Privacy Policy
Last reviewed 5 May 2026.
Businessloans.org.nz (the “Site”) is committed to protecting the privacy of visitors. This policy explains what information we collect, how we use it, and the limits we operate under, consistent with the Privacy Act 2020 and the thirteen Information Privacy Principles (IPPs) set by the Privacy Commissioner. It works alongside the Terms of Use.
1. Summary
We do not run forms, sign-up flows, or lead-capture on this Site. We do not ask for, collect, or store any personally identifiable information about visitors. Calculator inputs stay in the visitor's browser. We use Google Analytics 4 for aggregate, non-personal traffic data only. When a visitor clicks through to Prospa they leave our Site, and Prospa's privacy policy applies from that point.
2. What we collect
Calculator inputs (loan amount, term, indicative rate) are processed entirely in the visitor's browser. Outputs (weekly repayment, monthly cost, total interest) are computed client-side. None of these inputs or outputs are transmitted to a server we control, written to our database, or shared with any third party.
For aggregate Site analytics we use Google Analytics 4 (GA4). GA4 collects standard web-analytics data: page views, referrer URL, anonymised IP, device type, browser type, operating system, screen size, language, time on page, and event data such as which calculators were used and which CTA was clicked. GA4 data is collected in aggregate and we do not collect or transmit any personally identifiable information through GA4.
3. What we do not collect
We do not collect names, email addresses, phone numbers, business names, NZBN numbers, IRD numbers, bank statements, ID documents, business financials, or any other identifying or sensitive information through the Site. The Site has no contact form fields, sign-up flow, account creation, newsletter subscription, comment system, or chat widget that would collect personal information.
The contact page directs visitors to send email directly. Any information shared by email is governed by the visitor's own choice of what to send and is used solely to respond to the enquiry.
4. Cookies and analytics
The Site uses cookies set by Google Analytics 4 for analytics purposes only. These cookies record an anonymised visitor identifier so GA4 can distinguish unique visitors from returning visitors in aggregate. The cookies do not store personal information. You can disable cookies in your browser settings; doing so does not affect the calculator's operation.
We do not use advertising cookies, retargeting pixels, or third-party tracking pixels on the Site. We do not sell or share analytics data with advertisers.
5. When you click “see if you qualify”
Clicking the calculator's “see if you qualify” CTA redirects the browser to Prospa's application URL at apply.prospa.co.nz. From that point, the visitor is on Prospa's domain and Prospa's privacy policy applies. We do not pass calculator inputs across the redirect. Prospa's application begins fresh with whatever Prospa chooses to ask.
We attach a non-personal partner-tracking tag to the redirect URL so Prospa can attribute the referral to us for commission purposes. The tag identifies us as the referring partner; it does not contain any personal information about the visitor.
6. CCCFA framework at the lender level
The Credit Contracts and Consumer Finance Act 2003 (CCCFA) framework, including responsible-lending obligations and disclosure requirements, applies at the lender level. Prospa, as a registered NZ lender, holds the CCCFA framework appropriate to its lending activity. Where a sole trader's borrowing is wholly or predominantly for personal use, or where a director provides a personal guarantee, CCCFA protections may apply to that transaction. Those protections are administered by the lender, not by the Site.
7. Your rights under the Privacy Act 2020
Under the Privacy Act 2020, individuals in New Zealand have the right to access and correct personal information held about them by an agency. Because the Site does not collect personal information through forms or accounts, in practice this right is exercised against the parties who do hold relevant information, namely Prospa (after a visitor clicks through and applies) and Google (in respect of GA4 analytics data).
For Prospa data, contact Prospa directly through prospa.co.nz. For GA4 data, Google's privacy controls and Google Account data tools are the relevant access path. The Office of the Privacy Commissioner (privacy.org.nz) is the primary New Zealand source for guidance on individual privacy rights and the IPPs.
8. Data retention
Because the Site does not collect personal information directly, there is no personal-data retention schedule. GA4 aggregate data is retained for the standard GA4 retention window (currently up to 14 months for event-level data, set in the GA4 property configuration). Aggregate, anonymised analytics data may be retained indefinitely for trend analysis.
9. Third parties
The Site uses the following third-party services. Google (Google Analytics 4) processes the analytics data described in section 2. Google Fonts serves the Inter and Plus Jakarta Sans font families used on the Site; this involves a font request to fonts.googleapis.com that is governed by Google's privacy policy. Cloudflare hosts the Site (via Cloudflare Pages); Cloudflare's privacy policy applies to its hosting, edge-network, and CDN services.
10. Children
The Site is intended for adult business owners, decision-makers, and finance professionals in New Zealand. We do not knowingly collect any information from children, and the Site is not directed at children.
11. International transfer
The third-party analytics and infrastructure providers used by the Site (Google, Cloudflare) operate global networks. Aggregate analytics data may therefore be processed on servers outside New Zealand. The Site does not directly transfer personal information overseas because the Site does not collect personal information.
12. Changes to this policy
This policy may be updated from time to time. The “Last reviewed” date at the top of this page reflects the most recent change. Material changes (for example, the addition of a lead-capture form or the introduction of a new third-party service that handles personal information) will be flagged in the disclaimer band on every page.
13. Contact
Privacy questions can be sent through the contact page. Complaints about how the Site handles privacy may also be raised with the Office of the Privacy Commissioner (privacy.org.nz).