Hnry | Privacy Policy

1. INTRODUCTION

This New Zealand Privacy Policy was last updated on 10 August 2026.

Hnry Limited (Company number 6251417) (“Hnry”, “us”, “our” and “we”) takes your privacy seriously.

This Privacy Policy sets out how we collect, store, process, transfer, share and use data that identifies or is associated with you (“Personal Information”) when you use our websites (including hnry.co.nz, hnry.com.au, hnry.com, hnry.co.uk, and hnry.io, or any other website operated by Hnry), our app(s), and any services that we provide, including the promotion, administration, and operation of accounting and taxation automation services (together, the “Services”), and/or when you enter into a commercial relationship with us or otherwise interact with us.

Your use of any part of the Services will constitute your consent to the collection, transfer, processing, storage, disclosure, and other uses of your Personal Information in accordance with this Privacy Policy. If you do not agree with the terms and conditions of this Privacy Policy, please do not use the Services.

You should read this document in its entirety. We may amend this Privacy Policy at any time by posting a revised version on our website(s) and/or app(s).

2. DEFINITIONS

“AML/CFT Act” means the Anti-Money Laundering and Countering Financing of Terrorism Act 2009 (NZ).

“Personal information” has the meaning given in section 1 above.

“Privacy Act” means the Privacy Act 2020 (NZ).

“Services” has the meaning given in section 1 above.

“You” or “your” means you and anyone using the Services or otherwise contacting us (on your own behalf, or for another individual or entity).

3. COLLECTION OF INFORMATION

The information we collect

3.1 Hnry will collect, use, store and transfer various types of Personal Information. This includes:

  • (Personal details) including information that you provide us in the course of using the Services, such as your name, date of birth, and government-issued identifiers (such as your IRD number and driver’s licence number);

  • (Contact details) including your email address, residential address, billing address, telephone number and any other contact details that you provide to us as part of the Services;

  • (Transaction information) including details of the Services you use, and records of payments made to and by you in connection with the Services;

  • (Financial information) including billing and payment details (such as bank account numbers), IRD number, and GST number;

  • (Employee and contractor records) including engagement information, remuneration details, membership of a professional or trade association (as applicable), trade union membership (as applicable), leave entitlements, superannuation details, and government-issued identifiers (such as your IRD number and driver’s licence number);

  • (Third party information) in order to use Hnry, we also request certain third-party information. This includes your customers’ full name, physical address, email address and phone number.

  • (Biometric Information) including a live image of your face collected via our identity verification provider for the purpose of verifying your identity, as further described in clause 3.6 below;

  • any other Personal Information that we may need in order to facilitate your dealings with us.

When we collect the information

3.2 Hnry collects this information in various ways, including when:

  • you access, use, provide feedback or otherwise interact with the Services, including support messages and use of third-party websites or integrated with our Services;

  • you communicate with our representatives or Hnry staff members during the course of providing you with the Services;

  • you send information in emails or correspond with Hnry during the provision of the Services;

  • we lawfully obtain any information from third parties such as verification services (including Veriff) and credit reporting agencies;

  • we indirectly obtain information from you, such as information about the hardware and software you use when accessing the Services, your IP address, the pages you access, and other websites that you visit prior to accessing the Services; and

  • we use “cookies” to track your use of the Services. For information on cookies refer to clause 11 ‘Cookie Policy’.

Why we collect this information

3.3 We collect Personal Information in order to:

  • provide Services to you and undertake associated business processes and functions;

  • verify your identity and comply with legal obligations under the AML/CFT Act;

  • collect payment for your use of the Services provided;

  • troubleshoot problems with the Services;

  • detect and prevent fraud and other illegal use of the Services;

  • send you marketing notices, service updates, and promotional offers;

  • develop, monitor, and improve Services; and

  • further any other purpose disclosed to you at the time of information collection.

Where we collect information from

3.4 We will generally seek to collect any Personal Information directly from you, unless it is unreasonable or impracticable to do so, or we are required by law to collect it from a third party.

3.5 We may also collect Personal Information about you from the following third parties for the purposes set out in clause 3.3 above (including the verification of your identity in accordance with the AML/CFT Act):

  • ACC (www.acc.co.nz);

  • Centrix (www.centrix.co.nz);

  • Department of Internal Affairs (www.dia.govt.nz);

  • GetVerified Limited (www.getverified.co.nz);

  • Inland Revenue (www.ird.govt.nz);

  • Land Information New Zealand (www.linz.govt.nz);

  • New Zealand Transport Agency (www.nzta.govt.nz);

  • Veriff (www.veriff.com);

  • Verifi Identity Services Limited (www.gbg.com/nz); and

  • any other third party that we may notify you about from time to time.

