Privacy Policy
Last updated: May 2025 ASAP Finance Limited (ASAP, we, us or our) is committed to protecting your privacy and handling personal information in accordance with the Privacy Act 2020. This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit https://asapfinance.co.nz/, apply for or enquire about lending, deal with us through a broker or adviser, or otherwise use our products and services. By using our website, applying for finance, providing information to us, or authorising another person to provide information to us, you agree to the collection, use, storage and disclosure of your personal information as set out in this Privacy Policy.
- Personal information we collect
The personal information we collect depends on your relationship with us and the nature of the lending or service requested. It may include:
- your name, date of birth, address, email address, phone number and other contact details;
- identity information, including copies of your passport, driver licence, proof of address, photographs, signatures and other identification documents;
- information about your financial position, including income, assets, liabilities, expenses, bank account details, bank statements, source of funds, source of wealth, credit history and repayment history;
- information about properties, developments, projects, securities, guarantees, trusts, companies, shareholders, directors, trustees, beneficial owners and related parties;
- information about your loan application, loan, repayment arrangements, security position, insurance, default, recovery or enforcement matters, including mortgagee sale processes where applicable;
- information provided by brokers, advisers, referrers, valuers, quantity surveyors, lawyers, accountants, insurers, real estate agents, property managers, builders, contractors, councils, banks, credit reporters, government agencies, public registers or other third parties;
- information required for customer due diligence, anti-money laundering, countering financing of terrorism, sanctions, politically exposed person and fraud checks;
- information you provide when you contact us, submit forms, make enquiries, subscribe to updates, meet with us, call us, email us or otherwise communicate with us; and
- technical information about your use of our website, such as IP address, browser type, device information, pages visited, dates and times of visits, cookies and analytics information.
If you provide personal information about another person to us, you confirm that you are authorised to do so and that the person has been informed of the matters set out in this Privacy Policy.
- How we collect personal information
We usually collect personal information directly from you, including when you make an enquiry, apply for finance, complete forms, provide documents, use our website or communicate with us. We may also collect personal information from other sources where authorised by you, permitted by law, or reasonably necessary for our business. These sources may include:
- brokers, financial advisers, referrers and introducers;
- co-borrowers, guarantors, directors, shareholders, trustees, beneficial owners and authorised representatives;
- credit reporting agencies, identity verification providers, fraud prevention providers, AML/CFT screening providers and public registers;
- valuers, quantity surveyors, project monitors, builders, contractors, councils, engineers, insurers, real estate agents and property managers;
- banks, lawyers, accountants, receivers, liquidators, administrators, debt recovery providers and enforcement agents;
- government agencies, regulators, courts, tribunals and law enforcement agencies; and
- publicly available sources, including the Companies Office, Land Information New Zealand, court records, media reports, websites and other public databases.
Where we receive personal information about you from a broker, adviser, referrer, co-borrower, guarantor, authorised representative or other third party, we may rely on that person to have informed you that your information will be provided to us. We may also take reasonable steps ourselves to ensure you are aware that we have collected your information, why we collected it, who we may share it with, our contact details, any law that authorises or requires the collection, and your rights to access and request correction of your information.
- Why we collect and use personal information
We collect and use personal information for lawful purposes connected with our business, including to:
- assess, process, approve, decline, manage and administer loan enquiries and loan applications;
- provide lending, funding, loan management and related services;
- verify your identity and carry out customer due diligence, AML/CFT, sanctions, politically exposed person, credit, fraud and other risk checks;
- assess borrowers, guarantors, security, property projects, development progress, insurance, repayment capacity, loan-to-value position, cost-to-complete, exit strategy and overall credit risk;
- manage settlements, drawdowns, repayments, arrears, defaults, enforcement, recovery, refinancing, mortgagee sale, insurance, legal and security matters;
- communicate with you, your broker, adviser, guarantor, lawyer, accountant or authorised representative;
- share information internally and with our professional advisers, funders, service providers and business partners where reasonably necessary to operate and manage our business;
- maintain accurate business records and comply with audit, accounting, tax, reporting and governance requirements;
- comply with our legal and regulatory obligations, including under the Anti-Money Laundering and Countering Financing of Terrorism Act 2009, the Privacy Act 2020 and other applicable laws;
- protect our rights, property, security and legitimate business interests;
- improve our website, products, services, systems and customer experience;
- send service communications and, where permitted, information about our products, services or market updates that may be relevant to you; and
- carry out any other purpose authorised by you or permitted by law.
If you do not provide information we reasonably require, we may not be able to assess your application, provide finance, continue providing services, or meet our legal obligations.
