Privacy policy

How we collect, use, and protect your personal information under the Privacy Act 2020.

QuoteHub is a trading name of Craig Smith Business Services Limited, which trades as Smiths Insurance & KiwiSaver and is a licensed Financial Advice Provider (FSP712931). Craig Smith Business Services Limited is the agency that collects and holds your personal information through QuoteHub, and this policy applies to it. The same company’s other website has its own privacy policy: smiths.net.nz/privacy-policy.

What we collect

We may collect:

Personal details (name, date of birth, contact details)
Financial information (income, assets, existing policies)
Health information, if you choose to give it to us (for example a health condition, or a past decline, loading or exclusion by an insurer)
Employment details
Recordings and transcripts of calls with our advisers, and the notes our advisers keep
Information from your use of our website (e.g. IP address, cookies) - see our Cookie policy

We only collect what is necessary for the purposes set out below.

How we collect it

We collect information:

Directly from you - when you complete forms, contact us, or communicate with us (e.g. by email, phone or online form)
From insurers - when we obtain quotes or manage policies on your behalf (with your authority)
From Momentum Life’s online application - if you start an application through our link, Momentum Life may show our advisers that it was started, completed or paid, and the details on it (see below)
From Meta - if you complete a form inside one of our Facebook or Instagram ads

Purpose

We use your information to:

Provide insurance advice and recommend suitable products
Arrange and manage policies with insurers
Communicate with you and with insurers about your cover
Keep accurate records of calls and of what we agree with you
Match commission from insurers to the policies we have helped with
Measure how our advertising performs
Improve our services and website
Comply with legal and regulatory obligations

Whether you have to give us information

Giving us your details is voluntary, but we cannot contact you or arrange cover without a way to reach you. Questions about your health, or about a past decline, loading or exclusion, are optional. You can skip them, and skipping them does not stop us helping you. You can ask to see and correct what we hold about you at any time (see Your rights below).

Your health information

Health information is sensitive, so we limit where it goes:

The health answers you give on our forms are stored in our enquiry records and seen by the advisers who help you. We do not send them to Meta, Google (including our enquiry spreadsheet), Zapier or our error-monitoring provider, and we never put them in a web address.
We pass health information to an insurer only when you ask your adviser to for your application. We do not pass the health answers you give us on QuoteHub to Momentum Life.
If you talk to an adviser about your health on a call, the call may be recorded, transcribed and summarised by the providers named under Service providers below.

Who will contact you & who we share it with

QuoteHub is a comparison and introduction service. When you submit an enquiry, your details are shared with one of our partner financial advice firms, who will contact you to help:

Smiths Insurance & KiwiSaver (Craig Smith Business Services Limited, FSP 712931), a licensed Financial Advice Provider holding an FMA Class 2 licence.
Naked Finance (Naked Finance Limited, FSP 735471), a licensed Financial Advice Provider holding an FMA Class 2 licence.

Both are established, fully licensed New Zealand advice firms. The partner firm may contact you by phone, email or text about your enquiry, and you can opt out at any time. We never sell your information to unrelated third parties or data brokers. The sections below name everyone else your information can reach, and why.

Information may also be shared with dispute resolution schemes, regulators, or professional advisers where required or permitted by law.

Insurers

If you apply for cover, the adviser who helps you passes the details an insurer needs to the insurer you choose. The insurers we place cover with are AIA, Asteron Life, Chubb Life, Fidelity Life, Momentum Life Limited, nib, Partners Life and Southern Cross. Our Disclosure page shows which types of cover each one offers. If you ask us to deal with another insurer or provider, we pass it your details for that purpose. The firm you are introduced to may also share your information with the KiwiSaver and investment providers it works with (for example Booster and Milford) when placing or managing your account.

Momentum Life’s online application: our IPP 3 and 3A notice

Some QuoteHub pages and forms link to the online application run by Momentum Life Limited (FSP472286), the insurer behind Quick Life and Momentum Life’s funeral cover. This section is our notice under information privacy principles 3 and 3A of the Privacy Act 2020. It tells you what Momentum Life collects from us, what we receive from Momentum Life, why, and who can see it.

