Privacy Policy

Last updated: 06 August 2026

 

This privacy policy outlines how Oxford Finance Limited (“we”, “us”, “our”), collect, hold, use, and share your personal information. “Personal information” is information about you as an individual.

We take your privacy seriously and comply with all applicable privacy laws, including the Privacy Act 2020.

 

Information we collect 

We collect personal information that you provide to us directly, including when you interact with our personnel or contact us (by email, phone, through social media or otherwise), and when you use our websites.

Sometimes, we may collect your personal information from sources other than you. These sources may include publicly available registers, our group companies, and where we have your consent, other third parties such as credit reporting agencies, Waka Kotahi NZ Transport Agency (NZTA), the Ministry of Justice, Ministry of Immigration, NZ Immigration Services, employers, accountants, motor vehicle dealers, insurance companies, finance brokers, and other government departments as required.

We may collect, use, and disclose this information to assess creditworthiness, consider applications for credit, provide and manage credit, administer and enforce agreements, arrange or offer insurance, maintain internal and external credit records, verify vehicle ownership and identity information, conduct regulatory and fraud-prevention checks, and market goods and services offered by Oxford, its related companies, or other suppliers nominated by Oxford.

Where relevant, we may disclose personal information (including updates to that information) to credit reporting agencies. Those agencies may use that information to provide credit reporting services to us and to their other subscribers and will hold and use it in accordance with their own privacy statements. You have rights to access and request correction of personal information held by those agencies.

The credit reporting agencies we may use include Centrix Group Limited, Equifax New Zealand, and Experian (trading as Illion). We may also use MotorWeb to collect personal information, such as vehicle registration and/or driver licence details, for the purpose of conducting checks through NZTA. From time to time, we may obtain information from NZTA about registered owners’ names and addresses, and vehicle information and history, to verify vehicle ownership details. You can notify NZTA if you do not want your name and address to be made available under an authorisation. Oxford holds an authorisation from NZTA under section 241(1) of the Land Transport Act 1998.

We may collect and process biometric information, including facial images, biometric templates derived from those images, and liveness detection information, to verify an individual’s identity and meet our obligations under the Anti-Money Laundering and Countering Financing of Terrorism Act 2009 (AML/CFT).

Biometric processing is used to:

  • verify that an individual is the same person shown in their identity document;
  • confirm that the individual is physically present during the verification process (liveness testing);
  • detect identity fraud and impersonation; and
  • meet our legal and regulatory obligations.

We do not use biometric information for monitoring, profiling, behavioural analysis, marketing, or automated decision-making unrelated to identity verification.

Biometric information is retained only for as long as necessary to meet our legal, regulatory, audit, and record-keeping obligations.

Biometric information may be collected and processed by approved third-party identity verification providers acting on our behalf, including APLYiD. These providers are contractually required to protect the information and use it only for authorised purposes.

Individuals may request access to or correction of their personal information, including biometric information in accordance with the Privacy Act 2020.

The types of personal information we collect from you will depend on the nature of our interactions with you and the circumstances in which your personal information is collected.  The personal information we collect from you may include:

  • your name, address, email address, age, gender and other contact details;
  • billing and payment information;
  • driver’s licence/Passport information;
  • information related to creditworthiness;
  • insurance information;
  • financial information;
  • biometric information;
  • Your vehicle information where applicable (E.g. Motochek).

If you choose not to provide us with any personal information that we ask for, we may not be able to respond to your requests or answer your enquiries or provide you with our products and services.

 

Web measurement tools and cookies 

We use web measurement tools, including cookies, to give us insights into how you are using our websites. This information is anonymised but we do identify your browser. We use this information to improve your user experience when you are using or browsing our websites and for security.

You can change the settings on your browser to disable cookies while you are using our websites.

 

What we use your information for 

We may use your personal information to:

  • provide you with our products and services;
  • respond to your requests, answer your enquiries and communicate with you;
  • tell you about our products and services or the products and services of our group companies that you might be interested in, including, where we have your consent, by sending you messages via email and text message;
  • send you newsletters and customer surveys post-sale;
  • improve our products and services
  • conduct market research and statistical analysis;
  • consider your application for an account or services, to verify your identity and assess your creditworthiness and financial position;
  • use biometric information to verify your identity, confirm liveness, detect identity fraud or impersonation, and meet legal and regulatory obligations;
  • collect amounts you owe us, including taking enforcement action;
  • exercise our rights and fulfilling our obligations under any agreement with you;
  • for any other purpose that we notify you of when collecting your personal information; and
  • for any purpose required or authorised by law.

We generally record inbound and outbound telephone calls for operational purposes such as complaint handling and reporting, quality assurance, and staff training.

 

Sharing your personal information 

We may share your personal information with:

  • our service providers and suppliers;
  • our parent company, Turners Automotive Group Limited;
  • our group companies;
  • Finance brokers and other intermediaries, but only if you have consented to us sharing your information with them;
  • identity verification agencies and credit reporting agencies including approved third-party identity verification providers acting on our behalf, including APLYiD, who are required to protect biometric information and use it only for authorised purposes;
  • any other party or type of party that we notify you of when collecting your personal information; and
  • government agencies and regulators, or anyone else, if we are required to share that information for the purposes of complying with applicable law and regulations.

 

Security 

We ensure the personal information we hold about you is protected against misuse and unauthorised access, disclosure or alteration by reasonable security safeguards.

However, when you use our websites, there may be links to other third-party internet sites. Please be aware that your use of such third-party sites will not be subject to the terms of this Privacy Policy.

 

Your rights 

You can ask for us access to, and request correction of, the personal information we hold about you, including biometric information, by contacting us at Customerservices@oxf.co.nz. We will respond to your request in accordance with the requirements and processes set out in the Privacy Act 2020.

 

Changes to this Privacy Policy 

We may change this Privacy Policy at any time and if we do, we will post the updated policy on our website.