Privacy

Who collects and holds your information

Alfred Assistance Limited (company number 9431273, NZBN 9429053709301) collects and holds the information described here. Our postal address is 41 Park Hill Road, Birkenhead, Auckland 0626, New Zealand. Contact our privacy officer at support@alfredassistance.com.

Providing information is voluntary. We need the required contact, account and payment details to respond to an enquiry, create your broker account or process an order. Without them, we may be unable to provide that service. Optional enquiry messages and referral codes are not required to buy a pack.

What this site collects

The Contact page asks for your name, firm, email and mortgage settlement band, with optional phone and message. We use these details to respond to your enquiry, not to subscribe you to marketing. The records drawn in the walkthrough are illustrations and do not capture information.

When the enquiry connection is enabled, our Vercel server sends your details to Alfred's n8n contact workflow. That workflow records the enquiry in our Google enquiry sheet and notifies the two Alfred founders through Slack. Access is for handling enquiries. If the connection is unavailable, the form tells you and offers email or booking instead.

Service providers process technical information, such as IP addresses, browser information and request logs, to deliver and protect these services. The marketing enquiry relay does not add your IP address to the enquiry payload. Broker signup separately uses a salted hash of the IP address to help limit abuse. Marketing-site fonts are served locally and we do not store a motion preference.

Broker signup and your account

At start.alfredassistance.com we collect your business name, FSP number, name, mobile number, email, selected pack quantity and acceptance of the lead-pack terms. We record the accepted terms version and time, signup and account identifiers, and signup and payment status. We use this information to verify your email, administer your account and order, provide support and arrange delivery.

We use Supabase for account authentication and database storage. An email code verifies access to your email address. Your password is sent over the secure connection during verification and handled by Supabase Auth; the signup page does not save it in browser local storage or send it to advertising tools. Portal session cookies keep you signed in.

An Alfred administrator checks FSP details against the official Financial Service Providers Register and records the check. This is a manual registration check for our delivery process, not financial advice or an endorsement of an adviser's services. We may contact you about incomplete or inconsistent information.

Orders and payments

Stripe processes payments through its hosted checkout. We send the firm name, account email, order and account identifiers, pack quantity and any referral attribution needed for the order. You enter card information on Stripe's checkout, not the Alfred signup form.

Alfred receives and stores payment and billing-related information returned by Stripe, including transaction identifiers, amounts, status and payment event records. We use these to reconcile payments, administer credits and referrals, resolve payment questions and meet recordkeeping obligations. Stripe's privacy notice explains how it handles payment information.

Referral links and browser storage

Our referral-link tool uses the name and firm you enter to create a referral identifier, which may identify the referrer. Opening a referral link can store that identifier and a timestamp in browser local storage. We use it for attribution for up to 60 days and include eligible attribution with signup and order records to administer the referral programme. The stored browser value may remain after that period; you can remove it by clearing the site's browser storage.

If you choose to share a link through email or a social service, that service receives the link and message you choose to share. Share only information you are entitled to disclose.

Advertising measurement

The Meta Pixel is not used on this marketing website or on our broker lead-pack signup and terms pages at start.alfredassistance.com. We use it only on our broker enquiry forms, start.alfredassistance.com/get-started and start.alfredassistance.com/book-a-call, to measure visits from our ads and when a broker sends an enquiry. It records a page visit when one of these forms opens and one enquiry event when you send your contact details. It does not send Meta your form answers or the name, email, phone number, firm or FSP number you type. This does not change the separate borrower form, which provides its own privacy notice.

Meta may receive your IP address, browser and device information, the page address and cookie identifiers through its technology. Before the Pixel loads, these forms remove everything from the page address except advertising campaign tags (utm parameters, gclid and fbclid) and the v setting, which hides the video when set to 0, and they do not load it if that can't be done. An enquiry event is not proof of payment, approval, a booking or lead delivery. Avoid putting personal or sensitive information in page URLs. You can manage cookies in your browser and advertising preferences with Meta. Blocking the Pixel does not affect your enquiry or booking, and does not remove previously stored cookies or records.

Website analytics

We use Google Analytics 4 to understand how the broker signup page is used. It runs only on start.alfredassistance.com and its lead-pack terms page. It records page visits and, on the signup page, signup steps (signup started, signup completed after email verification, checkout started, with the pack total, and checkout cancelled), whether the walkthrough video is played, how much of it is watched and which of its steps you select. Page addresses are sent without query strings, apart from advertising campaign tags (utm parameters and gclid) and a marker showing a cancelled checkout, and the address of another website that links to the page is reduced to that site's domain. The broker signup page removes recognised ref and firm query parameters before loading Google Analytics, does not load it if those parameters remain, and does not load it when a visit arrives with a firm parameter.

Google may receive your IP address, browser and device information and cookie identifiers through Google Analytics. Our event calls do not include names, emails, phone numbers, FSP numbers, passwords or payment details. You can manage cookies in your browser or install Google's opt-out browser add-on at https://tools.google.com/dlpage/gaoptout. Blocking Google Analytics does not affect signup.

Booking a discovery call

On desktop, the calendar near the bottom of the homepage loads automatically as you approach it. On mobile, Choose a time opens Alfred's Google Calendar booking page in a full-screen overlay. Other Book a discovery call buttons also open a booking overlay. You can also open the calendar separately. Google may process technical information such as your IP address, device information and cookies before you enter any details. Booking details are processed by Google and Alfred to create the appointment, send the invitation and arrange your requested conversation. Review Google's notices shown in the calendar before submitting. Website bookings do not use GoHighLevel.

Borrower information

The marketing walkthrough shows illustrative records and does not collect borrower applications. The separate Alfred Mortgage Connect borrower form explains its collection, referral and contact arrangements at the point of enquiry. Broker signup is not consent for us to collect a borrower's information from you. Do not put borrower documents, identity documents or financial statements into the general Contact form or email them to the general support address.

Service providers and access

Alfred staff handling enquiries, account support, FSP checks, orders and delivery may access information needed for that work. Vercel hosts the pages and broker services; Supabase provides broker authentication and database storage; Stripe processes payments; Google processes bookings and the marketing enquiry sheet; n8n routes marketing enquiries. Our configured email providers deliver service messages, and Slack may carry internal enquiry or operational notifications.

These providers may process or store information outside New Zealand. Contact us for more information about a provider or overseas handling. We may also disclose information where you authorise it or where the law requires or permits it. We do not treat a service enquiry as permission to subscribe you to unrelated marketing.

Security and retention

We use account access controls and secure connections to protect information. No internet service can remove every security risk. Keep your credentials and verification codes private and contact us promptly if you suspect unauthorised account access.

We keep information for as long as needed for the purposes described here, including providing the service, resolving disputes and meeting legal recordkeeping requirements. Contact us to ask about records we hold or request deletion. Some transaction, consent or security records may need to remain after an account closes; backup copies may also persist for a period. We do not promise a fixed automatic deletion date for every record.

Access, correction and privacy concerns

You can ask to access or correct personal information we hold about you by emailing support@alfredassistance.com or writing to our privacy officer at the address above. We may need to confirm your identity before releasing information. We usually need to decide an access or correction request within 20 working days; we will tell you if a lawful extension or refusal applies.

You do not need to book a sales call to raise a privacy concern. If you are not satisfied with our response, you can contact New Zealand's Office of the Privacy Commissioner at privacy.org.nz. We will update this notice when our information handling changes; the date above identifies this version.