Privacy Policy

Effective date: 24 April 2026

This Privacy Policy explains how First Credit Union (“FCU”, “we”, “us”, “our”) collects, uses, stores, and shares your personal information.

"Personal information" means any information about an identifiable individual, including your name, contact details, financial information, credit information and any information that can reasonably identify you.

Collection of personal information

Information you provide to us

Most personal information we collect comes directly from you when you interact with us in person, online, through our mobile applications, by phone, or in writing. This may include: 

• your name, address, phone number, email address, date of birth, IRD number, and specimen signature
• usernames, login credentials, device information, and activity logs when using our websites, mobile apps, and ATMs
• employment details, financial information, credit history, and banking transaction history
• insurance‑related information (for example, policy details, beneficiaries, health or claims information) 
• any information we are required by law to collect.

Information we collect from third parties

We may also receive your personal information from:

• credit reporting agencies and identity verification providers
• market researchers and analytics partners
• your authorised representatives (such as legal or financial advisers)
• parents or guardians (where you are under 18)
• your employer (for verification purposes)
• insurance providers, underwriters, claims assessors, and investigators.

Information collected from third parties (IPP3A)

In some circumstances, First Credit Union may collect personal information about you from another organisation, rather than directly from you. This is known as indirect collection.

Where we collect personal information in this way, we will take reasonable steps to ensure you are informed about: 

• the fact that the information has been collected
• the purpose for which the information has been collected
• who the information may be shared with
• the identity and contact details of First Credit Union as the agency collecting and holding the information
• your right to access and request correction of your personal information

This information may be provided through this Privacy Policy, application forms, online notices, account documentation, or other appropriate communications depending on the circumstances.

Credit reporting, verification and information service providers

Depending on the product or service you apply for, we may collect personal information about you from the following organisations for lawful purposes such as credit assessment, identity verification, fraud prevention, and meeting legal or regulatory obligations:

• Equifax New Zealand Limited – credit reporting and identity verification
  Privacy information: https://www.equifax.co.nz/privacy
• Centrix Group Limited – credit reporting and credit information services
  Privacy information: https://www.centrix.co.nz/privacy-statement/
• Credit Sense Limited – bank transaction analysis and factual financial information
  Privacy information: https://www.creditsense.co.nz/privacy-policy/
• MotorWeb (Trade Me Limited) – motor vehicle, PPSR, and ownership information
  Privacy information: https://www.motorweb.nz/privacy-policy
• Cloudcheck (GBG / Verifi Identity) – electronic identity verification and fraud prevention
  Privacy information: https://www.gbg.com/nz/data-retention-policy/
• Ministry of Justice – fines and enforcement checks
  Privacy information: https://www.justice.govt.nz/about-this-site/privacy-statement/

We collect information from these organisations only where permitted or required by law and only for purposes consistent with this Privacy Policy.

We may update this list from time to time as our systems, services, or information providers change. Where we do so, we will ensure equivalent notification is provided in accordance with the Privacy Act 2020.

Insurance partners

Where you apply for, hold, or make a claim under an insurance product offered through First Credit Union (including creditor protection insurance (CCI) and funeral insurance), we may disclose personal information to our insurance partners for the purposes of issuing, administering, and managing insurance policies and claims.

Our insurance partners include:

• Provident Insurance Corporation Limited – creditor protection insurance (CCI)
• Pinnacle Life Limited – funeral insurance and related life insurance products

These insurance partners act as separate agencies for the purposes of the Privacy Act 2020 and handle personal information in accordance with their own privacy policies.

Motor Vehicle Register (MVR) Access

First Credit Union may access your personal information from the Motor Vehicle Register (MVR) under an approved access authorisation issued by Waka Kotahi NZ Transport Agency.

We access MVR information only for authorised purposes, including:

·         verifying your identity

·         confirming vehicle ownership

·         preventing fraud

·         administering your account or applications

·         meeting our legal and regulatory obligations

If we access your information from the MVR, it is used solely for these purposes.

You have the right to opt out of having your name and address publicly available on the Motor Vehicle Register by applying for the Confidentiality option with Waka Kotahi. More information is available at:
https://www.nzta.govt.nz/vehicles/maintaining-vehicle/correct-your-details/

Cookies

We use cookies to understand how visitors use our websites and to improve user experience. Cookies are small text files stored on your device.

You can change your browser settings to manage or block cookies if you prefer.

Third‑party partners and analytics

We use third‑party services (such as Google) for analytics and improving the functionality of our digital services. These providers may use cookies to help us understand site usage trends.

You may opt out of Google Analytics data collection by visiting the Google Analytics opt‑out page.

Disclosure of Your Personal Information

We may disclose your personal information to:

·         service providers acting on our behalf (for example, cloud hosting, core banking, call recording, analytics, and fraud‑monitoring services)

·         regulators, government agencies, courts, or Police

·         other financial institutions

·         credit reporting agencies (such as Equifax – whose privacy policy is available at www.equifax.co.nz/privacy) and debt recovery agencies

·         dispute resolution schemes

·         insurers and industry bodies

·         payment system operators

·         third parties bound by confidentiality obligations

Our service providers

We use third‑party service providers to support the operation of our systems and services. These providers process or store personal information on our behalf and are contractually required to protect it and only use it to provide services to First Credit Union.

These service providers do not collect or use personal information for their own purposes and act only on our instructions.

Why we disclose information

We may disclose personal information to:

·         provide our products and services

·         assess applications and administer accounts

·         communicate changes to products or services

·         support online and digital services

·         share relevant information with joint account holders

·         meet obligations under New Zealand law

·         support investigations into fraud, money laundering, or criminal activity

·         conduct credit checks and support credit reporting

·         carry out research and provide information about FCU products, services, and offers (unless you opt out)

Storage and Security of Information

Your personal information may be stored in paper files or electronic systems. Electronic information is stored on FCU systems and backed up to secure storage.

We use physical, technical, and organisational safeguards to protect personal information from loss, unauthorised access, misuse, and disclosure.