)
Privacy policy & security
FAP Name: Lendi Financial Limited
FSP Number: FSP1006898
Last updated: 3 August 2026
1. Who we are
Lendi Financial Limited (Lendi, we, us or our) is a New Zealand company and a licensed Financial Advice Provider (FSP1006898). We provide financial advice and related services, including advice about lending and KiwiSaver.
We comply with the Privacy Act 2020 when we collect, hold, use and disclose personal information. This policy explains how we handle personal information and does not limit any rights you may have under the Privacy Act.
Our Privacy Officer is:
Kam Azami Lendi Financial Limited 2B Kororo Street, Northcote, Auckland 0627 Email: kam.azami@lendi.nz
2. What personal information we may collect
The information we collect depends on the service you request and may include:
your name, date of birth, contact details, address, residency and tax-residency information;
identity documents and identity-verification results;
employment, income, expenses, assets, liabilities, credit history and other financial information;
bank statements, transaction information and evidence of the source of funds or wealth;
information about loans, property, insurance, KiwiSaver and other financial products;
health or lifestyle information where relevant to an insurance service or application;
information contained in communications, complaints, feedback or testimonials;
information required to meet legal, regulatory, audit, fraud-prevention or anti-money-laundering obligations; and
website, form and chatbot information, such as messages submitted, IP address, browser, device and cookie data.
3. How we collect information
We usually collect personal information directly from you through meetings, telephone or video calls, email, our website, electronic forms and our secure client portal.
With your authority, or where otherwise permitted by law, we may also collect information from other sources, including:
a joint applicant, family member, authorised representative or referral partner;
employers, accountants, lawyers, real-estate professionals or other professional advisers;
lenders, insurers, KiwiSaver providers, fund managers and other product providers;
credit-reporting, identity-verification, fraud-prevention and financial-data service providers;
government agencies and public registers; and
Kiwi Adviser Network Limited (KAN), Trail and other approved service providers that support our advice and compliance processes.
Where we collect personal information about you from another source, we will take reasonable steps to notify you of the collection and the matters required by the Privacy Act, unless a lawful exception applies.
Providing information to us is generally voluntary. However, some information is required so that we can verify your identity, meet our legal and regulatory duties, assess your circumstances, provide suitable advice, or submit an application. If you do not provide the information we reasonably require, we may be unable to provide advice or progress an application for you.
4. How we use personal information
We may use personal information to:
verify your identity and meet legal and regulatory obligations;
understand your circumstances and provide financial advice;
research, recommend, arrange and administer lending, KiwiSaver, insurance or other financial products and services;
submit and manage applications, transfers, reviews and transactions you authorise;
obtain credit, identity or financial-data checks you authorise;
communicate with you, maintain our client relationship and respond to enquiries, complaints or requests;
maintain advice, compliance, audit and business records;
detect or prevent fraud, cyber threats or other unlawful activity;
improve our services, systems and client experience;
establish, exercise or defend legal rights; and
send marketing communications where you have consented or where otherwise permitted by law.
You may opt out of electronic marketing at any time by using the unsubscribe facility, replying STOP where available, or emailing kam.azami@lendi.nz. Service and regulatory communications may still be sent where necessary.
We do not sell personal information.
5. Who we may share information with
We may disclose personal information where reasonably necessary for the purposes described in this policy, including to:
lenders, banks, insurers, KiwiSaver providers, fund managers and other product providers;
KAN, Trail and authorised compliance, audit or support personnel;
credit-reporting, identity-verification, fraud-prevention and financial-data service providers, including Akahu or Illion where you choose or authorise their use;
lawyers, accountants, valuers, technology providers, website hosts and other contractors who support our services;
our financial advisers, employees and authorised support people who need the information to perform their role;
the Financial Markets Authority, the Office of the Privacy Commissioner, other regulators, dispute-resolution services, courts, tribunals, law-enforcement agencies or government bodies where authorised or required by law; and
any other person or organisation you authorise us to disclose it to.
Service providers that process personal information for us are expected to use it only for the authorised service and to maintain appropriate privacy, confidentiality and security safeguards.
Once information is provided to a lender, insurer, KiwiSaver provider or another independent organisation, that organisation may also hold and use the information under its own privacy policy and legal obligations.
