Privacy Statement

We collect personal information which is necessary for the purpose of administering the NHI Act and EQC Act, performing our functions, and facilitating natural disaster preparedness, response or recovery (including the settlement of claims by insurance companies). Personal information that has been collected for one of these purposes may also be used for all of the other purposes. 

The personal information we collect may be used to:

• administer natural hazards cover and claims
• update our database or records
• give to other government agencies who are entitled to the information under contract or legislation contact you, including sending you information electronically or otherwise
• improve our services to you, including training our staff. When we collect property-related information, it is taken to have been collected for all of the purposes listed above and for the purpose of making the information available (including to the public).

Property-related information means information about property (whether generally or in relation to one or more identified properties), including information about:

• natural disaster damage to the property; and
• any claims made under the NHI Act or EQC Act in relation to the property (including information about the assessed cost of replacing or reinstating damaged property, reinstatement methods, and settlement amounts).

We collect and use personal information to verify your identity, provide you with natural hazards cover), manage, assess and settle your claim. We may also use it for training, research and statistical purposes or for any other purpose that is authorised by you. 

We may also make available any information in our possession if we believe on reasonable grounds that doing so is necessary to prevent or lessen a serious threat to public health or public safety or to the life or health of any individual.

Serious threat means a threat that we reasonably believe to be a serious threat having regard to the likelihood of the threat being realised, the severity of the consequences if the threat is realised and the time at which the threat may be realised.

The type of personal information we may collect is to enable us to fulfil our functions under the NHI Act and EQC Act.

Typically, the personal information we collect could include your name, email address, property address(es), telephone numbers and other specific claim and property-related information that you provide to us.

We also keep records of our correspondence with you, which may include notes and voice recordings of phone calls.

We collect personal information directly from you. We collect personal information from a number of sources, including when you:

• fill in a form either online or in hard copy
• register and/or use an online form or service
• contact us by phone, email or other means, or
• subscribe to a newsletter.

Before you submit certain online forms to us, you may be asked to confirm that the information you have supplied is true and correct.

If you give us your email address or mobile phone number we may also use these to send you reminders or updates about your cover or claims. They may also be used for training, research and statistical purposes or to send you information about our products and services.

As well as obtaining your personal information directly from you, the law allows us to collect personal information about you from other people and entities. This collection must be for purposes connected with our functions and activities.

Sometimes you may not be aware that we have received this information about you.

Typically, the third parties we collect information from include:

• your insurance company
• banks or financial institutions
• loss adjusters
• government agencies as approved by legislation or under approved information matching or sharing agreements.

Where you provide us with personal information about any other person you confirm and warrant to us that you have that person’s authority to disclose their personal information to us, and to authorise NHC Toka Tū Ake to use and disclose that person’s information.

Being eligible for natural hazards cover and making claims involves providing your insurer and NHC Toka Tū Ake with accurate information.

We ask you for this information so we can correctly assess your eligibility and entitlements under relevant legislation. We ask for contact details so we can send you any information or forms that you'll need.

If you do not provide us with the information sought, this could affect our ability to assess, manage or settle your claim, approve an application for Direct NHCover or provide you with other services.

We only use and disclose personal information in connection with our lawful functions and activities in accordance with relevant legislation, including the Natural Hazards Insurance Act 2023(external link)(external link), Earthquake Commission Act 1993(external link)(external link), the Official Information Act 1982(external link)(external link) and the Privacy Act 2020(external link)(external link). If when undertaking our lawful functions we disclose your personal information to overseas organisations we would only do so where they are either subject to the Privacy Act 2020 or to laws that provide comparable safeguards. If an overseas organisation is not subject to the Privacy Act 2020 or comparable laws, we will require the organisation to agree to protect your personal information to the standards of the Privacy Act 2020.

This includes that NHC Toka Tū Ake may disclose your personal information:

• To our agents, for the purposes of evaluating, processing, managing and settling claims, and any matters that are necessary for, or incidental to, such purposes (including participation in the Insurance Claims Register scheme);
• To your agents, authorised by you to act on your behalf or represent you in your dealings with NHC Toka Tū Ake;
• To your insurer, in order to verify your insurance details for natural hazards cover claims and for other purposes connected with evaluating, processing, managing and settling any claims, and any matters that are necessary for, or incidental to, such purposes (including participation in the Insurance Claims Register scheme);
• To your mortgagee, for the purposes of evaluating, processing, managing and settling claims, and any matters that are necessary for, or incidental to, such purposes;
• In the form of general claim information (address, event date, type of exposure (i.e. building or land), type of natural hazard) on the Natural Hazards Portal developed and managed by NHC Toka Tū Ake. Visit the Natural Hazards Portal(external link)(external link) for more information.
• To other government agencies, for the purposes of evaluating, processing, managing and settling any claims, or where information is requested by a law enforcement agency and is required to avoid prejudice to the maintenance of the law;
• To assist us with providing our services to you (including to our Internet Service Providers); or
  As otherwise authorised by you or permitted by the Privacy Act 2020 or otherwise required or permitted by law;
• We may also use it for training, research, and statistical purposes. In some circumstances, this may involve sharing your personal information with a third party provider for the purpose of surveying our service to you.

