Privacy Policy

Our Privacy Policy
UHY Haines Norton (Auckland) Limited
NZBN 9429037039868

‍

1. Commitment to Privacy

UHY Haines Norton (Auckland) Limited (“UHY Haines Norton”, “the Firm, “we”, “us” or “our”) recognises the importance of protecting the privacy and confidentiality of personal information.

This Privacy Policy explains how we collect, hold, use, disclose and protect personal information, and the rights individuals have in relation to their personal information.

We comply with the Privacy Act 2020 and the 13 Information Privacy Principles (IPPs) contained in that Act.

This Privacy Policy applies to personal information handled by UHY Haines Norton (Auckland) Limited in connection with its business and professional services.

2. Personal Information We Collect

Personal information is information about an identifiable individual.

Depending on your relationship and dealings with us, we may collect information including:

• contact and identification details, such as your name, address, telephone number, email address and date of birth;
• financial information, including information concerning assets, liabilities, income, investments, bank accounts and other financial arrangements;
• tax, accounting and business information;
• employment and education history, qualifications, remuneration and CV information, including information provided for recruitment purposes;
• information required to verify identity or comply with our legal and regulatory obligations;
• information relevant to the professional services we provide;
• information relating to employees, contractors, clients and prospective clients; and
• other personal information that is reasonably necessary for our business activities or the provision of our professional services.

3. How we collect personal information

Where practicable, we collect personal information directly from you.

We may collect information through:

• meetings, telephone conversations and correspondence;
• email, forms and other documents;
• our website and other electronic communications;
• your employer, employees, representatives or advisers;
• banks, financial institutions and other service providers;
• government departments, regulators and other public authorities;
• recruitment agencies, referees and background-check providers;
• publicly available registers, databases and other public sources; and
• other third parties where you have authorised the disclosure or where collection is otherwise permitted by law.

Where we collect personal information from another source, we will do so in accordance with the Privacy Act 2020.

4. Information Collected Through our Website and Cookies

When you use our website, we may collect personal information that youchoose to provide, including through online forms or email enquiries.

We may also collect technical information relating to your use of our website, including browser information, device information, server logs and pages viewed.

Our website may use cookies and similar technologies to understand website usage and improve our website and services. You can manage or disable cookies through your browser settings, although doing so may affect some website functionality.

5. Why we Collect, Use, and Disclose Personal Information

We may collect, use and disclose personal information for purposes including:

• providing accounting, audit and assurance, taxation, business advisory and other professional services;
• establishing and managing client relationships;
• communicating with clients and responding to enquiries;
• billing, administration and internal management;
• meeting our professional, legal and regulatory obligations;
• satisfying client identification, anti-money laundering and other compliance requirements;
• managing conflicts of interest, independence and quality-management requirements;
• considering employment applications and managing employees and contractors;
• operating and improving our business, systems and services;
• conducting events, surveys and other business activities;
• sending newsletters, professional updates, invitations and information about our services, where permitted by law; and
• other purposes connected with our business that you would reasonably expect.

6. Disclosure of Personal Information

We may disclose personal information where reasonably necessary for the purposes for which it was collected or where otherwise permitted or required by law.

Recipients may include:

• our employees, directors and contractors;
• professional advisers and consultants;
• banks and financial institutions;
• government departments, regulators, law enforcement agencies and other public authorities;
• technology, cloud hosting, data storage, document management and other service providers;
• other UHY member firms and UHY International where this is necessary for the provision of services or other legitimate business purposes;
• external service providers engaged to assist us in providing professional services;
• parties involved in a proposed or actual business transaction involving the Firm; and
• other persons where you have authorised disclosure or where disclosure is required or permitted by law.

We take reasonable steps to ensure that personal information disclosedto third parties is appropriately protected.

7. Disclosure of Personal Information Outside New Zealand

In providing our services and operating our business, we may need to disclose personal information to persons or organisations outside New Zealand, including other UHY member firms and external service providers.

Where Information Privacy Principle 12 of the Privacy Act 2020 applies to an overseas disclosure, we will take reasonable steps to ensure that the overseas recipient is subject to privacy safeguards comparable to those required under New Zealand law, or otherwise ensure that the disclosure is permitted under the Privacy Act 2020.

Where required, we may seek your authorisation before disclosing personal information overseas.

8. Direct Marketing and Communications

We may use your contact information to send you professional updates,newsletters, invitations and information about services that we believe may berelevant to you.

You may opt out of receiving marketing communications at any time byusing the unsubscribe facility contained in the communication or by contactingus.

We will comply with applicable New Zealand law relating to electroniccommunications.

9. Security and Retention of Personal Information

We take reasonable steps to protect personal information against loss, unauthorised access, use, modification, disclosure or other misuse.

Personal information may be held electronically or in hard copy and maybe stored using systems operated by us or by trusted third-party service providers.

We use appropriate administrative, physical and technical safeguards, including access controls, passwords, security systems and other measures appropriate to the nature of the information held.

We retain personal information for as long as reasonably necessary for the purposes for which it was collected and to satisfy our legal, professional and regulatory obligations.

When personal information is no longer required, we will take reasonable steps to securely destroy or otherwise dispose of it, subject to any legal or professional requirements requiring its continued retention.

10. Access to and Correction of Personal Information

Under the Privacy Act 2020, you have rights to request access to personal information we hold about you and to request correction of that information.

If you wish to request access or correction, please contact our Privacy Officer using the details below.

We may require reasonable evidence of your identity before responding to a request.

We will respond to requests within the time frames required by the Privacy Act 2020. If we are unable to provide access to information, or do not make a requested correction, we will explain our decision where required by law and advise you of any applicable rights.

11. Privacy Breaches

We have processes in place to identify, assess and respond to privacy breaches.

Where a privacy breach has caused, or is likely to cause, serious harm to an affected individual, we will comply with our notification obligations under the Privacy Act 2020, including notifying the Office of the Privacy Commissioner and affected individuals where required.

12. How to Contact Us

If you have any questions about this Privacy Policy, wish to request access to or correction of your personal information, or wish to raise a privacy concern, please contact:

Privacy Officer

UHY Haines Norton (Auckland) Limited
PO  Box 21143, Henderson, Auckland 0650
PH 09 839 0087
admin@uhyhn.co.nz

13. Privacy Complaints

If you have a concern or complaint about how we have collected, used, disclosed, stored or otherwise handled your personal information, please contact our Privacy Officer.

We will treat privacy complaints seriously and confidentially and will investigate and respond to them within a reasonable timeframe.

If you are not satisfied with our response, you may make a complaint to the Office of the Privacy Commissioner, New Zealand.

14. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes o our business practices, technology or legal and regulatory requirements.

The current version will be made available on our website.

Last updated: September 2026

‍