Bryder Group

Privacy

How we handle your information.

This policy covers bryder.co.nz, studios.bryder.co.nz, the client portal and the staff portal, all run by Bryder Holdings Ltd, which trades as Bryder Studios, in Invercargill. KiwiBudget has its own privacy policy.

Last updated 22 October 2026.

The short version

The rest of the page has the detail behind each of these.

What we collect
What you send us, and what we need to quote, build and look after your project. Nothing else.
Tracking
None. Our websites have no analytics, no advertising trackers and no tracking cookies.
Who sees it
Our team, and a few service providers that store or send it for us. We never sell it, and we never share it for anyone else's marketing.
Where it is kept
With cloud providers, some of them overseas. The client portal's information is held in South Korea. See the full list.
Your say
You can ask what we hold about you, have it corrected, or ask us to delete it. Email hello@bryder.co.nz.

What we collect

When you get in touch

  • When you email or phone us, we keep your name, your contact details and what you tell us.
  • The contact form on studios.bryder.co.nz asks for your name, email and message, and optionally your phone number, business, website, topic and budget. It emails them to us. The website itself does not store them.
  • The contact form on bryder.co.nz opens your own email app. Nothing is sent until you press send.
  • If you send a CV, we keep it for twelve months and then delete it, or sooner if you ask.

If you are a client

  • Your business details: the business name, a contact person, email, phone and address.
  • Your portal login: your email address and password. The password is stored scrambled (hashed) by our sign-in provider, so nobody here can read it.
  • Your project: its stage, previews, quotes, invoices, updates and change requests.
  • What you add: files you upload, chat messages, and any passwords you choose to share with us through the portal.
  • How you want to hear from us: email or text, and your mobile number if you choose texts.
  • Records: when you last signed in, and a log of the emails and texts we have sent you.
  • Our notes: notes our team keeps about your project, which only our team can see.

If we contact your business first

We sometimes email businesses about our services, using the business contact details they publish. We only use business addresses. If you would rather we did not, tell us and we will stop.

When you visit our websites

  • There are no analytics, advertising trackers or tracking cookies.
  • Our hosting provider keeps standard server logs, such as your IP address, browser type and the page you asked for, to run the service and stop attacks.
  • Your browser keeps a few settings on your device: light or dark theme, whether to keep you signed in, the email you last signed in with, and how you like to see files. Only the sign-in session is ever sent to us, so the portal knows it is you.

How we use it

  • To answer you, and to quote.
  • To design, build, host and look after your website, app or phone system.
  • To run the client portal: your project, previews, files and chat.
  • To send you the updates and notices you have chosen, by email or text.
  • To invoice you, and to keep the financial records the law requires.
  • To keep our systems and your account secure.

We do not sell your information, use it for advertising, or give it to anyone for their own marketing.

Ask Bryder, our staff assistant

Staff only. Clients never use it or see it.

Our team can use Ask Bryder, an assistant in the staff portal built on Claude, an AI model made by Anthropic in the United States. It helps staff find things quickly, such as which projects are waiting on a client.

When a staff member asks it a question, Ask Bryder sends Anthropic the question and the portal details it needs to answer. That can include client and project names, the names of client contacts, project stages and dates, file names, change request subjects and calendar entries.

It never sends email addresses, phone numbers, street addresses, chat messages, shared passwords, our notes about you, or what is inside your files. It can only read. It cannot change anything.

Anthropic uses this only to produce the answer. Under its commercial terms it does not train its models on it. We keep a record of who asked and when, but not the questions or the answers.

Who we share it with

These providers store or send information for us, not for their own use. Some are overseas, so your information may be held outside New Zealand. We stay responsible for it under the Privacy Act 2020.

Supabase
The client portal's database, file storage and sign-in. Servers in Seoul, South Korea.
Vercel
Hosts our websites and the contact form. A United States company with servers around the world.
Resend
Sends our emails, such as portal notices. United States.
Telnyx
Sends text messages, only if you choose texts. United States.
Google Workspace
Our email, including hello@bryder.co.nz. Google's data centres, mainly in the United States.
Microsoft 365
Staff sign-in, and our office documents and files. Microsoft's data centres.
Xero
Quotes, invoices and payments. A New Zealand company that stores its data in the United States.
Anthropic
Ask Bryder, the staff assistant described above. United States.
Our accountant
Invoices and financial records, for tax. Invercargill, New Zealand.

We also share information when the law requires it, for example with Inland Revenue, or with the police when they have a lawful request.

How we keep it safe

  • Everything travels encrypted between your device and our services.
  • Each client can see only their own business's projects and files. The database itself enforces this, not just the web page.
  • Files are private, and open only through short-lived links.
  • Passwords you share through the portal are encrypted, can be opened only for the time you choose (seven days at most), and are then deleted.
  • Only our team can use the staff portal.

If a privacy breach is likely to cause serious harm, we will tell you and the Privacy Commissioner as soon as we can, as the law requires.

How long we keep it

Enquiries
Up to two years if you do not become a client, then deleted.
CVs
Twelve months, then deleted.
Your project
For as long as we work together. When you leave, we delete your portal login, files and messages when you ask, and otherwise within twelve months.
Shared passwords
Until the time you chose runs out, seven days at most, then deleted.
Invoices and payments
Seven years, because New Zealand tax law requires it.
Server logs
A short time, by our hosting provider.

Your rights

Under the Privacy Act 2020 you can ask us:

  • what information we hold about you, and for a copy of it;
  • to correct anything that is wrong;
  • to delete it, unless the law requires us to keep it, as with invoices.

It is free. We will check it is really you, then reply within 20 working days. Email hello@bryder.co.nz or call 03 218 3249.

If you are not happy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Office of the Privacy Commissioner at privacy.org.nz or on 0800 803 909.

Privacy officer

Jack Ridder, Director.

Bryder Holdings Ltd, Invercargill. Company 9414678. Questions about this policy or your information go to hello@bryder.co.nz, with "Privacy" in the subject.

If we change this policy, we will update the date at the top of this page, and email our clients about any big change.