Privacy Policy

Your personal data and assets are our highest priority. We're fully committed to keeping them secure.

Peak Finluxar collects and stores data essential to your trading practice. Our Privacy Policy below explains how we collect and manage this information.

Our approach is built on the following core principles:

• To ensure complete transparency about how we collect and store your personal data:

We're committed to transparency about how we collect and process your data, so you can make informed decisions. Our clear guidelines and processes outline exactly how we handle information on this website. You have full control over your data.

We'll keep you informed promptly whenever there's information you need to know. Transparency is fundamental to how we operate.

Our knowledgeable team are always available to answer any questions you may have about our processes and our legal obligations in New Zealand. Please feel free to get in touch with us at info@peak-finluxar.com.

• We do not use your personal data for any purpose other than those outlined in our Privacy Policy.

We may process your personal data for several purposes, including the necessary functioning of Peak Finluxar services and connecting trader-members with third-party trading platforms. This processing is also essential for maintaining and improving our website functions and services, protecting our rights, and meeting regulatory and legal obligations. Additionally, we process data as required to deliver administrative and business functions related to the Services provided to you.

To provide you with better services tailored to your preferences and needs, Peak Finluxar uses your personal data.

• To access essential tools that help protect your personal data and safeguard your rights:

At any time, you can contact us to access your personal data. We can also modify or delete it if needed, and we support requests to transfer your data to you or a third party of your choice. We offer this service to help you exercise your privacy rights and maintain control over your information.

• Protect your personal information

Our security systems meet banking-grade standards and we're committed to continuously upgrading our protective measures. While no system can offer absolute guarantees, we work diligently to maintain the highest levels of security and reinforcement to protect your information.

We maintain a comprehensive privacy policy and employ industry-leading security systems to protect your information.

1. The Scope?

This policy outlines our procedures for collecting, processing, and sharing personal data.

Our policy applies to all individuals who are identifiable or have been identified. This includes any natural person who could be identified in relation to data that has been provided to us or that we can access and/or combine.

The processing of data, as outlined in our Privacy Policy, refers to how we store, manage, and organise your personal information.

We do not collect information from anyone under 18 years old, nor do we allow minors to use our platform. If we discover that a user is under 18 or that we hold any information about a minor, we will delete it immediately.

2. What personal information do we collect and store?

When you register with us, we collect essential personal information to enable you to use our services. We may also request personal data to verify account ownership when needed. To continuously improve and maintain the quality of our platform and services, we gather and analyse data about how you use our services and those of our third-party partners.

You're never obligated to share your personal information with the company.

While providing your information is voluntary, not doing so may limit the services we can offer and could restrict your access to our platform.

4. What personal data do we collect? When you visit our website, we may collect the following personal data:

We don't collect personally identifiable information about you. However, we do gather data related to your account activity, including your IP address and access timestamps. For maintenance, security, and support purposes, we retain system crash reports, browser details, and device information used to access your account. We also record your account's language preference.

We only collect and retain personal data that you voluntarily provide when connecting to a third party trading platform through our official website.

The personal data you provide to third party platforms may include your full name, address, telephone number, and email address.

Why does the company need my personal data, and is it legal for them to collect it?

We collect, store, and process your personal information solely for the purposes outlined in this Policy. All such uses and processing comply with applicable laws in New Zealand.

We can only handle, process, and transmit your data in accordance with the relevant laws in New Zealand. Our legal grounds for doing so are as follows:

• By submitting your information, you consent to the storage and processing of your personal data by the company. You authorise us to transfer your data to the relevant third-party trading platform as needed. You have agreed to the processing of your personal data for the specified purposes.
• To improve our services, establish or defend legal claims, and pursue our legitimate interests, we may need to store and process your personal data.
• To comply with legal requirements, we need to process your data.

If you'd like to learn more about the company's data processing practices, please feel free to get in touch via email.

Below you'll find details of how we may use your personal data, along with the legal basis for each use.

6. Sharing Your Personal Data with Third Parties

To provide better services, including IP address management, user surveys, and analytics, we may share anonymised personal data with trusted third-party service providers.

