Privacy Policy

1. Who we are

This Privacy Policy explains how Valta Limited ("Valta", "we", "us", "our"), based in Auckland, New Zealand, collects, uses, discloses, and protects personal information when you use valta.co.nz (the "Site") and related services, including browsing property listings, creating an account, saving searches, favouriting properties, enquiring about a property, registering as an agent, or purchasing a listing or marketing package.

Valta operates as a property marketing and listings platform. We are not a licensed real estate agency — properties are listed and sold by the licensed agents and agencies who use our platform, and we may pass on enquiries to them for a referral fee.

If you have questions about this policy or want to exercise any of the rights described below, contact us at privacy@valta.co.nz.

2. Personal information we collect

Depending on how you use the Site, we may collect:

  • Account information — name, email address, password (stored encrypted), and phone number if provided.

  • Saved searches and favourites — your search criteria (price range, location, bedrooms, property type) and the listings you save or favourite.

  • Enquiry information — when you contact us or an agent through a property enquiry form or the Contact Us page, we collect your name, email, phone number, and message content.

  • Vault (off-market) access requests — if you request access to Valta's off-market "Vault" listings, we collect information needed to verify and grant that access, and we log which Vault listings a member views.

  • Buyer profile information — when you register interest, request Vault access, or complete an intake form, we may collect information to help us and our listing agents understand and match your requirements

  • Agent, agency, and vendor information — if you register as an agent, list a property, or submit content (photos, floor plans, copy), we collect your business details, contact information, and the content you submit.

  • Payment information — if you pay a listing fee or purchase a marketing package, payments are processed by Stripe. We do not store your full card number; Stripe handles and stores payment card data under its own privacy and security terms.

  • Technical and usage information — IP address, device and browser type, pages viewed, referring URLs, and interactions with the Site, collected automatically through cookies and similar technologies (see Section 4).

  • Communications — records of correspondence if you email or otherwise contact us.

We do not knowingly collect any special category / sensitive personal information (such as health, racial or ethnic origin, or religious beliefs), and the Site is not directed at children.

3. How we use personal information

We use personal information to:

  • create and manage your account, saved searches, and favourites;

  • route your property enquiries to the relevant listing agent, and keep a copy for our own records and quality/safety monitoring;

  • verify and manage access to Vault off-market listings;

  • build a buyer profile from the information you provide (such as budget, location of interest, timing, and buyer type) to match you with relevant listings and agents, and to generate aggregated, statistical market insights (see Section 5A);

  • process payments for listing fees and marketing packages via Stripe;

  • communicate with you, including transactional emails (account, enquiry confirmations) and, where you've consented, marketing emails such as saved-search alerts;

  • operate, secure, and improve the Site, including through analytics (Section 5);

  • run and measure paid marketing campaigns (search and social advertising) in New Zealand and internationally;

  • meet our legal, accounting, and regulatory obligations; and

  • detect, investigate, and prevent fraud, misuse of Vault content, or breaches of our Terms of Use.

Where GDPR applies (see Section 8), our lawful bases for these purposes are: performance of a contract with you (account, enquiries, payments), our legitimate interests (analytics, fraud prevention, service improvement), your consent (marketing emails, non-essential cookies), and compliance with legal obligations.

4. Cookies and similar technologies

We use cookies and similar technologies for essential site functionality, analytics, and advertising. Full detail on what each tool collects, and how to manage your preferences, is set out in our separate Cookie Policy. In summary, we currently use:

  • Google Analytics (GA4) and Google Tag Manager — usage analytics.

  • PostHog — site and per-listing marketing analytics.

  • Advertising pixels (e.g. Meta, Google Ads) — to measure and retarget paid marketing campaigns.

Where you are in the EU/UK, non-essential cookies (analytics and advertising) are only set with your opt-in consent via the cookie banner. You can withdraw consent or change your preferences at any time through the cookie settings link in the site footer, or through your browser settings.

5. Who we share personal information with

We share personal information with:

  • Listing agents and agencies — when you enquire about a property, your enquiry (including your name, contact details, and message) is sent to the agent attached to that listing so they can respond to you. Valta may receive a referral fee if this leads to a transaction.

  • Service providers who process personal information on our behalf, including Stripe (payments), our hosting provider, and the analytics providers listed in Section 4. These providers are only permitted to use your information to provide services to us.

  • Professional advisers and regulators, where required to meet our legal obligations.

  • A purchaser or successor in the event of a merger, acquisition, or sale of some or all of Valta's assets, subject to the same or equivalent privacy protections.

We do not sell personal information to third parties for their own independent marketing purposes. (See Section 8 for what "sale/sharing" means specifically under California law, and how it applies to our use of advertising pixels.)

5A. Aggregated market insights

We use buyer profile information (Section 2) to build aggregated, statistical market insights — for example, trends in buyer demand by area, budget band, or buyer type. We may share or license these insights with listing agents and other market partners, and we may in the future offer them as a data product.

When we do this:

  • we only share information in aggregated form (statistics and trends across a group of buyers), not individual buyer profiles or records;

  • we apply a minimum group size before any statistic is shareable, so that no insight can reasonably be traced back to an individual;

  • recipients are contractually prohibited from attempting to re-identify any individual from the data; and

  • we do not include your name, contact details, or any other direct identifier in these insights.