If you use the application yourself, you enter your details directly on Momentum Life’s pages, and Momentum Life collects and holds them under its own privacy policy. Our link carries no name, contact details or health information. It carries the product, where the link came from and, in some cases, a random reference number that lets us match your application to your enquiry.
If an adviser helps you apply, we pass Momentum Life the details needed for your application, such as your name, date of birth, contact details and the cover you ask for. Momentum Life then collects that information from us rather than from you. It uses it to check your eligibility, issue and administer your policy, handle any claim and meet its legal obligations. We do not pass Momentum Life the health answers you gave us on QuoteHub.
What Momentum Life tells us. Our advisers can see in Momentum Life’s adviser console whether an application that came through our link was started, completed or paid, with the details on it. We use this to help you if you ask us to, to follow up with you if you have given us your details, and to match any commission. If you used the application without giving us your details, we contact you only where Momentum Life’s own notice to you says we may.
Your rights. You can ask Momentum Life for access to, and correction of, the information it holds about you, and you can ask us for the information we hold. Momentum Life’s contact details and privacy policy are on momentumlife.co.nz.

Advertising and measurement (Meta and Google)

We advertise on Meta (Facebook and Instagram) and Google, and we use their tools to measure which advertising leads to enquiries. When you visit our site, these tools may receive technical information such as your IP address, your browser and the pages you view. When you submit an enquiry, they may also receive a scrambled (hashed) version of your email address, phone number and name. We also tell Meta when an enquiry progresses, for example when cover is arranged, using the same scrambled details. Meta and Google handle that information under their own privacy policies. You can control cookies and similar tools through our Cookie policy.

We do not send Meta or Google the health answers you give on our forms.

Service providers

These providers handle your information on our behalf, only for the purposes below:

Supabase (our database and file storage, including call recordings) and Vercel (website hosting)
Zapier and Google (our enquiry spreadsheet), which pass your enquiry to our team and keep a log of enquiries
Aircall (phone calls and call recording), Deepgram (call transcription) and Anthropic (AI summaries of calls and notes for our advisers). These tools prepare notes and suggestions for our advisers, and they do not contact you
Twilio (one-time text codes that confirm your mobile number) and Cloudflare (checks that a form is being completed by a person)
Microsoft (our email), DocuSign (documents you sign electronically), Resend (internal notices to our advisers) and Sentry (error monitoring, which receives technical details such as your device, browser and the page you were on)

Storage and security

We take reasonable steps to protect your personal information from loss, misuse, and unauthorised access or disclosure. We limit access to the people who need it to help you. Many of our providers store data outside New Zealand (see Cross-border below). No system is completely secure; we will notify you in accordance with the law if a privacy breach is likely to cause serious harm.

Retention

We keep your information only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory requirements (including record-keeping obligations for financial advice), and to resolve disputes.

Your rights

Under the Privacy Act 2020 you have the right to:

Access your personal information - we will respond within 20 working days (or as the Act allows)
Request correction of information that is inaccurate, incomplete, or misleading

To request access or correction, contact our privacy officer (details below). If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner.

Privacy breaches

If a privacy breach occurs and it is reasonable to believe the breach has caused or is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as required under the Privacy Act 2020.

Privacy officer

For privacy enquiries, access or correction requests, or complaints about our handling of your information, contact our privacy officer:

Email: [email protected]

Cross-border

Meta, Google and several of the service providers named above are based outside New Zealand or store and process data outside New Zealand, including in the United States. Insurers may do the same. Where that occurs, we take steps to ensure your information is protected to a standard comparable with New Zealand privacy law, where practicable.

Cookies

Our website may use cookies and similar technologies. For details on what we use and how you can manage them, see our Cookie policy.

Explore related pages: Life Insurance, Income Protection, Health Insurance, Trauma Insurance, Calculators.