Privacy Policy
The legal mumbo-jumbo for browsing our site
Have a question?
Last updated: 10 November 2026
About this policy
Red Kite Design Pty Ltd (ABN 37 662 741 586) is a branding and graphic design business based in Brisbane, Queensland. This policy explains what personal information we collect, why we collect it, who we share it with and how you can reach us about it.
We’re a small business, so the Privacy Act 1988 doesn’t currently require us to follow the Australian Privacy Principles. We still take privacy seriously, and we aim to handle personal information in a way that’s consistent with those principles.
What we collect
We only collect what we need to work with you and run our business.
- Contact details. Your name, business name, role, email address, phone number and business address.
- Project information. Briefs, content, photos, feedback, and our notes from calls and meetings. We occasionally record video calls so we can look back at what was discussed, and you’ll be told when a call is being recorded. Recordings are for our internal use only and are stored securely.
- Billing information. Invoices and payment records. If you pay by card or PayPal, the payment provider handles your card details. We never see or store full card numbers.
- Website and email information. What you send through our enquiry forms, and information about how you use our website and emails, such as pages visited, links clicked, device type and approximate location.
- Information from websites we look after. See “Websites we build and look after” below.
- Information about people who work with us or apply to. Contact details, work history and portfolio material.
We don’t ask for sensitive information, such as health details. Please don’t send it to us unless your project needs it.
How we collect it
Most of it comes straight from you, when you enquire, fill in a form, send us content or talk with us. Some comes from your colleagues, from public sources such as your website or LinkedIn, and automatically from our website and emails.
You’re welcome to make a general enquiry without telling us who you are. We’ll need your details to quote for or carry out a project.
Why we collect it
We use personal information to:
- respond to enquiries and prepare quotes and proposals
- carry out and deliver your project
- send invoices and keep our accounts
- keep in touch about your project and, where the law allows, send news and offers
- ask for a review or feedback when a project wraps up
- improve our website and services
- meet our legal and tax obligations, and protect you and us from fraud or misuse.
Who we share it with
We don’t sell personal information. We share it only where it’s needed to run our business and deliver your project, with:
- our team and the contractors who work on your project, some of whom are overseas
- the software and service providers listed below
- printers and other suppliers, where your project needs them
- our professional advisers and insurers
- government bodies, regulators or courts, where the law requires it.
| What it’s for | Services we use | Where they’re based |
|---|---|---|
| Proposals and signing | Better Proposals | United Kingdom |
| Client records and email marketing | ActiveCampaign | United States |
| Email, files and calendar | Google Workspace | United States |
| Website analytics | Google Analytics | United States |
| Accounts and invoicing | Xero | New Zealand |
| Card and online payments | Stripe, PayPal | United States |
| Project management and messaging | Trello, Slack, Zapier | United States and Australia |
| Email delivery for websites we look after | SMTP2GO | New Zealand |
| AI tools that support our work | See “AI tools” below | Mostly United States |
These providers may store information in other countries too. We may change providers from time to time and will update this list when we do.
Information that goes overseas
Some of our contractors and most of the services above are outside Australia, currently including Nigeria, the United States, the United Kingdom and New Zealand. We choose reputable providers and our contractors are bound by confidentiality, but overseas recipients may not be covered by Australian privacy law.
AI tools
We use AI tools, some of them based overseas, to help with our work. We may put material you give us into them, such as briefs, photos and product images. Our AI assistants also work inside the systems we use to run the business, such as our files, email and client records, so information held there may be processed by them. We don’t put sensitive personal information into AI tools, and we use settings that stop our tools training on your material wherever they offer one.
Websites we build and look after
When we build or look after a website for a client, we may have administrator access to it, and its forms and notifications may be sent through an email delivery service that we manage. That means messages from the website’s visitors can pass through a service we control.
We handle that information only on our client’s behalf, to keep the website working, and we don’t use it for anything else. Each client is responsible for its own website’s privacy policy. If you’ve contacted a business through a website we built, please contact that business about your information.
Marketing emails
We only send marketing emails where you’ve agreed to receive them, or where our existing relationship with you allows it under the Spam Act. Every marketing email has an unsubscribe link, and we act on unsubscribe requests within 5 business days. Unsubscribing doesn’t stop emails about a project we’re working on with you.
Cookies and analytics
Our website uses cookies and similar tools, including Google Analytics, to understand how people find and use it. Our emails may record opens and clicks. You can block cookies in your browser settings, and the website will still work.
How we keep it safe
We limit access to the people who need it, use a password manager and two-step sign in on our main systems, and require our contractors to keep information confidential. No system is perfectly secure. If a data breach is likely to cause you serious harm, we’ll tell you promptly and explain what we’re doing about it.
How long we keep it
We keep personal information for as long as we need it for the purposes above and to meet our legal and tax obligations, which for financial records is generally 7 years. After that we delete or de-identify it. We keep marketing contact details until you unsubscribe or ask us to remove them.
Seeing or correcting your information
You can ask us for a copy of the personal information we hold about you, or ask us to correct or delete it. Email us at the address below and we’ll respond within 30 days. If we can’t do what you’ve asked, we’ll explain why.
Complaints
If you have a concern about how we’ve handled your information, please email us. We’ll acknowledge it within 7 days and give you a full response within 30 days. If you’re not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
Changes to this policy
We’ll update this policy when the way we work changes, and the date at the top shows the latest version.