Privacy policy

Who we are

Grange Associates Ltd (GAL) is an accounting and tax practice. You can contact our Privacy Officer using the form at the bottom of this page.

What we collect

We collect the information we need to do your accounting, tax, company, trust and advisory work. That includes names, contact details, IRD numbers and financial records. It also includes details of the people connected with your company or trust, such as directors, shareholders, trustees and beneficiaries.

Where it comes from

Mostly from you. Sometimes it comes from others, such as Inland Revenue, the Companies Office, your bank or your previous accountant. If you give us information about other people, please let them know you’ve shared it with us and why.

How we use it

Only to do the work you engage us for and to meet our legal and professional obligations. We don’t sell it or use it for marketing.

Who we share it with

• Inland Revenue and the Companies Office, as part of your work.
• Your other advisers, with your agreement.
• NZICA, for practice review.
• Others where the law requires it, for example anti-money laundering reporting.
• Our technology providers, some of whom store data overseas: Xero (United States), MYOB (Australia), Microsoft (Australia), Anthropic, the provider of our AI tool (United States), and VGrid, for our backups (Auckland).

Keeping it safe

Our records are electronic, password-protected and backed up.

How long we keep it

We keep your records while we act for you and for at least 7 years after that, as tax and company law require. We keep some records longer when they’re still needed, for example share capital, company and trust history. When records are no longer needed, we delete them securely.

Seeing or correcting your information

You can ask our Privacy Officer to see or correct the information we hold about you, using the form below. We’re a small practice, so please tell us what you’re after, for example a particular document, year or matter. That helps us find it and get it to you quickly. If you’re unhappy with how we’ve handled your request, tell us first. You can also complain to the Privacy Commissioner at privacy.org.nz.

If something goes wrong

If a privacy breach is likely to cause serious harm, we’ll tell you and the Privacy Commissioner.

How we use AI

We use AI tools to help us draft documents, summarise information and analyse figures. We currently use Claude, from Anthropic, on a business plan. It works inside our firm and doesn’t deal with you directly.

• Our team checks everything AI helps with before we rely on it or send it to you. We remain fully responsible for our work.
• We only enter the information needed for the task.
• Under our provider’s business terms, your information isn’t used to train AI models. It’s processed and stored in the United States and kept confidential.
• AI doesn’t make decisions about you or your affairs. We do.

If you’d rather we didn’t use AI on your work, just tell us. We’ll respect that, though the work may take longer and cost more.

Contact us about privacy

Questions about your information, or a request to see or correct it, come straight to our Privacy Officer.