Privacy Policy

Effective Date

19 June 2025

Company

Cymonz Limited (“Cymonz”, “we”, “our”, “us”)

Website

www.cymonz.com

Introduction

Cymonz is committed to protecting your privacy and handling your personal information
in a safe and responsible manner. Cymonz Privacy Policy describes how we collect,
use, share, and protect your personal data in accordance with the New Zealand Privacy
Act 2020 and the SOC 2 Trust Services Criteria.

1. Information We Collect

We collect personal and non-personal information when you interact with our website or
use our FinTech services.

Personal Information

• Full name
• Contact details (email, phone number)
• Government-issued ID (passport, driver’s licence)
• Date of birth
• Financial data (bank account details, transaction history)
• Business or employment information (for KYB)
• IP address and device identifiers

Non-Personal Information

• Browser type and version
• Device operating system
• Website usage statistics
• Page interaction data

2. How We Use Your Information

Cymonz uses the collected information to:

• Provide and manage financial services
• Verify identity and perform KYC/KYB checks
• Meet anti-money laundering (AML/CFT) obligations
• Respond to customer queries and provide support
• Monitor and improve website and service performance
• Comply with legal, regulatory, and SOC 2 obligations
• Conduct internal audits and risk assessments
• Send communications (with your consent, where required)

3. Disclosure of Your Information

We may share your personal information with:

• Service providers
• Regulatory bodies
• Affiliated entities or business partners
• Professional advisors
• Successors

All third parties are required to handle your data in compliance with our contractual
obligations and SOC 2 standards.

4. Security of Your Data

We use appropriate technical and organisational security controls to protect your
information, including:

• Data encryption (in transit and at rest)
• Secure access controls and audit logging
• SOC 2-aligned security operations and monitoring
• Regular penetration testing and risk assessments
• Data loss prevention (DLP) and backup procedures

5. International Data Transfers

Your data may be transferred or stored in countries outside of New Zealand. We ensure
adequate protections are in place, such as:

• Standard contractual clauses
• Third-party compliance with equivalent privacy protections
• Ongoing vendor risk assessments (as required under SOC 2)

6. Your Privacy Rights

Under the Privacy Act 2020, you have the right to:

• Access your personal information
• Correct any inaccuracies
• Request deletion (subject to legal obligations)
• Lodge a complaint with the Office of the Privacy Commissioner
• Object to processing in certain circumstances

To exercise these rights, please contact privacy@cymonz.com.

7. Use of Cookies

We use cookies and similar technologies to:

• Authenticate sessions
• Track site usage for performance monitoring
• Provide personalised experiences
• You may manage your cookie preferences through your browser settings.

8. Data Retention

We retain personal data only as long as necessary to:

• Fulfil contractual and regulatory obligations
• Maintain operational integrity and audit readiness
• Comply with financial and tax laws

9. Third-Party Links

Our website may include links to third-party websites or services. Cymonz is not
responsible for the privacy practices of those entities.

10. Updates to This Policy

We may update this Privacy Policy periodically. Changes will take effect once posted on
our website. Where material changes occur, we will notify you via email or website alert.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy
rights:

Cymonz Limited
24 Johnston Street, Level 5
Wellington Central 6011
‍
Email: privacy@cymonz.com
Website: www.cymonz.com