Privacy policy

Last updated 31 October 2026. Based on our Privacy Policy as updated on 18 June 2026.

This policy explains how Fin ConnectX Limited (FinConnectX, we, us) collects, uses, shares and protects personal information, in line with the Privacy Act 2020 and its Information Privacy Principles.

Who we are and key terms

FinConnectX runs an online platform (the Platform) that helps New Zealand dealerships and finance brokers prepare finance applications with their customers and send them to the lenders they choose.

Fin ConnectX Limited is a New Zealand company (company number 9264952, NZBN 9429052255748). Our registered office is 4/1e Pacific Rise, Mount Wellington, Auckland 1060, New Zealand.

• Customer – a person applying for finance through the Platform (or whose details are included in an application).
• Introducer – the dealership or finance broker helping the Customer with their application.
• Lender – a bank, finance company or other credit provider that receives applications through the Platform.
• Service providers – businesses that help us run the Platform, such as hosting, credit reporting, identity checking and bank statement services.

Your consent and changes to this policy

This policy explains how we handle your information when you use the Platform or when your Introducer applies for finance for you. The Platform records a separate, specific consent from the Customer for each of these, with the date of each consent:

• credit checks;
• which Lenders receive the application; and
• access to bank statements.

We may update this policy from time to time. The current version is always on this page, and we will post a notice on the Platform when we change it.

What we collect

From Customers

• Contact and identity details: name, date of birth, address, email, phone and driver licence details.
• Personal details: employment, emergency contact, and household information needed for the application. Please let your emergency contact know you have given us their details.
• Finance details: income, expenses, assets and liabilities, and credit information.
• Details of the vehicle or goods being financed.
• Bank statement data you choose to share through a bank statement service, and documents you upload.

From Introducers and Lenders

Account details for the people who use the Platform: name, business, work email and phone, and a record of what they do on the Platform.

Business contacts

Work contact details of people at dealerships, finance brokers and lenders. See Business contacts and marketing.

How we collect it

• From your Introducer, who enters your details with your consent.
• From you directly, through a unique private link we send by SMS or email.
• From credit reporters, identity checking and bank statement services, when you have agreed to those checks.
• From other Platform users. A dealership, finance broker, Lender or insurance provider (only if you have opted in) using the Platform may ask another Platform user for more information about a Customer that isn’t already on the Platform, for an Authorised Purpose.
• For business contacts, from public sources and from the people themselves.

If we collect information about you from someone else, we take reasonable steps to make sure you know about it and about this policy. Introducers agree to tell their Customers about this policy when they enter Customer details on the Platform.

How we use and share it

We use and share Customer information only for these purposes (Authorised Purposes):

• helping your Introducer prepare your application and send it to one or more Lenders;
• letting each Lender you apply to assess your application and decide whether to lend;
• letting your finance broker give you advice, if they offer it;
• credit checks by credit reporters such as Centrix for the Lenders, bank statement checks through providers such as illion and CreditSense, and identity checks (including driver licence checks through Carjam);
• collecting bank statement data through a service such as Credit Sense, when you choose to share it;
• only if you opt in with a separate tick, insurance providers giving you information about, or quotes for, insurance linked to your finance. Your finance application does not depend on it;
• Platform users contacting you for more information about your application; and
• operating, securing and improving the Platform, and meeting our legal obligations.

We do not sell personal information. When Platform users share Customer information through the Platform, we handle it on their instructions. We do not access, use or share Customer information for our own purposes, including our own marketing, other than running, securing and improving the Platform and meeting our legal obligations.

Introducers’ and Lenders’ own obligations

Each dealership, finance broker, Lender and other Platform user is responsible for its own obligations under privacy law. This includes telling Customers how it collects, uses, shares and stores their information through the Platform, including information it gets from the Platform or from another Platform user. This policy does not cover how they handle your information themselves.

Applying to more than one lender

With your consent, your Introducer may send your application to more than one Lender so you can compare options. Each Lender you apply to receives your application and documents, and each may run its own credit check. Your Introducer will tell you which Lenders your application goes to. Several credit checks in a short time may affect your credit score.

