ARK Privacy Policy

This Policy explains how ARK Project Limited handles personal information across its website, enquiries, projects, ARKCode, myARK, Handover, warranty, support and ownership transfer processes.

1. Purpose
This Privacy Policy explains how ARK Project Limited collects, uses, stores, shares, protects and retains personal information across:
the ARK website;
The ARK Kitchen Edit;
enquiries and quotations;
kitchen projects;
ARKCode and Project Records;
myARK;
Handover, warranty and support;
Warranty Transfer;
Real Projects & Prices and other authorised public content.
ARK handles personal information under the Privacy Act 2020 and other applicable New Zealand law.

2. Privacy Officer
ARK will appoint a Privacy Officer responsible for supporting compliance, access and correction requests, privacy complaints and breach management.
Privacy enquiries may be sent to arkkitchen.nz@gmail.com unless ARK publishes a replacement privacy contact.

3. Information ARK may collect
Depending on the service, ARK may collect:
name, email, phone number and contact preferences;
property and project address;
identity and authority information;
account, login and security information;
enquiry and Estimate Builder answers;
project type, layout, measurements and timing preferences;
plans, drawings, photographs, video and uploaded documents;
appliance, material and product information;
quotations, Contracts, Variations and approvals;
invoice, payment and account-status information;
scheduling and progress records;
site, production, installation and Handover records;
warranty, Service Request, assessment and remedy records;
Warranty Transfer information;
communications with ARK;
website usage, device, browser, cookie and analytics information;
information required by law, insurance, safety or dispute processes.

4. Information ARK should not unnecessarily collect
ARK will seek to collect only information reasonably necessary for a lawful business purpose.
Users should avoid submitting unnecessary:
government identity documents;
bank-card information;
information about children;
health information;
information about neighbours, tenants or visitors;
private content unrelated to the project.
Where identity evidence is required, ARK may limit access, redact unnecessary fields or retain only the verification result where appropriate.

5. How information is collected
ARK may collect information:
directly from the person;
from an authorised representative;
through forms, accounts and uploads;
through email, SMS, calls and meetings;
during measurement, delivery, installation and service visits;
from ARK staff, contractors, suppliers and fabricators involved in the project;
from public property or business information where relevant;
through cookies, analytics and technical logs;
from a former or new owner during Warranty Transfer.

6. Collection notices - direct and indirect collection

6.1 Information collected directly
At or before direct collection, where practicable, ARK will explain the fact of collection, purpose, intended recipients, whether supply is voluntary or required, consequences of not supplying it, ARK's identity and contact details, and access and correction rights. This Policy may form part of that notice but does not replace a more specific notice where required.

6.2 Information collected from another source - IPP3A
Where ARK collects personal information about a person from someone else, ARK will apply Information Privacy Principle 3A. Unless the person has already been made aware or another statutory exception applies, ARK will take reasonable steps to notify them of the fact of collection, purpose, intended recipients, ARK's identity and address, any law authorising or requiring collection, and their access and correction rights.
Notification will normally occur as soon as reasonably practicable after collection and before the information is used or disclosed in a way that materially affects the person. ARK may preserve the notice, delivery record or documented exception in the Project Record.
This may apply to information received from former owners, transfer applicants, property owners, household members, property managers, agents, trades, suppliers or other authorised sources.

7. Why ARK uses information
ARK may use personal information to:
respond to enquiries;
generate Starting Estimates;
prepare quotations and designs;
confirm identity and authority;
measure, plan, manufacture, deliver and install work;
manage Contracts, payments, Variations and scheduling;
create ARKCode and Project Records;
operate myARK;
coordinate suppliers, fabricators and contractors;
maintain safety, quality, inspection and evidence records;
conduct Handover;
administer warranty, care and Service Requests;
manage Warranty Transfer;
provide property and Record Pack information;
improve ARK systems and website performance;
detect security misuse or fraud;
meet legal, tax, insurance and dispute obligations;
send service and permitted marketing communications.

8. ARKCode and Project Record
An ARKCode identifies one specific ARK record. It does not identify or belong to a person, user account or property. Personal information is used only to record a person’s role, authority or relationship to that record.
The Project Record may contain detailed information required to preserve:
accepted document versions;
material and component identity;
approvals and Variations;
production and installation evidence;
Handover and warranty dates;
Service Requests and remedies;
transfer history.
An ARKCode does not automatically make this information public.
The same person, account or property may be linked to multiple ARKCodes where separate projects, orders, service records, product batches or other approved records exist.
Ownership or access changes do not change the ARKCode. ARK records the new authority, access and transfer history against the existing record.

