1. About this policy
This policy explains how The Branch Co. Limited (“we”, “us” or “our”) collects, holds, uses and discloses personal information. It applies when you visit our website, contact us, subscribe to our newsletter or marketing insights, download a resource, book a discovery call, become a client or supplier, apply to work with us, or otherwise interact with us.
We are a New Zealand marketing consultancy providing strategic marketing and digital services. Our services include marketing strategy, brand and positioning work, websites and digital experience, campaigns and content, and ongoing marketing support. We comply with the Privacy Act 2020 and its information privacy principles.
2. The different roles we may have
Our role depends on why we have the information:
For our own business activities, we decide why and how personal information is handled. This includes website enquiries, client contacts, proposals, billing, supplier management and our own marketing.
When providing services to a client, we may handle personal information supplied by or collected for that client, such as a customer contact list, campaign audience, enquiry record or analytics data. In that situation, we generally handle the information on the client’s instructions and for the client’s purposes. The client remains responsible for its own privacy notices, permissions and lawful use of that information.
If you are an individual whose information we handle for a client, you may wish to contact that client first. We will assist the client with legitimate privacy requests as appropriate.
3. What personal information we collect
Depending on how you deal with us, we may collect:
Identity and contact details, such as your name, organisation, role, email address, phone number and postal address.
Information you choose to provide when completing a form on our website, including details about your business, marketing goals, project requirements or preferred meeting times.
Enquiry, project and relationship information, including messages, meeting notes, briefs, preferences, feedback and records of services requested or provided.
Commercial and payment information, such as proposals, contracts, invoices, payment status and transaction records.
Marketing information, including communication preferences, event or newsletter sign-ups, campaign interactions and responses.
Website and device information, such as IP address, browser and device type, approximate location, referring pages, pages viewed, timestamps, cookie identifiers and similar analytics or advertising information.
Recruitment and supplier information, such as work history, qualifications, references, capability information and payment details.
Personal information contained in material a client or third party provides for a project.
Please do not send us sensitive or confidential personal information unless it is reasonably required for the relevant purpose and you are authorised to provide it.
4. How we collect information
We may collect personal information:
Directly from you, including through our website, email, telephone, meetings, forms, surveys, contracts and social media interactions.
From a client, referral source, service provider, business partner, publicly available source or another person where this is permitted by law.
Automatically through our website and digital services using cookies, pixels, tags, server logs and similar technologies.
Where the Privacy Act requires us to notify you about information collected from another source, we will take reasonable steps to do so unless an exception applies. This policy is one way we provide that information, but we may also use a more specific notice where appropriate.
5. Why we use personal information
We may use personal information to:
Respond to enquiries and communicate with you.
Prepare proposals, enter into and administer contracts, and deliver, manage and improve our services.
Develop marketing strategies, brands, websites, content, campaigns, reporting and ongoing marketing support for clients.
Operate, secure, troubleshoot, personalise and measure our website and digital services.
Manage client, supplier and other business relationships, billing, payments, records and administration.
Send marketing communications where permitted by law or consent.
Conduct research, analytics and service development.
Protect our rights, systems, people and property.
Comply with legal, regulatory, insurance and professional obligations.
If we want to use personal information for a purpose that is not reasonably connected with the purpose for which it was collected, we will seek authorisation or ensure another lawful basis applies.
6. Client campaign and audience data
Our work may involve customer lists, mailing lists, website enquiries, campaign audiences, social media data, analytics and conversion information supplied by, collected for, or accessible through a client’s systems. We use that information only to provide the agreed services, follow the client’s lawful instructions, maintain security, and meet our legal obligations.
Clients must ensure they have a lawful basis to collect and provide the information, have given any required notices, and have obtained any required permissions for electronic marketing, audience matching, tracking or advertising. We may decline instructions that we reasonably believe would breach privacy, anti-spam or other applicable law.
7. Cookies, analytics and advertising technologies
Our website may use:
Strictly necessary technologies that support security, network management and core website functions.
Analytics technologies that help us understand traffic and how visitors use the website.
Marketing technologies that help measure campaigns, remember preferences or deliver and evaluate relevant advertising.
These technologies may collect identifiers and usage information and may allow third-party providers to recognise a browser or device. Where our website offers cookie controls, you can use them to accept, reject or adjust non-essential technologies. You can also control cookies through your browser, although blocking some technologies may affect website functions.
Our website’s cookie banner identifies the non-essential cookies and technologies currently in use. We regularly review and update these settings as our website and technology providers change.
8. Who we may share information with
9. Overseas services and disclosures
Some service providers or digital platforms we use may store or process information outside New Zealand, or make it accessible to related companies overseas. The countries involved depend on the provider and service selected.
Where an overseas disclosure is covered by information privacy principle 12, we will take reasonable steps to ensure the recipient is subject to privacy safeguards comparable to those in New Zealand, obtain your authorisation where appropriate, or rely on another permitted basis. Some overseas cloud processing may be treated under the Privacy Act as storage or processing on our behalf rather than a disclosure, but we still require appropriate security and contractual safeguards.
10. Storage, security and privacy breaches
We use reasonable technical and organisational safeguards appropriate to the nature of the information and the risks involved. These may include access controls, authentication, encryption, backups, staff and contractor confidentiality requirements, vendor due diligence and procedures for responding to security incidents.
No system is completely secure. If a privacy breach occurs, we will contain and assess it and, where required by the Privacy Act, notify the Office of the Privacy Commissioner and affected individuals as soon as reasonably practicable.
11. How long we keep information
We retain personal information only for as long as it is reasonably required for the purposes for which it was collected, to provide services, maintain appropriate business records, resolve disputes, and meet legal, tax, insurance and contractual requirements. Retention periods vary by information type and context. We then securely delete, destroy or de-identify the information where reasonably practicable.
Information handled for a client is retained and returned or deleted in accordance with the client agreement, the client’s lawful instructions, backup cycles and applicable law.
12. Your choices and privacy rights
You may:
Unsubscribe from our marketing emails using the unsubscribe link or by contacting us.
Adjust available cookie settings or browser controls.
Ask for access to personal information we hold about you, or ask us to correct it.
To make an access or correction request, contact our Privacy Officer using the details below. We may need to verify your identity. The Privacy Act allows some requests to be refused or limited, and we will explain any applicable reason. If the information is held only for a client, we may refer the request to that client or work with the client to respond.
13. Children
Our website and services are directed to businesses and are not intended to collect personal information directly from children. If a project involves children’s information or content, we will work with the client to apply safeguards appropriate to the circumstances and applicable law.