Last updated: 1 October 2026
The36th Design Studio ("The36th", "we", "us", or "our") respects your privacy and is committed to protecting the personal information you provide to us.
This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit our website, contact us, engage us for design services, or otherwise interact with The36th.
The36th operates in New Zealand and this Privacy Policy is intended to comply with the **Privacy Act 2020 (New Zealand)** and its information privacy principles.
The36th Design Studio is an independent design studio providing graphic design, brand identity, digital design and related creative services.For the purposes of the New Zealand Privacy Act 2020, The36th is the organisation responsible for the personal information covered by this Privacy Policy.
Contact:
The36th Design Studio
Auckland,
New Zealand
Email: hello@the36th.co.nz
Website: the36th.co.nz
We only collect personal information that is reasonably necessary for the purposes described in this Privacy Policy.
Depending on how you interact with us, we may collect:
Information you provide directly
This may include:
- your name;
- business or organisation name;
- email address;
- telephone number;
- postal or business address;
- information contained in your enquiry or message;
- project requirements and creative briefs;
- information about your business, organisation, products or services;
- billing and invoicing information;
- information contained in documents, files, images or other materials you provide to us;
- communications between you and The36th;
- information you provide when requesting a quote or engaging our services.
You are generally free to choose what information you provide when contacting us. However, if you do not provide information necessary for us to respond to an enquiry, prepare a proposal, enter into an agreement, or provide a service, we may not be able to do so.
Information collected automatically
When you visit our website, certain technical information may be collected automatically by our website hosting provider, analytics services, security tools or other technologies.
Depending on the services enabled on the website, this may include:
- IP address;
- browser and device type;
- operating system;
- approximate geographic location derived from an IP address;
- pages visited;
- referring website;
- links or buttons interacted with;
- date and time of visits;
- general website usage information.
This information is generally used to understand website performance, maintain security, diagnose technical issues and improve the website.
We do not use website analytics to intentionally identify individual visitors unless this is specifically disclosed to you and permitted by law.
We generally collect personal information directly from you, including when you:
- submit a contact or enquiry form;
- email us;
- telephone us;
- request a quote or proposal;
- engage us for a project;
- provide information as part of a creative brief;
- communicate with us during a project;
- subscribe to communications, where available;
- interact with our website.
New Zealand's Privacy Act generally requires organisations to collect personal information directly from the individual concerned, subject to certain exceptions. Where we obtain personal information from another source, we will do so only where permitted and will take reasonable steps to meet our obligations regarding indirect collection.
We may collect and use personal information for purposes including:
- responding to enquiries;
- communicating with prospective clients;
- preparing quotes, proposals and project scopes;
- providing design and creative services;
- managing client relationships;
- communicating about projects and deliverables;
- preparing invoices and processing payments;
- maintaining business and financial records;
- delivering files, assets and other project materials;
- providing customer support;
- improving our website and services;
- maintaining the security and functionality of our website;
- understanding general website usage and performance;
- complying with legal, accounting and regulatory obligations;
- protecting our legal rights and interests; and
- other purposes directly related to the reason the information was collected.
We will generally only use personal information for the purpose for which it was collected, or for another purpose permitted by applicable law.
From time to time, The36th may send information about our services, projects, studio updates or other relevant communications where permitted by law.
Where applicable, you can unsubscribe from marketing communications at any time by using the unsubscribe option provided in the communication or by contacting us.
We do not sell your personal information to third parties for their own marketing purposes.
Our website may use cookies and similar technologies.
Cookies are small files stored on your device that can help a website remember information about your visit and understand how the website is being used.
We may use cookies for purposes such as:
- essential website functionality;
- website security;
- remembering preferences;
- understanding website traffic and usage;
- measuring website performance;
- improving the user experience.
We may use third-party services for analytics, hosting, forms, embedded content, security or other website functionality. These providers may process technical information about your interaction with our website in accordance with their own privacy policies.
You can generally control or disable cookies through your browser settings. Disabling certain cookies may affect how the website functions.
Where our website uses non-essential cookies or tracking technologies that require consent under applicable law, we will provide appropriate controls or notices.
We may use third-party providers to operate our business and website.
Depending on the services currently used by The36th, these may include providers for:
- website hosting and infrastructure;
- website analytics;
- contact forms;
- email communications;
- cloud storage;
- file sharing;
- accounting and invoicing;
- payment processing;
- project management;
- embedded media or other website functionality.
These providers may process personal information on our behalf or independently, depending on the service.
We seek to use reputable providers and take reasonable steps to ensure that personal information is handled appropriately.
Third-party providers may have their own privacy policies governing how they process information. We recommend reviewing those policies where relevant.
We do not sell or rent your personal information.
We may disclose personal information where reasonably necessary for the purposes described in this Privacy Policy, including to:
- service providers who assist us in operating our business;
- website and technology providers;
- accountants, professional advisers or other professional service providers;
- payment providers;
- contractors or collaborators working on a project where disclosure is necessary to deliver the service;
- government agencies, regulators or other authorities where required or authorised by law;
- another party where you have authorised us to disclose the information; or- another party where disclosure is otherwise permitted by the Privacy Act 2020 or another applicable law.