Biometric verification of your identity

3.6 Where we verify your identity through Veriff, we and/or Veriff will collect a live image of your face from you and compare it against the photo on your identity document (a process known as biometric verification). We will only collect this information in order to meet our obligations under the AML/CFT Act. Veriff may also use it for improving and training its verification technology, acting independently of Hnry for that specific use. This is governed by its own privacy notice, available at veriff.com/privacy-notice. If you’re unable to complete identity verification through Veriff, please contact us to discuss whether an alternative verification method is available to you.

3.7 We may keep a copy of the image used to carry out biometric verification checks, along with a record of the outcome (the date, the method, and the result), for 5 years after the end of your relationship with us, in line with our record-keeping obligations under the AML/CFT Act.

Automated decision-making and other checks

3.8 We may use automated tools, including AI tools, to help us review transactions, monitor accounts, and assess tax compliance information, as part of the purposes described in clause 3.3 above. These tools analyse Personal Information we already hold about you. They do not make final decisions about your account or our Services. Rather they identify matters for our team to review, and any decision that could significantly affect you is made by a person, not the tool itself. Personal Information we already hold may be provided to the relevant providers so that these tools can operate. We do not permit any such provider to use this information to train its models. As set out in clause 3.6 above, we also use Veriff to carry out automated identity checks.

Personal information about your customers

3.9 Where you provide Personal Information about other individuals (such as your own customers) to us, you agree:

  • you are authorised to do so;

  • you will let those people know (to the extent they may not otherwise be aware) about the collection of their Personal Information, the purpose for which it’s collected, who it may be shared with, their rights of access, our identity, and how to contact us; and

  • where we ask you to, you will assist us in responding to any individual’s request to access or update their Personal Information that you have provided to us.

4. SHARING INFORMATION WITH OTHERS

4.1 We may share Personal Information about you as follows:

  • (providing the Services) to entities or service providers under contract with Hnry for the purposes of conducting our business and providing our Services to you. This includes transaction processing, running analytics, fraud prevention (including AI tools, as described in clause 3.8 above), and professional advisors such as solicitors, briefing business advisors and consultants. It also includes entities we partner with to offer additional products and services, but only when you elect to receive information about those additional products and services;

  • (Sale of Hnry and business assets) in the event of the sale, acquisition, or merger of some or all of our assets, your personal information might be a part of the transferred assets. We will notify you in the event of such an occurrence by placing a notice on our website(s) and/or our app(s);

  • (Law enforcement and government body requests) in connection with a formal request, subpoena, court order, or similar legal procedure;

  • (Legal requirements) as may be required or permitted under any other law (including the Privacy Act and AML/CFT Act); and

  • (Consented purpose) for any other purposes for which you have consented from time to time.

4.2 Hnry will not sell or lease the information we collect to third parties for their promotional purposes unless we receive your permission to do so.

5. DATA RETENTION

5.1 Hnry is required to hold customer information for certain periods to comply with our legal obligations. The relevant retention periods may vary depending on the type of information and the relevant laws that apply to it. Under the AML/CFT Act, the relevant period is 5 years from the date our relationship ends with you. The information we may need to retain includes:

  • your name, address, date of birth and other relevant Personal Information;

  • your transactional records; and

  • your tax records.

5.2 Where we anonymise your Personal Information (so that it can no longer be associated with you) for research or statistical purposes, we may use this information indefinitely without further notice to you.

6. MODIFY OR RESTRICT YOUR INFORMATION

6.1 Options to access, modify or update your Personal Information can be found by logging into your account and changing your preferences or, in the instances where Personal Information cannot be modified or amended by you, by contacting Hnry to request changes.

6.2 If, after giving Hnry your permission to share your Personal Information with third parties, you later decide that you no longer want us to share such information, you can email privacy@hnry.co.nz. Where you do so, this may result in you no longer being able to use our Services.

7. ACCESS AND CORRECT PERSONAL INFORMATION

7.1 We are committed to maintaining accurate, timely, relevant, and appropriate information. We will also update any inaccurate Personal Information about you if you inform us that the information is inaccurate, out of date, incomplete, irrelevant, or misleading.

7.2 You are entitled to request all Personal Information (including biometric information) held by Hnry. To do so, please email us at privacy@hnry.co.nz. Where you are entitled to that information, Hnry will ensure it is provided in the manner you requested it within a reasonable time of such request. If it is not practical or possible to do so, Hnry will provide the information in another suitable form such as via email or post.

7.3 There are generally no charges for requesting access to or the correction of your Personal Information.

7.4 There may be circumstances which mean that information cannot be released to you. For example, these circumstances may include:

  • the information may impact the privacy of another individual;

  • the information is commercially sensitive information;

  • the information is subject to solicitor-client or litigation privilege;

  • Hnry is prohibited by law from providing you with access; or

  • the disclosure could be expected to threaten the safety, physical or mental health or life of an individual.

