Who this policy is about
This policy explains how Kemba Limited (Kemba, we, us) collects, uses, and protects personal information through kemba.co.nz and the Kemba dashboard (the Platform). It's written to meet the Privacy Act 2020.
If you instruct a purchase, you also become a client of Point Legal Limited, the law firm that does the legal work. Point Legal handles some of your information as your lawyer, under its own professional and privacy obligations, separately from what's described here.
What we collect
- Contact details: name, email, phone number.
- Property and purchase details: the address, price, and key dates of what you're buying.
- Identity verification information, collected through our identity verification provider, Didit, as required before any money can move on a regulated conveyancing file.
- Documents you upload: things like your sale and purchase agreement, KiwiSaver correspondence, or ID documents.
- Messages you send us or your lawyer through the dashboard.
- Usage and performance data: how you use the Platform and how quickly it responds, collected through PostHog, Vercel Analytics and Vercel Speed Insights, so we can see what's working and fix what isn't. Vercel Speed Insights records anonymous performance data and doesn't tie it to an individual visitor or IP address.
Why we collect it
- To run your purchase: setting up your file, verifying your identity, and giving Point Legal what they need to act for you.
- Because the law requires it. The Anti-Money Laundering and Countering Financing of Terrorism Act 2009 requires identity verification before a conveyancing file can proceed.
- To communicate with you about your purchase.
- To improve the Platform: understanding where people get stuck, what's confusing, and what to build next.
Who we share it with
- Point Legal Limited, the law firm acting for you, so they can do the legal work.
- Didit, our identity verification provider, to run the identity check the law requires.
- Service providers who help us run the Platform (hosting, analytics, email delivery), bound by their own confidentiality and security obligations.
- Anyone we're required to share it with by law, including under AML/CFT reporting obligations that apply to Point Legal.
We don't sell your personal information.
Storage and security
Your information is stored with reputable providers, in each case with reasonable technical and organisational safeguards. No system is completely secure, so we can't guarantee protection against every possible risk, but we take this seriously and review it as the Platform grows.
How long we keep it
We keep your information for as long as it's needed for the purposes above, and for as long as the law requires. Some records connected to a conveyancing file, including AML/CFT records held by Point Legal, must be retained for several years under law.
Your rights
Under the Privacy Act 2020, you can ask to see the personal information we hold about you, and ask us to correct it if it's wrong. To do either, email hey@kemba.co.nz.
If you're not happy with how we've handled your information, tell us first so we can put it right. If you're still not satisfied, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
Cookies and analytics
The Platform uses cookies and similar technology to keep you signed in and to understand how the Platform is used, through the analytics tools listed above. You can control cookies through your browser settings, though some parts of the Platform may not work properly without them.
Changes to this policy
We may update this policy as the Platform changes. We'll update the date at the top when we do.
Contact
Kemba Limited NZ company number 9452662 · NZBN 9429053896575
Privacy questions or requests: hey@kemba.co.nz