Last updated: August 04, 2026
This Privacy Policy describes how Risk Quantification Platform, doing business as RiskQP ("RiskQP," "we," "us," "our"), collects, uses, holds, and discloses personal information. We are a company registered in New Zealand at 123 Ormiston Road, Flatbush, Auckland 2019, New Zealand.
We operate the website www.riskqp.com (the "Site") and are the master licence holder of the 3D Lab™ software platform (together with the Site and any related products and services, the "Services").
We are committed to protecting personal information in accordance with the New Zealand Privacy Act 2020 and its Information Privacy Principles. This Privacy Policy forms part of, and is incorporated into, our Terms of Service.
If you do not agree with this Privacy Policy, please do not use the Services.
This Privacy Policy applies to:
Visitors to the Site, including people who submit enquiries or download resources;
Subscribers, being financial advisers, adviser businesses, and other customers who hold an account or subscription with us, including licensed users of the 3D Lab™ platform; and
Client Data Subjects, being individuals whose personal information is entered into the 3D Lab™ platform by an adviser, as described in Section 5.
Our role differs for each group. For Visitors and Subscribers, we collect and hold personal information on our own behalf. For Client Data Subjects, we hold and process information on behalf of the adviser who entered it, and that adviser remains primarily responsible for it under the Privacy Act 2020.
Identity and contact information. Name, email address, phone number, business name, and postal address, when you provide them to us through forms, account registration, or correspondence.
Account information. Login credentials, subscription plan, licence details, account settings, and records of your communications with us.
Billing and payment information. Payment card details and billing information are collected and processed by our third-party payment processors, Stripe and PayPal. We do not store your full payment card number on our systems. We retain records of transactions, subscription status, and billing history.
Usage and technical information. Information about how you use the Services, including IP address, browser type and version, device information, pages visited, time spent on pages, referral source, and interactions with the Services, collected through cookies and similar technologies described in Section 6.
Marketing preferences. Your opt-in and opt-out choices for email and SMS communications, including records of consent.
Client data entered into 3D Lab™. Personal information about advisers' clients entered into the 3D Lab™ platform, which may include financial, insurance, income, health-related, and family information. This category is addressed separately in Section 5.
We do not knowingly collect more personal information than we need to operate the Services.
We collect personal information:
Directly from you, when you fill in forms on the Site, register an account, subscribe to the Services, opt in to communications, make a payment, or contact us;
Automatically, through cookies, pixels, and analytics tools when you use the Site and the Services, as described in Section 6; and
From advisers, where an adviser enters information about their client into the 3D Lab™ platform, as described in Section 5.
Where practicable, we collect personal information directly from the individual concerned. If you provide us with personal information about another person, you must be entitled to do so and must ensure that person is aware of this Privacy Policy.
We use personal information to:
provide, operate, and maintain the Services, including the 3D Lab™ platform;
create and administer accounts and licences;
process payments, subscriptions, renewals, and refunds where applicable;
respond to enquiries and provide customer support;
send service communications, such as account notices, billing notices, and changes to our legal terms;
send marketing communications, including email and SMS, where you have opted in, as described in Section 7;
analyse and improve the Site and the Services, including through the analytics tools described in Section 6;
deliver and measure advertising, including through the advertising tools described in Section 6;
detect, prevent, and address technical issues, fraud, and misuse of the Services; and
comply with our legal obligations.
We will not use personal information for a purpose other than the purpose for which it was collected, unless permitted by the Privacy Act 2020.
The 3D Lab™ platform is licensed to financial advisers and adviser businesses. Advisers may enter personal information about their clients into the platform in order to produce risk analyses and related outputs.
The adviser is the collecting agency. Where an adviser enters client information into 3D Lab™, the adviser collects that information from their client and remains responsible for it under the Privacy Act 2020, including for obtaining any necessary authorisations from the client, ensuring the information is accurate, and responding to the client's access and correction requests.
We process on the adviser's behalf. We host, store, and process client data solely to provide the 3D Lab™ platform and related support to the adviser. We do not use client data entered by advisers for our own marketing purposes, and we do not sell it to anyone.
Requests from clients. If you are a client of an adviser and wish to access, correct, or ask questions about information held about you in 3D Lab™, please contact your adviser in the first instance. If you contact us directly, we will refer your request to the relevant adviser and assist them to respond, or assist you directly where the Privacy Act 2020 requires us to.
Adviser obligations. Advisers must only enter client information into 3D Lab™ where they are lawfully entitled to do so, and must comply with the Privacy Act 2020, the Code of Professional Conduct for Financial Advice Services, and any other obligations that apply to them.
We use cookies and similar technologies on the Site, including:
Essential cookies, which are required for the Site and the Services to function, such as session and security cookies;
Google Analytics, which helps us understand how visitors use the Site, including pages visited and traffic sources;
Meta Pixel, which helps us measure and deliver advertising on Meta platforms such as Facebook and Instagram, including showing you relevant ads based on your visit to the Site; and
Google Ads tags, which help us measure the performance of our Google advertising and deliver relevant ads.
