At Sherpa Ltd, we are committed to protecting your privacy in accordance with the Privacy Act 1993 (Privacy Act) and the Privacy Principles (PPs).
The Privacy Act defines personal information to mean: “Information about an identifiable individual; and includes information relating to a death that is maintained by the Registrar-General pursuant to the Births, Deaths, Marriages, and Relationships Registration Act 1995, or any former Act (as defined by the Births, Deaths, Marriages, and Relationships Registration Act 1995)”
Sensitive information is a subset of personal information and means:
Information or opinion about an individual’s racial or ethnic origin, political opinions, membership of a political organisation, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual orientation or practices, criminal record, health information about an individual, genetic information, biometric information or templates.
What kinds of personal information do we collect and hold? The kinds of personal information we collect and hold vary depending on the services our Brokers are providing, but generally can include:
The type of sensitive information we may collect generally includes:
We only collect personal information by lawful and fair means and where it is reasonably necessary for, or directly related to, one or more of our functions or activities.
If we collect details about you from someone else, we will, take reasonable steps to make you aware of the collection in accordance with the PPs.
We may obtain personal information indirectly and who it is from can depend on the circumstances. We will usually obtain it from another insured if they arrange a policy which also covers you, related bodies corporate, referrals, your previous insurers or insurance intermediaries, witnesses in relation to claims, health care workers, publicly available sources, premium funders and persons who we enter into business alliances with.
We attempt to limit the collection and use of sensitive information from you unless we are required to do so in order to carry out the services provided to you. However, we do not collect sensitive information without your consent.
We hold the personal information we collect within our own data storage devices or with a third party provider of data storage. We discuss the security of your personal information below.
We collect, hold, use and disclose your personal information where it is reasonably necessary for, or directly related to, one or more of our functions or activities. These will usually include our insurance broking services, insurance intermediary services, funding services, claims management services and risk management and other consulting services and to meet any obligations we have at law. We also use it for direct marketing purposes explained in more detail below.
For example, we usually need to collect, hold, use and disclose personal information where:
We do not use or disclose personal information for any purpose that is unrelated to our services and that you would not reasonably expect (except with your consent). We will only use your personal information for the primary purposes for which it was collected or as consented to.
We usually disclose personal information to third parties who assist us or are involved in the provision of our services and your personal information is disclosed to them only in connection with the services we provide to you or with your consent.
The third parties can include our related companies, our agents or contractors, insurers, their agents and others they rely on to provide their services and products (e.g. reinsurers), premium funders, other insurance intermediaries, insurance reference bureaus, loss adjusters or assessors, medical service providers, credit agencies, lawyers and accountants, prospective purchasers of our business and our alliance and other business partners.
We also use personal information to develop, identify and offer products and services that may interest you, conduct market or customer satisfaction research. From time to time we may seek to develop arrangements with other organisations that may be of benefit to you in relation to promotion, administration and use of our respective products and services.
We do not use sensitive information to send you direct marketing communications without your express consent.
If we do propose to disclose or use your personal information other than for the purposes listed above, we will first seek your consent prior to such disclosure or use. If we give third parties (including their agents, employees and contractors) your personal information, we require them to only use it for the purposes we agreed to.
If the required personal information is not provided, we or any involved third parties may not be able to provide appropriate services or products. If you do not provide the required personal information we will explain what the impact will be.
If we give you personal information, you must only use it for the purposes we agreed to. Unless an exemption applies or we agree otherwise, you must meet the requirements of the Privacy Act, when collecting, using, disclosing and handling personal information on our behalf.
You must also ensure that your agents, employees and contractors meet the above requirements.
We take reasonable steps to ensure that your personal information is safe. We retain personal information in hard copy records and electronically with us or our appointed data storage provider(s). You will appreciate, however, that we cannot guarantee the security of all transmissions of personal information, especially where the internet is involved. Notwithstanding the above, we endeavor to take all reasonable steps to:
We take reasonable steps to ensure that Personal Information is current, accurate, up- to-date and complete whenever we collect or use or disclose it. Throughout our dealings with you we will take reasonable steps to confirm the details of your personal information we hold and ask you if there are any changes required. The accuracy of personal information depends largely on the information you provide to us, so we rely on you to:
Access to and correction of your personal information Under the Privacy Act 1993, you have the right to access and correct your Personal Information.
In accordance with the Privacy Act 1993 Sherpa Ltd and our Member Brokers will:
Sherpa ltdt and our Member Brokers aim is to have accurate and up-to-date information. When you receive policy schedules, renewal notices or other documents from your Broker, you should contact your Broker if you consider the information is not correct. Where reasonably possible and appropriate, your Broker will correct the information on Sherpa Ltd’s systems or held on their file, or note your request to correct the information on our systems or files.
If you have a complaint or want more information about how Sherpa Ltd are managing your Personal Information, please contact the Privacy Officer of your Member Broker. For security reasons, any request for details of Personal Information held by Sherpa Ltd must be made in writing.
If you wish to access your personal information, please contact your broker or write to Privacy Officer, Sherpa Ltd, Level 1, Awly Building, 293 Durham Street North, Christchurch Central 8013 or email firstname.lastname@example.org. In most cases we do not charge for receiving a request for access to personal information or for complying with a correction request.
Any personal information provided to Sherpa Ltd or your Broker may be transferred to, and stored at, a destination outside New Zealand, including but not limited to New Zealand, Australia, United Kingdom and the United States of America. Details of the countries we disclose to may change from time to time. Personal information may also be processed by staff or by other third parties operating outside New Zealand who work for us or for one of our suppliers, agents, partners or related companies.
When we send information overseas, in some cases we may not be able to take reasonable steps to ensure that overseas providers do not breach the Privacy Act and they may not be subject to the same level of protection or obligations that are offered by the Act. By proceeding to acquire our services and products you agree that you cannot seek redress under the Act or against us (to the extent permitted by law) and may not be able to seek redress overseas. If you do not agree to the transfer of your personal information outside New Zealand, please contact us.
In the future we may consider the sale or restructure of our business or the purchase of the business of other Insurance Brokers or financial advisers. In such circumstances, it may be necessary for your personal information to be disclosed to permit the parties to assess the sale or restructure proposal for example through a due diligence process. We will only disclose such of your personal information as is necessary for the assessment of any sale or restructure proposal and subject to appropriate procedures to maintain the confidentiality and security of your personal information. In the event that a sale or restructure proceeds, we will advise you accordingly.
We may use your personal information, including any email address you give to us, to provide you with information and to tell you about our products, services or events or any other direct marketing activity (including third party products, services and events which we consider may be of interest to you). Without the limitation just described, if it is within your reasonable expectations that we send you direct marketing communications given the transaction or communication you have had with us, then we may also use your personal information for the purpose of sending you direct marketing communications which we may consider may be of interest to you. We may request our related parties to contact you about services and products that may be of interest to you.
You are able to visit our website without providing any personal information. We will only collect personal information through our websites with your prior knowledge for example where you submit an enquiry or application online. Email addresses are only collected if you send us a message and will not be automatically added to a mailing list.