Cashpoints Privacy Policy

This Privacy Policy was last updated on 1 October 2025.

Cashpoints New Zealand Limited (“Cashpoints”, “we”, “us”, or “our”) is committed to providing you with the Benefits in a way that safeguards your privacy.

In this Privacy Policy, any person who we provide Benefits to or that we receive Personal Information about is referred to as “you” or “your”. This Privacy Policy explains how Personal Information may be collected (or otherwise gathered by us), used and disclosed, and our and your rights and obligations in relation to the Personal Information. We will handle all Personal Information that we hold as a result of your use and receipt of the Benefits in accordance with this Privacy Policy and the New Zealand Privacy Act 2020.

Please read this Privacy Policy carefully before subscribing to, accessing, or receiving the Benefits and agreeing to become a Cardholder. If you subscribe to, access, or receive the Benefits, you agree that we can collect Personal Information and use it for various purposes (in accordance with this Privacy Policy). If you do not share certain Personal Information with us, we may not be able to provide the Benefits to you. You agree that we may use your Personal Information to create anonymised information and/or aggregating information which cannot be linked to you (“Analytics Information”). We may disclose your Personal Information to other parties set out in this Privacy Policy – including:

• where you use your Cashpoints Card at a Participating Retailer and you are a member of that retailer’s loyalty programme, we may disclose Personal Information to that Participating Retailer; 

• where you give us your consent, disclose Personal Information to Approved Retailers; or

• to certain Participating Retailers, in order to comply with our contractual obligations should those retailers no longer be part of the Loyalty Programme. In these circumstances, we may only share Personal Information where you have previously consented to us sharing your information with that retailer, you have not advised us that you have withdrawn that consent, and you have used your Cashpoints Card at that retailer within a reasonable period of time before our relationship with the retailer ends.

For more information see the “Disclosure of Personal Information” section below.

By subscribing to, accessing, or receiving the Benefits you agree to follow and be bound by our Terms and Conditions. If you do not agree to all the Terms and Conditions, you must not subscribe to, access, or receive the Benefits.

This Privacy Policy may be varied by us at any time. The variation will be effective upon the posting of modified terms on our website or us otherwise notifying you in writing (including by email). When we update this Privacy Policy on our website, we will amend the “last updated date” set out above and otherwise make it clear on our website that this Privacy Policy has been updated. You should ensure you have read and understood the most recent Privacy Policy posted on our website, or otherwise notified to you. By continuing to receive the Benefits after an update to this Privacy Policy, you are agreeing to be bound by the terms of the new Privacy Policy. You must not subscribe to, access, or receive the Benefits and you must terminate your Account in accordance with the Terms and Conditions if you do not agree to the latest Privacy Policy.

Terms Explained

In this Privacy Policy the following terms are defined as:

“Account” means an account accessible through the Websites, which is linked to a person and through which that person can manage the collection and spending of Points;

“Analytics Information” has the meaning set out above;

“Approved Retailer” means the Participating Retailers you authorise us to share your Personal Information with;

“Benefits” means the opportunity to participate in the Loyalty Programme, the ability to collect and spend loyalty points, access the Account, and any other services we may provide to you from time to time subject to the Terms and Conditions;

“Cardholder” means the holder of an Account with us;

“Cashpoints Card” means the physical or virtual card that is provided to you by us (or otherwise available at Participating Retailers) which will enable you to collect and spend loyalty points in accordance with the Terms and Conditions;

“Group Account” means an account which:

1. is associated with a group of Cardholders;

2. allows those cardholders to accumulate and pool together loyalty points; and

3. where the activity associated with each cardholder can be identified separately from the other cardholders associated with the Group Account;

“Group Cardholder” means any person who joins a Group Account;

“Loyalty Programme” means Cashpoints’ rewards programme where you can collect and spend rewards through the purchase of certain goods or services or participating in certain activities, all in accordance with the Terms and Conditions;

“Participating Retailer” means a provider of goods and/or services that participates in our Loyalty Programme;

“Personal Information” means any information about an individual where that information can be linked to (or in conjunction with other data can be linked to) an identifiable individual;

“Terms and Conditions” means the online terms and conditions that govern the provision of Benefits to you; and

“Websites” means our website at www.cashpoints.co.nz (or any other replacement URL) or any mobile applications that can be used to receive the Benefits (subject to separate application terms and conditions);

Collection of Personal Information

We (or other parties acting on our behalf) may collect information about you, including Personal Information and any other information which is provided by:

• you, both at the time of subscribing for the Benefits and when you use the Benefits, including name, the suburb you live in, postcode, date of birth, gender, email address, phone number (where you provide this to us), IP address, and any other Personal Information we may reasonably collect to confirm your identity;

• Participating Cashpoints Retailers, including details of transactions made at those retailers (such as, the date you shopped, how much you spent, your method of payment, stock keeping unit information, and what you have purchased);

• various third parties (including analytics and data providers) on the basis that you have authorised those third parties to share information with us or businesses of a similar nature.

