Privacy Policy
This policy explains what personal information Brand & Co collects, why we collect it, how it may be used or disclosed, and the privacy choices available to you.
It applies when you use our website, submit an enquiry, upload project files, request a quote, become a customer or communicate with us about a design, website, marketing, printing or signage service.
Read the policy ↓Clear information about how customer and website data is handled.
This Privacy Policy explains how Brand & Co handles information connected with website enquiries, quotes, customer communication, project files, accounts, service delivery and website activity.
We aim to collect information for an identified business purpose, limit access to people who require it and retain it only while there is a relevant business, contractual, support or legal reason.
We collect information connected with an enquiry, service, customer relationship or website function.
Information is used for the purpose it was collected for or another purpose permitted by law.
Access is limited to Brand & Co and selected providers involved in operating or delivering the service.
You may ask to access or correct personal information held about you.
About Brand & Co
This Privacy Policy applies to Brand & Co, an Auckland based creative, digital, printing and signage business.
We provide services including web design , website development, search optimisation, logo design, graphic design, digital advertising, printing, sign writing and related project services.
In this policy, “Brand & Co”, “we”, “our” and “us” refer to the business operating the Brand & Co website and providing those services.
Information we may collect
Under this Privacy Policy, the information collected depends on how you interact with Brand & Co and which service you request.
Contact information
Your name, business name, role, email address, phone number, general location and preferred contact method.
Enquiry and project information
Your selected service, project brief, website address, requirements, estimated budget, deadlines, measurements, installation location or vehicle information.
Files and creative material
Logos, photographs, documents, artwork, brand files, videos, website content, plans and other files supplied for a project.
Communication records
Emails, messages, meeting notes, project feedback, approvals, changes, support requests and related records.
Account and billing information
Billing names, invoice addresses, invoice records, transaction references and payment status.
Website activity
Internet Protocol address, browser type, device type, referring source, pages visited, date, time, general location and interaction information.
Marketing preferences
Your communication preferences, campaign interaction and any request to unsubscribe.
Supplier and contractor information
Business contact and account details for people involved in production, installation, development or another part of a customer project.
How information is collected
This Privacy Policy covers information collected directly from you or received from another relevant source.
Directly from you
Through website forms, quote requests, email, phone, meetings, messaging, agreements, invoices and file uploads.
Through the website
Through cookies, analytics, website security records, advertising measurement and standard server information.
Through your organisation
From an owner, employee, colleague or authorised person communicating with us about a project involving you.
Through another customer
When a customer supplies contact details, staff information, photographs or project material relating to another person.
Through referrals
When a person introduces your business or provides your business contact information for a relevant reason.
Through public business sources
From company websites, public directories, business profiles and other sources where business contact information has been published.
How personal information is used
This Privacy Policy allows information to be used for the purpose it was collected for or another purpose permitted under New Zealand law.
Enquiries and quotes
To understand your request, contact you, assess the project and prepare pricing or service recommendations.
Service delivery
To design, develop, produce, print, install, manage and complete the services you order.
Project communication
To send concepts, proofs, approvals, updates, schedules, requests and service information.
Customer administration
To manage agreements, customer accounts, invoices, transactions, warranties and support.
Website operation
To operate, maintain, test and understand the use of the Brand & Co website.
Website and account security
To identify spam, fraud, unauthorised access, technical faults, misuse and security incidents.
Marketing communication
To send relevant updates where you have agreed to receive them or another lawful basis permits the communication.
Legal and business records
To meet accounting, tax, contractual, insurance, dispute, regulatory and other legal requirements.
When personal information may be shared
Under this Privacy Policy, Brand & Co does not sell personal information to advertisers.
Information may be disclosed where this is connected with the service, authorised by you, required by law or otherwise permitted under the Privacy Act 2020.
Brand & Co personnel
Team members and authorised contractors involved in enquiries, projects, accounts, administration and support.
Website and technology providers
Hosting, email, cloud storage, backup, security, analytics, software and communication providers.
