Privacy Policy

We are committed to respecting your privacy and ensuring that your personal information is handled in accordance with:

• the Privacy Act 2020 (NZ) (including the 13 Information Privacy Principles) (Privacy Act);

• any other applicable privacy codes and regulations in New Zealand, and

• any other relevant law where Ray White operates.

If you require more details on how we manage privacy in a jurisdiction outside New Zealand, please contact us.

Under the Privacy Act and in this Privacy Policy, personal information means any information (in any format) that identifies you or could reasonably be used to identify you (e.g. name, address, telephone number, email address, occupation, etc.). If information cannot identify you (and is not linked to details that would identify you), it is not considered personal information for the purposes of this Policy.

We collect a range of information to help us provide, manage, and improve our Services. Some of this may be personal information, while some may not. We generally collect information directly from you, except where you have agreed otherwise, where permitted under the Privacy Act or where it is unreasonable or impracticable to do so. Below is a general overview of the types of information we collect.

Information you provide directly:

Contact and Identification Details: Such as your name, email address, postal or residential address, phone number, date of birth, and/or other demographic details.

Real Estate Transaction and Service Information: If you engage with our real estate agents or franchisees, we may collect details about your property interests, listings, inspections, or similar transaction-related data (e.g., financial or investment details) to facilitate our Services.

Communications and Support: When you communicate with us - by phone, email, social media, or in person - we may keep those communications for record-keeping, quality assurance, training, or dispute resolution purposes.

Account Details: If you sign up for an account or subscribe to our Services, we may request your name, username, email address, password, date of birth, or other contact and demographic details.

Profile Information: Certain parts of our Services may require additional details, such as postal/delivery addresses or phone numbers. Some profile elements (e.g., your username) may be visible to others if there is a public or shared feature.

Verification & Authentication: To help maintain a trusted environment, we may ask for documentation such as a driver licence or other government-issued ID. We will tell you at the time if this applies.

Payment Information: If you make payments via our platforms, we may collect bank or credit card information (though typically stored through secure, third-party payment providers).

Communications & Support: If you communicate with us - by email, phone, message boards, or otherwise - we may keep those communications for training, record-keeping, fraud prevention, or quality assurance.

Surveys, Feedback & Promotions: You may provide information through surveys, feedback forms, promotional sign-ups, or other interactive features.

Usage data: We track how you interact with our websites, apps, and related features (e.g., pages viewed, search queries, clicks, or time spent).

Location information: If location-based features are enabled, we might collect IP-based location data or (with permission) precise GPS data from your mobile device.

Analytics and device Information: We automatically gather technical details such as IP addresses, device type, browser version, operating system, and crash logs. We often use third-party analytics providers (e.g., Google Analytics) to help with this.

Cookies and similar technologies: We may use cookies, web beacons, tracking pixels, and similar tools to recognise you, remember your preferences, show relevant ads, and analyse usage. Our third-party partners may also use these on our behalf. You can usually disable or delete cookies through your browser settings, though this may affect some functionality of the Services.

Property and Market Data: Where relevant to providing or improving our Services (e.g., property valuation or marketing), we may obtain information from public sources or other reputable third-party data providers.

Linked Services. If you connect a third-party account (e.g., Google) with our Services, that service may share certain data (such as your profile details) based on their own privacy settings and policies. As information from any linked service is authorised by you via your privacy settings at that service, the particulars of any information shared will vary.

Background Information about you. In some cases - and only where permitted by law - we might request or obtain credit or background checks. We will let you know if this applies so you can choose whether to proceed.

Public and Partner Sources: We may supplement our own records with publicly available or partner-supplied information (e.g., public registries or data from joint marketing partners).

• Facilitating property transactions, inspections, or marketing campaigns,

• Providing you with listings, appraisals, or other relevant materials.

• We may process personal information you provide (including data about your leads or customers) to perform analyses or generate predictive insights that help inform marketing, lead management, or other decision-making within your business.

• Updating our records and maintain your contact details.

• Personalising features or content.

• Analysing usage patterns and feedback to refine existing features.

• Performing research and analytics to make informed business decisions and to help us understand how our Services are performing and whether they are meeting the needs of our users.

• Training our teams on customer interactions and support.

• Responding to your inquiries, support tickets, or requests.

• Sending important service-related updates, notices, or administrative messages (e.g., changes to this Policy).

• Informing you about real estate Services or products we think may interest you.

• Offering promotions, events, or relevant partner offers.

• Complying with obligations under applicable law (e.g., AML checks).

• Cooperating with requests from regulators or government bodies.

• Preventing harm or unlawful activity (e.g., detecting fraud or abuse).

