Privacy Policy

LOIS Leasing Privacy Policy

LOIS Leasing respects the privacy of the people we deal with and we uphold high standards of privacy practice and security. This policy explains how we handle personal information and how we interact with you online.

Whenever we handle personal information, we take steps to ensure that appropriate standards of privacy practice and security are applied.

The LOIS Leasing Privacy Policy sets out why we need to collect personal information, how we collect it, what we do with it, how it’s stored and who we might share it with. The Policy also describes how you can access or correct information we hold about you, how you can ask further questions or make a complaint, and information about our websites and online activities.

​Why we collection personal information

We collect personal information about you which is reasonably necessary to:​

  • Provide products and services to the organisation we provide services to with whom you are linked.

  • Consider applications and approaches from an organisation to whom you are linked.

  • Maintain your contact details.

  • Fulfil our legal obligations, such as those relating to anti-money laundering and counter-terrorism financing or where you have provided your explicit consent.

Without such information, we may not be able to establish or maintain a customer relationship with you or the corporate business customer to whom you are linked.

​How your personal information is collected

We collect personal data through the following methods:​​

  • Direct interactions: You may provide us with your personal data by filling in forms, corresponding with us by email, phone, post, or when:

    • Submitting inquiries through our website contact forms.

    • Attending webinars or events.

    • Entering into contracts for our services.

    • Creating accounts for our products and services.

  • Automated technologies: As you interact with our website, we automatically collect technical data about your equipment, browsing actions and patterns using cookies and similar technologies. Please see the LOIS Leasing Cookie Policy below for more information.​

  • Third parties or publicly available sources: We may also collect your personal information from third parties including public sources, your agents, introducers, referrers, or our partners and service providers. Service providers may include analytics and advertising platforms such as Google and Linkedin. Any information gathered through these channels will be governed by the privacy settings, policies, and/or procedures of the applicable platform, which we strongly encourage you to review.​

When we obtain your personal data from third parties, we will inform you within one month of obtaining your data, including where we got the information from, what type of data we collected, and our legal basis for processing it. We will provide you with this information before we first use your data or when we first contact you, whichever comes first. We only obtain data where we have a lawful basis to do so.

​How we use your personal information

We use your personal data only when it is required under the following lawful bases:​

  • Consent: Where we have your prior consent (for example, for marketing communications or non-essential cookies)

  • Contract: Where we need to perform the service you or an organisation whom you are linked with has signed up for

  • Legal Obligation: Where we have a legal or regulatory responsibility to do so

  • Legitimate Interest: Where it is necessary for our legitimate interests and your fundamental rights do not override those interests

Below is a table of our intended use of your personal data, our lawful basis for processing, and the types of data we process:

Purpose
Activity
Lawful Basis
Types of Data
Website Analytics and Online Advertising
Use of necessary, functional, and analytical cookies to analyse website usage and deliver personalised ads on external platforms behaviour
Legitimate interests (in operating our website); Consent
Technical Information, Ad Engagement Data
Market Research
To conduct surveys and research for service improvement
Consent; Legitimate interests (to improve service based on customer feedback)
Full Name, Email Address, Company Name, Survey Responses
Customer Billing
To process payments and manage billing
Contract
Invoice details, Tax Information, Billing Contact information
Webinars
To conduct educational events and generate leads
Legitimate interests (to engage existing and prospective users and demonstrating product value)
Full Name, Business Email, Company Name, Registration Source, Attendance Data
Direct Marketing
To send targeted marketing communications
Legitimate interests (to directly market relevant products to potential customers)
Full Name, Business Email, Company Name, Engagement Data
Partner Referrals
To engage with prospects referred by trusted partners
Legitimate interests (Art. 6(1)(f)) - pursuing business opportunities through partner relationships
Full Name, Business Email, Company Name, Position, Phone Number
Marketing/Sales Activities
To respond to inquiries and identify sales opportunities
Legitimate interests (to respond to inquiries and pursue business opportunities)
Full Name, Business Email, Company Name, Phone Number
Product Announcements
To inform customers about updates and enhancements
Legitimate interests (to maintain customer relationships)
Name, Email Address, Position, Company Name, Phone Number
Product Analytics
To monitor and improve our services
Legitimate interests (to track the use of our service and identify areas where we can improve service performance or service functionality. This includes business and technical improvements)
IP Address, Browser Type, Device Information, Clickstream Data
Dashboards and Reporting
To provide data visualisation and reporting services
Contract; Legal obligation
Names, Contact Information, Company details from stored contracts
Customer Data Storage & Processing
To allow customers to store and manage asset lease contracts
Contract; Legal obligation
Names, Contact Information, Company details of contract parties
User & Account Management
To enable users to create accounts and access platform functionalities
Contract; Legal obligation
Name, Email Address, Company Name

How we store and transfer information

We may transfer Personal Information to other group companies, or to third parties, where necessary to achieve any of the purposes specified in this Privacy Policy. These group companies or third parties may operate or be located outside the country where that Personal Information was collected.

​In particular, we may transfer Personal Information to third-party IT service and cloud service providers. A complete list of our subprocessors and their locations can be found on our trust centre.

