Privacy Policy

Mortgage Lab Limited ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, hold, and share personal information in accordance with the Privacy Act 2020, including the new notification requirements that apply when we collect personal information about someone from another source.

Who We Are

Mortgage Lab Limited is the agency collecting personal information through this website and in connection with our mortgage, lending, insurance, and KiwiSaver advice services. We may hold information ourselves and through trusted service providers who host systems or process information on our behalf.

Information We Collect

We may collect personal information including:

• Contact details such as name, email address, phone number, and address
• Information about your enquiry, lending goals, and preferred contact method
• Financial information such as income, expenses, assets, liabilities, and credit-related information
• Employment and business details
• Property and lending information
• Identity and verification documents
• Feedback, testimonial, and service satisfaction information
• Website usage information, including cookies and analytics data

How We Collect Information

We may collect personal information:

• Directly from you through website forms, applications, phone calls, emails, meetings, and documents you provide
• From third parties such as co-borrowers, spouses, partners, guarantors, referrers, employers, lenders, insurers, credit reporting agencies, advisers, or service providers where permitted
• From platforms and systems used to deliver our services, including application and CRM systems used on our behalf
• Automatically through website technologies such as cookies and analytics tools

Indirect Collection and IPP 3A

In some cases, we may collect personal information about you from someone else rather than directly from you. For example, this may happen where a spouse, partner, co-borrower, guarantor, referrer, adviser, or support person provides information as part of an enquiry or application.

Where required by the Privacy Act 2020, we will take reasonable steps to make the individual concerned aware that we have collected their information, why we collected it, who we may share it with, and their rights to access and correction, unless an exception under the Act applies.

If you provide us with someone else's personal information, you should only do so where you are authorised or it is otherwise appropriate to provide it.

How We Use Your Information

We may use personal information to:

• Respond to enquiries and match you with the appropriate adviser
• Provide mortgage, lending, insurance, and KiwiSaver advice and related services
• Assess, prepare, and manage applications and supporting documents
• Communicate with you, lenders, insurers, lawyers, valuers, and other relevant parties
• Carry out identity verification, due diligence, fraud prevention, and risk checks
• Meet our legal, regulatory, and professional obligations, including AML/CFT and financial advice requirements
• Request and manage customer feedback and testimonials
• Improve our services, systems, and website experience
• Send marketing or helpful updates where permitted by law

Who We May Share Information With

Depending on the purpose of collection, we may share personal information with:

• Lenders, banks, non-bank lenders, and product providers
• Insurers and insurance-related service providers
• Credit reporting agencies and identity verification providers
• Lawyers, valuers, accountants, and other professional advisers involved in your matter
• Technology providers, CRM providers, cloud hosting providers, and communication platforms that process information on our behalf
• Regulators, dispute resolution bodies, courts, or other agencies where required or permitted by law

We do not sell personal information to third parties.

Legal Requirements and Authority

In some situations, collection, use, or disclosure of personal information is authorised or required by law, including under the Privacy Act 2020, Anti-Money Laundering and Countering Financing of Terrorism Act 2009, financial advice laws, and other legal or regulatory obligations that apply to our services.

Holding and Protecting Information

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, disclosure, alteration, or destruction. This includes the use of secure systems, access controls, reputable service providers, and reasonable technical and organisational safeguards.

Your Rights

You have the right to:

• Ask whether we hold personal information about you
• Request access to your personal information
• Request correction of your personal information
• Withdraw consent for marketing communications where consent is the basis for those communications

Cookies and Analytics

Our website may use cookies and analytics tools to understand website usage, improve performance, and support marketing and content decisions. You can control cookies through your browser settings.

Changes to This Policy

We may update this policy from time to time. The latest version will always be published on this website.