Privacy Policy

1. Who we are

MV Consignment sells vehicles on consignment, buys vehicles wholesale, sources vehicles, and provides vehicle detailing, from Riverhead, Auckland. We are the agency responsible for the personal information described in this policy.

2. What we collect

We only ask for information we actually need to do the thing you've asked us to do. We collect:

• Contact details — your first and last name, phone number and email address, whenever you send an enquiry, book a test drive, request a quote, or create an account. These are required, because we cannot respond to an enquiry without a way to reach you.
• Vehicle details — registration plate, odometer reading, make, model and condition, when you ask us to sell, value or detail a vehicle. We need these to give you a meaningful answer rather than a guess.
• What you tell us — the content of your message, your preferred timing for a detail or test drive, and your selling timeframe, where you choose to give them.
• Account information — if you create an account, your email address, a hashed version of your password (we never store or can read your actual password), your saved vehicles, and your two-factor authentication setting if you turn it on.
• Consignment submissions — the vehicle information and photos you upload when submitting a vehicle through your account.
• Referral information — if you take part in our referral programme, the referral code used and the name of the person referred, so the reward can be paid.
• Technical information — your IP address and browser type, recorded briefly by our host and by our rate limiting, to keep the site online and stop the forms being abused. If, and only if, you accept analytics cookies, we also record the pages you view. See our Cookie Policy.

We do not collect payment card details through this website. If a payment is required, it is arranged separately, and card numbers are never entered on or stored by this site.

We do not ask for information we don't need.We don't request your date of birth, your driver licence number, your address, or your income through this website. If a specific transaction later requires identity or address verification (for example, to transfer a vehicle's registration or to pay sale proceeds into your bank account), we will ask for it directly at that point and tell you why.

3. How we collect it

We collect personal information directly from you — from the forms on this site, from emails and phone calls, and from documents you give us. We don't buy contact lists, and we don't scrape personal information from other websites.

Where you contact us about a specific vehicle we are selling, we may also receive information about you from the platform you contacted us through, such as Trade Me or Facebook.

4. Why we use it

We use your personal information to:

• respond to your enquiry and give you a quote, valuation or booking;
• provide the service you've engaged us for, and keep you updated on it;
• arrange inspections, detailing, transport, listings and settlement for a vehicle;
• administer your account and saved vehicles, if you create one;
• administer the referral and loyalty programmes, if you take part;
• send you marketing emails, only if you have separately opted in — see section 7;
• keep records we are required by law to keep, and meet our tax obligations;
• protect the site and our customers from fraud, spam and abuse.

We do not sell your personal information to anyone, and we do not use it to make automated decisions about you.

5. Who we share it with

We share personal information only where it is necessary for one of the purposes above. The organisations below process personal information on our behalf, and are bound to use it only for the services they provide us:

We may also disclose personal information:

• to a buyer or seller of a vehicle, where that is necessary to complete the sale — for example, giving a buyer the seller's name for the change-of-ownership paperwork;
• to our inspection, finance, transport and workshop partners, where you have asked us to arrange one of those services, and only the details they need to do it;
• to our professional advisers, or where we are required or permitted to by law — for example, to the New Zealand Police, the Commerce Commission, or a court.

Information sent overseas

As the table above shows, several of our providers store and process information outside New Zealand, mainly in the United States and the European Union. Information Privacy Principle 12 of the Privacy Act 2020 requires us to make sure that information is protected by comparable safeguards. We rely on the contractual privacy and data-protection terms in each provider's agreement with us, which require them to protect the information to a standard comparable to the Privacy Act. Privacy laws in those countries may differ from New Zealand's.

6. How we keep it safe

We take reasonable steps to protect personal information from loss, misuse and unauthorised access. In practice that means: the site is served only over HTTPS; account passwords are stored hashed and are never readable by us or by staff; the administration area requires a password and a second authentication factor; login and form submissions are rate limited to resist brute-force and spam attacks; and access to customer records is limited to people who need it.

No system is completely secure. If we ever experience a privacy breach that is likely to cause you serious harm, we will notify you and the Office of the Privacy Commissioner, as the Privacy Act 2020 requires.

7. Marketing emails

We only send marketing emails — new arrivals, sold prices, promotions and selling tips — to people who have specifically asked for them, by ticking the newsletter box on a form or subscribing directly. Sending an enquiry does not subscribe you: those are two separate choices, and the newsletter tick box is never pre-ticked.

Every marketing email we send identifies us as the sender and includes a working unsubscribe link. You can also unsubscribe at any time by emailing info@mvconsignment.nz, and we will action it promptly. This is what the Unsolicited Electronic Messages Act 2007 requires of us, and we treat it as a floor, not a target.

Emails that are notmarketing — a reply to your enquiry, a booking confirmation, a password reset, an update on your vehicle's sale — are sent because you asked us to do something, and are not covered by the unsubscribe above.

8. How long we keep it

• Enquiries that don't become a job: kept for up to 2 years in our CRM, so we can pick up the conversation if you come back to us, then deleted.
• Completed transactions: records relating to a vehicle we sold, bought or consigned are kept for at least 7 years, which is what the Tax Administration Act 1994 and our record-keeping obligations as a motor vehicle trader require.
• Accounts: kept while your account is open. Ask us to close it and we will delete the account and its saved vehicles, other than records we must retain under the point above.
• Newsletter subscriptions:kept until you unsubscribe. We keep a record of the unsubscribe itself, so we don't accidentally email you again.
• Technical and rate-limit records: short-lived, typically minutes to days.

9. Your rights

Under the Privacy Act 2020 you have the right to:

• Ask what we hold about you, and get a copy of it (Principle 6). We will respond as soon as reasonably practicable and within 20 working days.
• Ask us to correct anything that's wrong (Principle 7). If we disagree with a correction, you can ask us to attach a statement of the correction you sought, and we will.
• Withdraw your consent to marketing, or to analytics cookies, at any time.
• Ask us to delete information we no longer need for the purpose we collected it.

There is no charge for these requests. Email info@mvconsignment.nz. We may need to confirm your identity first, so we don't hand your information to someone else.

10. Complaints

If you think we've mishandled your personal information, please tell us first at info@mvconsignment.nz— we would rather hear about it and fix it. If you're not satisfied with our response, you can complain to the Office of the Privacy Commissioner:

• Online: privacy.org.nz
• Email: enquiries@privacy.org.nz
• Phone: 0800 803 909

11. If you're in the EU or UK

We market vehicles to overseas buyers, so this site is sometimes visited from the European Economic Area and the United Kingdom. Where the GDPR or UK GDPR applies to our handling of your information, our lawful bases are: performance of a contract (or steps at your request before one) for enquiries and transactions; consent for marketing emails and analytics cookies; legal obligation for tax and trading records; and legitimate interests for site security and fraud prevention. You additionally have rights of erasure, restriction, portability and objection, and the right to lodge a complaint with your local supervisory authority. Contact us at the address above to exercise any of them.

12. Children

This site is aimed at people old enough to buy or sell a vehicle. We don't knowingly collect personal information from children under 16. If you believe a child has given us their information, contact us and we will delete it.

13. Changes to this policy

We'll update this policy when what we do changes. The “last updated” date at the top always reflects the current version. If a change materially affects how we use information we already hold about you, we'll tell you directly rather than relying on you re-reading this page.