Production suppliers
Printers, manufacturers, sign fabricators, installers, couriers and material suppliers involved in completing an approved order.
Business service providers
Accounting, payment, legal, insurance, debt recovery and other advisers assisting Brand & Co.
Your authorised representatives
Employees, business partners, project managers, insurers or other people you authorise us to communicate with.
Government and enforcement bodies
Where disclosure is required or authorised by legislation, a court, an enforcement process or another legal duty.
Business transfer participants
Advisers or parties involved in a proposed sale, transfer, restructure or acquisition of the business, subject to appropriate confidentiality requirements.
Overseas technology and service providers
Some technology providers may store or process information outside New Zealand.
This may include providers of hosting, email, cloud storage, website software, analytics, advertising, communication, security and backups.
Where Brand & Co makes an overseas disclosure covered by Information Privacy Principle 12, we will take reasonable steps to confirm that a permitted basis applies and that appropriate privacy safeguards are available.
Sending information to a provider that acts only as our agent for storage or processing may be treated differently from disclosing information to an independent overseas recipient.
Official New Zealand guidance Information Privacy Principle 12 ↗How information is stored and protected
Brand & Co uses reasonable safeguards appropriate to the information and systems involved.
Safeguards may include controlled account access, permissions, passwords, secure hosting, backups, software updates, provider security controls and limits on access to customer files.
No website, email service, cloud system or method of transmission can be guaranteed to be completely free from security risk.
Customer and enquiry records
These may be retained while an enquiry, project, account, warranty, support matter or customer relationship remains active.
Accounting records
Invoice and transaction information may be retained for accounting, tax, insurance, dispute and legal requirements.
Project files
Project files may be retained for approved reprints, matching signage, website maintenance, future updates or continuing customer support.
Deletion and anonymisation
Information may be deleted, anonymised or securely removed when it is no longer reasonably required.
Your privacy rights
You may ask what personal information Brand & Co holds about you and request a correction.
Request access
You may ask whether we hold personal information about you and request access to it, subject to the Privacy Act 2020.
Request correction
You may ask us to correct information you believe is inaccurate, incomplete, out of date or misleading.
Statement of correction
Where a requested correction is not made, you may ask for a statement of the correction sought to be attached to the information.
Marketing preferences
You may unsubscribe from marketing emails or contact us to update your communication preferences.
Identity confirmation
We may ask for information needed to confirm your identity before releasing or changing personal information.
Legal limitations
Access may be limited where a withholding ground or another legal restriction applies. We will explain the decision where required.
Privacy breaches
A privacy breach may involve unauthorised access, disclosure, alteration, loss or destruction of personal information.
If Brand & Co becomes aware of a suspected breach, we may investigate what occurred, identify the information involved, contain the incident and assess the possible harm.
Where a privacy breach has caused or is likely to cause serious harm, Brand & Co will notify the Office of the Privacy Commissioner and affected people as required by the Privacy Act 2020, subject to any lawful exception.
Confirm the incident and the information or systems involved.
Take reasonable action to limit further access, loss or disclosure.
Consider sensitivity, possible consequences and the risk of serious harm.
Complete the required notifications where the legal threshold is met.
Marketing, external websites and policy changes
Marketing communication
You may ask us to stop sending optional marketing communication. Messages relating to an active quote, project, invoice, account or support matter may still be required.
External websites
Our website may link to social platforms, suppliers, payment services or official information. Those websites operate under their own privacy terms.
Customer supplied information
You are responsible for confirming that you have authority to provide personal information, photographs, mailing lists, staff information and other project material.
Information relating to children
Our services are primarily intended for businesses and adults. Please do not submit information relating to a child unless it is required for an approved project and you have authority to provide it.
Policy updates
This policy may be updated when our services, website tools, providers or legal responsibilities change.
Current version
The latest version will be published on this page with the revised update date.
Contact the Brand & Co Privacy Officer
Contact us with questions, access requests, correction requests or concerns about how your information has been handled.
Official complaint information Office of the Privacy Commissioner ↗