Privacy Statement

Introduction

This Privacy Statement explains how Frank Risk Management Limited (we, us, our) collects, stores, uses, and shares your personal information. This Privacy Statement applies to our clients, prospective clients, employees, job applicants, contractors, suppliers, and other individuals whose personal information we may collect in the course of our business.

By asking us to assist you with your insurance needs, by applying for employment with us, or by providing services or supplying products to us, you consent to us collecting, storing, using, and sharing your personal information as set out below.

Our contact details are set out at the end of this Privacy Statement.

Information We Collect

We may collect the following types of personal information:

Contact Information: Name, address, email, telephone number and date of birth.
Risk Information: including information required to advice you about your insurance needs and management risk, which may include (depending on the type of insurance) health and criminal history.
Insurance Information: Policy and claim numbers, claims details and insurance history.
Financial Information: Including details about payments to and from you, bank account details for refunds or payments, and other details of products and services you have purchased from us.
Marketing information: Such as your preferences for receiving marketing communications from us.
Vehicle details and driver's licence information: Including vehicle registration details, ownership information, and drivers licence details, to arrange and manage motor vehicle insurance and process motor-related claims
Opinions, assessments or notes about you: Including professional opinions or assessments made about you by insurers, loss adjusters, or other parties, to assist with claims assessment and management
Other Information: Any other information necessary for us to provide our services.

We also collect personal information about you indirectly (that is, from sources other than you). For example, we may collect your personal information from:

another insured if they arrange an insurance policy which also covers you;
the motor vehicle register to obtain details of vehicles and confirmation of vehicle ownership; or
insurers, claims managers, or loss adjusters in connection with the handling of your claim.

Where you are acting as a representative for another person (such as a company, trust, or family member), we may collect your personal information to engage with you in that capacity, as well as personal information about the person you represent.

Purpose of Collection

We will only collect your personal information where it is necessary to enable us to operate our business, provide you with advice and service in relation to your risk and insurance needs, to manage and maintain our relationship or if required by law, including:

Evaluating, placing, and managing your insurance applications, policies and claims.
Managing and maintaining our relationship with you, including for billing and payment purposes

Communicating with you about your insurance policies.
Complying with legal and regulatory requirements.
Preventing fraud and verifying information
Managing complaints and potential claims against our business
For employment purposes (including prospective employment) and to comply with internal employment policies
For other specified purposes, we notify you of, or which you authorise.

What if you do not provide personal information to us

It is not compulsory for you to provide us with your personal information. However, if you choose not to provide some or all of the information we request, we may be unable to provide you with appropriate advice or services, or continue our relationship with you.

When you enter into a contract of insurance, you have a legal duty to disclose to the insurer all facts that are material to the risk. This includes all information you know, or could reasonably be expected to know, that would influence their decision to insure you, and if so, on what terms. If you do not provide all relevant information (including personal information), your insurer may refuse to pay a claim and/or treat your policy as though it never existed.

How we collect your personal information

We will collect and hold personal information that you provide, or that you authorise us to obtain from other sources, in accordance with the Privacy Act 2020.

We also collect personal information about you indirectly (that is, from sources other than you). For example, we may collect your personal information from:

another insurer if they arrange an insurance policy which also covers you.
the motor vehicle register to obtain details of vehicles and confirmation of vehicle ownership; or
insurers, claims managers, or loss adjusters in connection with the handling of your claim.

Who we collect your personal information from and provide it to?

We do not sell, trade, or rent your personal information to others.

In the course of our dealings with you, we may need to collect your personal information from and provide it to third parties located in and outside of New Zealand. Specifically, we may disclose your personal information if it is in connection with the purposes set out in this Privacy Statement, is required or authorised by you or a third party on your behalf, or is required or authorised by law or regulation.

We may exchange information with these parties at any stage of our relationship with you. If you are a client, this may include during pre-placement and quotation, placement and binding, policy administration, claims handling, and renewal or variation of your insurance.

Examples of third parties with whom we may exchange your personal information include:

Insurers, to obtain quotes, place cover, administer and renew your insurance policies. Including but not limited to those listed here.
Other insurance brokers or intermediaries, where relevant to the placement or administration of your insurance (for example, where a specialist broker is involved).
Reinsurers, as required by insurers in connection with your policy;
Claims managers, loss adjusters, repairers, and valuation providers, to assess, manage and settle claims on your behalf.
Service providers, professional advisers and contractors, such as IT service providers, medical professionals, repairers, lawyers and accountants to obtain advice, manage disputes, or support claims and litigation matters.
AUB Group (our parent company), for internal reporting, compliance, IT support, business operations, and to support the services we provide to you.
Referral partners, in connection with referrals to or from our business.
Other companies, in the event of a corporate sale, merger, reorganisation, dissolution, or similar event.
Private investigators to investigate claims or verify information where necessary.
Recruiters (in respect of employee information), to support our recruitment processes.
Professional indemnity insurers, to support our own insurance arrangements and respond to potential claims.
Third parties involved in claims (including witnesses and at-fault parties), to assess and manage claims.
Regulatory and government agencies, to comply with our legal and regulatory obligations (including under the Anti-Money Laundering and Countering Financing of Terrorism Act 2009).
Publicly available sources, including the Companies Office register and other public registers.

Given the number of insurers and other third parties with whom we routinely exchange personal information, it is not practicable to list each one individually. However, a list of these parties, including their names, contact details and specific locations, is available on request. Please contact us using the details at the end of this Privacy Statement if you would like this information.

The third parties listed above may also collect your personal information indirectly from us, or from each other. They may disclose your personal information to their own reinsurers, service providers, professional advisers, sub-contractors or other parties where necessary to provide services in connection with our relationship with you. By providing your personal information to us, you acknowledge that these third parties may collect your personal information indirectly (from us or from each other) and that this Privacy Statement serves as notification of that collection.

