General

Privacy Statement

At Tower we are committed to protecting your privacy and acting in accordance with the Privacy Act 2020. This Privacy Statement sets out how Tower (Tower Limited and its related companies in Fiji and the Pacific) manage your personal information.

Personal information is information about an identifiable individual. It includes information that could be used to identify you, such as your name and contact details.

By providing your personal information or using our services, you agree to this Privacy Statement. If you provide information about any other person, then you must have authorisation from that person to do so. This Privacy Statement should be read in conjunction with terms and conditions you agree to when using or signing up to any of our products or services. This Privacy Statement applies to all people who:

• Use our products and services.
• Apply to use our products and services.
• Interact with us either directly or indirectly.
• Have had their personal information provided by a third party to Tower.
• Provide services to Tower or have business relationships with Tower.

1. Collection of personal information

Where possible, we collect your personal information directly from you in person, in writing, over the phone through our agents, our website forms and/or by electronic messages, including by online services via other third parties.

You can choose not to provide us with some or all of the personal information we request. However, if you do not provide us with some information, we may not be able to provide you with the requested products or services or process any future claims.

The personal information we collect may include (but is not limited to):

• your identification and contact details, including full name, date of birth, physical address, phone numbers and email addresses;
• information collected in relation to your use of our digital services, including IP addresses;
• financial records, including bank and payment details. We collect bank details to facilitate the secure processing of refunds and claims payments;
• information about the asset being insured and any cover details, your health, financial, criminal and insurance history and any personal information required for processing or investigating claims;
• your queries, complaints and other written or verbal communications with us. When you're dealing with any member of Tower by telephone or webchat your conversation may be recorded for validation, quality assurance, training purposes or claims investigation and processing;
• details you've shared publicly including on social media platforms; and
• any other information that Tower is required by law to collect about you.

You need to ensure that all information you provide to us is current, complete and accurate, as outdated, incomplete information may result in us being unable to provide insurance cover or process any future claims. If there are any changes, you should let us know immediately.

Third party collection

Where you provide us with personal information about any other person, you confirm that you have the authorisation of that person to give such information.

If we receive personal information about you that we did not ask for, or from someone other than you, and we determine that we could have collected this information from you had we asked for it, we will take reasonable steps to ensure that you are notified, as soon as practicable, that we have collected your personal information.

Information we collect via our website (cookies)

We may collect personal contact details from you when you use our website. For example, if you sign up to receive promotional materials, or communications about services provided by us.

To improve your experience when you use our website and ensure that it is functioning effectively, we use cookies (small text files stored in a user’s browser). Additional information on how we use cookies and other tracking technologies and how you can control these can be found in our Cookie Notice.

2. Use of personal information

You consent to us and the other parties referred to in the sections titled "Collection of personal information" and “Disclosure of personal information” collecting, holding and using your personal information, and any other person's personal information that you were authorised to provide, in order to:

2.1 provide our products and services and administer our relationship with you. This may include:

• providing products and services and managing our business;
• assessing whether we can provide insurance cover and on what terms;
• keeping you up to date with details of your insurance cover and the range of products and services we offer;
• informing you about any product or service changes;
• improving our services, products and customer experience;
• updating your records with us;
• acting in accordance with your, or a person authorised to act on your behalf's, instructions;
• contacting you following the lapse or cancellation of your policy, or where a quote or application is not proceeded with;
• managing our relationship with insurance partners, brokers, referrers, distributors or financial advisers, including paying commission;
• if you're a joint policy holder, enabling any member of Tower to share your personal information relating to your policy with the other joint policy holder(s);
• training our employees, agents and representatives;
• responding to or handling queries or complaints, processing or investigating any claims you may make or take recovery action;
• collecting any money owed by you or refunding or making payments of any money owed to you;
• exercising Tower's rights under any insurance policy, including but not limited to subrogation rights;
• managing our commercial relationships and conducting supplier due diligence; and
• using artificial intelligence for our business operational processes including customising Tower content and communicating with you and, enhancing efficiency of claims investigations and other processes,

Where you provide a joint or shared email address as your nominated email address, you authorise Tower to send all policy-related communications to that email address. You acknowledge that this email address will be treated as the primary contact point for policy-related communications unless and until you inform Tower otherwise. 

