Security Policy

Last updated: June 2026 

Purpose 

Armstrongs Finance Limited is committed to protecting customer information and maintaining appropriate security measures to prevent unauthorised access, disclosure, loss, misuse or alteration of information. 

This Security Policy outlines the steps we take to help protect the information entrusted to us. 

Information Security 

We take reasonable steps to protect personal and business information collected through our services. 

Customer information is only accessible by staff and authorised service providers who require access to perform their duties or provide services on behalf of Armstrongs Finance. We apply a need-to-know approach when granting access to information and systems. 

We are committed to maintaining the confidentiality, integrity and security of information held by Armstrongs Finance. 

Technology and Systems 

We use technology platforms and service providers to assist in the collection, storage and processing of customer information. 

We take reasonable steps to ensure that the systems and providers we use maintain appropriate security standards and support the protection of customer information. 

Information may be stored and processed using secure cloud-based systems and service providers located in New Zealand and overseas. 

Staff Responsibilities 

All staff are expected to: 

• Protect customer and business information 
• Maintain confidentiality 
• Use company systems responsibly 
• Report suspected security incidents or privacy breaches 
• Comply with company policies, procedures and regulatory requirements 

Staff are expected to remain aware of their privacy, confidentiality and information security obligations as part of their role. 

Data Storage and Retention 

Information is retained in accordance with legal, regulatory and business requirements and is securely disposed of when no longer required. 

We take reasonable steps to ensure customer information remains protected throughout its lifecycle, from collection through to secure disposal. 

Security Incidents and Privacy Breaches 

Any suspected security incident or privacy breach will be reviewed and investigated promptly. 

Where required, Armstrongs Finance will take appropriate action to contain the incident, minimise any impact and comply with applicable legal and regulatory obligations, including notification requirements under the Privacy Act 2020. 

Business Continuity 

Armstrongs Finance takes reasonable steps to ensure information remains available and protected in the event of system failures, disruptions or other unforeseen events. 

We utilise technology providers and systems designed to support the continuity of our business operations and the protection of customer information. 

Third-Party Service Providers 

We may engage third-party service providers to assist in delivering our services. 

Where appropriate, we take reasonable steps to ensure those providers maintain security practices suitable for the information they handle on our behalf. 

Review of this Policy 

This Security Policy may be reviewed and updated from time to time to reflect changes in our business, technology, legal obligations or regulatory requirements. 

Any updated version will be published on our website and will take effect from the date it is published. 

Contact Us 

If you have any questions regarding this Security Policy, please contact: 

Krystal Petty 
Armstrongs Finance Limited 
61 Mountain Road 
Mount Wellington 
Auckland 1060 

Email: krystal@armstrongsfinance.co.nz