Dun & Bradstreet (New Zealand) Ltd (D&B New Zealand) and DBCC Pty Limited (D&B Consumer Credit) and our affiliated entities around the world (together D&B) are the leading providers of information services. This page provides information about D&B's privacy and data protection policies and practices for New Zealand.

Our data protection practices

D&B understands that while the free flow of information is important it must be balanced against the privacy interests of individuals and businesses. Regardless of how we collect or disseminate information, stringent privacy principles are applied to ensure that the privacy interests of individuals and businesses are respected. Where information relates to individuals those principles embody the privacy principles and the other applicable provisions of the Privacy Act. D&B believes that treating information in this manner is good business.

Collection of information

Personal information will be retained by D&B and our related entities to ID verify, locate you, detect fraud, and for payment related purposes. It will also be disclosed to our clients for those purposes.

D&B collects the personal information it needs to provide the products and services it offers.

Those products and services include:

  • Credit reporting;
  • Commercial Other information services including marketing databases for direct mail, telemarketing, other sales activities and market research;
  • Receivables management including debt collection services; and
  • long term internal business purposes (for example, business analytics and trend monitoring).

The information D&B collects to provide its commercial credit reporting and information services are business-related. Some information relates to the owners or principals of the business and to directors, officers and senior management. Information collected about individuals is limited to that which our customers find relevant for business decision-making. That information is collected to give D&B’s customers a sense of who is responsible for the decisions that drive the business and to serve as a resource to assess the likelihood of business success. Some of this information is collected from publicly available sources.

Some information D&B collects is regulated by law and includes identification details, information about credit providers, certain default information and bankruptcy and judgment information.

D&B also collects personal information about its customers, or employees or officers of its customers, so that it can complete business transactions, deliver products and services, administer accounts, provide customer support and meet regulatory requirements.

In the course of its receivables management business D&B collects the information it needs about individual debtors, or about principals, owners, directors, other officers and senior management of company debtors.

Web site data collection practices

A visitor to D&B's web site is not asked to reveal any individually identifiable information. We collect some information about visitors indirectly through standard web logs, including IP address, what browser is being used and the domain name from which a visitor entered the site. We normally use this information in the aggregate to administer and improve our web site. Some data may be traceable to an individual, but we do not normally seek to identify individuals unless we believe that someone is using our site improperly.

Some existing customers come to our web site with IDs and passwords already assigned. Others who register at our web site are asked to provide standard contact information, such as name, mailing and email addresses, and telephone numbers. We may also collect a credit card number from those who register through the web site to buy products and services.

We sometimes use an Internet device called a cookie to store login or other information on your computer. A cookie is a small amount of information that a web site transfers to your computer's hard drive. Many web sites use cookies to make your life as a user easier and more engaging. We use cookies to simplify your access or to tailor our services to your needs and interests. For some services, we offer users the choice of having an ID or password stored in a cookie. We use a third-party contractor to monitor how our visitors use our web site and to determine which of our online features they prefer. To provide this service, our contractor uses cookies on our behalf to collect aggregated, non-identifiable information about our visitors' use of our site, solely for our internal use.

Cookies come with some protections. We do not store credit card numbers in cookies. No other web site can read a cookie set by D&B, and we can't read a cookie that another web site wrote to your computer. Most internet browsers are set to accept cookies. Users can reset browsers to refuse cookies and still use our web site, although access may not be as simple. For further information, including how to refuse cookies, visit www.coremetrics.com

Through our web site, we occasionally offer users the opportunity to receive sales or promotional information for D&B products and services of interest to them. A user who agrees may be asked to provide contact information (e.g., name, mailing address, email address, telephone and fax number) that we will use to provide information about our products and services.

Use and disclosure

D&B will use and disclose information it holds about an individual for the purpose of providing credit reporting services (details of which are set out on page 1 under “Collection of Information”) and for other related purposes for which the individual would reasonably expect us to use the information or to which the individual has agreed (either expressly or impliedly). In many cases the primary purpose of collecting the information is to include it in one or more of our databases so that we can provide it to our customers as part of the product or service they select. Our customers include major corporations, small and medium businesses and, government bodies and agencies.

We ask registered users of our website to choose whether to receive email updates about D&B products and services. We honour the choices made. However, we reserve the right to email customers on rare occasions when we think it is important. We do not allow other uses or disclosures of mail or email addresses or registration information.

If D&B engages anyone to do something on its behalf (for example, suppliers of internet support services, auditors, process servers or lawyers) then D&B and the service provider may exchange information for the purposes for which the service provider has been engaged. We also use personal information for planning, product development and research purposes. For example, from time to time D&B compiles online transaction and registration information for internal analysis such as researching and identifying market segments and needs. These analyses produce only aggregate data about users.

The global D&B group is made up of companies world-wide. In most cases where a product or service supplied by D&B is needed by a business outside New Zealand it is supplied to a D&B entity in the home jurisdiction of the business, for that D&B entity to supply to the business. D&B entities world-wide have access to a global marketing database on which D&B New Zealand records the names of the chief executive officers of organisations in New Zealand.