We may aggregate information that is generated by our systems that relates to your use of the Benefits or the Websites. This information may not relate to you personally, but if we combine or connect aggregate information with Personal Information so that it can directly or indirectly identify you, we will treat the combined data as Personal Information, which will be used in accordance with this Privacy Policy.

If you fail to provide us with Personal Information that we request, then this may result in certain Benefits (or certain aspects of Benefits) not being available to you.

Use of Personal Information

We (or other parties acting on our behalf) may access or use your Personal Information:

• to provide you with (and assist you with using) the Benefits;

• to enhance the delivery of the Benefits to you;

• to correspond with you in relation to your use of the Benefits. If you correspond with us, we may use Personal Information that we hold about you to verify your identity;

• to notify you of any changes to the Benefits;

• to monitor, develop and improve our Benefits and any other products or services we offer;

• to create Analytics Information. No Personal Information will be stored about you in Analytics Information. We may:

  o use Analytics Information to enhance the delivery of the Benefits or our other products and services; and

  o provide Analytics Information to Participating Retailers and any other entity we enter into an agreement with. Those retailers and other entities may use Analytics Information for their own purposes (but we will secure commitments from those parties that Analytics Information will not be re-engineered to identify you or your Personal Information).

• for marketing and promotional purposes provided that we receive any required consent from you (in accordance with this Privacy Policy);

• to provide evidence of a transaction or contract entered into;

• to comply with our legal obligations (including to satisfy any applicable law or regulation);

• to safeguard our rights and safety of others; and

• for any other use that you authorise.

Marketing Communications
If you provide your contact information to us, then we will give you the opportunity to opt-in to receiving communications for marketing reasons. If you opt-in, you have the right to withdraw consent to receiving marketing communications by managing your preferences via your Account, sending us an email at any time to change your preferences, or using the unsubscribe or preferences links at the bottom of any of our direct communications. If you elect not to receive communications or ask to be removed from a mailing list, we may still send you communications where it is necessary to provide the Benefits or to provide you with details of the Benefits.

You may give us your express consent to share your Personal Information with Approved Retailers. Please note that your communication and marketing preferences only apply to correspondence you receive from us and, where you receive correspondence from Approved Retailers (because you have authorised us to disclose your Personal Information) then you will need to separately update your preferences with those retailers.

If you use the same email address as another cardholder then your unsubscribe request applies to you personally, and we will not unsubscribe others receiving our communications at the same email address. Marketing communications will be addressed to the person intended to receive it and you will need to unsubscribe for each Cardholder receiving correspondence at an email address used by multiple cardholders.

Disclosure of Personal Information

We may disclose Personal Information we hold about you with other organisations or individuals in the following circumstances:

• Where we engage the following categories of third parties to perform services on our behalf or assist in providing the Benefits:

  o data analytics providers (including to prepare the Analytics Information);

  o hosting and storage providers;

  o maintenance, support and backup providers;

  o technical support providers;

  o payment processors, financial and credit card institutions;

  o customer support providers; and

  o marketing and research agencies,

We will ensure that these parties will be our data processors and agree to use Personal Information only as required to perform their functions for us (and not for other purposes) under our instructions, and to process the Personal Information in accordance with the Privacy Act 2020.

• Where you give us your express consent to share your Personal Information with Approved Retailers. Any Personal Information we share with Approved Retailers may be used in accordance with that retailer’s privacy management processes. If an Approved Retailer ceases to be part of the Loyalty Programme, and you have used your Cashpoints Card at that retailer within a reasonable period of time before our relationship ends (and you have not withdrawn your consent to sharing your information), we will assume that you are comfortable with us sharing your Personal Information with the Approved Retailer in order to comply with our contractual obligations. If our relationship with an Approved Retailer ends, then that retailer may contact you about establishing arrangements similar to the Loyalty Programme. The Approved Retailer agrees to remove your Personal Information if you advise that you do not wish to be contacted.  For more information on an Approved Retailer’s privacy management processes, you should refer to the information provided by that retailer to see how it handles Personal Information.

