@realty New Zealand Privacy Policy

OVERVIEW

Your privacy is important to us. This policy describes how we collect, use, disclose, and protect your personal information when you engage with us. We follow the New Zealand Privacy Act 2020 and ensure transparency in our privacy practices.

SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to users of our digital platforms, including our website and social media channels (refer to Appendix A). It explains how we comply with the Privacy Act 2020 regarding the handling of personal information.

Personal information includes data about an identifiable individual. This may include your name, address, telephone number, email address, and profession or occupation. If the information we collect personally identifies you, or you are reasonably identifiable from it, the information will be considered personal information.

AGREEMENT TO POLICY TERMS

By contacting us through our website, digital platforms, or social media, you agree to this Privacy Policy. If you prefer not to agree, please reach us by email at compliance@realty.co.nz or phone at 0800 299 377 (Business & Compliance Officer) instead.

1. What Personal Information Do We Collect and Hold?

We may collect your name, mailing or street address, email address, telephone number, facsimile number, age or birth date, profession, occupation or job title and any additional information relating to you that you provide to us directly through our websites or indirectly through use of our websites or online presence, through our representatives or otherwise. This includes information you provide to us through our service centre, customer surveys, or visits by our representatives.

Types of personal information may include:

• Name

• Contact details

• Service details and inquiries

• Preferences (e.g., property price range)

Sensitive Information – We do not typically collect "sensitive information" (such as health information, racial or ethnic origin, or criminal records) unless it is reasonably necessary for our business functions and you have provided explicit consent or, where required, by law.

2. How Do We Collect Your Personal Information?

We collect your personal information directly from you unless it is unreasonable or impracticable to do so. We collect only what is necessary, typically directly from you via:

• Your access and use of our website

• Phone or video calls (e.g., Microsoft Teams, Zoom)

• Telephone, letter, fax, or email

• Our website or social media interactions, including chatbots

• Conversations between you and our representatives

• Contracting with us or entering competitions and promotions

• Completing surveys or providing feedback

• Emails, letters, or marketing activities

In some cases, we may also collect data from publicly available sources or from your professional advisers (lawyers/accountants/financial advisors) with your consent, credit reporting agencies, law enforcement, government entities, or any other organisations where you have given your consent.

3. Cookies and Analytics

In some cases we may also collect your personal information through the use of cookies. When you access our website, we may send a "cookie" (which is a small summary file containing a unique ID number) to your computer. This enables us to recognise your computer and greet you each time you visit our website without bothering you with a request to register. It also enables us to keep track of products or services you view so that, if you consent, we can send you news about those products or services.

When you visit our website or social media pages, we may collect information using cookies, such as:

• Visit date and time

• Pages viewed

• Navigation details

• Device and browser type

• IP address

This data helps us understand your experience and improve our digital services. Cookies are secure and do not access personal information on your device. We use this to research our users' habits so that we can improve our online products and services.

4. What Happens If We Can't Collect Your Personal Information?

If you do not provide the information described above, we may not be able to:

• Provide the requested products or services to you

• Provide information about products and services you may want

• Tailor the content of our website to your preferences

5. Purposes of Collection, Holding, Use and Disclosure

We collect, hold, use and disclose your personal information for the following purposes:

• To provide products and services to you and to send communications requested by you

• To verify eligibility for our services

• To answer enquiries and provide information or advice about existing and new products or services

• To respond to inquiries

• To provide information on our services

• To provide you with access to protected areas of our website

• To assess the performance of the website and to improve the operation of the website

• To conduct business processing functions including providing personal information to our related bodies corporate, contractors, service providers or other third parties

• For the administrative, marketing (including direct marketing), planning, product or service development, quality control, survey and research purposes of @realty, its related bodies corporate, contractors, or service providers

• To provide your updated personal information to our related bodies corporate, contractors or service providers

• To update our records and keep your contact details up to date

• To process and respond to any complaint made by you

• To comply with any law, rule, regulation, lawful and binding determination, decision or direction of a regulator, or in co-operation with any governmental authority of any country (or political sub-division of a country)

• Where legally required, we may also disclose personal information to regulatory authorities

Your personal information will not be shared, sold, rented or disclosed other than as described in this Privacy Policy.

6. To Whom May We Disclose Your Information?

We may disclose your personal information to:

• Our employees, related bodies corporate, contractors, and associated real estate agents

• Service providers (web hosting, IT, mailing houses, payment processors, debt collectors and professional advisors)

• Outsourced service providers (e.g., auditors)

• Suppliers and third parties with whom we have commercial relationships for marketing purposes

• External dispute resolution services

• Regulatory bodies

• Any organisation where you have provided express consent

We may combine or share any information that we collect from you with information collected by any of our related bodies corporate (within New Zealand).

We will not share personal information with third parties without your consent unless necessary for our services or required by law.