We aim to limit disclosures to information that is reasonably necessary for the relevant purpose.
Some of the third-party services we use may store or process information outside New Zealand.
Where personal information is disclosed to an overseas provider, we will take reasonable steps to ensure that the disclosure is handled in accordance with the requirements of the New Zealand Privacy Act 2020.
This may include using providers that are subject to privacy protections considered comparable to those applicable in New Zealand, obtaining appropriate contractual protections, relying on your authorisation where appropriate, or relying on another permitted basis under the Privacy Act.
The location of data storage may vary depending on the providers and services used by The36th.
We take reasonable steps to protect personal information against:
- loss;
- unauthorised access;
- unauthorised use;
- unauthorised modification;
- unauthorised disclosure; and
- other forms of misuse.
Depending on the information and circumstances, reasonable safeguards may include:
- access controls;
- password protection;
- secure cloud services;
- device security;
- restricted access to client information;
- secure transfer methods;
- maintaining appropriate software and security controls; and
- securely disposing of information when it is no longer required.
No method of transmitting or storing information online can be guaranteed to be completely secure. However, we take reasonable measures appropriate to the circumstances to protect the personal information we hold.
The Privacy Act requires organisations to use reasonable security safeguards appropriate to the circumstances.
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including where necessary to:
- provide our services;
- maintain client and project records;
- meet accounting and tax requirements;
- resolve disputes;
- establish or defend legal claims;
- maintain appropriate business records; or
- comply with legal obligations.
When personal information is no longer reasonably required, we will take reasonable steps to securely delete, destroy or anonymise it, where appropriate.
The specific retention period may vary depending on the type of information and the circumstances.
You have the right to request access to personal information that we hold about you, subject to the exceptions contained in the Privacy Act 2020.
You can also ask us to explain how we are using your personal information.
If you would like to make an access request, please contact us using the details at the end of this Privacy Policy.
We will respond to requests within the timeframe required by applicable law.
You have the right to request correction of personal information we hold about you if you believe it is inaccurate, incomplete, out of date, irrelevant or misleading.
If you believe information we hold about you needs to be corrected, please contact us and tell us what information needs to be changed.
We will take reasonable steps to ensure personal information is accurate, up to date, complete, relevant and not misleading before using or disclosing it.
Where we rely on your consent to collect or use personal information, you may withdraw that consent at any time, subject to any legal or contractual limitations.
Withdrawing consent will not affect the lawfulness of processing that occurred before consent was withdrawn.
Please note that withdrawing information that is necessary for us to provide a service may mean that we are unable to continue providing that service.
If you have a concern about how we have collected, used, stored or disclosed your personal information, we encourage you to contact us first so that we can understand the issue and attempt to resolve it.
Please send privacy enquiries or complaints to:
The36th Design Studio
Email: hello@the36th.co.nz
Please provide enough information for us to understand your concern, including what happened and what outcome you are seeking.
You also have the right to make a complaint to the:
Office of the Privacy Commissioner
If you believe your privacy has been breached.
More information about New Zealand privacy rights and complaints is available from the Office of the Privacy Commissioner.
If we become aware of a privacy breach that is reasonably likely to cause serious harm to an affected individual, we will assess the breach and take the steps required under the Privacy Act 2020, including notification where required.
We will also take reasonable steps to contain, investigate and remediate privacy breaches.
The Office of the Privacy Commissioner states that serious privacy breaches must be notified as soon as practicable and generally within 72 hours of becoming aware of the breach.
Our website and services are primarily intended for businesses, organisations and adults.
We do not knowingly seek to collect personal information from children unless it is reasonably necessary for a specific service or interaction and there is an appropriate basis for doing so.
If you believe that a child has provided personal information to us unnecessarily, please contact us so that we can review the information and take appropriate action.
Our website may contain links to third-party websites, platforms or services.
Those websites operate independently from The36th and are governed by their own privacy policies and terms.
We are not responsible for the privacy practices, content or security of third-party websites.
We recommend reviewing the privacy policy of any external website before providing it with personal information.
If The36th is involved in a restructuring, merger, acquisition, sale of assets or other business transaction, personal information may form part of the assets or records transferred as part of that transaction.
Where this occurs, we will take reasonable steps to ensure that personal information continues to be handled in accordance with applicable privacy requirements.
We may update this Privacy Policy from time to time to reflect:
- changes to our services;
- changes to the way we collect or use information;
- changes to our technology or third-party providers;
- changes to applicable laws or regulations; or
- improvements to our privacy practices.
When we make changes, we will update the "Last updated" date at the top of this Privacy Policy.
Where appropriate, we may provide additional notice of significant changes.
If you have any questions about this Privacy Policy, want to request access to your personal information, request a correction, or have a privacy concern, please contact us:
The36th Design Studio
Auckland,
New Zealand
Email: hello@the36th.co.nz
Website: the36th.co.nz
We will treat privacy enquiries seriously and aim to respond within a reasonable timeframe.
---
For further information about privacy rights in New Zealand, you can visit the Office of the Privacy Commissioner at privacy.org.nz.
This Privacy Policy was last updated on 1 October 2026.