What we collect through this website,
and what we don’t.

Last updated 12 August 2026

This statement explains how Credsol Financial Services Limited handles personal information collected through credsol.co.nz. It is written to meet our obligations under the New Zealand Privacy Act 2020 and the information privacy principles in it.

1. Who this statement is from

Credsol Financial Services Limited, trading as Credible Finance & Mortgages (“Credible”, “we”, “us”), 1 Waiohua Road, Greenlane, Auckland 1061, New Zealand. We are registered on the Financial Service Providers Register under FSP743011.

Our privacy officer can be reached at ask@credsol.co.nz or on 0800 273 376. Please put “Privacy” in the subject line so it reaches the right person quickly.

If you go on to become a client, the way we handle your information during the advice and lending process goes beyond this website statement. We’ll give you that information separately, in writing, before we collect anything from you for an application.

2. What we collect

Through this website, we collect two things.

What you type into the enquiry form

Your name, your email address, and your message. Optionally, a phone number and the general topic of your enquiry, if you choose to give them. That’s the whole list — the form doesn’t ask for a date of birth, an address, an IRD number, income details or anything else, and you shouldn’t send documents or account numbers by email until we’ve told you where to send them securely.

Standard web server records

Our hosting provider keeps ordinary server logs, which typically record the IP address making the request, the page requested, the time, and the browser and operating system reported. These are used to keep the site available and secure — for example, to identify an attack or diagnose an error. We don’t use them to build a profile of you or to identify individual visitors, and we don’t combine them with enquiry form data.

3. Why we collect it

To answer your enquiry, and to give you financial advice if you ask us to. That’s the lawful purpose the information is collected for, and we don’t collect information we don’t need for it.

Giving us your details is voluntary. If you’d rather not use the form, ring us on 0800 273 376. We do need a name and a way to reply, or we can’t respond.

4. Cookies and tracking

New Zealand does not have a separate cookie law equivalent to the European Union’s ePrivacy rules, and there is no blanket legal requirement here to show a cookie consent banner. What applies instead is the Privacy Act 2020, which covers cookies and other tracking technologies whenever the information they collect is about an identifiable individual. Rather than track visitors and then ask you to consent to it, we took the simpler route: there is nothing to consent to, so there is no banner to click through.

The enquiry form uses two spam checks — a hidden field that real people never fill in, and a check on how quickly the form was submitted. Neither stores anything on your device or identifies you.

If we ever add analytics, we will choose a tool that does not build advertising profiles or share data with third parties for their own purposes, update this page before it goes live, and set out exactly what is collected and how to opt out.

5. Who we share it with

Enquiries are seen by the Credible people who need to answer them, and no one else. We don’t sell personal information, we don’t trade or rent it, and we don’t hand it to advertisers or data brokers.

If you go ahead and ask us to arrange finance, we’ll need to give information to lenders, insurers or other providers as part of that application. We’ll tell you who, and why, before we do — and it won’t happen on the strength of a website enquiry alone.

We may also disclose information where the law requires it, or where it’s necessary to protect someone’s safety.

6. Storage and security

This site is served over an encrypted connection (HTTPS), so what you type into the form is encrypted in transit. Enquiries arrive in our business email and are held in our business systems. Access is limited to the people who need it to do their job, and accounts are protected by passwords and multi-factor authentication.

No system is completely secure. If a privacy breach occurs that is likely to cause serious harm, we’re required to notify the Office of the Privacy Commissioner and the people affected, and we will.

7. Information held overseas

Some of the services we rely on, such as email and website hosting, may store information on servers outside New Zealand. Where that happens, the Privacy Act still applies to us, and we take reasonable steps to satisfy ourselves that the provider has comparable safeguards in place, as information privacy principle 12 requires.

8. Where your information comes from

We collect information about you from you. If we ever need to get it from somewhere else — a credit reporter as part of a lending application, for example — we’ll tell you at the time, which is what information privacy principle 3A requires. That principle was added by the Privacy Amendment Act 2025 and came into force on 1 May 2026.

9. Getting a copy, or correcting it

You can ask us for a copy of the personal information we hold about you, and you can ask us to correct it if it’s wrong. Email ask@credsol.co.nz and tell us what you’re after.

We’ll respond as soon as we reasonably can, and no later than 20 working days after we receive your request, as the Privacy Act requires. There’s no charge for a request from an individual about their own information. If we can’t correct something, we’ll attach a note of the correction you asked for to the record.

10. How long we keep it

Enquiries that don’t turn into a client relationship are kept only as long as we need them, and are then deleted. If you become a client, our record-keeping obligations as a financial service provider mean we keep records of the advice and the transaction for a set period, and we’ll tell you what that means for you at the time.

11. Marketing

Sending an enquiry does not put you on a mailing list. We’ll only send you marketing if you’ve asked for it, and any commercial electronic message we send will identify us and include a working unsubscribe link, as the Unsolicited Electronic Messages Act 2007 requires.

12. Complaints

If you think we’ve mishandled your personal information, tell us first: email ask@credsol.co.nz with “Privacy complaint” in the subject line, or ring 0800 273 376. We’ll acknowledge it and come back to you with what we’ve found.

If you’re not satisfied with how we’ve dealt with it, you can complain to the Office of the Privacy Commissioner. The Commissioner asks that you raise the matter with the organisation first, which is why the step above matters. You can reach the Office on 0800 803 909 or through privacy.org.nz.

Complaints about our financial advice rather than your privacy follow a different route. Those go through our internal complaints process first, and then to Financial Services Complaints Limited. There’s more on that on our regulatory information page.

Changes to this statement

If we change how this website handles personal information, we’ll update this page and change the date at the top. This version is dated 12 August 2026.