Privacy Policy
Last Updated: June 2024
Barclays & Lloyds Limited (“Barclays & Lloyds,” “we,” or “us”) is dedicated to protecting the personal data and privacy of our website visitors, as well as the contact persons for our customers, suppliers, and other business partners. For more details about us, refer to Section 7.
This Privacy Policy outlines how Barclays & Lloyds, acting as a data controller, processes personal data in compliance with the General Data Protection Regulation (EU Regulation 2016/679) (“GDPR”).
We may use cookies on our website. Unless those cookies are essential for the website's functionality and services, we will request your consent to use cookies upon your first visit.
1. Categories of Personal Data, Processing Purposes, and Legal Bases
1.1 Ongoing Business Partners
If you represent an organization we do business with, we may process personal data including your name, email address, title, telephone number, organization details, and correspondence. This data helps manage our business relationship. We process this data based on our legitimate interests in managing customer relationships.
Licensed immigration advisers or exempt-from-licensing NZ lawyers may collect personal data needed for providing immigration advice per their privacy policies. Personal data will be retained for the duration of our business relationship and up to 36 months thereafter.
1.2 Potential Business Partners
For potential business partners, we process personal data such as name, email address, title, telephone number, and organization details to facilitate potential business relationships. We may also process enquiry information for marketing purposes, based on legitimate interest or consent. This data is retained for up to 36 months unless a business relationship is established.
1.3 Client Support
We process personal data, including your name, email, phone number, location data, and correspondence, to provide client support. This data helps us communicate with you and keep records, based on our legitimate interests. Data is retained for up to 12 months after service termination.
1.4 Correspondence with Other Individuals
We may process personal data from general inquiries about our services, including communication content and metadata, based on our legitimate interests. Data is retained for up to 36 months after the last contact.
1.5 Newsletters
To send you newsletters and marketing information, we process your name, contact information, organization, and email address, based on consent or legitimate interests. Data is retained until you opt out or withdraw consent.
1.6 Branding
We may publish personal data for branding purposes on our website or social media, based on legitimate interests or consent.
1.7 Press Releases
Personal data may be included in press releases for branding purposes, based on legitimate interests or consent.
1.8 Social Media
We use social media channels to market our services. Personal data processing is based on our legitimate interests, with retention as relevant for the purpose. Please refer to the privacy practices of each social media provider.
1.9 Events
We may take photos at events for promotional purposes, based on legitimate interests. Data is retained for up to 36 months after the last contact.
1.10 Handling Data Subject Rights
We process personal data to handle requests related to data subject rights. Data is retained for up to three years.
1.11 Other Processing Purposes
We may process personal data for compliance with legal obligations or to protect vital interests. Data may also be processed for insurance, risk management, or legal claims. Retention is as specified in Section 2.
2. Retention
Personal data is retained as specified above. Additional retention may be necessary to comply with legal obligations or defend legal claims. Where data is stored, it will be archived with limited access.
3. Sharing Your Personal Data
We may share personal data with external service providers, group companies, and business partners, ensuring privacy and security. Data may also be transferred to law enforcement, governmental authorities, or in the event of a corporate merger or acquisition.
4. International Transfers of Personal Data
Personal data may be transferred within and outside the EEA, ensuring adequate protection per applicable data protection laws. Transfers outside the EEA are based on appropriate safeguards.
5. Data Subjects Rights
You have rights under the GDPR, including access, rectification, deletion, restriction, and data portability of your personal data. You can also withdraw consent at any time. For complaints, contact our Data Protection Officer or the relevant supervisory authority.
6. Changes to the Privacy Policy
We may update this Privacy Policy and will notify you of significant changes. The date of the latest update is indicated on this website.
7. Contact Information
This website is operated by Barclays & Lloyds Limited, registered in New Zealand (NZBN 9429043425723), with the registered office at 470 Joyce Road RD3, Tauranga 3173, New Zealand. For concerns or questions, email us at office@barclayslloyds.org