We may record phone calls and retain those recordings for quality assurance and training purposes, and to ensure the information we provide our customers is consistent and accurate. It is also recorded and retained to provide NHC Toka Tū Ake with an accurate record of your call. We may use information you provide to us by telephone in assessing and settling your claim.

We may also use your personal information for any other purpose that is authorised by you.

We may disclose personal information when required by law, for instance in responses to a court order, we may also disclose some personal information to other government agencies under law such as approved information matching or sharing agreements.

We may also use or disclose your information to third parties to assist us in communicating or marketing our services to you. 

We take reasonable efforts to ensure the accuracy of personal information we collect, use or disclose. Whenever you provide information, either directly or through your agent, our records will be updated.

Third party information allows us to ensure the accuracy of information provided to us.

You should let us know of any change in circumstances such as a change of address.

You have the right to request correction of any personal information provided to NHC Toka Tū Ake to ensure that the information we hold is accurate, up-to-date, complete, and not misleading.

If you request correction then NHC Toka Tū Ake will take reasonable steps to correct that information or explain why we think the information shouldn't be changed. We'll make a note of your change request on our records. 

We'll keep your personal information for as long as necessary to achieve the purpose for which we collected it.

If your personal information becomes part of a claim record, we will retain the information in accordance with our Information Policy and Records Management standard. It may be held by NHC Toka Tū Ake in electronic and/or paper record, and by other parties to whom it is disclosed in accordance with this privacy statement. 

NHC Toka Tū Ake will take all reasonable steps in accordance with the Privacy Act 2020(external link) to keep your personal information, whether held by NHC Toka Tū Ake or any third party, secure and to protect it against being appropriately accessed, lost, destroyed or stolen.

You have the right to request access to the personal information we hold about you. We may require proof of your identity before we provide you with a copy of this information.

You may also request, under the Official Information Act 1982(external link)(external link) other information held by NHC Toka Tū Ake which relates to your natural hazards cover or claim. However, the Official Information Act 1982 and the Privacy Act 2020(external link)(external link) may restrict the availability of personal information.

We will respond to an information request within 20 working days after it is received or will give written notice if we need more time to respond. If we refuse an access request, we will tell you in writing, state the reasons for refusal and outline further steps you can take.

You may browse and access information contained within the NHC Toka Tū Ake website without providing any personal information (other than cookies, as described below).

Cookies

Cookies are small text files that are placed in your browser when you visit a website that uses cookies. Cookies are generally used to help users navigate a website efficiently and for certain functionality, cookies can also be used to track website usage. 

How we use cookies

NHC Toka Tū Ake uses cookies to gather data about trends in use of our website using a tool called Google Analytics. This analytical tool uses "session cookies", which are text files placed on your computer, to collect standard internet log information and visitor behaviour information in an anonymous form. 

We use Google Analytics to: 

• improve the performance of this website, for instance to help pages load quicker; 
• facilitate administration of this website; and 
• generate statistics on use of this website (including through the use of third-party analytics services) to continually improve our website. 

However, this information is not linked to any personal information and cannot be used to identify you. 

The information generated by the cookie about your use of this website, including your IP address, is transmitted to and stored by Google outside New Zealand. The tracking data is stored in a database managed by Google. The tracking data is then used by Google to compile statistical reports on website activity which are used to evaluate site use. 

We won't use web analytics tools to track or collect any personal information of visitors to this website.

We won't associate any data gathered from our site with any personal information from any source as part of our use of the web analytics tools. We won't link, or seek to link, an IP address with the identity of a computer user. 

You can control cookies by modifying the settings on your browser, including deleting them from your browser or disabling them altogether. 

If you choose to configure your computer to disables cookies, you may not be able to make full use of this website.  

You may opt-out from Google Analytics by downloading the Google Analytics opt-out browser add-on. In some instances, when You opt-out, a new cookie (Opt-Out-Cookie) is placed in Your web browser. This tells the third-party provider to cease data collection from your browser and prevents advertisements from being delivered to you. 

We may change this privacy statement from time to time. Any updated versions of this privacy statement will be posted on our website. This statement was last updated on 1 July 2024.

NHC Toka Tū Ake values customer feedback. We welcome your comments and are happy to answer any questions, queries or concerns you may have about our privacy statement and practices.

Our Privacy Officer deals with any queries about the NHC Toka Tū Ake privacy statement and obligations under the Privacy Act 2020(external link), as well as any complaints or potential breaches (with reference to the NHC Toka Tū Ake privacy statement, the Privacy Act 2020(external link)(external link), and other legislation governing personal information). You can contact the NHC Toka Tū Āke Privacy Officer in writing, at:

Privacy Officer
Natural Hazards Commission Toka Tū Ake
PO Box 790
Wellington 6140

Or email: privacy@naturalhazards.govt.nz

For further information on your rights under the Privacy Act 2020(external link)(external link), see the Privacy Commissioner’s website(external link)(external link).

If you are not satisfied with our response to your concern, you can contact the Privacy Commissioner:

Office of the Privacy Commissioner
PO Box 10094
Wellington 6143

Phone: 0800 803 909

Contact the Office of the Privacy Commissioner