Credit checks and credit reporting

When you agree, a Lender, or your finance broker if authorised, may ask a credit reporter for your credit information. The credit reporter may keep a record of the check and include it in credit reports it gives to other lenders. If your application goes to more than one Lender, more than one check may be recorded on your credit file. Credit reporters handle your information under the Credit Reporting Privacy Code 2020. You can ask a credit reporter for a free copy of your credit report and ask them to correct it.

Business contacts and marketing

We contact dealerships, finance brokers and lenders about the FinConnectX Platform. Our lead generation is handled using a client management system we share with Janssen Insurance Limited, a related but separate company. Janssen can see these business contact details and may also use them to contact you about its own products. Each company handles its own opt-outs, so opting out of one doesn’t opt you out of the other.

• Where we get it: public business sources, such as business websites, the NZ Companies Office and NZBN registers, and the Financial Service Providers Register, and from people who give us their details. We may check the Motor Vehicle Traders Register to confirm a dealer is registered. We do not collect home addresses.
• What we keep: business name, address and NZBN; people’s names and job titles; work email and phone as published; and where and when we got them.
• How we use it: to contact the business about the Platform, only where it is relevant to them.
• How long: We keep business contact details only for as long as we need them for this purpose. If you opt out, we keep only your email address and the date so we don’t contact you again.

The first marketing email we send you says where we got your details, with a link to this policy.

How to unsubscribe: every marketing email we send says who it is from and how to unsubscribe. You can reply to the email with “STOP”, email partners@finconnectx.nz, or use the unsubscribe link if the email has one (see our Unsubscribe page). We will stop within 5 working days. You can opt out this way for at least 30 days after we send each email.

Access and correction

You can ask for a copy of the personal information we hold about you, and ask us to correct it, by emailing partners@finconnectx.nz. We will respond within 20 working days. If we don’t agree to correct it, you can ask us to attach a statement of the correction you asked for. If your Introducer or a Lender holds your information, you can also ask them directly.

Storage, security and retention

We take reasonable steps to protect personal information from loss, misuse and unauthorised access, including access controls and encryption. We keep information only for as long as we need it for the Authorised Purposes or the law requires. When an application is complete and no longer needed on the Platform, we remove it and transfer it securely (encrypted) to the relevant Introducer. If a privacy breach is likely to cause serious harm, we will tell the people affected and the Privacy Commissioner as soon as practicable.

Service providers we use

We use these businesses to run the Platform. They only use personal information to provide their service to us.

• VPS City – hosts the Platform and its database in Auckland, New Zealand data centres. Server drives are encrypted at rest.
• Microsoft Azure Document Recognition – reads uploaded documents through a secure connection. Location: Australia (Australia East).
• Centrix – credit reports. A New Zealand credit reporter based in Auckland, regulated by the Privacy Act 2020 and the Credit Reporting Privacy Code. See the Centrix privacy statement.
• Carjam – driver licence checks. Location: New Zealand.
• CreditSense – bank statements. An Australian company (Brisbane). Its privacy policy says it does not disclose personal information to third parties outside Australia. See the CreditSense privacy policy.
• illion (part of Experian) – bank statements and credit reporting. Operates in Australia and New Zealand, and says it may use service providers and cloud services located outside Australia or New Zealand under security controls and contracts. See the illion privacy policy.
• Kudosity – text messages (SMS) we send about applications, such as document upload links. An Australian company. It says customer data, including message content, is stored and backed up in Sydney, Australia, and that its support staff in the Philippines may access it where needed to provide support. See the Kudosity data processing agreement.

International transfers

We store the Platform’s data in New Zealand. Some of our service providers process personal information in Australia: Microsoft Azure Document Recognition (Australia East region), CreditSense, illion and Kudosity (text messages). illion says it may also use service providers outside Australia and New Zealand, and Kudosity says its support staff in the Philippines may access message data where needed to provide support. We only send personal information overseas when one of the Privacy Act’s conditions is met, for example:

• the provider is only storing or processing it for us, and we stay responsible for it;
• the provider is subject to privacy laws with comparable safeguards to New Zealand’s, or has agreed to protect it in a comparable way; or
• you have agreed after we told you it may not be protected in a comparable way.

Questions and complaints

If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner: www.privacy.org.nz, 0800 803 909.