Privacy Policy
Privacy Policy Statement
About this policy
VATL is committed to protecting your privacy and handling personal information in accordance with the Privacy Act 2020. This policy explains what personal information we collect, why we collect it, how we use and protect it, and the rights you have in relation to your information.
Personal information means information about an identifiable individual.
Information we collect
The personal information we collect will depend on your relationship with us and the services we provide. It may include:
(a) your name, address and contact details
(b) information about your occupation, business or organisation
(c) identity verification and anti-money laundering information
(d) payment and banking information
(e) information relating to your legal matter or instructions
(f) emails, documents, telephone calls and other communications
(g) information obtained from public records, government agencies, professional advisers, counterparties or other relevant sources
(h) information collected through our website or online forms
(i) any other information reasonably required to provide our services.
We will generally collect personal information directly from you. We may also collect personal information from another person or organisation where this is necessary to provide our services, permitted by law, or reasonably connected with the matter on which we are acting.
Where required by the Privacy Act, we will take reasonable steps to make you aware that we have collected personal information about you from another source.
Why we collect and use personal information
We may collect and use personal information to:
(a) provide legal and related services
(b) assess and respond to enquiries
(c) communicate with you and act on your instructions
(d) open, manage and maintain client files
(e) conduct conflict checks
(f) verify identities and comply with anti-money laundering requirements
(g) obtain information from, or provide information to, third parties involved in your matter
(h) prepare invoices, process payments and manage accounts
(i) maintain accurate records of advice, instructions and communications
(j) manage complaints, disputes or legal claims
(k) train staff and improve our services
(l) protect our systems, premises, staff and clients
(m) comply with legal, regulatory and professional obligations
(n) carry out any other purpose authorised by you or permitted by law.
You do not have to provide us with personal information. However, we may be unable to act for you or provide particular services if we do not receive the information we reasonably require.
Sharing personal information
We may disclose personal information where this is reasonably necessary to provide our services or carry out the purposes described in this policy. This may include disclosure to:
(a) barristers, other law firms and professional advisers
(b) courts, tribunals, regulators and government agencies
(c) Land Information New Zealand
(d) identity verification and anti-money laundering service providers, including First AML
(e) banks, insurers, accountants, consultants and expert advisers
(f) counterparties and their representatives
(g) technology, telecommunications, document-management, storage and transcription service providers
(h) debt collection or payment service providers
(i) any person authorised by you
(j) any person where disclosure is required or permitted by law
(k) any person where disclosure is permitted by applicable professional conduct rules.
We will not sell your personal information.
Overseas service providers
Some of our service providers may store or process personal information outside New Zealand.
Where personal information is disclosed to an overseas person or organisation, we will comply with the Privacy Act and take reasonable steps to ensure appropriate safeguards are in place, unless another lawful basis for the disclosure applies.
Protecting your information
We take reasonable steps to protect personal information against:
(a) loss
(b) unauthorised access
(c) misuse
(d) modification
(e) unauthorised disclosure
(f) destruction
(g) other forms of unauthorised processing.
These steps may include physical, technical and administrative safeguards, access controls, staff confidentiality requirements, secure systems, backups and service-provider security reviews.
No method of storage or transmission is completely secure. If we become aware of a privacy breach, we will assess and respond to it in accordance with our legal obligations.
Keeping information accurate
We take reasonable steps to ensure personal information is accurate, complete, relevant and up to date before using or disclosing it.
Please let us know if your contact details or other relevant information change.
Retaining personal information
We retain personal information only for as long as it is reasonably required for the purposes for which it may lawfully be used.
The length of time information is retained may depend on:
(a) the nature of the information
(b) the services we have provided
(c) legal and professional record-keeping requirements
(d) limitation periods
(e) accounting and anti-money laundering requirements
(f) the need to establish, exercise or defend legal claims.
When personal information is no longer required, we will securely delete, destroy or anonymise it where reasonably practicable.
Accessing and correcting your information
You have the right to request access to personal information we hold about you.
You may also ask us to correct information that you believe is inaccurate, incomplete or misleading.
In some circumstances, the Privacy Act allows us to withhold information or decline a request.
If this applies, we will explain the reason unless we are legally prevented from doing so.
Contacting us
To request access to or correction of your personal information, or to ask a question or raise a privacy concern, contact:
VATL
Email: reception@vatl.nz
Phone: 09 222 2650
Post: PO Box 106-551, Auckland Central, Auckland 1143
Privacy Officer
Email: ellen@vatl.nz
Phone: 09 222 2653
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner.
Changes to this policy
We may update this policy from time to time.
The current version will be published on our website and will apply from the date shown below.
Last updated: August 2026