These tools may collect information such as your IP address, device identifiers, and browsing behaviour, and may set cookies on your device. Information collected by these tools is also received by the providers of those tools (Google and Meta) and handled in accordance with their own privacy policies.
Your choices. You can control or delete cookies through your browser settings, opt out of Google Analytics using Google's opt-out browser add-on, and manage ad personalisation through your Google and Meta account settings. Disabling cookies may affect the functionality of parts of the Site.
Where you have opted in, we may send you marketing communications by email and SMS, including information about our products, services, offers, and educational content.
Email. Every marketing email we send includes an unsubscribe link. You can opt out at any time by using that link or by contacting us at support@riskqp.com.
SMS. By opting into a RiskQP text messaging program, you consent to receive SMS messages, which may include marketing communications. You can opt out of SMS at any time by replying STOP to any message. You may receive a confirmation message of your opt-out. Message and data rates may apply and are determined by your carrier. For help, reply HELP or email support@riskqp.com.
Opting out of marketing communications does not stop service communications we need to send you, such as billing and account notices.
We comply with the Unsolicited Electronic Messages Act 2007 in relation to commercial electronic messages.
We do not sell personal information. We share personal information only:
With service providers who help us operate the Services, including Amazon Web Services (AWS), which provides our cloud hosting and data storage; our CRM platform, which provides our customer relationship management, forms, and communications platform; Stripe and PayPal, which process payments; Google, which provides analytics and advertising services; and Meta, which provides advertising services. These providers may only use personal information to provide their services to us;
With advisers, in respect of client data they entered into 3D Lab™, as described in Section 5;
Where required or permitted by law, including to comply with a legal obligation, respond to lawful requests from government agencies, enforce our Terms of Service, or protect the rights, property, or safety of RiskQP, our users, or others; and
In connection with a business transaction, such as a merger, acquisition, or sale of assets, in which case personal information may be transferred as part of that transaction subject to this Privacy Policy or equivalent protections.
Our primary cloud hosting and data storage is provided by Amazon Web Services (AWS) using servers located in Sydney, Australia. This means that personal information you provide, including client data entered into the 3D Lab™ platform, is stored and processed in Australia.
Some of our other service providers, including our CRM platform, Stripe, PayPal, Google, and Meta, store and process information in other countries, including the United States.
Where we disclose personal information to an overseas provider, we take reasonable steps to ensure the information will be subject to safeguards comparable to those in the Privacy Act 2020, including through the provider's contractual commitments and privacy and security practices. In the case of information stored in Australia, Australian privacy law provides protections broadly comparable to those under the New Zealand Privacy Act 2020. Where a provider holds information solely as our agent to store or process it on our behalf, that use is treated under the Privacy Act 2020 as a use by us rather than a disclosure, and this Privacy Policy continues to apply to it.
By using the Services, you acknowledge that your information may be stored and processed outside New Zealand, including in Australia and the United States, as described in this section.
We take reasonable technical and organisational steps to protect personal information against loss, unauthorised access, use, modification, and disclosure. These include access controls, encryption in transit, and the security measures of our hosting and platform providers.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a privacy breach occurs that causes, or is likely to cause, serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as required by the Privacy Act 2020.
We keep personal information only for as long as it is required for the purposes for which it was collected, or as required by law. In general:
account and subscription information is kept for the life of the account and for a reasonable period afterwards to deal with any follow-up matters;
transaction and billing records are kept for at least seven years to meet tax and record-keeping obligations;
marketing consent and opt-out records are kept for as long as needed to honour your preferences; and
client data in 3D Lab™ is retained in accordance with the adviser's instructions and licence terms, and deleted or returned when no longer required.
When personal information is no longer needed, we take reasonable steps to delete it or ensure it is de-identified.
Under the Privacy Act 2020, you have the right to:
request access to the personal information we hold about you; and
request correction of that information if you believe it is wrong.
To make a request, contact us at support@riskqp.com. We may need to verify your identity before responding. We will respond as soon as reasonably practicable and within the timeframes required by the Privacy Act 2020. If we decline a request, we will tell you why and how you can complain about that decision.
If you are a client of an adviser and your information was entered into 3D Lab™ by that adviser, please direct your request to your adviser in the first instance, as described in Section 5.
The Services are intended for users who are at least 18 years old, and we do not knowingly collect personal information from anyone under 18 through the Site. If you believe a person under 18 has provided us with personal information, please contact us and we will take reasonable steps to delete it.
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last updated" date and will be effective when posted on the Site. If we make material changes, we will take reasonable steps to notify you, such as by email or a notice on the Site. We encourage you to review this Privacy Policy regularly.
If you have questions about this Privacy Policy, want to exercise your rights, or wish to make a privacy complaint, contact us at:
RiskQP Limited
123 Ormiston Road, Flatbush, Auckland 2019
New Zealand
support@riskqp.com
We take privacy complaints seriously and will investigate and respond to you. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner (New Zealand) at www.privacy.org.nz.