9. myARK
myARK is a private authorised-access layer.
ARK may use personal information to:
create and verify an account;
connect a person to the correct ARK record or records;
provide role-based access;
record approvals;
send notifications;
protect account security;
manage former and new owner access.
Detailed account rules are in the myARK Account & Access Terms.

10. Photographs and video
ARK may take photographs or video during:
measurement;
production;
pre-dispatch checks;
delivery;
site protection;
installation;
Handover;
service assessment and remedy.
These records may be used for project delivery, evidence, safety, warranty and dispute management. Completed-project photographs may also be selected for public use only where the Project Contract Schedule provides the required Project Publication Authorisation or another lawful basis applies.
ARK will take reasonable care to avoid unnecessary capture of people and unrelated private content.

11. Plans and property information
Plans, addresses, access details and site photographs can be sensitive.
ARK will limit access to people and service providers who reasonably need the information for the project, support, legal or record purpose.
Users must have authority to provide plans and property information to ARK.

12. Payment information
ARK may retain invoices, payment dates, references, Payment Claims, Payment Schedules, account status and debt-recovery records.
ARK should not request full payment-card details by ordinary email.
Public ARKCode or project pages must not display private payment information or amounts outstanding.

13. Service Requests
Service Requests may contain photographs, video, use history, cleaning information, details of leaks or impact, and communications about alleged defects.
ARK may use this information to:
assess cause;
coordinate inspection;
obtain supplier or specialist review;
plan remedy;
create an Issue Closure Record;
manage disputes.

14. Warranty Transfer
ARK may collect from a new owner:
identity and contact information;
evidence of ownership or lawful possession;
settlement or transfer date;
information about alterations;
current condition evidence.
ARK may contact the former owner where appropriate, but may approve transfer on sufficient independent evidence.
The new owner does not automatically receive the former owner's private payment, identity, correspondence or dispute information.

15. Authorised public project information
15.1 ARK may publish selected Project information where the accepted Project Contract Schedule selects Standard Public Project Record, the Client later gives separate written authorisation, or another lawful basis applies.
15.2 Where Standard Public Project Record applies, authorised public information is limited to:
the suburb or general locality, without the street name, street number or exact address;
photographs of the completed Project;
the kitchen layout or general cabinetry configuration;
the accepted Project Scope and included work;
the materials, finishes, hardware and benchtop specifications used;
the final Project price including GST; and
the public Project Record reference assigned by ARK.
15.3 Where Confidential Project is selected, or no publication option is recorded, ARK will not intentionally publish the information listed in clause 15.2 through public or promotional channels unless the Client later gives separate written authorisation or disclosure is otherwise required or permitted by law.
15.4 The public Project Record reference may identify the public-facing record, but it must not expose private access credentials or provide access to restricted Project Record or myARK information.
15.5 ARK will not intentionally publish the Client's name, exact address, telephone number, email address, signatures, private Contract Documents, private quotation documents, myARK information, private access credentials, faces, children, vehicle registrations, security systems, access instructions or unrelated private content unless separately authorised in writing or otherwise permitted by law.
15.6 ARK may crop, blur, redact or exclude information where reasonably necessary to protect privacy, remove unrelated private content or prepare completed-project material for authorised publication.
16. Publication channels, correction and removal requests
16.1 An accepted Project Publication Authorisation may permit use through ARK-controlled public channels, including ARK websites, Real Projects & Prices, public Project Records, portfolios, social media, advertising, professional presentations and machine-readable or AI-accessible public information systems.
16.2 Supplying photographs or Project information for delivery, Handover, warranty or support does not by itself authorise public or promotional use. The accepted Contract Schedule, a later separate written authorisation or another lawful basis must provide that authority.
16.3 Project publication authority does not permit ARK to sell personal information to advertisers, represent that the Client endorses an unrelated product or service, or disclose the private Project Record.
16.4 The Client may request correction of inaccurate public information, withdraw authority for future publication, or request removal from ARK-controlled digital channels. ARK will act on a reasonable request within a reasonable period, subject to lawful record-retention requirements and material already printed or distributed.
16.5 ARK cannot guarantee removal from independent third-party copies, search indexes, caches, archives or republications created before ARK removes material from its own controlled channel.