Privacy Policy

Introduction

IndigiShare (“we,” “us,” or “our”) is committed to protecting the privacy of our website visitors, users, investors, entrepreneurs, and applicants across all IndigiShare platforms and services. We adhere to the New Zealand Privacy Act 2020, which governs how we collect, use, store, and disclose your personal information.

This Privacy Policy explains what information we collect, how we use it, who we may share it with, and the rights you have regarding your personal data.

This privacy policy was last updated: 8 December 2025.

Information We Collect

  1. Personal Information: We may collect personal information when you voluntarily provide it or when it is required for accessing our services. This may include:
    1. Name, date of birth, address, and contact details
    2. Email address, phone number, and postal address
    3. Business details and financial information provided in loan, investment, or funding applications
    4. Identity verification documents (e.g., driver’s licence, passport)
    5. Information submitted through forms on our website, including contact forms, investor portal sign-ups, Te Whare Manaaki pakihi loan applications, and related borrower/investor onboarding processes
  2. Automatically Collected Information: When you interact with our website or digital platforms, we may automatically collect:
    1. IP address, browser type, device information
    2. Usage data, browsing activity, and pages visited
    3. Cookies, analytics data, and similar tracking technologies

This information helps us improve site performance and user experience.

How We Use Your Information

We use the information we collect for the following purposes:

  • Providing and improving our website, digital platforms, and services
  • Facilitating our peer-to-peer lending services, including onboarding you as:
    • an investor
    • a business borrower
    • a director, shareholder, or guarantor associated with a borrower
  • Evaluating and processing Te Whare Manaaki pakihi loan and investor applications
  • Verifying your identity and meeting compliance obligations (including anti-money laundering and countering financing of terrorism requirements, if applicable)
  • Communicating with you regarding enquiries, applications, transactions, or account-related information
  • Sending newsletters, updates, and promotional content (only if you have opted in)
  • Analysing website usage to enhance functionality and user experience
  • Improving our services, systems, and customer support

AML/CFT Compliance

Because IndigiShare provides lending and investment-related services, we may be required by law to collect additional personal information for AML/CFT compliance. This may include:

  • Identity verification
  • Proof of address
  • Source of funds and source of wealth information
  • Other documentation required by the Anti-Money Laundering and Countering Financing of Terrorism Act 2009

Failure to provide the information required for AML/CFT checks may affect your ability to use IndigiShare services.

Disclosure of Your Information

We may share your personal information only in the following circumstances:

  • With your explicit consent
  • With trusted third-party service providers who support our operations (e.g., IT service providers, identity verification services, analytics providers)
  • To comply with legal, regulatory, or government requirements (including NZ Privacy Act 2020 obligations)
  • To meet compliance checks required for lending and investment activities
  • To protect our rights, safety, property, or that of our users or the public
  • In connection with business transactions such as mergers, acquisitions, or asset transfers

We do not sell or trade your personal information.

Māori Data Sovereignty

IndigiShare acknowledges Māori rights and interests in data and commits to:

  • Storing and handling data in ways that respect tikanga and kaupapa Māori
  • Ensuring that data relating to Māori individuals, whānau, and Māori-led businesses is managed with integrity and transparency
  • Prioritising data protection practices that uphold mana, autonomy, and cultural safety
  • Supporting principles aligned with Te Mana Raraunga and Māori data governance values

Where possible, we aim to ensure that data practices reflect the aspirations of the communities we work with.

Data Storage & International Transfers

Your personal information may be stored in secure locations within New Zealand or in trusted third-party cloud services hosted overseas (for example, AWS, Google Cloud, or Microsoft services).

Where information is stored offshore, we ensure:

  • Appropriate safeguards are in place
  • Service providers meet privacy and data protection standards consistent with the New Zealand Privacy Act 2020
  • Your information is only used for purposes outlined in this policy

Your Choices

Under the New Zealand Privacy Act 2020, you have the right to:

  • Access the personal information we hold about you
  • Request corrections to any inaccurate or incomplete information
  • Request deletion of your information (subject to legal and operational requirements)
  • Opt out of marketing communications at any time
  • Raise concerns or complaints about how your information is handled

We will respond to requests within a reasonable timeframe.

Security

We take reasonable technical, administrative, and organisational measures to protect your information from unauthorised access, alteration, disclosure, or loss.

Despite our efforts, no method of online transmission or storage is completely secure. We encourage you to take appropriate precautions when sharing personal information online.

Retention of information

We retain personal information only as long as necessary to:

  • Provide services or manage your relationship with us
  • Comply with legal and regulatory requirements
  • Resolve disputes and maintain appropriate business records

Information related to Te Whare Manaaki applications and investor onboarding may be subject to specific retention periods required under financial services legislation.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Improve website performance
  • Analyse traffic and user behaviour
  • Provide a personalised user experience

You may adjust your browser settings to refuse cookies, though some website features may not function fully.

Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices or content of third-party websites and encourage you to review their privacy policies separately.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or operational practices. Any material updates will be posted on our website with an updated revision date.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal information, please contact us at: info@indigishare.co.nz.