• Where you use your Cashpoints Card at a Participating Retailer, and you are a member of that retailer’s loyalty programme, you give us your express consent to share your Personal Information with that Participating Retailer for the purposes of verifying whether you are a member of that retailer’s loyalty programme, delivering the Benefits, and any rewards provided by the Participating Retailer, to you.

• Where you belong to a Group Account, you acknowledge that, while your activity can be identified separately from other Group Cardholders, the activity associated with your Cashpoints Card or spending behaviours may be seen by all other Group Cardholders in their Account.

• We may need to disclose your Personal Information to satisfy our legal obligations or where:

  o required to manage fraud, security breaches or other improper use of your Account or Cashpoints Cards (including to Participating Retailers where we or a Participating Retailer reasonably believe your Account or Cashpoints Card is being used fraudulently, has been subject to a security breach, or is being used in breach of the Terms and Conditions); and/or

  o required for any legal or regulatory purpose (including to relevant law enforcement or regulatory authorities).

• If we sell our business, we may provide your Personal Information as part of a database to the buyer, so that they can contact you about their plans for the business.  

• To comply with our contractual obligations with certain Participating Retailers should those retailers no longer be part of the Loyalty Programme. Provided that we may do so only where you have previously consented to us sharing your information with that retailer, you have not advised us that you have withdrawn that consent and you have used your Cashpoints Card at that retailer within a reasonable period of time before our relationship with the retailer ends. Our sharing of your Personal Information will be on the basis that the relevant Participating Retailer has agreed only to contact you about establishing arrangements similar to the Loyalty Programme and that the retailer agrees to remove your Personal Information if you advise that you do not wish to contacted.

Content providers and advertisers

The Websites and Benefits may contain links to other sites, which may not follow the same privacy commitments that we adopt. We recommend that you check any relevant privacy policies before providing your Personal Information to any third party.

Protection of Personal Information

We have put in place security measures that seek to protect your Personal Information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

We may hold and process Personal Information in other jurisdictions and with cloud providers where we are reasonably satisfied that the relevant jurisdictions and cloud providers meet our security standards. As no data transmission over the internet can be guaranteed to be completely secure, we cannot ensure the security of any information you transmit or receive. While we take precautions to minimise the related risks, these activities are conducted at your own risk.

Cookies

By using the Websites, you agree to the use of cookies.

Cookies are files with a small amount of data which may include an anonymous unique identifier.

We use cookies on the Websites to advertise our products and services, Participating Retailers, and other parties with offers for you through your relationship with us. Such advertisements appear on third party sites (like Google).

We may use your cookies information to match what we know about you for analysis and advertising purposes. You can choose to refuse cookies by turning them off in your browser and/or deleting them from your hard drive or other storage media.  Rejecting cookies may affect your ability to receive (or the ease with which you receive) the Benefits or use the Websites. For more information about how to reject cookies using your internet browser settings please consult the “Help” section of your internet browser (or alternatively visit https://www.aboutcookies.org).

Holding, correcting and updating your Personal Information

We will only retain your Personal Information for as long as reasonably necessary to fulfil the purposes it was collected for. Any Personal Information about you that we collect will be held by:

• us, in New Zealand; and

• our providers, described in this Privacy Policy, who hold information as our agent.

Under the Privacy Act 2020, you have rights of access to, and where appropriate, correction of, your Personal Information that we hold about you. We offer the ability for you to correct or change the Personal Information collected about you at any time and as often as necessary. For assistance with this, or if you require further information as it relates to this Privacy Policy, please email admin@cashpoints.co.nz or write to us at the address below:

Privacy Officer
Cashpoints New Zealand Limited

PO Box 28763, Remuera, Auckland 1541

We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Information (or to exercise any of your other rights). This is a security measure to ensure that Personal Information is not disclosed to any person who doesn’t have a right to receive it. We may also contact you for further information in relation to your request to speed up our response.

You have the right to make a complaint at any time to the New Zealand Office of the Privacy Commissioner. We would, however, appreciate the chance to deal with your concerns before you approach them, so please email us in the first instance at admin@cashpoints.co.nz

Further information

If you require further information on Participating Retailers’ privacy management processes, please refer to the information provided by that retailer.