7. Marketing and Direct Marketing

We may send you direct marketing communications and information about our products and services that we consider may be of interest to you. These communications may be sent in various forms, including mail, SMS, and email.

We collect and use personal information for tailored services, marketing, and site improvement. We may use your information to:

• Send newsletters

• Respond to inquiries

• Improve website experiences

• Provide relevant marketing content

Specific details may be collected through:

• Website interactions

• Social media (e.g., Facebook, LinkedIn)

You may opt-out at any time by contacting our Business & Compliance Officer or using the opt-out facilities provided in the marketing communications. You can unsubscribe from receiving marketing communications at any time.

8. Service Providers

We use third party service providers to store and process some of the information we collect. We use AML Hub cloud servers located in New Zealand. We ensure that our cloud-based service providers are subject to appropriate security and information handling arrangements and that the information stored or processed by them remains subject to confidentiality obligations.

9. Overseas Disclosure

We may disclose personal information to recipients located outside of New Zealand for data hosting, IT support, and development services. Countries may include but are not limited to:

• Singapore (access to CRM for software changes)

• The Philippines (Administrative support)

• Ukraine & Portugal (Developers)

We will only transfer your personal information to an overseas recipient if we are satisfied that they are subject to privacy laws that provide comparable safeguards to the New Zealand Privacy Act 2020 or if we have entered into a binding contractual agreement that requires them to protect your information to those same New Zealand standards. If these comparable safeguards are not in place, we will only transfer your data overseas with your explicit, informed consent.

10. How Can You Access and Correct Your Personal Information?

You may request access to or correction of your information by contacting us at:

PH: 0800 299 377
Email: compliance@realty.co.nz

Where we hold information that you are entitled to access, we will try to provide you with suitable means of accessing it (for example, by mailing or emailing it to you). We may charge a reasonable fee for information access requests to cover our administrative costs.

There may be instances where we cannot grant you access to the personal information we hold. For example, we may need to refuse access if granting access would interfere with the privacy of others or if it would result in a breach of confidentiality. If that happens, we will give you written reasons for any refusal.

If you believe that personal information we hold about you is incorrect, incomplete or inaccurate, then you may request us to amend it. We will consider if the information requires amendment. If we do not agree that there are grounds for amendment then we will add a note to the personal information stating that you disagree with it.

In some cases, we may deny access or deletion, but we will provide a reason.

11. Storage and Security

We hold your personal information in both hard copy and electronic forms. We take all reasonable steps to protect your personal information from misuse, interference and loss, as well as unauthorised access, modification or disclosure and we maintain physical, electronic and procedural safeguards to protect your personal information.

We use a variety of measures to keep your information safe, including:

• Access control and security protocols

• Employee confidentiality and training

• Data retention policies

Some information is stored electronically, either on secure drives or cloud services.

However, as our website is linked to the internet, and the internet is inherently insecure, we cannot provide any assurance regarding the security of transmission of information you communicate to us online. We also cannot guarantee that the information you supply will not be intercepted while being transmitted over the internet. Accordingly, any personal information or other information which you transmit to us online is transmitted at your own risk.

Data Retention and Notification

We will only retain your personal information for as long as it is reasonably necessary for the purposes for which it was collected or as required by law. Once your personal information is no longer needed for these purposes, we will take reasonable steps to securely destroy or permanently de-identify the information.

Privacy Breaches

We take the security of your data seriously. In the unlikely event of a privacy breach that it is reasonable to believe has caused serious harm, or is likely to cause serious harm, to any individual whose personal information we hold, we will notify the affected individuals and the Office of the Privacy Commissioner as required by the Privacy Act 2020.

12. External Websites and Social Media

Our website may contain links to other websites operated by third parties. We make no representations or warranties in relation to the privacy practices of any third party website and we are not responsible for the privacy policies or the content of any third party website. Third party websites are responsible for informing you about their own privacy practices. Our website may link to third-party websites with their own privacy practices. We are not responsible for their content or privacy policies.

13. Complaints and Disputes

If you believe your privacy has been breached, please contact our Business and Compliance Officer. We will investigate your complaint and respond within a reasonable timeframe.

If you are not satisfied with our response, you have the right to lodge a complaint with the Privacy Commissioner. If you're dissatisfied with our response, you may contact the Privacy Commissioner at:

Web: http://www.privacy.org.nz
Phone: 0800 803 909

14. Contacting Us

If you have questions about this policy or wish to lodge a complaint, please contact:

Business & Compliance Officer
Email: compliance@realty.co.nz
Phone: 0800 299 377

General Email: compliance@realty.co.nz
Website: https://atrealty.co.nz 

Company Details:
Licensed Under the REAA 2008
NZBN: 942 904 746 608 50

15. Changes to Our Privacy Policy

We may change this privacy policy from time to time. We regularly review and update this policy. Significant changes will be posted on our website at https://atrealty.co.nz . Any updated versions will be available on our website.

Created: 16.02.2026

Updated: 25.02.2026