Privacy Policy

Introduction

llama & co ("we," "us," or "our") complies with the New Zealand Privacy Act 2020 ("the Act") when dealing with personal information. Personal information is information about an identifiable individual (a natural person). This policy outlines how we collect, use, disclose, and protect your personal information.

This policy does not limit or exclude any of your rights under the Act. For further information on the Act, you can contact our Privacy Officer by email at ro@llamaandco.nz or visit www.privacy.org.nz.

Changes to this policy

We may update this policy by uploading a revised version onto our website. The changes will apply from the date the revised policy is uploaded.

What is personal information?

Personal information includes, but is not limited to: your name, address, contact details, date of birth, occupation, payment details, employment history and/or details, education and qualifications, financial information, testimonials and feedback, evidence of source of funds or source of wealth (where applicable), and other relevant information.

How we use your personal information

We may use your personal information to:

• Verify your identity;

• Provide services and products to you;

• Market our services and products to you, including contacting you electronically (e.g. phone, text, or email);

• Improve our services and products;

• Respond to communications from you, including complaints;

• Protect and enforce our legal rights and interests, including defending any claims;

• Comply with legal obligations; and

• Fulfill any other purpose authorised by you or the Act.

Disclosing your personal information

We may disclose your personal information to:

• Service providers who assist us in delivering our services (e.g. mailing houses, hosting and data storage providers, consultants, and legal advisers);

• Product providers (such as lenders and insurance companies);

• Financial advisers or financial advice providers who utilise our services;

• Organisations conducting compliance checks, reviews, or audits as required by law;

• Agencies that verify identity, such as the New Zealand Department of Internal Affairs and New Zealand Transport Agency;

• Social media platforms where we maintain a presence;

• Courts, tribunals, and regulatory authorities (e.g. Financial Markets Authority, Ministry of Justice);

• The Office of the Ombudsman, where relevant to official information complaints;

• Any person or agency assisting in responding to serious privacy breaches;

• The Office of the New Zealand Privacy Commissioner for privacy-related complaints;

• The Human Rights Commission for discrimination-related complaints;

• CERT NZ where applicable to assist with privacy breach management;

• Overseas privacy regulators in relation to overseas agencies; and

• Any other party authorised by you.

Except as described above, we will not disclose your personal information without your consent unless required to do so by law.

Protecting your personal information

We take reasonable steps to protect your personal information from loss, unauthorised access, or misuse. Our systems undergo regular audits to ensure ongoing security. All data is encrypted in transit and storage, and accessible only through secure connections.

Storing your personal information

We retain personal information only as long as necessary for lawful purposes. Data stored online is backed up and recoverable in the event of loss or corruption. In some cases, data may be held securely onsite at our office if provided outside our online systems.

Accessing and correcting your personal information

You have the right to access and request correction of your personal information, subject to certain exceptions under the Act. Before processing your request, we may require verification of your identity.

If a correction request is reasonable and feasible, we will update your information. If not, we will make a note on your file that a correction was requested.

To make a request, please email ro@llamaandco.nz with your identification details and the information you wish to access or correct.

Data Breaches

Our Privacy Officer maintains procedures to address any data breaches. In the event of a breach, we will promptly assess, report, and manage the situation in accordance with legal requirements.

Internet use

We take reasonable steps to secure internet communications. However, if you share personal information online, you do so at your own risk.

External websites linked from our website may have their own privacy policies. We recommend reviewing these before sharing personal information.

We use cookies (small text files stored on your device) to monitor site usage. You may disable cookies in your browser settings, although some site features may be affected.

We may also monitor use of our website and IT systems to prevent unauthorised access or attacks. Third-party service providers may have access to monitoring and logging information to support these activities.