Privacy Notice

Last updated: December 10, 2025

Table of Contents


1. Who we are

When we say "Nuvano", "we", "our" or "us", we mean Nuvano Limited, a company registered in New Zealand (NZBN: 9429052962349).

We provide a digital platform that helps Financial Advice Providers (FAPs) deliver KiwiSaver recommendations to their clients through intelligent questionnaires, risk profiling, and automated Statement of Advice generation.


2. What this notice covers

This notice describes how we process personal data. When we say "personal data" we mean information that relates to you and from which you can be identified. This includes your name, email address, phone number, date of birth, financial information, questionnaire responses, and device information like your IP address.

This notice applies to personal data we collect:

  • From visitors to our website
  • From subscribers (FAPs who pay for our services)
  • From invited users (advisers and staff who use our platform)
  • Through enquiries, demos, and support interactions
  • From surveys, newsletters, and marketing activities

3. What this notice doesn't cover

This notice doesn't apply to personal data that FAPs (our subscribers) or their invited users enter into our platform about their own clients. In those cases, the FAP controls that personal data and we process it only as a data processor on their behalf, as described in our Data Processing Addendum.

If you're a client of a FAP and have questions about your data, you'll need to contact the FAP that manages your information.


4. Personal data we collect and how we get it

The personal data we collect depends on how you interact with us:

When you provide it directly

This includes when you:

  • Request a demo or information about our services
  • Create a subscription or trial
  • Contact our support team
  • Subscribe to our newsletter
  • Participate in surveys or events

Automatically

We collect some data automatically when you visit our website or use our platform, including:

  • IP address and browser information
  • Pages visited and features used
  • Device type and operating system
  • Referring website

From third parties

Sometimes we receive data from:

  • Payment processors (transaction details)
  • Analytics providers (usage patterns)
  • Public registers (KiwiSaver scheme information)

Categories of personal data

Identity and contact data: Name, email, phone number, company name

Account data: Login credentials, user preferences, subscription details

Payment data: Billing address, payment method (we don't store full card numbers)

Communications data: Support queries, feedback, survey responses

Device data: IP address, browser type, device identifiers

Service usage data: Features used, login history, platform interactions


5. How we use your personal data

We use your personal data for the following purposes:

To deliver our services

  • Create and manage your account
  • Process payments and billing
  • Provide platform features and functionality (including using AI/ML)
  • Generate reports and documents

To communicate with you

  • Send service updates and technical notices
  • Respond to enquiries and support requests
  • Send invoices and payment reminders
  • Notify you of important changes

For security and compliance

  • Detect and prevent fraud
  • Monitor for unauthorised access
  • Ensure compliance with our Terms of Use
  • Meet legal and regulatory obligations

To improve our services

  • Analyse usage patterns and trends (including using AI/ML)
  • Develop new features
  • Fix bugs and issues
  • Conduct research and testing

For marketing (with consent)

  • Send newsletters about KiwiSaver updates
  • Inform you about new features
  • Share industry insights and resources

6. Cookies and tracking

We use cookies and similar technologies to:

  • Essential cookies: Enable core website functionality
  • Analytics cookies: Understand how you use our website (Google Analytics)
  • Preference cookies: Remember your settings and choices

You can control cookies through your browser settings, but disabling them may affect functionality.

We use Google Analytics to understand website usage. Google Analytics uses cookies to collect information about how visitors use our site. The information is aggregated and anonymous. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.


7. How we share your personal data

We don't sell or rent your personal data. We only share it with:

Service providers

Trusted third parties who help us operate our business, including hosting providers, email services, payment processors, analytics providers, and cloud storage services. These providers are bound by confidentiality and can only use your data to provide services to us.

Legal requirements

When required by law, court order, or to protect rights and safety

Business transfers

If we're involved in a merger, acquisition, or sale of assets

With consent

Other parties when you've given us permission

Note: If you're an invited user, we may share information about your platform usage with the subscriber (FAP) who invited you.


8. Data retention

We'll retain your personal data for as long as we have a relationship with you and for a period of time afterwards where we have an ongoing business or legal need to keep it. For example, to comply with legal, tax, or accounting requirements. After that, we'll make sure it's deleted or anonymised.


9. Security

We implement appropriate technical and organisational measures to protect your personal data from loss, unauthorised access, or misuse.

While we take security seriously, no method of electronic storage is 100% secure. You can help by using strong passwords and protecting your account credentials.


10. International transfers

Your personal data may be processed in countries other than New Zealand due to the location of our service providers. When this happens, we take steps to protect your data in accordance with applicable laws.


11. Your rights

Under the Privacy Act 2020, you have the right to:

Access

Request a copy of your personal data

Correction

Update or correct inaccurate data

Deletion

Request we delete your data

Marketing opt-out

Unsubscribe from marketing emails

To exercise these rights, contact us using the details below. For marketing emails, you can also use the unsubscribe link in any marketing message.

If you're not happy with how we handle your data, you can complain to the Office of the Privacy Commissioner (see contact details below).


12. Updates to this notice

We may update this notice from time to time. If we make material changes, we'll notify you by email (if we have your email address) or by posting a prominent notice on our website.

The "Last updated" date at the top shows when this notice was last revised.


13. How to contact us

If you have questions about this privacy notice or our data practices, please contact us:

Nuvano Limited

Level 4, 125 Queen Street
Auckland Central 1010
New Zealand

Email: info@nuvano.co.nz
Phone: +64 9 242 4767
Website: nuvano.co.nz

If you have concerns about how we handle your personal data, you can also contact:

Office of the Privacy Commissioner

Website: www.privacy.org.nz
Phone: 0800 803 909
Email: enquiries@privacy.org.nz

For FAPs Processing Client Data

If you're a Financial Advice Provider using our platform to process client personal data, please also refer to our Data Processing Addendum and Terms of Use which govern our relationship and data processing obligations.