​If we transfer any Personal Information outside the country in which it was collected, we will ensure that we take such steps as are prescribed by applicable law before we transfer that Personal Information. In particular:

  • New Zealand: If we transfer the Personal Information of any New Zealand-based person outside New Zealand, we will ensure that appropriate safeguards are in place with the recipient of that Personal Information, as prescribed by the Privacy Act 2020 (NZ), before we transfer that Personal Information;

  • Australia: If we transfer the Personal Information of any Australia-based person outside Australia, we will take such steps as are prescribed by the Australian Privacy Principles in relation to that Personal Information;

  • European Union & United Kingdom: In the case of Personal Information collected from European Union and UK subjects, we will ensure that appropriate safeguards are in place as prescribed by the European Union's General Data Protection Regulation (GDPR), UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, before we transfer any Personal Information of data subjects to any data processor based in any country that is not recognised as providing adequate protection. These safeguards include:

    • Standard Contractual Clauses (SCCs) approved by the European Commission.

    • International Data Transfer Agreements (IDTAs) or Standard Contractual Clauses approved by the UK Government.

    • Data Processing Agreements (DPAs) with all processors ensuring comparable safeguards.

    • Adequacy decisions where applicable.

You have the right to request copies of the safeguards we have in place for international transfers by contacting us using the details provided in this Privacy Policy.

​How long we retain your information

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, and in accordance with our internal data retention policies or legal and regulatory obligations.

​The table below sets out the length of time we retain your personal data:

What personal data?
How long do we keep it and why?
Financial/billing records
7 years for tax and regulatory compliance
Website analytics and market research
Up to 14 months to track how users are using our website over time, as the website changes, in order to optimise the content we provide and marketing we do includes business and technical improvements
Data we collect when you contact us, attend our events, or are referred to us
12 months for any ongoing business opportunity and reasonable follow-up period
Data we collect from customers in the delivery of services
Duration of relationship plus 35 days after termination

When your information is disclosed

Subject in all cases to local law, we may share personal information within LOIS Leasing, and may disclose personal information outside LOIS Leasing:

  • as required by law or regulations, such as those relating to anti-money laundering and counter-terrorism financing or as required by a regulator (lawful basis: compliance with legal obligations).

  • to our service providers under appropriate data processing agreements, who provide services in connection with our products and services (including auditing, accounting, legal, data processing, data analysis, identity verification, brokerage, financing and securitisation, website and technology services) (lawful basis: performance of contract or legitimate business interests).

  • to third parties where we have a legitimate business interest or other lawful basis for the disclosure, with appropriate safeguards in place.

You may request details of our current service providers and data sharing arrangements by contacting us.

​Keeping information secure

​We use security procedures and technology to protect the information we hold. Access to and use of personal information within LOIS Leasing seeks to prevent misuse or unlawful disclosure of the information — this includes internal policies, auditing, training and monitoring of staff.

If other organisations provide support services, we require them to take appropriate technical and organisational measures to secure the privacy of the information provided to them.

​Our Cookie Policy​

Our website and services, along with most online services, uses cookies and similar technologies to collect information for example, to distinguish you from other users when you browse our websites or use our online services and to allow us to improve our online services.

You can read about the cookies we use and how to manage them in our Cookies Policy.

​Your rights

We take reasonable steps to ensure that all personal information we hold is as accurate as possible. You can contact us at any time to request access to or correction of your personal information.

​Under applicable data protection laws, you have the following rights:

  • Right of Access - Request copies of your personal data and information about how we process it

  • Right to Rectification - Correct inaccurate or incomplete personal data

  • Right to Erasure - Request deletion of your personal data in specific circumstances

  • Right to Restrict Processing - Limit how we process your data in certain situations

  • Right to Data Portability - Receive your data in machine-readable format or transfer to another provider

  • Right to Object - Object to processing based on legitimate interests or direct marketing

  • Right to Withdraw Consent - Where processing is based on consent, withdraw at any time

Exercising your rights

You can contact us at privacy@loisleasing.com or via any of the methods outlined in the Contact Us section.

​We try to respond to all legitimate within one month of receipt, which may be extended by up to two further months where necessary due to complexity. We will inform you of any extension and the reasons for delay.

​In normal circumstances we will give you full access or make the requested corrections to your information. However, there may be some legal or administrative reasons to deny these requests. If your request is denied, we will provide you with the reason why (if we can). Where we decide not to make a requested correction and you disagree, you may ask us to make a note of your requested correction with the information.

​Requests are generally free of charge unless manifestly unfounded or excessive. 

​Contact us

If you have any questions or complaints regarding privacy or information handling, you can reach us at privacy@loisleasing.com or at any of our registered locations.

  • New Zealand: Privacy Officer, Level 6, Building C/167 Victoria Street West, Auckland Central, Auckland 1010, New Zealand

  • Australia: Privacy Officer, Suite 506, 19a, Boundary Street, Rushcutters Bay NSW 2011, Australia

Please mark communications to the attention of our Privacy Officer. We will respond to let you know who will be handling your matter and when you can expect a further response.

​Additional information for individuals in the EU or UK

We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions:

  • European Union (EU)

  • United Kingdom (UK)

Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter or make use of your data subject rights, please visit the following website: https://app.prighter.com/portal/loisleasing

​Complaints

If your concerns are not resolved to your satisfaction, you can escalate your complaint to the appropriate regulatory authority:

We welcome the opportunity to address any concerns directly and encourage you to contact us first so we can work to resolve any issues.

​Changes to this Privacy Policy

We may change this Privacy Policy at any time by updating the terms on this page. As privacy laws and business practices evolve, we may need to revise this Policy to reflect these changes.

​We will take reasonable steps to notify you of any material changes to this Privacy Policy. You should review this page regularly to ensure you are aware of any updates to its terms.

​Where changes are significant or may materially impact your rights, we will provide more prominent notice or contact you directly or contact you by other means (including, for certain services, email where we have your contact details).