If we ever want to share information at a more granular, individual level — even without your name attached — where there's a realistic possibility it could identify you (for example, because it's a small or specific enough combination of location, budget, and buyer type), we'll treat that as personal information and only do so with your explicit consent, obtained separately from our general Terms of Use.

6. International data transfers

Valta is based in New Zealand, and some of the service providers we use (including Google, PostHog, Stripe, and our email provider once confirmed) store or process personal information outside New Zealand, including in the United States, Australia, the European Union, and Singapore. Where we transfer personal information internationally, we take reasonable steps to ensure it continues to receive an appropriate standard of protection — for example, relying on our service providers' own compliance frameworks (such as standard contractual clauses, the EU-US Data Privacy Framework, or equivalent mechanisms)

7. Data retention

We keep personal information for as long as necessary for the purposes it was collected for — for example, for as long as you hold an active account, for as long as needed to respond to and resolve an enquiry, or as required to meet our legal, tax, and accounting obligations. When personal information is no longer needed, we delete it or de-identify it.

8. Your privacy rights

New Zealand (Privacy Act 2020)

You have the right to access personal information we hold about you and to request correction of it. To make a request, contact privacy@valta.co.nz. We'll respond within the timeframes required by the Privacy Act 2020. If you're unhappy with how we've handled your information, you can complain to the Office of the Privacy Commissioner.

Australia

If you're in Australia, we handle your personal information consistently with the Australian Privacy Principles. You can contact us to access or correct your information, or raise a concern, using the same details above; unresolved complaints can be referred to the Office of the Australian Information Commissioner (OAIC).

European Union / United Kingdom (GDPR / UK GDPR)

If you're in the EEA or UK, you have the right to: access the personal information we hold about you; request correction or deletion; restrict or object to certain processing; receive a copy of your data in a portable format; and withdraw consent at any time where processing is based on consent. This includes the right to object to us building a buyer profile from your information (Section 3) or including your information in aggregated market insights (Section 5A). To exercise any of these rights, contact privacy@valta.co.nz. You also have the right to lodge a complaint with your local data protection supervisory authority.

United States / California

We do not sell personal information for money. Depending on how you count the sharing of information with advertising platforms (such as Meta and Google) for cross-context behavioural advertising, that activity may be treated as a "sale" or "share" under the CCPA/CPRA. The same applies to our aggregated market insights (Section 5A): unless and until that data meets the CCPA's specific legal standard for de-identified data, we treat sharing or licensing it as a "sale" or "share" for these purposes. California residents have the right to know what personal information we collect and how it's used, to request deletion or correction, to opt out of the sale/sharing of personal information (including exclusion from aggregated insights), and to not be discriminated against for exercising these rights. You can opt out of advertising cookies through our cookie settings, or contact privacy@valta.co.nz to exercise any of these rights.

Singapore (PDPA)

If you're in Singapore, we collect, use, and disclose personal information based on your consent (including deemed consent where we've given clear notice and a reasonable opt-out) and other bases permitted under the Personal Data Protection Act. You can withdraw consent, or access or correct your personal information, by contacting our data protection contact at privacy@valta.co.nz.

Canada

If you're in Canada, we handle your personal information consistently with the Personal Information Protection and Electronic Documents Act (PIPEDA), including your right to access and request correction of your information. Contact privacy@valta.co.nz to make a request, or to complain, you may contact the Office of the Privacy Commissioner of Canada. If you receive marketing email from us and you're in Canada, note that Canada's Anti-Spam Legislation (CASL) requires opt-in consent before we send it — see Section 9.

Other jurisdictions

If you're accessing the Site from a jurisdiction not specifically listed above, we handle your personal information consistently with the practices described in this policy, and we'll do our best to honour requests consistent with your local law. Contact privacy@valta.co.nz with any question or request.

All regions

To protect your information, we may need to verify your identity before actioning a request. We'll respond to all requests within the timeframe required by the applicable law.

9. Marketing communications

If you receive save-search alerts or other marketing communications from us, you can unsubscribe at any time using the link in the email, or by contacting privacy@valta.co.nz. Transactional emails (such as enquiry confirmations) aren't marketing and don't have an unsubscribe option, as they relate to a specific action you've taken.

Consent standards for marketing messages vary by where you're located — for example, Canada's Anti-Spam Legislation (CASL) requires opt-in consent before we can email you, which is stricter than New Zealand's default.

10. Data security

We use reasonable technical and organisational measures to protect personal information against loss, misuse, and unauthorised access, including access controls on Vault (off-market) content and encrypted storage of account passwords. No method of transmission or storage is completely secure, and we can't guarantee absolute security.

11. Children

The Site is not directed at, and we do not knowingly collect personal information from, anyone under 18.

12. Changes to this policy

We may update this policy from time to time. We'll post the updated version on this page with a new "Last updated" date, and where changes are material, we'll take reasonable steps to notify you.

13. Contact us

For any question about this Privacy Policy or to exercise your rights, contact:

Valta Limited Auckland, New Zealand privacy@valta.co.nz