OmvaOmva

International Data Transfer / Data Processing Terms

Last updated: 2 June 2026

1. Purpose

These terms provide a business-friendly summary of OMVA's data processing and international transfer position. A formal Data Processing Addendum may be required for enterprise customers or where EU/UK GDPR applies.

2. Roles

Depending on the context:

  • OMVA may act as an independent controller/business for account, billing, payout, support, security, analytics, marketplace, and careers data.
  • OMVA may act as a controller or processor/service provider for end-customer quote/referral data depending on the insurer/provider and product flow.
  • Site owners receive aggregated/non-PII reporting by default and do not receive raw customer personal information through OMVA.

These roles should be confirmed by legal counsel for each insurer/provider partnership.

3. Processing purposes

OMVA processes data to provide the platform, manage sites, handle quote/referral flows, track commissions, process payouts, provide support, secure the service, improve the product, and comply with legal obligations.

4. Security

OMVA maintains reasonable technical and organisational safeguards, including access controls, hosting security, encrypted connections, audit logs, and role-based permissions.

5. Subprocessors

OMVA uses subprocessors listed in the Subprocessor / Third-Party Services List. OMVA may update subprocessors over time.

6. International transfers

OMVA is based in New Zealand and may process data through providers in New Zealand, Australia, the United States, the EU/EEA, the UK, and other locations.

Where required, OMVA should use lawful transfer mechanisms such as adequacy decisions, standard contractual clauses, processor terms, or other appropriate safeguards.

7. Deletion and export

Self-service deletion/export may not be fully implemented at launch. Users can request access, correction, deletion, or export by contacting support@omva.co.nz. OMVA may retain data where required for law, tax, disputes, fraud prevention, security, or legitimate business records.

8. Enterprise DPA

Enterprise customers may request a formal DPA by contacting support@omva.co.nz. OMVA may provide its standard DPA or a reasonable alternative where required by law or enterprise procurement.