2.2 research and market products and services. This may include:

• running marketing and advertising campaigns including sharing and receiving information from Google and Facebook to help us identify and send or show you information, promotional offers and ads that may be of interest to you;
• entering you into promotions and/or prize draws, including by sharing limited personal information about you, with selected third parties for any applicable promotions or prize draws conducted by us; and
• conducting market and consumer research and statistical analysis,

If you do not wish to receive electronic marketing information from Tower, you can let us know by clicking the unsubscribe link embedded in the footer of Tower marketing electronic messages or by emailing marketing@tower.co.nz.

Where you provide a joint or shared email address for your nominated email address, you agree that in relation to receiving marketing messages will be removed from Tower's marketing list and all other persons who share that joint email address will continue to receive marketing material from Tower addressed to them until they unsubscribe from receiving such messages.

2.3 comply with laws and regulations. This may include:

• enabling Tower to comply with any New Zealand or overseas laws, rules or regulations; and
• share personal information with the police, government agencies in New Zealand or overseas or other financial institutions, where Tower reasonably believes that the disclosure will assist it to comply with any New Zealand or overseas laws, rules or regulations or will assist in the investigation, detection and/or prevention of fraud or other criminal offences.

3. Disclosure of personal information

For the purposes set out above at paragraph 2, Tower may share your information with third parties, including:

• your representatives;
• fraud bureaus, credit agencies and debt recovery agencies;
• organisations that support us to investigate, identify or prevent fraud or misconduct including investigators and recovery agents;
• our professional advisers, such as auditors, lawyers, brokers, distributors and agents;
• medical and health service providers;
• parties who we have business arrangements with, including our insurance and referral partners;
• reinsurers, financiers, and other insurance companies;
• loss adjusters and assessors;
• regulators, government agencies, law enforcement bodies and any other parties as required by law;
• third parties bound by confidentiality obligations such as service providers, suppliers, business partners and certain subcontractors;
• financial institutions;
• parties who have an interest in your insurance, or we consider appropriate to evaluate and administer any insurance and/or claims;
• external dispute resolution organisations involved in the management and resolution of complaints; and
• industry bodies and associations and any industry databases (including Insurance Council of New Zealand and the Insurance Claims Register).

In addition to the reasons set out above, Tower may also share your personal information with third parties (subject to appropriate confidentiality obligations) where you have consented to that information being shared or the reason for doing so is connected to the purpose of collecting the personal information.

Where we have collected your personal information indirectly, we disclose it only for the lawful purposes for which it was obtained, or as otherwise permitted or required by the Privacy Act.

We do not sell your personal information, and we do not disclose it for purposes unrelated to your policy, claim, or relationship with us unless we are legally required to do so or you have authorised the disclosure.

Disclosure to overseas recipients

In order to provide our products and services or to manage our business activities including responding to claims events, we may transfer, process, use and store your personal information with third parties in New Zealand and overseas.

We will use reasonable endeavours to ensure the third parties we disclose your personal information to outside New Zealand, are required to protect it in a way that provides comparable or better safeguards to those set out under New Zealand privacy law.

4. Storage and security of personal information

Tower will take all reasonable steps to protect personal information from misuse, loss and unauthorised access, modification or unauthorised disclosure. Tower holds personal information electronically and sometimes in a hard copy. The security of this information is very important to us and this is why reasonable precautions are in place to secure data and transactions via the phone, email, My Tower and Tower’s website.

Tower retains personal information only for as long as we have a lawful purpose to use it.

Tower utilises Microsoft Information Protection Framework to classify and protect your personal information. Protections may include encrypting emails and documents where appropriate, as well as applying other protections based on data sensitivity classification.

Tower also applies a range of technical, organisational, and physical safeguards, including access controls, secure systems, training, and incident management processes, to protect personal information from misuse, loss, or unauthorised access or disclosure.

