Privacy Policy

Omva NZ Limited ("Omva", "we", "us") is committed to protecting your personal information in accordance with the New Zealand Privacy Act 2020. This policy explains what information we collect, how we use it, and your rights.

1. Who This Policy Applies To

This policy applies to all users of the Omva platform, including insurance advisers and brokers who create sites using Omva, and visitors to omva.co.nz.

2. Information We Collect

Information you provide directly

Account details: Full name, email address, phone number, country
Business details: Specialties, plan selection, referral code used at signup
Payment information: Processed securely by Stripe. We do not store your card number.
Site content: Text, images, and configuration you upload to your Omva site

Information collected automatically

Usage data: pages visited, features used, session duration
Device and browser information
IP address and approximate location
Cookies and similar tracking technologies (see our Cookie Policy)

3. How We Use Your Information

To create and manage your Omva account
To provide, operate, and improve the platform
To process subscription payments and referral commissions
To send transactional emails (account confirmations, invoices, policy updates)
To send product updates and marketing communications (you may opt out at any time)
To detect and prevent fraud and abuse
To comply with legal obligations

4. Sharing Your Information

We do not sell your personal information. We share it only:

With service providers who help us operate the platform (Supabase for database hosting, Stripe for payments, Resend for email) — each bound by confidentiality obligations
With other Users only to the extent necessary for referral tracking (your referral code, not your personal details)
With law enforcement or regulators when required by law or to protect our legal rights
In a business transfer if Omva is acquired or merges — you will be notified in advance

5. Data Storage & Security

Your data is stored on servers operated by Supabase (hosted in Australia). We use industry-standard security measures including encryption in transit (TLS) and at rest. No method of transmission over the internet is 100% secure, but we take all reasonable steps to protect your information.

6. Retention

We retain your personal information for as long as your account is active and for 30 days after deletion, after which it is permanently removed. Financial records are retained for 7 years as required by NZ law.

7. Your Rights Under the Privacy Act 2020

You have the right to:

Access the personal information we hold about you
Correct any inaccurate information
Request deletion of your information (subject to legal retention obligations)
Opt out of marketing communications at any time
Complain to the Office of the Privacy Commissioner if you believe we have breached the Privacy Act

To exercise any of these rights, email us at privacy@omva.co.nz. We will respond within 20 working days.

8. Cookies

We use cookies to operate the platform and analyse usage. See our full Cookie Policy for details and opt-out options.

9. Children

The Omva platform is not directed at children under 18. We do not knowingly collect personal information from anyone under 18.

10. Changes to This Policy

We may update this policy from time to time. We will notify you by email of any material changes at least 14 days before they take effect.

11. Contact & Complaints

Privacy enquiries: privacy@omva.co.nz
Office of the Privacy Commissioner: www.privacy.org.nz