HANSEN BATE LTD

(last updated 29 July 2026)

1. Introduction

1.1   At Hansen Bate Limited (‘We’, ‘Us’, ‘Our’), we recognise the importance of protecting your privacy and your personal information. We comply with the Privacy Act 2020 when dealing with personal information that we collect and hold. Personal information is information about an identifiable individual (a natural person), and we may collect and hold personal information about (but not limited to):

(a) business associates, our clients, and potential clients and their employees, contractors, officers, owners and directors;

(b) individuals we deal with in the course of acting for clients and carrying on our business;

(c) suppliers and their employees and contractors;

(d) prospective employees, employees and contractors; and

(e) other people who come into contact with us.

1.2.   This policy explains how we will collect, use and disclose and store your personal information, and how you can exercise your rights in relation to your personal information.

1.3.   This policy applies across to all personal information collected by us in the course of conducting our business, including through the use of our website and any related online service, and to meet our legal obligations (referred to as our “Services” in this policy).

1.4.   We may need to update this policy from time to time. The most current version will be available on our website (Hansen Bate – Hawke’s Bay Lawyers) and any changes will take effect from the date stated above.

2. What personal information we collect

2.1.   We may collect personal information about you which may include but is not limited to the following:

(a) Name(s);

(b) Contact details (including email address, phone number, residential/postal address;

(c) Date of birth;

(d) Occupation and employer;

(e) Education and qualifications;

(f) Citizenship, residency, nationality;

(g) Information required for client onboarding and compliance purposes, including anti-money laundering or counter-terrorism checks (including your driver’s licence, passport or other identification documentation and biometric information);

(h) Information provided as part of instructions, correspondence, or documents submitted to us in relation to a matter;

(i) Website usage data, device identifiers, IP address, browser type, location data, and cookies or similar tracking technologies;

(j) Billing information;

(k) Financial information;

(l) Website usage data, device identifiers, IP address, browser type, location data, and cookies or similar tracking technologies;

(m) Any other personal information you provide to us or that is otherwise necessary for us to perform our functions and activities or comply with our legal obligations.

3. Who we collect your personal information from

3.1.   We collect your personal information directly from you, where this is possible and practicable.

3.2.   We may also collect your personal information via indirect means, including but not limited to the following:

(a) From someone else, where you have authorised this;

(b) From publicly-available sources;

(c) From your agents, representatives or employers who are authorised or required to provide information to us;

(d) From counterparties, regulators, courts, authorities, or other parties involved in legal matters concerning you;

(e) From third-party verification providers (for example, identity verification or background check agencies) or government agencies who assist us in our business operations (including in conducting customer due diligence, sanctions checks, and complying with our obligations under the Anti-Money Laundering and Countering Financing of Terrorism Act 2009);

(f) From your use or interaction with our website, including through the use of cookies, log files, web beacons and related technologies.

4. Why we collect, hold and use your personal information

4.1.   The purposes for which we may collect, hold and use your personal information will vary based on the nature of the Services and your engagement with us, and include, but are not limited to:

(a) Conducting our business;

(b) Making contact with you about issues we believe may be of interest to you;

(c) Engaging third parties on your behalf;

(d) Verifying your identity, and conducting due diligence, anti-money laundering, counter-terrorism, and other compliance checks;

(e) Managing our relationship with you, including responding to your queries, instructions, or feedback;

(f) Processing payments, billing, administration, and debt collection activities;

(g) Communicating with you regarding Services, newsletters, updates or legal developments and to provide and market our Services to you;

(h) Improving and maintaining our website, IT and business systems, including security processes;

(i) Complying with our legal or regulatory obligations (including those of industry or regulatory bodies);

(j) Protecting and/or enforcing our legitimate business interests and legal rights, including defending any claim and compliance with regulatory and audit functions;

(k) Any purpose for which you have given consent, or as otherwise required or permitted by law.

4.2.   Provision of personal requested is voluntary but if you do not provide full information this may impact on our ability to provide the Services.

5. Who we may share your personal information with

5.1.   There may be times where we need to share your personal information with third parties who help provide our Services or support our business, including but not limited to:

(a) Third-party service providers who support our operations, including IT service providers, document storage providers, communication suppliers;

(b) Third party credit agencies who perform credit references or to undertake credit management or collection processes;

(c) Other external legal counsel, barristers, and professional advisers (including accountants, insurers, auditors) you have engaged;

(d) Any person with your express authorisation, or whom you have instructed us to communicate with;

(e) An actual or prospective purchaser (and its advisers) in connection with any actual or proposed sale, merger, or acquisition of our business or assets;

(f) Courts, tribunals and regulatory authorities;

(g) Other third parties where such disclosure is permitted or required by law or in the normal course of performing the Services or any other purposes set out in any Terms of Engagement issued.

5.2.   If we disclose personal information to external parties for purposes such as IT support, hosting, cloud storage, or data processing, we will take reasonable steps to ensure that such parties are subject to confidentiality and privacy obligations consistent with the Privacy Act and Information Privacy Principles.

5.3.   Some personal information may be disclosed, transferred to, stored, or processed outside New Zealand, including by our third-party service providers or as necessary in the course of legal representation. Where we do so, we will take steps to ensure that your information is protected. This may involve using approved contractual safeguards or verifying the recipient is subject to equivalent privacy protections.

6. How we keep your personal information secure

6.1.   We have implemented reasonable safeguards, both technical and organisational, to protect personal information from unauthorised access, modification, misuse, interference, or loss. These measures include (without limitation):

(a) Storing records in secure servers or facilities, with access restricted to authorised personnel;

(b) Use of password-protected systems, two-factor authentication, and file encryption where appropriate;

(c) Regular review of our information security and privacy practices and policies;

(d) Staff training and protocols governing access, security, and confidentiality of personal information.

6.2.   We may use artificial intelligence (AI) tools to assist in the course of our Services and where such tools are used we take reasonable steps to ensure that any personal information processed by or through those tools is not used to train AI models and is subject to appropriate security measures consistent with our obligations under the Privacy Act.

7. If you wish to access or correct your personal information

7.1.   Subject to certain grounds for refusal set out in the Privacy Act 2020, you have the right to ask for a copy of the personal information we hold about you, and to ask for your personal information to be corrected if you think it is wrong. We may impose a charge for complying with your request for access to or correction of your personal information.

8. How to contact us

8.1.   To exercise any of your rights in relation to your personal information, or to otherwise discuss this policy, you can contact us in the following ways:

(a) Email: info@hansenbate.co.nz

(b) Phone: +64 6 873 0900

(c) Write to: PO Box 235, Hastings 4156