authorised by you.

 

We do not sell your personal information.



8. Overseas disclosure and storage

 

Some of our service providers may store or process personal information outside New Zealand, including through cloud-based technology services.

Where we disclose personal information overseas, we will take reasonable steps to ensure the recipient:

  • is subject to privacy protections comparable to New Zealand law; or
  • is contractually required to protect the information appropriately; or
  • otherwise meets the requirements of the Privacy Act 2020.



9. How we protect your information

 

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, disclosure or alteration.

These measures include:

  • staff training;
  • access controls;
  • encryption and authentication controls;
  • monitoring and cybersecurity safeguards;
  • secure storage systems;
  • vendor due diligence and contractual protections.

 

No system can be completely secure, but we continually review and improve our safeguards.



10. Privacy breaches

 

If we become aware of a privacy breach that has caused, or is likely to cause, serious harm, we will notify affected individuals and the Office of the Privacy Commissioner as required by the Privacy Act 2020.



11. Retention of information

 

We retain personal information only for as long as necessary for:

  • the purposes for which it was collected;
  • legal and regulatory obligations;
  • dispute resolution and enforcement purposes.

 

Retention periods may be affected by financial services, tax, AML/CFT and record-keeping requirements.

When information is no longer required, we will securely destroy or de-identify it where appropriate.



12. Accessing and correcting your information

 

You may request access to the personal information we hold about you and request correction of that information.

Requests can be made using the contact details below. We may require proof of identity before responding to a request.

In limited circumstances permitted by law, we may refuse access requests or decline requested corrections.



13. Automated processes and analytics

 

We may use automated systems and analytics tools to:

  • support fraud detection and cybersecurity;
  • improve customer experience;
  • assist with operational processes;
  • conduct reporting and analytics.

 

We do not make solely automated decisions that have legal or similarly significant effects without appropriate oversight.



14. Third-party websites and services

 

Our websites or communications may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.



15. Children and minors

 

Our services are generally intended for adults. Where we collect personal information relating to minors, we do so in accordance with applicable legal requirements and with appropriate authority or consent.



16. Changes to this policy

 

We may update this Privacy Policy from time to time. The updated version will be published on our website and will take effect from the date it is posted.



17. Contact us

 

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact our Privacy Officer:

 

Privacy Officer
Simplicity NZ Limited
Email: privacy@simplicity.kiwi
Website: www.simplicity.kiwi



18. Complaints

 

If you believe we have breached your privacy rights, please contact us first so we can investigate.If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner:

 

Office of the Privacy Commissioner
www.privacy.org.nz