Who holds the information
Merit Mana Limited operates MoreGage and is the organisation collecting information through this website. The privacy officer is Dan Dale, contact hello@moregage.co.nz.
What we collect
Depending on the form, we may collect your name, email, broad mortgage-interest category, approximate timeframe, region, consent wording and time, attribution information, and your privacy-request details. Basic security logs may be retained to protect the service.
Do not send account numbers, bank statements, identification, payslips, tax records, loan documents, or detailed financial information.
Why we collect it
- To send the monthly briefing after confirmation
- To maintain evidence of consent or withdrawal
- To understand which content and tools are useful in aggregate
- To answer access, correction, deletion, source, or website questions
Service providers and disclosure
We use Supabase for our database and consent and marketing records, Vercel for website hosting and server logs, and Resend for email delivery. These providers store and process information on our behalf for the purposes in this statement. MoreGage does not sell or pass your information to mortgage advisers, brokers or lenders.
Where information is stored
Our service providers store and process information outside New Zealand. Supabase hosts our database in Sydney, Australia. Vercel provides website hosting and server logs; its servers may be in the United States or other countries. Resend provides email delivery in the United States.
We use these providers to store and process information on our behalf for the purposes in this statement, and we take reasonable steps to make sure they protect it. Information held overseas may be subject to the laws of those countries.
Cookies, analytics and logs
MoreGage does not use advertising or tracking cookies. We use Vercel Web Analytics to count page views in aggregate; it does not use cookies and does not identify individual visitors.
Our hosting provider keeps short-lived server and security logs (which can include IP address, browser type and the page requested) to keep the site running and protect it from abuse.
Spam protection on forms may use Cloudflare Turnstile, which checks whether a form is sent by a person; Cloudflare processes technical information about your browser for that check under its own privacy policy.
Retention and security
Consent records are retained as needed to demonstrate permission and withdrawal. Subscriber information is deleted or de-identified when no longer needed, subject to legal and security requirements. Production access will use server-side credentials, row-level security, least privilege, audit records, and encrypted transport.
Market Pulse review tool
MoreGage uses an internal review tool to read public news articles and commentary for Market Pulse. It is not open to the public. Draft text, links and analysis in it are cleared after 30 days if they are not reviewed. Accepted summaries and the review history are kept. Reading an article does not give MoreGage permission to republish its full text or images.
Spam protection
Spam protection uses short-lived counters linked to an opaque, keyed reference derived from the hosting platform's client address. The application does not store the raw address in these counters. Counters are cleared after about two days; the hosting provider may retain separate security logs.
Your choices
You may unsubscribe from marketing, or ask to access, correct, or delete personal information. We may need to verify identity before acting on a request.
You have the right to ask for access to and correction of your personal information under the Privacy Act 2020. You can contact our privacy officer at hello@moregage.co.nz. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner (www.privacy.org.nz).
To make a privacy request, email the privacy officer at hello@moregage.co.nz and say whether you want to access, correct or delete your information.
Last updated 28 October 2026