Privacy Policy

Effective date: 6 August 2026

This Privacy Policy explains how First Credit Union (“FCU”, “we”, “us”, “our”) collects, uses, stores, and shares your personal information.

"Personal information" means any information about an identifiable individual, including your name, contact details, financial information, credit information and any information that can reasonably identify you.

Collection of personal information

Information you provide to us

Most personal information we collect comes directly from you when you interact with us in person, online, through our mobile applications, by phone, or in writing. This may include: 

• your name, address, phone number, email address, date of birth, IRD number, and specimen signature
• usernames, login credentials, device information, and activity logs when using our websites, mobile apps, and ATMs
• employment details, financial information, credit history, and banking transaction history
• insurance‑related information (for example, policy details, beneficiaries, health or claims information) 
• any information we are required by law to collect.

Information we collect from third parties

We may also receive your personal information from:

• credit reporting agencies and identity verification providers
• market researchers and analytics partners
• your authorised representatives (such as legal or financial advisers)
• parents or guardians (where you are under 18)
• your employer (for verification purposes)
• insurance providers, underwriters, claims assessors, and investigators.

Information collected from third parties (IPP3A)

In some circumstances, First Credit Union may collect personal information about you from another organisation, rather than directly from you. This is known as indirect collection.

Where we collect personal information in this way, we will take reasonable steps to ensure you are informed about: 

• the fact that the information has been collected
• the purpose for which the information has been collected
• who the information may be shared with
• the identity and contact details of First Credit Union as the agency collecting and holding the information
• your right to access and request correction of your personal information

This information may be provided through this Privacy Policy, application forms, online notices, account documentation, or other appropriate communications depending on the circumstances.

Credit reporting, verification and information service providers

Depending on the product or service you apply for, we may collect personal information about you from the following organisations for lawful purposes such as credit assessment, identity verification, fraud prevention, and meeting legal or regulatory obligations:

• Equifax New Zealand Limited – credit reporting and identity verification
  Privacy information: https://www.equifax.co.nz/privacy
• Centrix Group Limited – credit reporting and credit information services
  Privacy information: https://www.centrix.co.nz/privacy-statement/
• Credit Sense Limited – bank transaction analysis and factual financial information
  Privacy information: https://www.creditsense.co.nz/privacy-policy/
• MotorWeb (Trade Me Limited) – motor vehicle, PPSR, and ownership information
  Privacy information: https://www.motorweb.nz/privacy-policy
• Cloudcheck (GBG / Verifi Identity) – electronic identity verification and fraud prevention
  Privacy information: https://www.gbg.com/nz/data-retention-policy/
• Ministry of Justice – fines and enforcement checks
  Privacy information: https://www.justice.govt.nz/about-this-site/privacy-statement/
• Immigration New Zealand – visa verification
  Privacy information: https://www.immigration.govt.nz/about-us/about-this-site/privacy-statement/

We collect information from these organisations only where permitted or required by law and only for purposes consistent with this Privacy Policy.

We may update this list from time to time as our systems, services, or information providers change. Where we do so, we will ensure equivalent notification is provided in accordance with the Privacy Act 2020.

Insurance partners

Where you apply for, hold, or make a claim under an insurance product offered through First Credit Union (including creditor protection insurance (CCI) and funeral insurance), we may disclose personal information to our insurance partners for the purposes of issuing, administering, and managing insurance policies and claims.

Our insurance partners include:

• Provident Insurance Corporation Limited – creditor protection insurance (CCI)
• Pinnacle Life Limited – funeral insurance and related life insurance products

These insurance partners act as separate agencies for the purposes of the Privacy Act 2020 and handle personal information in accordance with their own privacy policies.

Motor Vehicle Register (MVR) Access

First Credit Union may access your personal information from the Motor Vehicle Register (MVR) under an approved access authorisation issued by Waka Kotahi NZ Transport Agency.

We access MVR information only for authorised purposes, including:

·         verifying your identity

·         confirming vehicle ownership

·         preventing fraud

·         administering your account or applications

·         meeting our legal and regulatory obligations

If we access your information from the MVR, it is used solely for these purposes.

