Privacy policy.
How Wealth Health Limited collects, uses, shares, stores and protects your personal information, in accordance with the NZ Privacy Act 2020.
What's in this policy
1. What we collect
To give you regulated financial advice, Wealth Health needs to collect personal information about you. We collect only what we need for the work you have asked us to do.
1.1 Identifying information
- Your full legal name, date of birth, and current address
- Contact details (phone, email, postal address)
- Identity documents (passport, drivers licence) where required by anti-money laundering law
- IRD number where required for KiwiSaver, investment or trust work
1.2 Financial information
- Income, employment status, and (for self-employed clients) business financials
- Assets, liabilities, expenses and bank account information
- Credit history (with your consent, via a credit bureau check at the time of a lending application)
- Existing insurance, KiwiSaver and investment holdings
1.3 Health information (insurance work only)
- Medical history, current health conditions, prescriptions, and lifestyle factors (smoking, alcohol consumption)
- Family medical history where relevant to underwriting
- This information is collected only when you are applying for life, trauma, income protection, TPD or medical insurance, and only with your explicit consent.
1.4 Information about your family
Where your advice depends on your household (dependants, spouse income, joint mortgage applicants), we may collect information about other family members. We only collect what is necessary, and only with their knowledge and consent where they are adults.
2. How we use it
We use the personal information you give us to:
- Provide the regulated financial advice you have engaged us for
- Submit applications to lenders, insurers, KiwiSaver providers, and investment platforms on your behalf
- Meet our anti-money laundering and counter-terrorism financing obligations under the AML/CFT Act 2009
- Maintain client records for the seven-year period required by the Financial Markets Conduct Act
- Review your situation at agreed intervals (typically annually) and proactively flag relevant changes
- Communicate with you about your existing arrangements (mortgage refixes, insurance reviews, KiwiSaver checks)
We do not use your personal information for any other purpose without your consent.
3. Who we share with
We share your personal information only as needed to do the work you have engaged us for, and only with your consent. The parties we typically share with are:
| Party | What we share | Why |
|---|---|---|
| Lenders | Mortgage application data and supporting documents | To obtain a lending offer |
| Insurers | Insurance application data including health disclosures | To underwrite and issue a policy |
| KiwiSaver providers | Identity, IRD, scheme transfer details | To open or transfer a KiwiSaver account |
| Solicitors | Settlement instructions and copies of mortgage documents | To facilitate property settlement |
| Accountants | Loan structure, investment income | Only at your direction, for your tax return |
| Credit bureaus | Identifying information | To run a credit check with your written consent |
| Auditors and regulators | Anonymised file extracts | To meet FMA and AML/CFT compliance obligations |
We never sell your personal information to third parties. We never share your information with marketing companies or data brokers.
4. Storage and security
Your personal information is stored:
- In our practice management system, hosted in New Zealand and Australia on encrypted cloud infrastructure
- In encrypted email and document storage (Microsoft 365, in Australian data centres)
- Where physical documents exist (signed forms, ID copies), in a locked office in Papamoa
We protect your data with:
- Multi-factor authentication on every staff account
- Encryption in transit (TLS) and at rest
- Role-based access controls (only the adviser working on your file can see your file)
- Annual cyber security review and staff training
We retain your personal information for seven years from the date of our last advice to you, as required by the Financial Markets Conduct Act 2013. After seven years, we securely delete or destroy your records unless you have asked us to keep them, or unless a regulator requires us to keep them longer.
5. Your rights
Under the Privacy Act 2020 you have the right to:
- Access any personal information we hold about you. We will respond within twenty working days.
- Correct any information that is wrong or out of date.
- Have deleted any information we are not required by law to keep.
- Withdraw consent for any future processing of your data (note: this may prevent us from continuing to give you advice).
- Complain to us, or directly to the Office of the Privacy Commissioner, if you believe your privacy has been breached.
To exercise any of these rights, contact our Privacy Officer (details below). We will not charge you a fee for access or correction requests except in extreme cases where the request is unreasonably large.
6. Cookies and analytics
The Wealth Health website uses a small number of cookies and similar technologies:
- Functional cookies that remember your preferences (such as whether you have dismissed a banner). These do not identify you personally.
- Analytics cookies (Google Analytics 4, in privacy-friendly mode with IP anonymisation) that tell us anonymously how many people visit the site and which pages they read. We do not link this data back to any individual client record.
- Booking and chat cookies set by our scheduling tool (Calendly) and AI chat assistant. These are used only to operate those tools while you are using them.
You can disable cookies in your browser settings. The site will still work but some features (chat, booking) may not function correctly.
7. Privacy Officer contact
Wealth Health's Privacy Officer is Craig Coupland, the firm's founder.
| Privacy Officer | Craig Coupland |
|---|---|
| Use the contact form and mark your message "Privacy enquiry" | |
| Postal | Wealth Health Limited, Papamoa, Tauranga (full address provided on request) |
| Response time | Within five working days for acknowledgement, twenty for a substantive reply |
If you are unhappy with how we have handled a privacy enquiry or complaint, you can complain directly to the Office of the Privacy Commissioner:
| Phone | 0800 803 909 |
|---|---|
| Online | privacy.org.nz |
We may update this privacy policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated to existing clients by email.