FPX Forest Products Exchange
LoginBrowse Timber

FPX LEGAL

Privacy Policy

Forest Products Exchange Limited

Last updated: 16 September 2026

Forest Products Exchange Limited (company number 8469278) (FPX, we, us or our) is committed to handling personal information in accordance with the New Zealand Privacy Act 2020 and the Information Privacy Principles.

This Privacy Policy explains what personal information we may collect through the FPX website, FPX Sourcing, enquiries, subscriptions and our business relationships, why we collect it, how we may use or disclose it, and how you can request access to or correction of your information.

Where another privacy law applies to a particular individual or activity, including the GDPR where applicable, we will also meet the requirements that apply to us under that law.

Depending on how you interact with FPX, we may collect:

  • your name, business name, role and contact details;
  • information you provide in a timber sourcing request, enquiry, account registration, order or other communication;
  • subscription preferences and records of consent for marketing communications;
  • account, transaction and service information relevant to FPX Sourcing;
  • technical information generated when you use our website or platform, such as device, browser, network, security and diagnostic information; and
  • information that is reasonably necessary to manage our business relationship, comply with law, protect FPX and its users, or provide our services.

We do not intentionally request sensitive personal information through our public website unless it is reasonably necessary for a specific purpose.

We generally collect personal information directly from you when you contact FPX, use a form, subscribe to Saw Point, register for or use FPX Sourcing, place or manage an order, or otherwise communicate with us.

We may also receive information from your organisation, a person authorised to act for you, a service provider involved in a transaction, or a publicly available business source where collection is lawful and reasonably necessary for our activities.

We may use personal information to:

  • provide, operate, support and improve the FPX website and FPX Sourcing;
  • respond to enquiries and timber sourcing requirements;
  • manage accounts, orders, deliveries and business relationships;
  • communicate service, operational and account information;
  • send marketing or industry communications where we have an appropriate basis to do so;
  • protect the security, integrity and availability of our systems and services;
  • prevent misuse, investigate incidents and enforce our legal rights;
  • comply with legal, regulatory, accounting and tax obligations; and
  • create aggregated or de-identified information for business analysis and service improvement.

If we collect information for a particular stated purpose, we will not use it for an unrelated purpose unless that use is permitted by law.

When you use the Contact FPX form, we collect the details you submit, such as your name, company, email address, phone number, enquiry type and message. The form is delivered to the FPX team using an email delivery service.

When you subscribe to Saw Point, we collect your name and email address and pass those details to the systems used by FPX to manage the subscription and send the publication.

You do not have to provide information requested by a public website form, but if you do not provide the information marked as required we may be unable to respond to the enquiry or complete the requested service.

Our website may use browser storage, cookies and similar technologies for functions such as security, remembering preferences and recording privacy choices. Our current public website does not intentionally load advertising trackers through FPX website code.

Where optional analytics or marketing technologies are introduced, we will describe them in our Cookie Policy and make the relevant controls available through Cookie Settings.

We may disclose personal information to trusted service providers where reasonably necessary to operate FPX, including providers that host or secure our systems, deliver email, support forms and subscriptions, provide business software, or assist with professional services.

We may also disclose information where you authorise us to do so, where disclosure is connected with the purpose for which the information was collected, where required or permitted by law, or where reasonably necessary to protect FPX, our users or another person.

Service providers are expected to handle personal information only for the services they provide to us and subject to appropriate safeguards.

Some technology and service providers used by FPX may process or store information outside New Zealand. Where New Zealand Privacy Act requirements apply to an overseas disclosure, FPX will take reasonable steps to ensure the disclosure is permitted and that appropriate privacy safeguards are in place.

We take reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, modification and disclosure.

No internet service can guarantee absolute security. You are responsible for keeping account credentials and one-time access codes confidential and for notifying FPX if you believe your account or information has been compromised.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to manage our relationship with you, and to satisfy legal, accounting, dispute-resolution and other legitimate business requirements. Information that is no longer required will be deleted, anonymised or otherwise securely disposed of where reasonably practicable.

Under the Privacy Act 2020, you may request confirmation of whether FPX holds personal information about you, ask to access that information, and ask us to correct information you believe is wrong.

We may need to verify your identity before completing a privacy request. In some circumstances the law permits or requires us to withhold information. If that applies, we will explain the basis for our decision where we are permitted to do so.

Depending on the law applicable to you, you may have additional privacy rights. Contact us if you wish to exercise a privacy right and we will assess the request under the law that applies.

FPX may send commercial electronic messages where we have consent or another lawful basis to do so. Marketing emails will identify the sender and include a functional way to unsubscribe.

You can withdraw from marketing communications at any time using the unsubscribe option in the message or by contacting support@fpx.nz. Operational or service messages that are necessary to manage an account, transaction or request may still be sent where appropriate.

If FPX becomes aware of a privacy breach, we will assess and respond to it in accordance with the Privacy Act 2020. Where a breach is notifiable, we will notify the Office of the Privacy Commissioner and affected individuals as required by law.

We may update this Privacy Policy to reflect changes to our services, technology, business practices or legal obligations. The current version will be published on this page with its last-updated date.

For privacy questions, access or correction requests, or concerns about how FPX has handled personal information, contact:

Privacy Officer
Forest Products Exchange Limited
Email: support@fpx.nz
Website: www.fpx.nz/contact-us

You can also find information about your privacy rights and make a complaint to the Office of the Privacy Commissioner at privacy.org.nz.