• Enforcing our legal agreements, investigating potential violations, and resolving disputes.

• Complying with legal obligations, cooperating with law enforcement, or meeting governmental requirements, including disclosures authorised under the Privacy Act.

• Facilitating day-to-day business functions (e.g., accounting, contracting, data hosting).

• Supporting Ray White’s administrative, marketing, planning, product/service development, quality control, business processes, surveys, and research, and provide updated personal information to our agents, employees, contractors, and service providers.

• Conducting audits and quality assurance.

• Allowing for possible business transitions (mergers, acquisitions, reorganisations), where personal information may form part of the transferred assets (we will let you know if such a transfer occurs).

We generally do not sell your personal information. However, in certain situations, we may need to disclose it to deliver our Services or comply with our obligations. This may include:

Our Employees, Agents, Franchisees, and Related Bodies Corporate: We will share the necessary information to provide real estate Services, IT support, or operational assistance.

Service providers and contractors: We may work with third-party vendors for payment processing, hosting, analytics, or other support. These providers can access personal information only as needed to perform Services on our behalf, and they are bound by obligations to keep it confidential and secure.

Business partners (with consent): We might share certain details with advertising or marketing partners to deliver relevant offers, but only if you have not opted out.

Legal requirements and protection: We may disclose information where needed to comply with the law or where permitted under the Privacy Act (e.g., responding to lawful requests by public authorities, courts, or regulators) or to protect ourselves, our users, or others (e.g., investigating suspected fraud).

Mergers or acquisitions: If we undergo a corporate transaction (e.g., sale of assets or merger), your personal information may be part of that transaction.

Affiliates and related bodies corporate: Where relevant, we may share data with our affiliated or related entities (including those located outside New Zealand), under agreements ensuring appropriate data protection.

Others where you direct us: If you expressly request or authorise the disclosure of your information (e.g., if integrating a specific third-party service).

When you access our website, applications, electronic newsletters and other Services, we may use automated tools to collect information about you and your visit.

Cookies are small text files that websites send to your device to uniquely identify your browser and store information. Web beacons and tracking pixels are electronic tags that monitor user behaviour, including email engagement and website navigation. This helps us:

• recognise return visitors and remember their preferences;

• track and analyse usage patterns (e.g., what pages or emails prompt the most interest);

• measure the effectiveness of campaigns or promotions; and

• personalise content and advertising to be more relevant to you.

Most web browsers let you manage your cookie settings (e.g., blocking them entirely, deleting existing cookies, or requesting notifications before a cookie is set). Adjusting these settings may affect how our website functions.

You can request access to or correction of the personal information we hold about you at any time. Where feasible, we will provide it in a suitable format (e.g., emailing a copy). If your request involves more complex retrieval or collation, we may charge a reasonable fee to cover our administrative costs, but we will always inform you in advance if a charge applies.

In some circumstances, we may be unable to give you access to certain information (for instance, if doing so would unreasonably affect another individual’s privacy or breach confidentiality). We will explain any refusal to you in writing.

To request access or correction, please contact our Privacy Officer (details below).

You agree that we can send you direct marketing communications about products, Services, or special promotions we believe could interest you. These communications may come via email, SMS, or other methods in accordance with applicable laws, such as the Unsolicited Electronic Messages Act 2007. If you prefer not to receive these:

• use the “unsubscribe” link or instructions provided in any marketing message; or

• contact our Privacy Officer to let us know your preferences.

We will respect your request and remove you from any direct marketing lists. Please note you may still receive administrative or account-related communications (e.g., updates to this Privacy Policy) even if you opt out of marketing messages.

We may store or process your personal information on servers located outside New Zealand (for example, through cloud-hosting providers). When we transfer data outside New Zealand, we take reasonable steps to ensure it is protected by privacy safeguards comparable to those under New Zealand law (e.g., requiring third-party recipients to commit to robust data protection obligations); however, we do not control these third parties’ operations. Where relevant, you agree to the transfer, storage, and processing of your information using those external Services, subject to our compliance with this Privacy Policy and the Privacy Act.

By continuing to use our Services, you consent to such overseas transfers, provided we maintain safeguards consistent with this Privacy Policy and applicable privacy legislation.

We take industry-appropriate measures to safeguard your information from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures include administrative, technical, and physical safeguards. Nonetheless, please note:

• Transmission Risks: No data transmission over the internet or electronic storage is entirely secure. We cannot guarantee absolute security, and any transmission of your information is at your own risk.

• Password & Payment Details: We generally do not store your password in readable form and only process payment details using secure, accredited payment gateways that meet strict security standards.

Ongoing Efforts: We regularly review and update our security practices to help ensure the protection of personal information.