This policy explains what personal information Lead Foundry collects from consumers who complete a form on QuoteHub, what it collects from brokers who buy enquiries, who that information is shared with, how long it is kept, and how to request access, correction or deletion under the New Zealand Privacy Act 2020.
Name, age, contact email and a New Zealand or Australian phone number; whether you currently hold insurance or a mortgage; what you are looking to protect or refinance and the cover or loan size band you select; any health responses you choose to disclose; optional height and weight used only to calculate a BMI figure for broker context; your preferred contact time and channel; and your consent to be contacted by a broker.
Technical metadata is also recorded: IP address, browser and device type, referring URL, page activity, and a hashed device fingerprint used for fraud and duplicate-submission detection.
The single broker who buys that enquiry, selected against the criteria the consumer specified. Every enquiry is sold to exactly one broker and is never resold, recycled or shared. Information is also handled by the service providers strictly necessary to operate the service, and may be disclosed to regulators, courts or law enforcement where legally required.
Yes, and the policy says so plainly. The phone number given on a form goes to Twilio in the United States so a verification code can be sent to it. Form submissions pass through Vercel in the United States. Enquiry records are stored with Supabase on Amazon Web Services infrastructure in Sydney, Australia, AWS region ap-southeast-2. They are not stored in New Zealand. Notification email is sent through Resend in the United States. Each provider is engaged under its standard data processing terms and may use the information only to provide the service.
Information Privacy Principle 12 of the Privacy Act 2020 governs disclosure of personal information outside New Zealand. Guidance on it is published by the Office of the Privacy Commissioner.
Consumer enquiry records are kept for 24 months from submission and are then deleted from production systems, or sooner on verified request. Broker-buyer records are kept for the duration of the account plus seven years after closure, as required by the Tax Administration Act 1994 and standard New Zealand record-keeping practice.
You can request access to the personal information held about you, request correction of anything inaccurate, request deletion subject to legal retention obligations, withdraw consent to be contacted by a broker, and opt out of marketing. Complaints can be made to the Office of the Privacy Commissioner in New Zealand or the Office of the Australian Information Commissioner in Australia.
Contact details, the cover or loan a consumer is enquiring about, any health responses they choose to disclose, and technical metadata used for fraud and duplicate detection. The full list is set out on this page.
The single broker buying that enquiry, selected against the criteria the consumer specified. The same enquiry is never sold or shared with a second broker.
Email the address published on this page. Access and correction requests are handled under the Privacy Act 2020, and deletion is actioned subject to legal retention obligations.