Privacy Policy

Last updated: 28 August 2026

1. Who we are

This policy explains how New Zealand Finance & Accounting Limited (NZFA, we, us or our) handles personal information in connection with our website and accounting, taxation, payroll and business advisory services. We are subject to the Privacy Act 2020, as amended.

Our NZBN is 9429033172897. Our address is 2a/96 New North Road, Eden Terrace, Auckland 1021, New Zealand.

For a separate finance, digital marketing or other engagement, the relevant information requirements, purposes and recipients must be explained for that service. Any service-specific notice supplements this policy. A separate organisation involved in a service may also have its own privacy notice. An accounting bank connection does not authorise use of information for those separate services.

2. Information we collect

Depending on the work you engage us to perform, relevant information may include:

• Your name, contact details and information needed to identify you or your business.
• Accounting and tax records, invoices, receipts, bank account details and transactions.
• Business ownership, employment and payroll information where relevant to the engagement.
• Instructions, correspondence and documents you provide to us.
• Technical information associated with website use, such as browser information, IP addresses and website activity.

The information required depends on the service. We seek information that is reasonably necessary for an identified purpose, rather than collecting information simply because it is available.

3. How we obtain information

We obtain information from you and, where authorised or otherwise permitted by law, from other sources. These may include your representatives, accounting systems, financial institutions, Inland Revenue and service providers involved in the agreed work.

Where personal information is collected indirectly, we take reasonable steps to explain the collection, purpose, intended recipients, the organisations collecting and holding the information, and the individual's access and correction rights, unless a lawful exception applies.

If you provide information about another person, please ensure you are entitled to provide it and have given any required notices or obtained any required authority. This does not remove NZFA's own privacy obligations.

You may choose not to supply information, but this may prevent or delay work that depends on it. We can discuss alternative ways to provide the records we need.

4. Why we use information

We use relevant information to:

• Respond to enquiries and communicate about our work.
• Deliver the accounting, bookkeeping, reconciliation, tax, payroll or advisory services agreed with you.
• Prepare and review records, returns and reports within the engagement.
• Administer our client relationship, including instructions, billing and support.
• Meet applicable legal and professional obligations.
• Protect information and systems, and investigate errors, misuse or security concerns.

Any use for a different purpose must be permitted by law. Where additional notification or authorisation is required, it must be provided or obtained before that use.

5. Who may receive information

Relevant information may be made available to authorised NZFA personnel and, where necessary and lawful, to:

• Software, hosting, IT and other providers supporting the agreed services.
• Inland Revenue, regulators and other authorities.
• Professional advisers or representatives involved in the work.
• Other parties you authorise us to deal with.

We do not sell or rent your personal information.

Where a provider stores or processes information solely on our behalf, NZFA remains responsible for that information under applicable privacy law. We require appropriate protections for the work entrusted to that provider.

An organisation that also uses information for its own purposes may have separate obligations and its own privacy notice. This does not remove NZFA's responsibilities. Information obtained through Akahu is also subject to the permissions and contractual arrangements applicable to that connection.

6. Bank account connections through Akahu — planned service

NZFA is preparing an optional, read-only bank account connection service using Akahu Technologies Limited. The service is not currently open for general use. This section explains the intended arrangements; final connection instructions and relevant processing details will be provided before any client connection is activated.

The proposed service is intended to reduce manual statement collection and support your agreed bookkeeping, bank reconciliation, tax preparation and financial reporting.

For accounts you choose to share, the requested information will include account details, balances, incoming and outgoing transactions, and available transaction descriptions and enrichment. We intend to request up to 365 days of history where supported, followed by ongoing updates, normally daily. Coverage and update timing vary, and delays or gaps may occur.

Access will be read-only. It will not authorise NZFA to make payments or transfer money. An accounting engagement alone does not grant bank access: you must separately approve the accounts and permissions through the connection process.

The connection will not authorise NZFA to use bank data for unrelated marketing, lending decisions or training general-purpose AI models. Any proposed change in purpose or recipients will require a separate assessment and any necessary notice, authorisation and contractual approval.

Akahu handles information under its own Privacy Notice — Ongoing Consent and End User Terms. These explain Akahu's processing, storage and consent-management arrangements. They should be read alongside this policy.

7. Storage and overseas processing

Information may be held in NZFA's records and in systems operated by service providers. Depending on the service, storage, processing or support access may take place in New Zealand or overseas.

Before using a provider, we must assess the relevant privacy arrangements. Where overseas disclosure rules apply, an appropriate basis for that disclosure is required; publishing this policy does not itself amount to blanket consent to any overseas transfer.

Akahu's ongoing-consent privacy notice currently identifies Australian-based Amazon Web Services data centres for Akahu's storage. NZFA's own storage arrangements are separate. We will explain the arrangements relevant to NZFA's bank connection service before activating a client connection.

Please contact us if you would like information about the providers or processing arrangements relevant to your engagement.

8. Protecting information

We are responsible for taking reasonable safeguards against loss, misuse and unauthorised access, alteration or disclosure. Access should be limited to people who need information for authorised work.

No website, communication method or storage system is risk-free. Please contact us promptly if you suspect a privacy or security issue. We will assess incidents and make any notifications required by law.

Do not email us banking passwords, security answers or one-time bank authentication codes.

9. Retention, disconnection and deletion

We retain information for as long as there is a lawful purpose for doing so. Relevant accounting and tax records may need to be retained to meet record-keeping obligations. Different rules may apply to temporary copies, technical logs and access credentials.

You may ask us to delete information that is no longer required. We will assess the request and explain if any information must be retained and why. There is no unconditional promise to erase all records immediately on request.

For the planned bank connection service, ending access will stop further collection through that connection. It will not automatically delete information already lawfully obtained or terminate your accounting engagement. Once enabled, the service will provide instructions for managing and withdrawing access. Ongoing Akahu consents can also be managed through MyAkahu.

10. Access, correction and privacy concerns

You can request access to, or correction of, personal information NZFA holds about you. We may need to verify your identity before responding. Requests will be handled within the timeframes and subject to the grounds permitted by law.

You can also raise a concern about how we handle information. If we cannot resolve it to your satisfaction, you may contact the Office of the Privacy Commissioner.

11. Cookies and website technologies

Cookies and similar technologies may support website functionality, performance measurement and, where enabled, analytics or advertising features. Third-party content may have its own privacy and cookie practices.

You can manage cookies through your browser settings, although blocking them may affect some website functions. Website cookie settings do not grant access to your bank accounts.

12. Updates and contact

We may update this policy as our services or obligations change. The date above identifies the latest version. Where a change requires further notice or authorisation, we will address that separately rather than treating publication alone as consent.

For privacy requests and concerns, contact:

New Zealand Finance & Accounting Limited
Email: info@nzfa.co.nz
Address: 2a/96 New North Road, Eden Terrace, Auckland 1021, New Zealand

Please identify your message as a privacy enquiry. For general service enquiries, contact processing@nzfa.co.nz or call 0800 829 288.