7.5 If Hnry decides that it cannot provide you with certain information, it will outline the reasons for its decision in writing and the mechanisms available to complain about the refusal.

7.6 In order to protect the confidentiality of your Personal Information, details of your information will only ever be passed on to you where we are satisfied that the information relates to you. Accordingly, we may request documentation from you which confirms your identity before passing on any Personal Information which relates to you.

8. SECURITY – SSL SECURED

8.1 Hnry takes all reasonable steps to maintain the security of your Personal Information whilst it is in our possession. We may hold Personal Information in various forms, including without limitation, electronic records, visual records, and audio recordings. We have a range of safeguards to protect this information.

8.2 Hnry takes reasonable steps to:

  • (Keep current records) to ensure that Personal Information we collect is accurate, up-to-date, complete, and relevant, other than where it is only collected to provide advice in respect of a particular point in time, in which case we will seek to ensure it is accurate, complete and relevant as at that particular point in time;

  • (Safeguard Personal Information) from misuse, interference, and loss and from unauthorised access, modification, or disclosure. We have put in place SSL (Secure Socket Layer) encryption technology to protect your Personal Information transmitted through the Services. We also require a username and password from each user who wishes to access the information held in their Hnry account;

  • (Retain only for the Services) all forms of Personal Information that are gathered for the Services and keep such information online on your account;

  • (De-identify Personal Information) or destroy Personal Information that is no longer required for the purposes that it was collected, except where it is necessary to retain it in order to maintain ongoing records for you; and

  • (Physical security) is maintained over our paper and electronic data stores.

8.3 We cannot guarantee the security of information transmitted via the internet. As such, transmission of Personal Information via the internet is at your own risk and we cannot be held responsible for the security of such information. This includes transmission of your Personal Information to us from third parties via the internet.

8.4 Your use of, or the supply of your information to, third parties who supply us with information, or who we are required to supply information to, in connection with the Services is entirely at your own risk and we make no representations or warranties regarding third parties’ privacy practices.

8.5 We can store your information physically or electronically ourselves, or with others contracted to hold the information for us in New Zealand or overseas. We will act reasonably to ensure that your information is protected from unauthorised use or disclosure.

9. UNSOLICITED INFORMATION

9.1 If you provide Personal Information that we have not requested, we will only retain it in limited circumstances. We will only retain the unsolicited information if it is reasonably necessary for us to provide you with the Services, and you have consented to the information being collected, or it was not practical or reasonable for us to obtain your consent under the circumstances.

10. OVERSEAS DISCLOSURE

10.1 It is unlikely that we will need to disclose your Personal Information to an overseas recipient or otherwise store your Personal Information overseas. If we do need to do so, this will generally be limited to third party providers of services such as identity verification, website hosting, data storage, electronic communications, and data analysis. Any such disclosure will be done in accordance with the Privacy Act. This includes ensuring we reasonably believe that recipients of Personal Information overseas are subject to a law, or binding scheme, that has the effect of protecting Personal Information in a way that, overall, is at least comparable to the Privacy Act.

10.2 We take reasonable steps to ensure that persons to whom the disclosed Personal Information relates to have comparable rights in relation to that information once disclosed overseas.

11.1 To improve your experience of the Services, we may use ‘cookies’, being small data files that are served by the Services and stored on your device. These are used by us or third parties for a variety of purposes including to operate and personalise the Services. Cookies may be used for improving security, recording preferences, conducting internal analytics, conducting research to improve our offering, assisting with marketing, and delivering certain Services functionality.

11.2 You may refuse to accept cookies by selecting the appropriate setting on your internet browser. However, please note that if you do this, you may not be able to use the full functionality of the Services.

12. THIRD PARTY WEBSITES

12.1 The Services contain links to other websites. Hnry is not responsible for the privacy practices or the content of other websites. Please ensure you familiarise yourself with the privacy practices of these other sites prior to submitting your Personal Information to them.

13. COMPLAINTS

13.1 Please send any complaints in relation to this Privacy Policy to privacy@hnry.co.nz.

13.2 We will investigate and attempt to resolve your complaint in accordance with the Privacy Act. If you are not satisfied with the outcome of this process, then you may contact the Office of the Privacy Commissioner.

14. AVAILABILITY AND CHANGES TO THIS POLICY

14.1 This Privacy Policy is available on our website(s) and/or our app(s). Hnry retains the right to change this Privacy Policy from time to time. All updated versions of this Privacy Policy will be posted and kept up to date on our website(s) and/or our app(s).

14.2 If you require any further information or have any queries regarding our Privacy Policy, please contact us at privacy@hnry.co.nz.

Back to Legal