Privacy Policy.

1. Information we collect

You can browse Find My Fund without an account: rankings, provider and fund pages, Fund check, the calculators and Learn. We collect only what you give us, plus usage statistics if you accept them or arrive from one of our ads.

• Starting your advice. Your first name, last name, email and mobile create your account. You confirm your email with a code we send, or by signing in with Google, Facebook or Apple.
• Signing in. Everyone with an account signs in with their email and a password or an emailed code, or with Google, Facebook or Apple. Passwords are hashed, so nobody can read them, including us.
• How you found us. If you came through a link someone shared, we note it with your advice.
• Messages. Your name, email and message, when you contact us.
• Your advice. What you tell us during Digital KiwiSaver Advice, covered by its own privacy statement (section 5).
• Usage statistics. Pages visited and features used, through Google Analytics, if you accept or arrive from one of our ads.
• Our ads. If you accept, or you arrive from one of our ads, Meta and Google can see that you visited the site and whether you started your advice, so we can tell which of our ads work.

2. Where we collect it from

We collect personal information from you directly wherever we can.

When we move you to a new provider, they tell us when your account is open and your money has arrived.

If you give us information about someone else, please make sure they know you are giving it to us and what it is for.

3. How we use your information

We use your information to set up and sign in to your account, respond to your enquiries, provide Digital KiwiSaver Advice and keep the records the law requires, note how you found us, improve the website from aggregated usage patterns, carry out anonymised research and statistics, and protect our legal rights.

We do not sell or rent your personal information, and we do not share it with third parties for their marketing.

4. Who we share it with

• Supabase, which holds accounts, sign-in and advice records.
• Netlify, which hosts the website.
• Our email provider, which sends your sign-in codes.
• Cloudflare Turnstile, which checks that our sign-up and sign-in forms are used by a person. It receives your IP address and browser details.
• Google Analytics, if you accept or arrive from one of our ads, and only on findmyfund.co.nz.
• Meta (Facebook and Instagram) and Google Ads, if you accept or arrive from one of our ads, and only on findmyfund.co.nz. They receive your IP address, browser details and the pages you visit, and handle them under their own privacy policies.
• KiwiSaver providers, where you have asked us to advise on or switch your fund.
• Anyone who can require it by law, such as a regulator or a law enforcement agency.
• Anyone else you authorise.

Some of these businesses are outside New Zealand, so your information may be held and processed overseas. Where that happens, we make sure the recipient is required to protect it to a standard comparable with the Privacy Act 2020. The businesses that handle your information for us may use it only as we instruct.

5. Digital KiwiSaver Advice

Digital KiwiSaver Advice has its own privacy statement, a separate document under the Privacy Act 2020. It sets out what we collect during the advice, where it is held, who else can see it and how long we keep it. It is kept in your account alongside your advice.

This policy covers the website. That statement covers the advice.

6. Storing and protecting your information

Your data is stored securely with industry-standard encryption through Supabase, hosted in Australia. Passwords are hashed and never stored as plain text. We take reasonable technical and organisational steps to protect your information from loss, misuse and unauthorised access.

If a privacy breach happens that is likely to cause you serious harm, we will tell you and the Office of the Privacy Commissioner, as the Privacy Act 2020 requires.

We keep your personal information only for as long as we need it for the purpose we collected it. Some information has to be kept longer, because financial advice records carry retention periods set by law.

7. Cookies and browser storage

Google Analytics, Google Ads and the Meta Pixel are the only things on the site that set cookies. They load if you choose Accept All or arrive from one of our ads, and only on findmyfund.co.nz. Choose Essential Only and they stop, and their cookies are removed.

Your sign-in and your cookie choice are kept in your browser's own storage, on your device, not in cookies.

Change your mind any time with Cookie settings, at the foot of every page and in the menu. Choosing Essential Only after accepting stops them and deletes their cookies.

8. Email and text messages

We follow the Unsolicited Electronic Messages Act 2007.

If you use Digital KiwiSaver Advice, we will email you about your advice and your KiwiSaver: your recommendation, a fresh look whenever you ask, and help along the way. Those emails are part of the service.

If we send you marketing, every message carries an unsubscribe link, and you can unsubscribe at any time by emailing hello@findmyfund.co.nz. We will action it as soon as we reasonably can. Unsubscribing from marketing does not stop the emails we need to send you about your own advice.

9. Your rights

Under the Privacy Act 2020 you can ask to see the personal information we hold about you, and ask us to correct it. You can also ask us to delete your account. We delete what we can, and keep advice records only as long as the law requires.

Email hello@findmyfund.co.nz with enough detail for us to find the information and confirm who you are. We will reply as soon as we reasonably can, and within 20 working days. If we cannot give you what you have asked for, we will tell you why.

Our Privacy Officer can be reached at the same address. If you are not happy with how we have handled your information, please tell us first. You can also raise it with the Office of the Privacy Commissioner at privacy.org.nz or 0800 803 909.

10. Other websites

Find My Fund links out to other websites, including the businesses on our Feijoa and Mindful Money pages. Those sites have their own privacy policies, and we suggest you read them before giving them any personal information.

11. Changes to this policy

We may update this policy by publishing a new version here. The change applies from the day we publish it. The date at the top tells you when we last changed it.