When you request it, we may share your personal data with third-party services, including digital trading platforms. Their use of your information will be governed by their own privacy policies.

To enhance our service offerings and improve our overall service quality, we may share your personal information with our affiliates and partner organisations.

We may disclose your data to relevant legal and regulatory authorities as required by law or to protect the rights and assets of Peak Finluxar, our partners, and third parties.

In the event of a critical business transaction—such as a company sale, investment pursuit, or loan application—we may share relevant data in a legally compliant manner. This also applies if the company undergoes a merger, restructuring, consolidation, or enters into bankruptcy proceedings, as required by law.

7. Cookies and Third-Party Services

We may use cookies and similar technologies for site analytics and advertising purposes, in accordance with relevant laws and industry standards.

Cookies are small files stored on your device when you visit our website. We use them to collect information about your browsing behaviour and preferences, helping us personalise your experience and remember your settings. This allows us to tailor our services to suit you better. We also use cookies for site analytics and gathering statistics to inform our strategic planning.

The site uses two main types of cookies. Session cookies are stored only during your browsing session and are deleted when you close your browser. Persistent cookies remain in your browser after your session ends, allowing the site to recognise you as a returning visitor and improve your experience on our official website.

Types of cookies:

We may use cookies as needed, in accordance with their intended purpose.

Your cookies have been cleared or blocked

To delete or block cookies, you'll need to adjust your browser settings. Follow the links below for step-by-step instructions on how to do this with the most popular browsers.

• firefox
• Microsoft Edge
• Google Chrome
• safari

Disabling cookies may prevent certain features and functionality from working properly on this site.

ONLINE TRACKING NOTICE

Your personal data will be retained for as long as necessary to fulfil the purposes outlined in this policy. We may store it for longer periods in accordance with applicable laws, regulations, and our company policies.

Your personal data will be shared with third-party trading platforms at your request and discretion for a period of 12 months. After this initial 12-month period, your data will continue to be shared for a further 12 months, subject to your consent.

We regularly review all personal data to determine whether it remains necessary for our operations.

9. Transferring your personal data to countries outside New Zealand or to international organisations

To deliver our services and maintain security, we may transfer your personal data to third countries and international organisations using comprehensive security protocols. We're committed to the highest standards of data protection and ensure you retain full legal rights and remedies in all circumstances.

All residents within the EEA (European Economic Area) benefit from comprehensive data protection and safeguards.

• Data transfers always take place under EU legal jurisdiction and authority, in accordance with standard data protection protocols outlined in Article 45(3) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
• All data transfers between public entities and authorities are conducted in compliance with Article 46(2) and are legally binding and enforceable.
• The European Commission's Standard Contractual Clauses, as set out in Article 46(2)(c) of the GDPR, establish the conditions for data transfers outside the EU. Our data transfer practices comply with these clauses. You can view the full text at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.

For more information about the specific security measures used to protect your personal data during transfers to third countries, please email info@wealthwaydigital.uk with your enquiry.

10. Personal Data Protection

Your personal data is protected using industry-leading technical and organisational safeguards that follow gold standard procedures. These measures are designed to prevent unauthorised or accidental destruction, loss, or alteration of your information.

Whilst we maintain the highest standards of data protection in accordance with legal requirements, we cannot guarantee that your personal data will remain completely error-free in all circumstances. We therefore cannot accept liability for unauthorised disclosure or damage of an incidental, indirect, or consequential nature—including situations beyond our control, such as transmission errors, unauthorised third-party access, or similar events.

If we receive legally binding requests from regulators or legal authorities, we may be required to share your personal data with them. Once your data is disclosed in response to such legal demands, we have no control over how those authorities handle, store, or protect it.

While we take comprehensive security measures to protect your information, no data transmitted over the internet can be guaranteed as completely secure. Any personal information you share online carries an inherent level of risk, and Peak Finluxar cannot provide absolute assurance against interception.

11. Third-party website links

This website contains links to third-party applications and websites that are not affiliated with us and operate independently of our control. Our privacy policy does not apply to these external sites—they maintain their own data collection and processing practices. We're not responsible for their activities or policies. Please use these links at your own discretion.