- Use of AI and technology tools
We may use technology tools, including artificial intelligence tools, to help us operate our business more efficiently. This may include assisting with administration, drafting, summarising, analysis, workflow management, communications or internal business support. Where we use these tools, we will take reasonable steps to protect personal information. This may include limiting the personal information provided, using appropriate security settings, reviewing provider terms, and ensuring use is for legitimate business purposes and consistent with this Privacy Policy and the Privacy Act 2020. We will not use AI tools to make final lending decisions about you without appropriate human review. Where an AI or technology provider stores, accesses or processes personal information outside New Zealand, we will treat that as an overseas disclosure or storage arrangement and manage it in accordance with the Privacy Act 2020.
- Who we may share personal information with
We may disclose personal information where reasonably necessary for the purposes set out in this Privacy Policy, including to:
- our employees, contractors, officers and authorised representatives;
- brokers, advisers, referrers, co-borrowers, guarantors, authorised representatives and other parties involved in an application or loan;
- funders, banks, investors, lenders, assignees, prospective assignees, purchasers or other parties involved in funding, managing, transferring or enforcing a loan or security;
- lawyers, accountants, auditors, tax advisers, valuers, quantity surveyors, project monitors, engineers, builders, contractors, insurers, insurance brokers, real estate agents and property managers;
- credit reporting agencies, identity verification providers, AML/CFT providers, fraud prevention providers, debt collection agencies, receivers, liquidators, administrators and enforcement agents;
- IT, cloud storage, CRM, email, document management, website, analytics, cybersecurity and other service providers;
- regulators, government agencies, courts, tribunals, dispute resolution bodies, law enforcement agencies and other persons where required or permitted by law; and
- any other person authorised by you.
We may also share non-identifiable, aggregated or de-identified information for business, reporting, analytical or promotional purposes. We do not sell personal information.
- Credit reporting and checks
As part of assessing and managing lending, we may obtain information from, and disclose information to, credit reporting agencies. This may include information about your identity, credit history, repayment history, defaults, guarantees and other credit-related information. Credit reporters may hold that information and use it to provide credit reporting services to their customers, in accordance with their own privacy policies, the Credit Reporting Privacy Code 2020 and applicable law. The credit reporting agencies we use may change from time to time, and their details are available from us on request.
- Overseas disclosure and storage
We are based in New Zealand, but some of our service providers or the systems we use may store, access or process information outside New Zealand. Where personal information is disclosed overseas, we will take reasonable steps required by the Privacy Act 2020 to ensure that the information is protected by comparable safeguards, or that another lawful basis for the disclosure applies.
- Storage, security and retention
We may hold personal information physically and electronically, including through cloud-based systems. We take reasonable steps to protect personal information from loss, unauthorised access, use, modification, disclosure or other misuse. These steps may include physical, technical and organisational safeguards, access controls, secure systems and internal policies. No method of transmission or storage is completely secure. Any information you send to us over the internet is sent at your own risk. We keep personal information only for as long as it is reasonably required for the purposes for which it was collected, or as otherwise required or permitted by law. For example, AML/CFT laws may require us to keep certain records for at least five years. When information is no longer required, we will take reasonable steps to destroy it or de-identify it. If a privacy breach occurs that has caused, or is likely to cause, serious harm, we will notify affected individuals and the Privacy Commissioner where required by law.
- Website, cookies and analytics
When you visit our website, we may collect technical information about your device and use of the website. We may use cookies and similar technologies to operate the website, understand usage, improve performance, remember preferences and support marketing or analytics. You can usually disable cookies through your browser settings. However, some parts of the website may not work properly if cookies are disabled. Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites.
- Marketing communications
We may send you service communications and, where permitted by law, marketing or informational communications about ASAP Finance, our services or matters we think may be relevant to you. We will send commercial electronic messages only where permitted by law. Any commercial electronic message will identify ASAP Finance as the sender and include a functional unsubscribe facility where required. You can unsubscribe from marketing emails by using the unsubscribe function in the email or by contacting us. We may still send you important service, legal or transactional communications.
- Accessing and correcting your personal information
You have the right to request access to, and correction of, personal information we hold about you, subject to the Privacy Act 2020. If you believe the information we hold about you is incorrect, incomplete, out of date or misleading, please contact us. We may ask you to verify your identity before responding to a request.
- Complaints
If you have a question or complaint about how we handle personal information, please contact us first so we can try to resolve it. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner at privacy.org.nz.
- Contact us
For privacy questions, access or correction requests, complaints, or to update your details, please contact us.
- Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The current version will be posted on our website and will apply from the date it is published.