5. Contacting us and access to your personal information

Tower will do its best to ensure your personal information is accurate. You are responsible for promptly informing Tower of any change of your personal information or that of any policy holder who has authorised you to act on their behalf (including yours and their name, address, telephone or mobile numbers, and email address).

You can contact us to request access to, and make changes to, the personal information we hold about you.

To make changes by phone or online, Tower will need to verify that you are authorised to obtain and update personal information. You will need to satisfy the identification requirements to access or change information.

Under the Privacy Act, in some limited circumstances we don't have to give you access or correct your personal information. If that is the case, we'll explain why and provide information about how you can complain should you wish to do so.

6. Privacy concerns or complaints

If you have any privacy questions or concerns or would like to make a personal information request, please contact us by using one of the methods below:

• By email to the Tower Privacy Officer at Privacy@tower.co.nz
• Phone: 0800 379 372.
• Online.
• In writing by post: Tower Limited, PO Box 90347, Auckland 1142.

If you're unhappy with our response, you may wish to contact the Privacy Commissioner at enquiries@privacy.org.nz

Privacy Statement Changes

We encourage you to review this Privacy Statement on a regular basis as it may be amended periodically.

This Privacy Statement was last updated in March 2026.

7. Applicable law

This Privacy Statement is governed by New Zealand law. Your personal information will be collected, used, stored, shared and retained in accordance with this Privacy Statement and New Zealand law. The courts of New Zealand have non-exclusive jurisdiction.

---

Legal disclosures

The information you provide Tower will be used to confirm if we can provide insurance to you and to help with any claim you or any other policy holder may make. Any policy issued is a contract of insurance with Tower. The information you provide Tower is a legal disclosure, and you confirm and agree that you are authorised to respond on behalf of all policy holders and people who may lawfully make use of the asset(s) you are wanting to insure. If the policy is for a company or a trust, this includes all directors, or trustees. Your disclosures must cover all persons who will be using your vehicle or property or living at your house or rental property. If circumstances change meaning any information you have provided to Tower changes or the asset(s) or use of the asset(s) being insured changes or the condition of the asset(s) changes you must let us know as soon as possible. If you do not let us know of any change, any claim you may make may not be covered and your policy and cover may be cancelled.

---

My Tower

My Tower contains important information about your policy/policies and you are responsible for ensuring we have accurate information about you in respect of your insurance cover. Any information provided to Tower through My Tower will be deemed to have come from you and you are responsible for all activity that occurs in connection with your My Tower account.

When accessing My Tower, you must:

1. ensure that all information which you provide to us is current, complete and accurate;
2. comply with all applicable laws, regulations, standards and codes;
3. maintain the confidentiality of any password you use to access My Tower and not share or transfer your password (or lend or otherwise transfer your use or access to My Tower) to any third party; and
4. notify Tower of any actual or suspected unauthorized use of your password or any other breach of security or access related to your My Tower account.
5. 1.  

For the avoidance of doubt, in the event of any inconsistency between the content on My Tower and the terms and conditions of Tower’s policies, the terms and conditions of our policies take precedence.

We may suspend, discontinue or remove My Tower, or your access to My Tower, at any time we see fit.

Legislation

New Zealand

Unless otherwise stated, the content of the Website has been prepared in accordance with New Zealand law for the supply of products and services to persons resident in New Zealand. Any offer of securities on the Website is only an offer to persons resident in New Zealand and is not available for subscription by any person not resident in New Zealand. Unless otherwise stated, references to any currency are in New Zealand dollars.

As Tower Limited is dual listed on the NZX and the ASX, some of the information provided on the Website is designed for both New Zealand and Australian residents. References to currency will be shown as New Zealand or Australian dollars, as appropriate. Information may not be applicable to you if you are not a New Zealand or Australian resident.

Security

In designing the Website, Tower has incorporated security procedures and practices that we consider are consistent with New Zealand and international industry practice. We review our security procedures from time to time and update these where relevant. Pages on the Website that require the mandatory entry of personal information and/or username and password are protected by encryption. The username, password and personal data are also encrypted when transmitted over the internet which prevents tampering of these details.

© 2026 Tower Limited and its related companies. All rights reserved.