Privacy policy

Who we are

SRK Design ("SRK", "we", "us") is a digital marketing and design agency in New Zealand. We are responsible for the personal information described here. Questions or requests go to our privacy contact at [email protected].

What we collect

We collect only what we need:

Enquiries and the project planner: your name, email, business name, phone number, the services you are interested in, goals, timing, budget range and anything you write in the message.
Newsletter sign-ups: your email address.
Client work: contact details for the people we work with, and information needed to run your accounts, invoices and projects.
Technical information: our host keeps standard server logs, which include your IP address, browser type and the pages requested.

We do not collect sensitive information such as health or financial details through this website, and we ask you not to send it.

How we use it

To reply to your enquiry and prepare a quote
To deliver the work you engage us for, and to invoice for it
To send the newsletter you asked for
To keep the website secure and working
To meet our legal obligations, including tax records

We do not sell personal information, and we do not use it for any purpose you would not reasonably expect from the reasons above.

Storage and overseas transfer

Some of our providers store information on servers outside New Zealand. Under Information Privacy Principle 12, we only use providers that are subject to privacy laws with comparable safeguards to New Zealand’s, or that agree to protect the information to that standard.

Keeping it secure

We use reasonable safeguards against loss, misuse and unauthorised access: encrypted connections to this website, two-factor sign-in on the accounts that hold client data, access limited to the people who need it, and secure deletion when information is no longer needed.

How long we keep it

Enquiries that do not lead to work: up to two years after our last contact
Client records and invoices: seven years, as required for tax records under the Tax Administration Act 1994
Newsletter addresses: until you unsubscribe
Server logs: as long as our host keeps them, usually no more than 90 days

Your rights

Under the Privacy Act 2020 you can ask to see the personal information we hold about you and ask us to correct it. Email [email protected]. We will respond within 20 working days and will not charge for a reasonable request. If we decline a correction, you can ask us to attach a statement of the correction you wanted.

Marketing emails

We only send marketing emails to people who have asked for them, as required by the Unsolicited Electronic Messages Act 2007. Every email includes a way to unsubscribe, and we act on it within five working days.

Privacy breaches

If a privacy breach happens that has caused or is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and the people affected as soon as practicable, as the Act requires.

Complaints

If you are concerned about how we have handled your information, contact us first so we can try to put it right. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Changes to this policy

We may update this policy as our services or the law change. The date at the top shows when it last changed. Significant changes will be noted on this page.