Privacy Statement

This Privacy Disclosure explains how YG Financial Services Ltd (“we”, “us”, “our”) collects, holds, uses, discloses, and protects personal information in accordance with the Privacy Act 2020, the Health Information Privacy Code 2020, and the Financial Markets Conduct Act 2013.

We are committed to handling personal information lawfully, fairly, and transparently.

Personal information means information about an identifiable individual (a natural person).

When we collect personal information about you, whether directly from you or indirectly from a third party, we take reasonable steps to ensure you are aware of the following:

• Purpose of collection
  We collect personal information to provide financial advice and services, assess and process applications, arrange and administer financial products (including insurance), assist with claims, meet legal and regulatory obligations, and manage our business operations.
• Source of information
  Information is usually collected directly from you. In some cases, information may be collected from third parties such as insurers, medical providers, employers, accountants, or government agencies, where authorised or permitted by law.
• Intended recipients
  Your personal information may be disclosed to the parties described in this Privacy Disclosure, including financial product providers, service providers, professional advisers, regulators, and dispute resolution bodies, where necessary.
• Overseas disclosures
  Some recipients of personal information may be located outside New Zealand. Where information is disclosed offshore, we take reasonable steps to ensure the recipient safeguards the information in a manner consistent with the Privacy Act 2020, or that the disclosure is otherwise permitted by law.
• Whether provision is mandatory or voluntary
  Providing personal information is generally voluntary. However, some information is required to enable us to provide services or meet legal obligations.
• Consequences of not providing information
  If requested information is not provided, we may be unable to provide advice, arrange or maintain cover, process applications or claims, or deliver some or all of our services.
• Access and correction rights
  You have the right to request access to personal information we hold about you and to request corrections.
• Complaints
  You have the right to make a privacy complaint to us or to the Office of the Privacy Commissioner.

We collect personal information directly from individuals wherever possible. This may occur when you contact us by phone, email, social media, our website, online forms, or when we provide services to you.

We may also collect personal information from third parties where permitted by law or with your authorisation. These third parties may include related businesses, accountants, financial product providers (including insurers and lenders), medical professionals, employers, the Accident Compensation Corporation, and credit reporting agencies.

When you visit our website, we may collect information about your visit, including traffic data, location data, and website analytics.

The types of information we collect may include identity details (including of family members or insured persons), contact information, insurance details, and relevant health and financial information.

Where we collect personal information from a source other than you, we will take reasonable steps to ensure you are informed of the matters set out below, unless an exception under the Privacy Act 2020 applies.

We only collect and use personal information where it is reasonably necessary for our functions or activities or where required or permitted by law.

We collect and use personal information for the following purposes:

• to provide, administer, and market our services (and to help improve those services);
• to respond to communications from clients;
• to contact clients in the future regarding matters we believe may be of interest;
• to defend, protect, or enforce our legal rights and interests, including responding to complaints, claims, or other actions;
• to conduct research and statistical analysis (on an anonymised basis);
• to undertake credit checks where necessary;
• to comply with our legal and regulatory obligations and to engage with relevant regulators; and
• for any other purpose authorised by the client or permitted under the Act.

We may also use personal information for the following purposes:

• informing you about products or services we believe may be of interest to you;
• conducting analysis and research relating to current or proposed products and services;
• contacting you for marketing or survey purposes, including within a reasonable period after cover ends or where a quote or application does not proceed. You may opt out of receiving marketing communications from us at any time by contacting us or using the unsubscribe option where provided.
• monitoring and managing risk, including preventing, detecting, and investigating fraud or other improper activity; and
• meeting legal and regulatory obligations.

We may use artificial intelligence (AI) tools to support administrative functions, analyse information, or improve service delivery.

AI tools do not make final decisions relating to advice, underwriting, or claims. Human oversight is maintained at all times. We do not permit personal or health information to be used to train external third‑party AI models.

We may disclose personal information where required to provide our services, meet legal or regulatory obligations, or where authorised by you or the policy owner. This may include disclosure to:

• service providers who support our operations;
• financial product providers;
• professional advisers and insurers;
• regulators, including the Financial Markets Authority;
• the Financial Dispute Resolution Scheme;
• debt collection agencies; and
• any other party authorised under the Privacy Act 2020 or other applicable law.

You are not required to provide the personal information we request. However, if you choose not to do so, we may be unable to provide some or all of our products or services.

We take reasonable steps, in the circumstances, to protect personal information from loss, unauthorised access, use, modification, disclosure, or other misuse.

YG Financial Services maintains security measures including technological safeguards, cybersecurity controls, and physical security procedures to protect information and data.

We comply with our obligations under the Privacy Act 2020, the Health Information Privacy Code 2020, and the Financial Markets Conduct Act 2013 to ensure information is managed appropriately.

Subject to the grounds for refusal set out in the Act, individuals have the right to access personal information we hold about them and to request corrections to that information.

We will respond to requests for access or correction within the timeframes required under the Privacy Act 2020.

We aim to deliver a high standard of service. If you believe your expectations have not been met, we are committed to working with you to resolve the matter.

Complaints are preferred in writing and any relevant information or supporting documentation will assist our review. Please contact us by sending us an email so we can work together to resolve the matter.

Further complaint details are available in our Complaint Disclosure and Process on our website.

If your privacy complaint is not resolved to your satisfaction, you have the right to complain to the Office of the Privacy Commissioner. This is free of charge.