We may also use and disclose your personal information for a secondary purpose related to a purpose for which we collect it, where you would reasonably expect us to do so. For example, we may disclose your personal information to third-party service providers so they can provide contracted services to us, such as information technology support or programming, hosting services, telephone services, or the mailing or sending of documents to you, digitally or otherwise.

Motor Vehicle Register

Frank Risk Management is authorised to access the motor vehicle register as per the gazette notice 2022-au4072 under which this authorisation is granted.

Your name and address may be obtained from the motor vehicle register. The information obtained from the motor vehicle register will be used for the following purposes:

where a motor vehicle has been involved in an incident resulting in damage or loss to our client’s property, to contact the registered person of that motor vehicle to resolve any financial matters arising out of the incident; or
when assessing an application to provide an insurance policy in relation to a motor vehicle, to ensure the applicant is the registered person of that motor vehicle; or
when verifying entitlement to make a claim or receive a payment under an insurance policy that applies to a motor vehicle, to ensure the registered person of that vehicle is the person to which that insurance policy applies.

If you do not wish to have your name and addresses made available under this authorisation, you can notify the registrar to opt-out.

Use and Disclosure of Information

We will use and disclose your personal information only for the purposes for which it was collected or as otherwise permitted by law. This may include sharing information with:

Insurers, reinsurers and other third parties (including but not limited to claim assessors, loss adjusters, repairers) in order to provide general insurance and other services to you or for a purpose directly related to the provision of the services to you. We may also disclose personal information as deemed necessary to satisfy any applicable law, regulation, legal process or governmental request.
Information may also be disclosed to other third parties, such as premium funding providers, your finance company(ies) and/or finance broker(s), your advised lawyers and/or accountants, and brokers who specialise in other lines of insurance that we cannot provide. This will be with your knowledge, and only relevant information will be provided.
Where third parties are provided with your personal information to enable them to perform their agreed activities, they are also required to abide by the relevant privacy law(s) and regulation(s). They are also required to use personal information only for the sole purpose of providing their specific services.

We will never exchange, sell, or otherwise distribute personal information that we hold about you except for the purposes noted above.

Overseas disclosures

Some of the third parties with whom we share your personal information are located outside New Zealand. These overseas recipients may be located in Australia, the United Kingdom, the United States, Asia, Europe, or other jurisdictions where our insurance partners and service providers operate.

We take reasonable steps to ensure that overseas recipients of your personal information are subject to comparable privacy safeguards before disclosing your information. This may include entering into contractual arrangements that require the recipient to protect your information in accordance with standards comparable to New Zealand privacy law.

Where we cannot establish that an overseas recipient is subject to comparable privacy safeguards through their local laws or contractual arrangements, we will seek your authorisation before disclosing your information to them. You should be aware that these recipients may not be required to protect your personal information to the same standard as New Zealand law requires, and you may not have the same rights or remedies available to you as you would under New Zealand law.

You have the right to decline authorisation to the disclosure of your personal information to overseas recipients who are not subject to comparable privacy safeguards. If you wish to decline or discuss this, please contact us using the contact details provided below. However, if you do not provide such authorisation, we may be unable to provide you with certain products or services that require involvement of overseas insurers, underwriters, or service providers.

Security of Personal Information

We generally hold personal information in electronic format, which we store either within our own internal systems and applications or using third-party data processors and data storage providers. We may otherwise hold your personal information in hard copy form, which is stored in our offices.

We have put in place a range of electronic security and access measures to prevent your personal information from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. We limit access to your personal information to employees and contractors of Frank Risk Management who need it for legitimate business purposes.

Should we suffer a data breach that is likely to cause you serious harm, we will advise you as soon as practicable and report the breach to the Privacy Commissioner.

Retention of your personal information

The length of time we retain your personal information depends on its type and whether we have an ongoing business need to retain it. We will retain your personal information for as long as we have a relationship with you and for a period after that in which we have an ongoing business need to retain it, in accordance with our internal retention policies and applicable legal requirements. Following that period, we will make sure it is deleted or anonymised.

Access and Correction of Personal Information

You have rights under the Privacy Act 2020 to access, update, and correct your personal information held by us or by any of the third parties identified in this Privacy Statement. To access or correct your personal information held by us, please contact us using the details below or by contacting your usual Frank Risk Management broker. To access or correct information held by other parties, please contact them directly. We are happy to provide you with their contact details where available.

Upon receipt of your written request and enough information to allow us to identify you, we will provide you with the personal information we hold about you. We will also correct, amend, or delete any personal information that we agree is inaccurate.

WEBSITE INFORMATION

Our website may use cookies to enhance your browsing experience. You can manage your cookie preferences through your browser settings.

Contact Us

If you have any questions or concerns about this privacy statement or our privacy practices, please contact us at:

Email: [email protected]
Phone: 07 903 5000
Address: 630 Victoria Street, PO Box 14497, Hamilton, 3204

If you have any concerns or complaints about how we have handled your personal information, you can raise them via our internal complaints process, details of which are available on our website.

If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner. You can find information on how to make a complaint at www.privacy.org.nz

Changes to This Statement

We may make changes to this Privacy Statement from time to time, and it is important that you review it regularly. Any change to this Privacy Statement will become effective when we publish the revised Privacy Statement on our website.

By continuing to ask us to assist you with your insurance needs, or by your continued provision of services or supply of products to us, you agree that our most recent Privacy Statement (as shown on our website) applies to our collection, storage, use, and sharing of your personal information.

This statement is designed to comply with the Privacy Act 2020. It is regularly reviewed and updated to remain compliant with any changes in the law or business practices. This privacy statement was last updated in May 2026.

Please click here to download a copy of this information.