PaidTerms – Privacy Policy

This Privacy Policy explains how PaidTerms Limited ("PaidTerms", "we", "us", "our") collects, uses, stores, and discloses personal information.

PaidTerms is committed to complying with the Privacy Act 2020 (New Zealand) and, where applicable, the Privacy Act 1988 (Cth) (Australia).

By using our website and services, you agree to the collection and use of information in accordance with this Privacy Policy.

1. What Personal Information We Collect

We may collect the following types of personal information, but are not limited to collecting all of it in every case — what we collect will depend on the nature of your interaction with us.

• Full name
• Date of birth
• Email address
• Phone number
• Residential address

• Business name
• NZBN or company number
• Business address
• Director and shareholder details

• Bank account details (for direct debit)
• Credit or debit card information
• Payment history
• Instalment schedule data
• Transaction records

• Identification documents (e.g. driver licence or passport)
• Credit history information
• Information required for AML/CFT compliance

• IP address
• Browser type
• Device information
• Website usage analytics

2. How We Collect Personal Information

We collect personal information directly from you when you submit an application, enter into a payment plan, contact us, or use our website.

We also collect information from third parties, including credit reporting agencies, identity verification providers, payment processors (e.g. Stripe), and merchants using PaidTerms. Some information is collected automatically via cookies and analytics tools.

If you provide personal information about someone else (e.g. a director), you must have their authority to do so.

3. Why We Collect Your Information

We collect and use personal information to:

• Assess and process instalment applications
• Perform credit checks and verify identity
• Provide and manage instalment payment plans
• Process payments (card or direct debit)
• Prevent fraud and manage risk
• Comply with AML/CFT and other legal obligations
• Communicate with you
• Improve our website and services
• Conduct internal reporting and analytics

If you do not provide required information, we may not be able to offer our services.

4. Credit Checks

Where you apply for an instalment plan, we may conduct credit checks through licensed credit reporting agencies. This may include accessing credit history information, verifying identity, and ongoing credit monitoring where permitted by law.

Credit information is handled in accordance with the Privacy Act 2020 and the Credit Reporting Privacy Code.

5. Cookies & Website Tracking

We use cookies and similar technologies to understand website usage, improve functionality, enhance user experience, and measure marketing effectiveness.

You may disable cookies via your browser settings, but some features may not function correctly if you do so.

6. Disclosure of Personal Information

We do not sell personal information. We may disclose your personal information to:

• Payment processors (e.g. Stripe)
• Cloud hosting providers
• Identity verification providers
• Credit reporting agencies
• Debt recovery agencies (if payments default)
• Professional advisers
• Service providers assisting us to operate our business
• Regulators or law enforcement where required by law
• Potential investors or purchasers in connection with a business transaction

All service providers are required to protect your information appropriately.

7. Overseas Disclosure

Your personal information may be stored or processed on secure servers located outside New Zealand, including the United States or other jurisdictions.

Where information is transferred overseas, we take reasonable steps to ensure it is protected in accordance with New Zealand privacy laws.

8. Data Security

We implement appropriate technical and organisational safeguards, including:

• Encrypted payment processing (SSL/TLS)
• Role-based access controls
• Secure cloud infrastructure
• Internal access restrictions
• Monitoring for vulnerabilities

No method of transmission over the internet is completely secure, but we take reasonable steps to protect your information.

9. How Long We Retain Information

We retain personal information for as long as required to provide our services, to comply with legal and regulatory obligations, and for risk management and audit purposes. When no longer required, we securely delete or de-identify information.

10. Access & Correction

You may request access to the personal information we hold about you and request correction if it is inaccurate. To make a request, contact us at:

11. Complaints

If you have concerns about how we handle your personal information, please contact us first so we can resolve the issue.

If you are not satisfied, you may contact:

12. Children

PaidTerms services are not intended for individuals under 18 years of age.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be published on our website with the revised date.