Privacy
How we handle your information.
This policy covers bryder.co.nz, studios.bryder.co.nz, the client portal and the staff portal, all run by Bryder Holdings Ltd, which trades as Bryder Studios, in Invercargill. KiwiBudget has its own privacy policy.
Last updated 22 October 2026.
The short version
The rest of the page has the detail behind each of these.
- What we collect
- What you send us, and what we need to quote, build and look after your project. Nothing else.
- Tracking
- None. Our websites have no analytics, no advertising trackers and no tracking cookies.
- Who sees it
- Our team, and a few service providers that store or send it for us. We never sell it, and we never share it for anyone else's marketing.
- Where it is kept
- With cloud providers, some of them overseas. The client portal's information is held in South Korea. See the full list.
- Your say
- You can ask what we hold about you, have it corrected, or ask us to delete it. Email hello@bryder.co.nz.
What we collect
When you get in touch
- When you email or phone us, we keep your name, your contact details and what you tell us.
- The contact form on studios.bryder.co.nz asks for your name, email and message, and optionally your phone number, business, website, topic and budget. It emails them to us. The website itself does not store them.
- The contact form on bryder.co.nz opens your own email app. Nothing is sent until you press send.
- If you send a CV, we keep it for twelve months and then delete it, or sooner if you ask.
If you are a client
- Your business details: the business name, a contact person, email, phone and address.
- Your portal login: your email address and password. The password is stored scrambled (hashed) by our sign-in provider, so nobody here can read it.
- Your project: its stage, previews, quotes, invoices, updates and change requests.
- What you add: files you upload, chat messages, and any passwords you choose to share with us through the portal.
- How you want to hear from us: email or text, and your mobile number if you choose texts.
- Records: when you last signed in, and a log of the emails and texts we have sent you.
- Our notes: notes our team keeps about your project, which only our team can see.
If we contact your business first
We sometimes email businesses about our services, using the business contact details they publish. We only use business addresses. If you would rather we did not, tell us and we will stop.
When you visit our websites
- There are no analytics, advertising trackers or tracking cookies.
- Our hosting provider keeps standard server logs, such as your IP address, browser type and the page you asked for, to run the service and stop attacks.
- Your browser keeps a few settings on your device: light or dark theme, whether to keep you signed in, the email you last signed in with, and how you like to see files. Only the sign-in session is ever sent to us, so the portal knows it is you.
How we use it
- To answer you, and to quote.
- To design, build, host and look after your website, app or phone system.
- To run the client portal: your project, previews, files and chat.
- To send you the updates and notices you have chosen, by email or text.
- To invoice you, and to keep the financial records the law requires.
- To keep our systems and your account secure.
We do not sell your information, use it for advertising, or give it to anyone for their own marketing.
Ask Bryder, our staff assistant
Staff only. Clients never use it or see it.
Our team can use Ask Bryder, an assistant in the staff portal built on Claude, an AI model made by Anthropic in the United States. It helps staff find things quickly, such as which projects are waiting on a client.
When a staff member asks it a question, Ask Bryder sends Anthropic the question and the portal details it needs to answer. That can include client and project names, the names of client contacts, project stages and dates, file names, change request subjects and calendar entries.
It never sends email addresses, phone numbers, street addresses, chat messages, shared passwords, our notes about you, or what is inside your files. It can only read. It cannot change anything.
Anthropic uses this only to produce the answer. Under its commercial terms it does not train its models on it. We keep a record of who asked and when, but not the questions or the answers.
Who we share it with
These providers store or send information for us, not for their own use. Some are overseas, so your information may be held outside New Zealand. We stay responsible for it under the Privacy Act 2020.
- Supabase
- The client portal's database, file storage and sign-in. Servers in Seoul, South Korea.
- Vercel
- Hosts our websites and the contact form. A United States company with servers around the world.
- Resend
- Sends our emails, such as portal notices. United States.
- Telnyx
- Sends text messages, only if you choose texts. United States.
- Google Workspace
- Our email, including hello@bryder.co.nz. Google's data centres, mainly in the United States.
- Microsoft 365
- Staff sign-in, and our office documents and files. Microsoft's data centres.
- Xero
- Quotes, invoices and payments. A New Zealand company that stores its data in the United States.
- Anthropic
- Ask Bryder, the staff assistant described above. United States.
- Our accountant
- Invoices and financial records, for tax. Invercargill, New Zealand.
We also share information when the law requires it, for example with Inland Revenue, or with the police when they have a lawful request.
How we keep it safe
- Everything travels encrypted between your device and our services.
- Each client can see only their own business's projects and files. The database itself enforces this, not just the web page.
- Files are private, and open only through short-lived links.
- Passwords you share through the portal are encrypted, can be opened only for the time you choose (seven days at most), and are then deleted.
- Only our team can use the staff portal.
If a privacy breach is likely to cause serious harm, we will tell you and the Privacy Commissioner as soon as we can, as the law requires.
How long we keep it
- Enquiries
- Up to two years if you do not become a client, then deleted.
- CVs
- Twelve months, then deleted.
- Your project
- For as long as we work together. When you leave, we delete your portal login, files and messages when you ask, and otherwise within twelve months.
- Shared passwords
- Until the time you chose runs out, seven days at most, then deleted.
- Invoices and payments
- Seven years, because New Zealand tax law requires it.
- Server logs
- A short time, by our hosting provider.
Your rights
Under the Privacy Act 2020 you can ask us:
- what information we hold about you, and for a copy of it;
- to correct anything that is wrong;
- to delete it, unless the law requires us to keep it, as with invoices.
It is free. We will check it is really you, then reply within 20 working days. Email hello@bryder.co.nz or call 03 218 3249.
If you are not happy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Office of the Privacy Commissioner at privacy.org.nz or on 0800 803 909.
Privacy officer
Jack Ridder, Director.
Bryder Holdings Ltd, Invercargill. Company 9414678. Questions about this policy or your information go to hello@bryder.co.nz, with "Privacy" in the subject.
If we change this policy, we will update the date at the top of this page, and email our clients about any big change.