You have the right to opt out of having your name and address publicly available on the Motor Vehicle Register by applying for the Confidentiality option with Waka Kotahi. More information is available at:
https://www.nzta.govt.nz/vehicles/maintaining-vehicle/correct-your-details/

Cookies

We use cookies to understand how visitors use our websites and to improve user experience. Cookies are small text files stored on your device.

You can change your browser settings to manage or block cookies if you prefer.

Third‑party partners and analytics

We use third‑party services (such as Google) for analytics and improving the functionality of our digital services. These providers may use cookies to help us understand site usage trends.

You may opt out of Google Analytics data collection by visiting the Google Analytics opt‑out page.

CCTV Privacy Notice

We operate CCTV systems with monitoring and recording capabilities at all First Credit Union locations which record images of staff, customers, contractors and members of the public when, at, or near those locations. This CCTV Notice applies to all CCTV systems owned or operated by us.

Why we use CCTV

CCTV is one tool First Credit Union uses to protect First Credit Union premises, employees and members including members of the public.

We collect and use CCTV footage for the following purposes:

·         protecting the health and safety of our staff, members, contractors and the public who come to our sites

·         protecting property, buildings, critical infrastructure and other assets

·         deterring criminal behaviour

·         assisting in the investigation of criminal behaviour, or potentially criminal behaviour, including identification and apprehension of individuals who are suspected of engaging in criminal behaviour

·         workplace health and safety incidents, including threats to staff

·         employment related matters, including potential misconduct or performance issues

·         member complaints or transaction queries, e.g., claimed discrepancies in terms of monetary amounts deposited or received (whether at a branch or an ATM)

·         monitoring large cash withdrawals and deposits that take place at a branch.

Use of our CCTV footage

The security safeguards we use

First Credit Union uses reasonable security safeguards to protect CCTV footage against loss, manipulation, misuse and unauthorised access. CCTV footage is kept securely for a limited period. First Credit Union may retain footage if necessary to do so for a specific purpose such as those detailed above.

CCTV systems are installed, operated and monitored by authorised security personnel. CCTV footage is only monitored and reviewed by First Credit Union authorised staff over our secure internal network.

Who we share CCTV footage with

First Credit Union may share CCTV footage for the above purposes and as otherwise permitted by law. We will only share CCTV footage in accordance with our Privacy Statement and applicable law.

Accessing CCTV footage

If you have been recorded on our CCTV footage, you have the right to access that footage and ask us to correct that footage in accordance with the Privacy Act 2020. Refer to further detail in our Privacy Statement.

If you request access to CCTV footage that no longer exists because it has been overwritten, we will let you know. 

If you have any questions about this CCTV Notice, please contact us.

Disclosure of Your Personal Information

We may disclose your personal information to:

·         service providers acting on our behalf (for example, cloud hosting, core banking, call recording, analytics, and fraud‑monitoring services)

·         regulators, government agencies, courts, or Police

·         other financial institutions

·         credit reporting agencies (such as Equifax – whose privacy policy is available at www.equifax.co.nz/privacy) and debt recovery agencies

·         dispute resolution schemes

·         insurers and industry bodies

·         payment system operators

·         third parties bound by confidentiality obligations

Our service providers

We use third‑party service providers to support the operation of our systems and services. These providers process or store personal information on our behalf and are contractually required to protect it and only use it to provide services to First Credit Union.

These service providers do not collect or use personal information for their own purposes and act only on our instructions.

Why we disclose information

We may disclose personal information to:

·         provide our products and services

·         assess applications and administer accounts

·         communicate changes to products or services

·         support online and digital services

·         share relevant information with joint account holders

·         meet obligations under New Zealand law

·         support investigations into fraud, money laundering, or criminal activity

·         conduct credit checks and support credit reporting

·         carry out research and provide information about FCU products, services, and offers (unless you opt out)

Storage and Security of Information

Your personal information may be stored in paper files or electronic systems. Electronic information is stored on FCU systems and backed up to secure storage.

We use physical, technical, and organisational safeguards to protect personal information from loss, unauthorised access, misuse, and disclosure.