6. How client documents are stored
Client advice records and supporting documents are stored electronically in Trail, our client relationship management and document-management system, which is made available to us through Kiwi Adviser Network Limited. Trail is used as the central client record for our advice, application and compliance processes.
We do not routinely keep paper client files at our office or other business premises. If we receive a paper document, we will, where appropriate, return it to you or securely destroy it after an electronic copy has been saved and the paper document is no longer required.
We minimise local storage of client documents. If a document is temporarily downloaded or printed for a legitimate business purpose, it will be protected against unauthorised access and securely deleted or destroyed when it is no longer required.
Some personal information may also be processed through our secure business email, website, communication systems, financial-data tools, or the systems of a product provider. Relevant communications and records may be saved to your electronic client file for compliance and record-keeping purposes.
7. Security
We take reasonable technical and organisational steps to protect personal information against loss, unauthorised access, use, modification or disclosure. Depending on the system and information involved, these measures may include access controls, secure authentication, restricted permissions, encryption, backups, confidentiality requirements, system monitoring and regular review of our processes and providers.
Access to client information is limited to people who need it for an authorised business, advice, support, compliance or legal purpose.
No internet transmission or storage system can be guaranteed to be completely secure. If a privacy breach occurs that has caused or is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as required by the Privacy Act.
8. Overseas storage and processing
Some technology or service providers may store or process information outside New Zealand, including in Australia or the United States. Where the Privacy Act applies to an overseas disclosure, we will take reasonable steps to ensure the recipient is subject to comparable privacy safeguards or otherwise comply with Information Privacy Principle 12, including obtaining informed authorisation where required.
9. Financial-data services
Where you choose or authorise an electronic financial-data service, such as Akahu or Illion, that service may collect or process bank statements, transaction history, income information, identity information and supporting financial documents for verification or assessment purposes.
We use information obtained through these services only for the authorised advice, application, verification, compliance or related service. The provider's own privacy terms may also apply to its handling of your information.
10. Artificial intelligence and chatbot tools
We may use artificial-intelligence tools for general drafting, administrative support or answering general website enquiries. We do not upload client personal or confidential information to general-purpose AI tools, and AI does not replace the judgement of a financial adviser or make the final advice decision.
Our website may use a chatbot or automated assistant to provide general information and guide enquiries. Chat messages and related technical data may be processed by the chatbot provider and may be retained for security, support or service-improvement purposes. Please do not enter bank statements, identity documents, account numbers or other sensitive financial information into the chatbot. Use our secure client portal or another method approved by your adviser for client documents.
Chatbot responses are general information only and are not personalised financial or legal advice.
11. Cookies, analytics and external links
Our website may use cookies and similar technologies to operate the site, maintain security, understand site usage and improve the user experience. You can control cookies through your browser and, where available, our website cookie settings. Disabling cookies may affect some website features.
If you follow a link from our website to another site, that site's owner is responsible for its privacy practices. We recommend reviewing the other site's privacy policy before providing personal information.
12. Retention and deletion
We retain financial-advice and related compliance records for at least the period required by our Financial Advice Provider licence conditions and other applicable laws. This will generally be at least seven years from the relevant date and may be longer where a later record relies on earlier information, a product remains in force, a complaint or legal issue is ongoing, or another legal requirement applies.
Other personal information is kept only for as long as it is reasonably required for a lawful purpose. When information is no longer required, we take reasonable steps to securely delete, destroy or anonymise it, subject to technical backup cycles and legal or regulatory retention duties.
You may ask us to delete information, but we may be unable to do so where we are required or reasonably entitled to retain it.
13. Access and correction
You may ask whether we hold personal information about you and request access to it or correction of it. We may need to verify your identity before responding. The Privacy Act permits some requests to be refused or limited in specified circumstances.
If we do not make a requested correction, you may ask us to attach a statement of correction to the information.
To make a request, email our Privacy Officer at kam.azami@lendi.nz and describe the information or correction requested.
14. Privacy concerns and complaints
If you have a concern about how we have handled personal information, please contact our Privacy Officer first so that we can investigate and respond.
You may also make a complaint to the Office of the Privacy Commissioner at privacy.org.nz.
15. Changes to this policy
We may update this policy to reflect changes in our services, systems, providers or legal obligations. The revised policy will apply from the date it is published on our website, and the last-updated date will be shown at the top of the page.