D&B may also use or disclose information where it is required or permitted by law to do so.

Information quality

Information quality is at the heart of any successful information company. Working to ensure that information is up-to-date and accurate benefits the information subject and D&B. To help ensure quality information, D&B employs extensive measures, including contacts with businesses, quality review at both the point of collection and at the end of the information collection process and prompt error correction.

Information security and retention

D&B is serious about the security of the information it collects. Accordingly, it employs technical, contractual and administrative steps to ensure that the information is protected against unauthorised access and disclosure. D&B employees undertake training in handling information, with particular emphasis on preserving the privacy interests of individuals and businesses.

D&B will destroy or remove identifying features from information held about an individual or business within a reasonable time after it is no longer needed. D&B will remove information from credit information files when required by law.

Access and correction


Generally D&B allows individuals and businesses to view information it holds about them within a reasonable time after they have made a request to do so. In some instances, information about a business or individual may not be readily retrieved, and D&B will refuse to give that individual or business access to information. If it does so it will provide that individual or business with the reason it has refused them access.


D&B will correct information it has about an individual or business if it discovers, or the individual or business is able to show, the information is incorrect. If an individual or business seeks a correction and D&B disagrees that the information is incorrect D&B will provide the individual or business with its reasons for taking that view and will, if requested by the individual, include a note in the credit information file.

Where requested to do so by an authorised agent of a business, D&B will provide a copy of a business report. Such requests can be made by calling D&B's Client Services Centre.

Where an owner or principal of a business contacts D&B about a potential error, D&B will act promptly to rectify the error or any misleading information. Additionally, D&B may apply a stop distribution to the relevant business report and to ancillary products affected by the error, until the matter is resolved.

In most cases a business may have its information removed from business marketing lists published by D&B. Where an authorised representative of the business requests that it be removed from marketing directories, publications and/or mailing lists the business will usually be delisted. To be delisted, an authorised representative of the business should call our Client Services Centre.

Usually D&B will not charge you a fee for access to your credit information file. A copy will be mailed to you within 10 working days of your request. However we may charge a reasonable fee if:

  • We have incurred any costs in locating or supplying the information or report;
  • It appears to us that the access request is not related to refusal of an application for credit or otherwise related to the management of your credit arrangements; or
  • You ask us for a copy of your credit information file urgently and we provide it to you within 3 working days of your request.

If you authorise someone else to access your credit information file, and we reasonably believe that person is acting as a business intermediary between you and a credit provider, we may charge that person an access fee.

Summary of Rights

A Summary of your rights under the Credit Reporting Privacy Code 2004

The Credit Reporting Privacy Code 2004 promotes fairness, accuracy, and privacy in the practice of credit reporting. Credit reporters gather and sell information about you, such as a failure to pay your bills or if you have been made bankrupt. The Code, together with the Privacy Act 1993, gives you specific rights, many of which are summarised below. You can find the complete text of the Code and a link to the Privacy Act at www.privacy.org.nz.

Warning: This is only a generalised summary. If there is a difference between this summary and a provision of the Code or Act, the Code or Act prevails.

Some information can be reported about you

Credit reporters can collect only certain types of information for their credit reporting databases. The types of information they can collect are set out in the Code. Some of the information is about:

  • the credit accounts you hold, including their credit limits and repayment history;
  • any times you have defaulted on credit repayments (where a failure to pay has gone to debt collection);
  • any court judgments that have been made against you; and
  • any times you have been made bankrupt or entered into an insolvency arrangement.

There are time limits for keeping and reporting information

Credit reporters can:

  • generally disclose this information for only 4 to 5 years and keep it only one further year;
  • disclose information about your current accounts until two years after those accounts have closed;
  • keep identification information indefinitely; and
  • keep information about multiple bankruptcies indefinitely.

Only certain people can access your report for certain purposes

The Code limits the people who can gain access to your credit information. These will usually be credit providers who are considering your application for credit. In some strictly limited circumstances, the information may be made available to:

  • prospective landlords who have offered you a tenancy;
  • prospective employers who have offered you a job, as long as that job involves significant financial risk;
  • prospective insurers involved in insuring your mortgage;
  • debt collectors enforcing a debt against you;
  • people involved in court proceedings; and
  • certain public sector agencies acting under another law.

Your credit information may not be disclosed by a credit reporter for direct marketing purposes.

Your consent is needed in most situations

Most credit checks can take place only with your consent. This applies to access by credit providers, prospective landlords and prospective employers. Your consent may not be required for access by certain public sector agencies, people involved in court proceedings and debt collectors. The credit reporter must log each access that is made to your information and will normally let you know this information if you ask.

You can ask a credit reporter to suppress your credit information if you think you're the victim of fraud

If you believe you are the victim of fraud, including identity fraud, you can ask a credit reporter to suppress your credit information for 10 working days. While your credit information is suppressed, the credit reporter cannot disclose it in the normal way. If a credit provider asks the credit reporter for your information, the credit reporter can tell them that your credit information is suppressed.

