Privacy Policy

Information we collect

We collect personal and non-personal information when you interact with our website or use our fintech services.

Personal information

• Full name
• Contact details (email, phone number)
• Government-issued ID (passport, driver's licence)
• Date of birth
• Financial data (bank account details, transaction history)
• Business or employment information (for KYB)
• IP address and device identifiers

Non-personal information

• Browser type and version
• Device operating system
• Website usage statistics
• Page interaction data

How we use your information

Cymonz uses the collected information to:

• Provide and manage financial services
• Verify identity and perform KYC/KYB checks
• Meet anti-money laundering (AML/CFT) obligations
• Respond to customer queries and provide support
• Monitor and improve website and service performance
• Comply with legal, regulatory, and SOC 2 obligations
• Conduct internal audits and risk assessments
• Send communications (with your consent, where required)

Disclosure of your information

We may share your personal information with:

• Service providers who support our operations
• Regulatory bodies as required by law
• Affiliated entities or business partners
• Professional advisors (legal, audit, compliance)
• Successors in the event of a business transfer

Security of your data

We use appropriate technical and organisational security controls to protect your information, including:

• Data encryption in transit and at rest
• Secure access controls and audit logging
• SOC 2-aligned security operations and monitoring
• Regular penetration testing and risk assessments
• Data loss prevention (DLP) and backup procedures

International data transfers

Your data may be transferred or stored in countries outside of New Zealand. We ensure adequate protections are in place, such as:

• Standard contractual clauses
• Third-party compliance with equivalent privacy protections
• Ongoing vendor risk assessments as required under SOC 2

Your privacy rights

Under the Privacy Act 2020, you have the right to:

• Access your personal information
• Correct any inaccuracies
• Request deletion (subject to legal obligations)
• Lodge a complaint with the Office of the Privacy Commissioner
• Object to processing in certain circumstances

Use of cookies

We use cookies and similar technologies to:

• Authenticate sessions
• Track site usage for performance monitoring
• Provide personalised experiences

You may manage your cookie preferences through your browser settings.

Data retention

We retain personal data only as long as necessary to:

• Fulfil contractual and regulatory obligations
• Maintain operational integrity and audit readiness
• Comply with financial and tax laws

Third-party links

Our website may include links to third-party websites or services. Cymonz is not responsible for the privacy practices of those entities. We encourage you to review the privacy policies of any third-party sites you visit.

Updates to this policy

We may update this Privacy Policy periodically. Changes will take effect once posted on our website. Where material changes occur, we will notify you via email or website alert.

Contact us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please get in touch.