Always review the privacy policy on any website before sharing your personal information. Make sure their data collection, usage, and processing practices align with your preferences. Share any personal data directly with the service provider only.

12. Policy Amendments

We reserve the right to update this policy at any time. We'll notify you of any changes through our website and other appropriate channels. The updated privacy policy will be posted on our website and take effect immediately upon publication, unless otherwise stated.

Your personal data rights

You have complete control over your personal data, including the right to verify its accuracy, correct any errors, and decide whether to delete it or restrict how we process it.

On this page, residents of the EEA can find information relevant to them:

Your personal data is protected under the rights outlined here. You can exercise these rights immediately by emailing the address provided below.

Accessing Your Rights

If the personal information you've provided to us is accurate, you can access it at any time. Any of your personal data we process is accessible to us and therefore verifiable.

You can request your personal data for verification at any time, and we'll provide it to you in electronic format. If you request additional copies of your processed data beyond the first one provided, a reasonable fee may apply.

The company is committed to protecting privacy rights in accordance with law and our privacy policy, whilst ensuring the rights and freedoms of others are not compromised. We reserve the right to restrict or deny access to personal data where doing so protects the rights and freedoms of other individuals.

Right to Correct Errors

You can correct any errors in your personal data—whether due to missing information or inaccurate details—either yourself or with the Company's assistance. This ensures we can process your information accurately and effectively.

Erasure Rights

You have the right to request deletion of your personal data in the following circumstances: 1) If your personal data has been processed without your consent or outside legal boundaries. 2) If you request removal and the Company has no legal obligation to retain that data. 3) If you withdraw consent to our data processing, even where it's lawful and aligns with our legitimate interests or those of a third-party provider. 4) If we're required by law to delete your data.

The right to deletion is overridden by legal obligations imposed by EU law or the laws of any EU member state. Similarly, deletion rights do not apply when data is necessary for the exercise or defence of legal claims.

Right to Restrict Data Processing

You have the right to request that we limit how we process your personal information if you believe it contains inaccuracies.

When you request that your personal data usage be restricted, it will be deleted unless one of the following applies: 1) where EU or Member State law prevents deletion. 2) With your consent, if deletion would prevent us from defending or exercising legal claims. 3) Where deletion would harm the rights of another individual.

Your Right to Data Portability

You have the right to access and review any personal data you've provided, where you've given consent for its collection and processing through automated systems.

You have the right to request that your personal data be transferred to another company or organisation, provided it's technically feasible. This doesn't affect your right to request deletion of your data. However, we can't process such a request if it would compromise the rights or freedoms of another individual.

Right to challenge how your data is processed

Regardless of the Company's right to pursue legitimate interests—whether our own or those of a third-party service provider—you have the right to object to processing and request that it stop. However, this right does not apply if there is a compelling legal reason to continue processing your personal data, such as to defend against legal claims or exercise legal rights. In such circumstances, we may lawfully continue processing your information.

You can request at any time that your personal data not be used for direct marketing purposes.

Right to Withdraw or Decline Consent

You can withdraw your consent to our processing of your personal data at any time, with immediate effect where possible. Please note that this doesn't apply retroactively to any processing that occurred before you withdrew your consent.

If you're unhappy with our service for any reason, you have the right to lodge a complaint with the relevant legal, regulatory, or supervisory authority.

If you believe your rights or freedoms have been violated in relation to how your personal data is processed, European Union Member States have established regulatory and supervisory authorities to handle such matters. You have the right to lodge a complaint with these authorities at any time.

Section 13 outlines circumstances where your personal data rights may be limited under European Union law or the laws of its Member States.

When you submit a request for access to your personal data, we'll provide you with the information you've requested as outlined in Section 13 of this policy. Depending on the volume of requests and the complexity of your enquiry, we may extend this timeframe by up to two months. If an extension is necessary, we'll notify you within one month of receiving your request.

We'll send the requested information to you electronically at no cost, except where prohibited by law or Section 13 provisions. We reserve the right to charge a reasonable fee or decline requests that we consider frivolous, excessive, or repetitive.

We reserve the right to request additional proof of identity if we have reasonable grounds to doubt the authenticity of a request for personal data, in accordance with our data protection and security obligations.