The credit provider will know that you may be the victim of fraud and that someone else may be applying for credit in your name. If you want to apply for credit while your credit information is suppressed, you can ask the credit reporter to release the information to a particular credit provider. The credit reporter must take careful steps to confirm your identity before agreeing to do this. If you think the fraud is continuing, you can ask the credit reporter to extend the suppression beyond 10 working days. The credit reporter must give you the chance to prove that you are the victim of fraud. They can refuse to suppress your information if they do not think you are the victim of fraud.

You can find out what is held about you

What you can ask for

You are entitled to ask credit reporters for a copy of the credit information they hold about you. You can ask for just the information in your credit report or for all the information held about you. Extra information not included in your credit report could include things like a complete list of people who have accessed your report. If a credit reporter has generated a credit score about you, you have the right to an explanation of this score.

Getting the information

The credit reporter must provide the information to you without too much delay. If you want the information quickly (within 5 working days) you may need to pay a reasonable charge, but otherwise no charge can be made. A credit reporter must check the identity of anyone making a personal access request. This may involve asking you for certain identification details, although these cannot be added to the credit reporter's database without your consent.

You can dispute inaccurate information with the credit reporter

Credit reporters must take reasonable steps to ensure the information they hold is accurate, and promptly correct any errors they become aware of. If you tell a credit reporter that your report contains an inaccuracy, the credit reporter must, if appropriate, take steps to correct it. They will usually check the information you provide with the source, such as a credit provider who submitted a default. During this checking process, the credit reporter must flag your report to show that the item has been disputed.

When the credit reporter must make a decision about inaccurate information

The credit reporter must decide as soon as they can whether to make the correction you have requested or to confirm the accuracy of the information. If the credit reporter needs longer than 20 working days to make a decision they must let you know and tell you why.

What happens if the correction you asked for is not made

If the correction you asked for is not made, you must be told why. You may also ask for a note of your request to be added to your file. This note will be included with future reports.

What happens if a correction is made

If a correction is made, the credit reporter must tell anyone who has recently received your credit report. The credit reporter must tell you what they have done and give you a copy of the amended report.

Sometimes correction may not be appropriate

A credit report describes your credit history, not simply your current debts. Certain information can continue to be reported as long as it is updated to reflect later developments. This includes things like a past bankruptcy or a default that has since been paid in full. In this way, the report remains an accurate statement of those past events.

You have the right to complain if you think the Code has been breached

If you believe a credit reporter has breached the Code, you should first approach that credit reporter directly. Each credit reporter must have their own complaints procedure, and a person who specialises in helping to resolve complaints in a way that is fair, simple and efficient.

If your complaint is not resolved, you may complain to the Privacy Commissioner, who has powers to investigate the matter. Some cases that cannot be settled can be taken to the Human Rights Review Tribunal.

In addition to your rights under the Code, you may take a credit reporter to court. You may choose to do this if you are claiming defamation or negligence. For more information, contact a lawyer or community law centre.

Contact information:

Complaints Handling Council
Dun & Bradstreet (New Zealand) Ltd
PO Box 9589, Newmarket
Auckland 1031
(09) 309 2050
Office of the Privacy Commissioner
PO Box 10094,
Wellington 6143
0800 803 909

D&B D-U-N-S Number registration

D&B provides businesses with the opportunity to apply for a D&B D-U-N-S Number online. The information submitted to obtain the D&B D-U-N-S Number becomes a part of the D&B database, which is the core of all of the company's high quality business information products and services. Being listed in the D&B database offers benefits to businesses, including identification and recognition in the marketplace. Information in the database is licensed to third parties that offer businesses useful products and services.

A company representative who registers at the web site may be offered an opportunity to obtain a D&B D-U-N-S Number for the company and may also be added to our database. Any person included in the D&B database may ask to be excluded from business lists licensed for marketing purposes. For more information, contact our Public Access Centre.

Updates to D&B data protection practices for the internet

To keep up with the rapidly evolving Internet environment, D&B will from time to time review and revise its Internet practices and communicate any updates on its website. Minor changes may be made at anytime without notice. If we make a major change in the way that we use, disclose or protect Internet registration information, we will highlight the change. If possible, we will provide advance notice of any major change through a notice on the web site.

Financial transactions

D&B works with partners to support financial transactions on our website. These partners on our behalf collect information, deliver  products and services, administers individual accounts, provide customer support, and meet government regulatory requirements, such as GST collection.  They operate consistently with the D&B data protection policies and does not sell or voluntarily share information externally.

Additional information

Individuals and businesses who would like more information about D&B's approach to privacy are encouraged to contact our Client Services Centre on 0800 733 707 or alternatively send us a message at dnbnz@dnb.co.nz  for more information about personal credit information files and how to access your file go to dnbcreditreport.co.nz