Privacy Policy

Last Updated: 29 August 2026

About Us

Depending on where our services are provided to you, the controller of the personal data described in this Privacy Notice is either KB Group (UK) Ltd trading as FaB Property Management (for services provided in the United Kingdom and European Economic Area) or K.B. Group Ltd trading as FaB Property Management, 144 Wade River Road, Wade Heads, Whangaparaoa 0932, New Zealand (for services provided in New Zealand). You can contact either controller at support@fabpropertygroup.net.

This privacy notice covers the processing of your personal data by FAB Property Management. FAB Property Management is required under data protection legislation to notify you of the information contained in this Privacy Notice.

As such, any references in this Privacy Notice to "we", "our", "us" etc will be interpreted as a reference to FAB Property Management.

This Privacy Notice applies to the following website:

fabpropertygroup.net

Our website is not intended for children, and we do not expect to collect personal data relating to children. As such, this Privacy Notice is written for adults.

What personal data do we hold?

The personal data we hold on you and how we use it will vary depending on the nature of your relationship with us.

We will collect, process and store personal data about you. This personal data may include:

• the personal data that you provide by filling in forms online or in person on our premises, including information provided at the time of registering to use our services, purchasing items online, providing feedback in our post-visit surveys, filling in our mailing list and any hospitality forms (including name, address, contact details, account log-in details and billing/payment information);
• details of your visits to our premises, including records of transactions carried out on the premises and the fulfilment of any orders or requests for service;
• if you contact us, records of that correspondence;
• information about the frequency of visits to our websites, the pages you have visited, the length of time spent on our websites and your other activities on, and use of, our websites and
• if you apply to work with us, the information you have provided to us (such as in your curriculum vitae, covering letter, application form and/or during any interview(s)) This may include your name, title, postal address, telephone number, personal email address, date of birth, gender, employment history, and qualifications. We may also collect, store and use more special category personal data about: (a) your race or national or ethnic origin, religious, political, philosophical or moral beliefs, or your sexual life or sexual orientation; and (b) genetic or biometric data, (c) your health (including any medical condition, health and sickness records); and any criminal convictions and offences (together “Sensitive Personal Data”).

We collect the personal data described above directly from you when you send us information (for example, by contacting us, registering with us, applying for a tenancy or using our services) and indirectly when you use our websites or services, including from your browsing activities. For information about cookies and similar technologies, please see our Cookies Notice.

How and why do we use your personal data?

We process your personal data so that we can perform our everyday functions, including where you have given your consent, for our legitimate interests and to perform a contract with you.

We only use this personal data in cases in which it is necessary in relation to the offering or provision of the services and/or products that we provide. For example, we may use your personal data: to contact you to discuss our services and products (and any changes to them); to respond to any questions or concerns you have raised; to deal with administrative matters such as invoicing and renewal; and to otherwise carry out our obligations arising under a contract and to enforce the same.

In particular, we use your personal data:
a) Where we have obtained your consent (and before any withdrawal of your consent – see below), including to:

• meet your needs for accessing our products and services;
• provide you with information on products or services and other information we think you might like.

b) Where it is necessary for the performance of a contract with you (or to take steps at your request before entering into a contract). Including to:

• notify you about changes to our service;
• create and manage your account with us;
• provide you with products or services;
• confirm any transactions, and to send you communications in connection with your transaction; and
• send you emails about your account or any transactions.

c) In line with our legitimate business interests to:

• ensure that content from our site is presented in an effective manner for you and for your computer;
• send you emails to ask you if you would like to provide feedback on any products or services we provide;
• conduct market research and analysis to better understand trends and patterns in our business in order to improve our services, and to inform future marketing activities;
• enforce legal rights or defend legal proceedings;
• prevent and detect fraud and other crime (including: (a) protecting all managed premises and assets from damage, disruption, vandalism and other crime; (b) to act as a deterrent against crime; and (c) to support law enforcement bodies in the prevention, detection and prosecution of crime);
• ensure compliance with our rules and procedures; and
• maintain the security of all our managed premises and for the personal safety of owners, tenants, visitors, staff, managing agents and other members of the public; and
• decide, if you apply to work with us, whether to appoint you to the relevant role since it would be beneficial to our business to appoint someone and to enter into an employment contract with you. This may involve assessing your skills, qualifications, and suitability for the relevant role; carrying out background and reference checks, where applicable; communicating with you about the recruitment process; keeping records related to our hiring processes; and complying with legal or regulatory requirements.

We will not use your personal data for any other purposes unless we are required to do so by law, in connection with any legal proceedings or any regulatory obligations, or in order to establish, exercise or defend our legal rights.

Where we have relied on our legitimate interests to process your personal data, this will be where we have a business or commercial reason to use your personal data, provided this is not overridden by your own rights and interest. You may contact us to obtain more information, including in relation to our assessment of the impact on you.

If you are applying to work with us, we will use your Sensitive Personal Data in the following ways:

• we will use information about your disability status to consider whether we need to provide appropriate adjustments during the recruitment process;
• we will only use information about your race or national or ethnic origin, religious, philosophical or moral beliefs, or your sexual life or sexual orientation, to enable meaningful equal opportunity monitoring and reporting; and
• if you are applying to work with us in an eligible role (eg a role involving working with children), we envisage that we will collect and process information about your criminal convictions history if we would like to offer you the work (conditional on checks and any other conditions, such as references, being satisfactory). We would carry out a criminal record check (where required or entitled) in order to satisfy ourselves that there is nothing in your criminal convictions history which makes you unsuitable for the relevant role. In particular, we would be legally required to carry out a criminal record check for an eligible role involving working with children. We have in place an appropriate policy document and safeguards which we are required by law to maintain when processing such personal data.

