Privacy Policy

The legal mumbo-jumbo for browsing our site

Have a question?

Last updated: 10 November 2026

About this policy

Red Kite Design Pty Ltd (ABN 37 662 741 586) is a branding and graphic design business based in Brisbane, Queensland. This policy explains what personal information we collect, why we collect it, who we share it with and how you can reach us about it.

We’re a small business, so the Privacy Act 1988 doesn’t currently require us to follow the Australian Privacy Principles. We still take privacy seriously, and we aim to handle personal information in a way that’s consistent with those principles.

What we collect

We only collect what we need to work with you and run our business.

  • Contact details. Your name, business name, role, email address, phone number and business address.
  • Project information. Briefs, content, photos, feedback, and our notes from calls and meetings. We occasionally record video calls so we can look back at what was discussed, and you’ll be told when a call is being recorded. Recordings are for our internal use only and are stored securely.
  • Billing information. Invoices and payment records. If you pay by card or PayPal, the payment provider handles your card details. We never see or store full card numbers.
  • Website and email information. What you send through our enquiry forms, and information about how you use our website and emails, such as pages visited, links clicked, device type and approximate location.
  • Information from websites we look after. See “Websites we build and look after” below.
  • Information about people who work with us or apply to. Contact details, work history and portfolio material.

We don’t ask for sensitive information, such as health details. Please don’t send it to us unless your project needs it.

How we collect it

Most of it comes straight from you, when you enquire, fill in a form, send us content or talk with us. Some comes from your colleagues, from public sources such as your website or LinkedIn, and automatically from our website and emails.

You’re welcome to make a general enquiry without telling us who you are. We’ll need your details to quote for or carry out a project.

Why we collect it

We use personal information to:

  • respond to enquiries and prepare quotes and proposals
  • carry out and deliver your project
  • send invoices and keep our accounts
  • keep in touch about your project and, where the law allows, send news and offers
  • ask for a review or feedback when a project wraps up
  • improve our website and services
  • meet our legal and tax obligations, and protect you and us from fraud or misuse.

Who we share it with

We don’t sell personal information. We share it only where it’s needed to run our business and deliver your project, with:

  • our team and the contractors who work on your project, some of whom are overseas
  • the software and service providers listed below
  • printers and other suppliers, where your project needs them
  • our professional advisers and insurers
  • government bodies, regulators or courts, where the law requires it.
What it’s forServices we useWhere they’re based
Proposals and signingBetter ProposalsUnited Kingdom
Client records and email marketingActiveCampaignUnited States
Email, files and calendarGoogle WorkspaceUnited States
Website analyticsGoogle AnalyticsUnited States
Accounts and invoicingXeroNew Zealand
Card and online paymentsStripe, PayPalUnited States
Project management and messagingTrello, Slack, ZapierUnited States and Australia
Email delivery for websites we look afterSMTP2GONew Zealand
AI tools that support our workSee “AI tools” belowMostly United States

These providers may store information in other countries too. We may change providers from time to time and will update this list when we do.

Information that goes overseas

Some of our contractors and most of the services above are outside Australia, currently including Nigeria, the United States, the United Kingdom and New Zealand. We choose reputable providers and our contractors are bound by confidentiality, but overseas recipients may not be covered by Australian privacy law.

AI tools

We use AI tools, some of them based overseas, to help with our work. We may put material you give us into them, such as briefs, photos and product images. Our AI assistants also work inside the systems we use to run the business, such as our files, email and client records, so information held there may be processed by them. We don’t put sensitive personal information into AI tools, and we use settings that stop our tools training on your material wherever they offer one.

Websites we build and look after

When we build or look after a website for a client, we may have administrator access to it, and its forms and notifications may be sent through an email delivery service that we manage. That means messages from the website’s visitors can pass through a service we control.

We handle that information only on our client’s behalf, to keep the website working, and we don’t use it for anything else. Each client is responsible for its own website’s privacy policy. If you’ve contacted a business through a website we built, please contact that business about your information.

Marketing emails

We only send marketing emails where you’ve agreed to receive them, or where our existing relationship with you allows it under the Spam Act. Every marketing email has an unsubscribe link, and we act on unsubscribe requests within 5 business days. Unsubscribing doesn’t stop emails about a project we’re working on with you.

Cookies and analytics

Our website uses cookies and similar tools, including Google Analytics, to understand how people find and use it. Our emails may record opens and clicks. You can block cookies in your browser settings, and the website will still work.

How we keep it safe

We limit access to the people who need it, use a password manager and two-step sign in on our main systems, and require our contractors to keep information confidential. No system is perfectly secure. If a data breach is likely to cause you serious harm, we’ll tell you promptly and explain what we’re doing about it.

How long we keep it

We keep personal information for as long as we need it for the purposes above and to meet our legal and tax obligations, which for financial records is generally 7 years. After that we delete or de-identify it. We keep marketing contact details until you unsubscribe or ask us to remove them.

Seeing or correcting your information

You can ask us for a copy of the personal information we hold about you, or ask us to correct or delete it. Email us at the address below and we’ll respond within 30 days. If we can’t do what you’ve asked, we’ll explain why.

Complaints

If you have a concern about how we’ve handled your information, please email us. We’ll acknowledge it within 7 days and give you a full response within 30 days. If you’re not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We’ll update this policy when the way we work changes, and the date at the top shows the latest version.

Contact us

Red Kite Design Pty Ltd, Brisbane, Queensland, Australia

Email: [email protected]