Privacy Policy
Last updated: March 2026
This policy is governed by the New Zealand Privacy Act 2020. By using FlatMatchr NZ, you agree to the collection and use of information as described below.
1. Introduction
FlatMatchr NZ ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at flatmatchrnz.co.nz, including any related mobile applications or services.
We comply with the New Zealand Privacy Act 2020 and its 13 Information Privacy Principles. If you do not agree with the terms of this policy, please do not access or use our platform.
2. Information We Collect
Information you provide directly
When you create an account, post a listing, or contact us, we collect information such as your name, email address, phone number, profile photo, and any content you include in listings, profiles, or messages.
Information collected automatically
When you use the platform, we automatically collect certain technical information including your IP address, browser type, operating system, referring URLs, pages visited, time spent on the platform, and clicks.
Information from third parties
If you sign in using a third-party service (such as Google), we receive the information you authorise that service to share with us, typically your name and email address.
Photos and images
Photos you upload (property photos, profile photos) are personal information under the New Zealand Privacy Act 2020 where they identify an individual. If you upload photos that include other people, those individuals also have rights under the Privacy Act in relation to those images. Please only upload photos of other people where you have their permission to do so. Photos are used solely for the purpose stated at the point of upload and are not used for any automated identification, verification, or categorisation.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Create and manage your account
- Enable you to post listings, create profiles, and message other users
- Send transactional communications (account confirmations, password resets, message notifications)
- Send promotional communications where you have opted in you can unsubscribe at any time
- Respond to support requests and feedback
- Monitor for fraudulent, abusive, or illegal activity
- Analyse platform usage to improve the service
We will never sell your personal information to third parties. We may share information with trusted service providers who assist us in operating the platform, subject to strict confidentiality obligations.
5. Third-Party Services
Our platform may contain links to third-party websites. We have no control over the content, privacy policies, or practices of any third-party sites and accept no responsibility for them. We encourage you to review the privacy policy of every site you visit.
We use analytics and hosting providers that may collect information about your use of the platform in accordance with their own privacy policies.
6. Data Security
We take the security of your personal information seriously. We use appropriate technical and organisational measures including HTTPS encryption, access controls, and regular security reviews to protect your data against unauthorised access, alteration, disclosure, or destruction.
However, no method of transmission over the internet or method of electronic storage is completely secure. While we take reasonable steps to protect your information, we cannot guarantee its absolute security.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide our services. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or compliance purposes.
8. Your Rights
Under the New Zealand Privacy Act 2020, you have the right to:
- Access the personal information we hold about you
- Request correction of information that is inaccurate or out of date
- Request deletion of your data, subject to certain legal limitations
To exercise any of these rights, contact our Privacy Officer at hello@flatmatchrnz.co.nz. We will respond within 20 working days as required by the Privacy Act 2020.
Additional rights for users in the European Union or United Kingdom
If you are located in the EU or UK, you have additional rights under the General Data Protection Regulation (GDPR):
- Right to erasure you can request that we delete your personal information ("right to be forgotten"), subject to certain conditions
- Right to data portability you can request a copy of your personal information in a structured, machine-readable format
- Right to object you can object to our processing of your personal information, including for direct marketing purposes
- Right to restrict processing you can ask us to limit how we use your data while a complaint is being resolved
To exercise any of these rights, contact us at hello@flatmatchrnz.co.nz.
If you are not satisfied with our response, you can lodge a complaint with the Office of the Privacy Commissioner at privacy.org.nz.
9. Contact Us
Privacy Officer, FlatMatchr NZ
Email: hello@flatmatchrnz.co.nz
We take all privacy complaints seriously and will acknowledge your complaint within 5 working days.
10. International Users and GDPR
New Zealand has been granted EU adequacy status by the European Commission, meaning our privacy framework is recognised as providing comparable protections to the GDPR. No additional data transfer mechanisms are required when your data moves between New Zealand and the EU.
However, if you are located in the European Union, European Economic Area, or United Kingdom, the GDPR also applies directly to how we process your personal information. Our practices are designed to comply with both the New Zealand Privacy Act 2020 and the GDPR. If there is any conflict, we will apply the higher standard of protection.
We process your personal information on the following legal bases under GDPR: (a) contract to provide the services you have signed up for; (b) consent for analytics cookies and direct marketing; (c) legitimate interests to protect the security and integrity of the platform.
11. Indirect Collection IPP 3A
Under Information Privacy Principle 3A (effective 1 May 2026) of the New Zealand Privacy Act 2020, we are required to notify individuals when we collect personal information about them from a source other than themselves for example, when another user mentions your name, contact details, or includes a photo of you in a listing or profile.
If this applies to you, you have rights to access, correct, or request deletion of that information.
For the full third-party collection notice including what we may hold about you, why, and how to exercise your rights see our Third-Party Collection Notice.