Please note that if you are applying to work with us and you fail to provide information when requested, which is necessary for us to consider your application (such as evidence of qualifications or work history), we will not be able to process your application successfully. For example, if we require a credit check or references for the relevant role and you fail to provide us with the relevant details, we will not be able to take your application further.

Who do we share your personal data with?

Your personal data will be shared internally amongst our staff but they will only use it to carry out their duties in line with the purposes set out above. We will need to share your personal data with others from time to time, including to:

• any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries;
• external third parties that provide web hosting services;
• other third party providers where appropriate to support the offering and provision of our services and/or products including provision of security, data analytics and website functionality;
• our professional advisers, such as our accounting, legal advisers where they require that personal data in order to provide advice to us;
• any court, law enforcement agency or regulatory authority in accordance with our legal obligations;
• if another entity acquires us or our assets, your personal data may be disclosed to that entity as part of the due diligence process and, if the acquisition goes ahead, your personal data will be transferred to that entity;
• our group’s service providers for the provision of specific business operations (such as IT service providers, banks and mailing houses, and marketing agencies), but only if we have a written agreement in place with such providers to ensure they take appropriate measures to protect your personal data;
• if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to protect the rights, property or safety of our organisation, our customers or others;
• to successors in title or replacement operators of all or part of our organisation, subject to the personal data being used for the same purposes as originally specified; and
• if you are applying to work with us, your named referee(s) in order to obtain a reference and/or search/recruitment consultancies.

Our third-party service providers (including, for example, web hosting providers) must take appropriate security measures to protect your personal data and must not process it for their own purposes. They can only process your personal data for specified purposes and in accordance with our instructions.

We never disclose personal data to third party advertisers without your consent. FAB Property Management is not responsible for the content or data protection / privacy policies of third party websites connected to our site.

Where and how is your personal data stored and kept secure?

Your personal data is stored on servers located in New Zealand and the United Kingdom. We may transfer personal data between those locations and to service providers that carry out functions on our behalf. Where data-protection law requires a transfer safeguard, we use an adequacy decision or appropriate contractual or other safeguards. You may contact us using the details below for information about the safeguard that applies to a particular transfer.

We have appropriate security measures to prevent your personal data from being accidentally lost, or used or accessed unlawfully. We limit access to your personal data to those who have a genuine business need to access it.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

How long will we keep your personal data?

We retain your personal data for no longer than is necessary for the purposes for which the personal data is collected. When determining the relevant retention periods, we will take into account factors including:

• legal obligation(s) under applicable law to retain data for a certain period of time;
• statute of limitations under applicable law(s);
• (potential or actual) disputes; and
• guidelines issued by relevant data protection authorities.

Otherwise, we securely erase or anonymise your personal data once it is no longer needed.

Please note that if you are applying to work with us, we will retain your personal data for a period of up to 12 months after the closing date for the relevant application, unless your application is successful (in which case we will keep your personal data for longer). We retain your personal data for that period so that we can show, in the event of a legal claim, that we have not discriminated against candidates on prohibited grounds and that we have conducted the recruitment exercise in a fair and transparent way. After this period, we will securely destroy your personal data in accordance with applicable laws and regulations.

Your Rights and What They Mean

You have the following rights regarding your personal data:

1. Right to be informed - You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This is why we are providing you with the information in this Privacy Policy.
2. Right of access - You have the right to obtain access to your information (if we are processing it), and other certain other information (similar to that provided in this Privacy Policy).
3. Right to rectification (or correction) - You are entitled to have your information corrected if it is inaccurate or incomplete.
4. Right to erasure - This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there is no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.
5. Right to restrict processing - You have rights to ‘block’ or suppress further use of your information in certain circumstances (for example, if you contest the accuracy of the information). When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in future.
6. Right to data portability - You have the right to obtain and reuse your personal data in a structured, commonly used and machine-readable format in certain circumstances. In addition, where certain conditions apply, you have the right to have such information transferred directly to a third party.
7. Right to withdraw consent - If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful).
8. Right to object to processing - In addition to the above rights, you also have the right to object to certain types of processing, in certain circumstances. In particular, you have the right to object at any time to the processing of your personal data for direct marketing and in other situations, such as where we use your personal data for our legitimate interests.

To exercise any of these rights at, any time, you can contact us using the details set out at the end of this Privacy Notice. When contacting us, please (a) provide enough information to identify yourself and any additional identity information we may reasonably request from you; and (b) let us know which right(s) you want to exercise and the personal data to which your request relates.

Changes to this Privacy Notice

From time to time we may make changes to this Privacy Notice to ensure that it is accurate and up to date and to reflect any changes in the law. This Privacy Notice was last updated on 29 August 2026.

We are constantly looking for new ways to improve this website, and we may update it at any time.

It is important that the personal data we hold about you is accurate and current. To this end, please do keep us informed if your personal data changes during your relationship with us.
Contacting us and making a compliant

Please do contact us if you have any requests, questions or complaints about this Privacy Notice or about how we handle your personal data by post, email or telephone using the following details:

Address: 144 Wade River Road, Wade Heads, Whangaparaoa 0932, New Zealand

Email: Customer Services

We hope we will be able to resolve any issues you have. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner in New Zealand, the Information Commissioner's Office in the United Kingdom, or the data-protection supervisory authority where you live or work in the European Economic Area.