Privacy Policy
Effective date: 6 May 2026
Website: hendersonandco.com.au
This Privacy Policy explains how Henderson & Co Projects Pty Ltd ABN 17 656 762 908, of 1.10/46a Macleay St, Potts Point NSW 2011 (Henderson & Co, we, us, or our) collects, holds, uses, and discloses personal information.
We are committed to protecting your privacy and handling personal information responsibly.
This Privacy Policy applies to personal information collected through our website, by email, by phone, through contact forms, through social media, and through other interactions with us.
1. About this Privacy Policy
This Privacy Policy is intended to help you understand:
1. what personal information we collect;
2. how we collect personal information;
3. why we collect, use, and disclose personal information;
4. how we store and protect personal information;
5. when we may disclose personal information to third parties;
6. how you can access or correct your personal information; and
7. how you can contact us or make a privacy complaint.
Under the Australian Privacy Principles, an APP Privacy Policy should describe the kinds of personal information collected, how it is collected and held, the purposes for which it is used and disclosed, how individuals can access or correct their information, and how complaints are handled.
2. Personal information we collect
The types of personal information we may collect include:
1. your name;
2. your email address;
3. your phone number;
4. your business or organisation name;
5. your address or project address, if you provide it;
6. information you include in an enquiry, message, brief, or other communication to us;
7. information about your project, property, design needs, or service requirements;
8. records of our communications with you;
9. website usage information, including IP address, browser type, device information, referring pages, and pages visited; and
10. any other personal information you choose to provide to us.
We generally do not seek to collect sensitive information, such as health information, racial or ethnic origin, religious beliefs, political opinions, or other sensitive categories of information. If you provide sensitive information to us voluntarily, we will handle it in accordance with applicable privacy laws.
3. How we collect personal information
We may collect personal information when you:
1. visit or use our website;
2. submit an enquiry through our website;
3. contact us by email, phone, social media, or another communication channel;
4. request information about our studio or services;
5. engage us or discuss a potential project with us;
6. provide information as part of a project brief, consultation, proposal, or engagement;
7. attend a meeting, event, inspection, consultation, or site visit with us; or
8. otherwise interact with us.
Where reasonable and practicable, we collect personal information directly from you.
We may also collect personal information from third parties, including your representatives, consultants, builders, suppliers, referrers, collaborators, publicly available sources, or other people involved in a project or enquiry.
4. Why we collect, use, and disclose personal information
We collect, use, and disclose personal information for purposes including:
1. responding to enquiries;
2. communicating with you;
3. assessing whether we can assist with a potential project;
4. preparing proposals, fee estimates, or project documentation;
5. providing architectural, interior design, styling, procurement, project-related, or other professional services;
6. managing client and supplier relationships;
7. coordinating with consultants, contractors, suppliers, trades, and other project participants;
8. operating, maintaining, and improving our website;
9. monitoring website performance, usage, and security;
10. managing our business, administration, records, insurance, and compliance obligations;
11. sending updates, newsletters, marketing communications, or studio news, where permitted;
12. protecting our legal rights and interests; and
13. complying with laws, regulations, court orders, or requests from government or regulatory authorities.
The OAIC describes the Australian Privacy Principles as principles-based and technology-neutral, which means organisations should tailor their personal information handling practices to their business model and activities.
5. Website analytics, cookies, and similar technologies
Our website may use cookies, analytics tools, pixels, tags, or similar technologies to help us understand how visitors use the website and to improve its performance.
These technologies may collect information such as:
1. IP address;
2. browser type;
3. device type;
4. pages visited;
5. time spent on the website;
6. referring websites; and
7. general location information.
You can usually disable or manage cookies through your browser settings. However, some parts of the website may not function properly if cookies are disabled.
We may use third-party services such as website hosting providers, analytics providers, search engines, social media platforms, or other digital service providers.
These third parties may collect or process information in accordance with their own privacy policies.
6. Marketing communications
We may use your contact details to send you updates, invitations, newsletters, project news, or other communications about Henderson & Co, where permitted by law.
You may opt out of receiving marketing communications from us at any time by using the unsubscribe function in the communication, if available, or by contacting us at hello@hendersonandco.com.au.
Even if you opt out of marketing communications, we may still contact you about current or past enquiries, projects, services, administrative matters, legal matters, or other non-marketing communications.
7. Disclosure of personal information
We may disclose personal information to:
1. our directors, employees, contractors, and consultants;
2. professional advisers, including lawyers, accountants, insurers, and auditors;
3. builders, trades, suppliers, consultants, certifiers, engineers, planners, and other project participants;
4. technology providers, hosting providers, email providers, CRM providers, cloud storage providers, analytics providers, and other service providers;
5. payment, invoicing, and accounting service providers;
6. government authorities, regulators, courts, tribunals, councils, or law enforcement bodies where required or permitted by law;
7. prospective purchasers, investors, financiers, or advisers in connection with a business transaction; and
8. any other person or organisation where you have consented or where disclosure is otherwise permitted by law.
We only disclose personal information where it is reasonably necessary for our business, services, legal obligations, or legitimate interests.
8. Overseas disclosure
Some of the third-party service providers we use may store or process information outside Australia.
For example, cloud storage, website hosting, email, analytics, CRM, or other technology providers may use servers or support teams located overseas.
Where we disclose personal information overseas, we will take reasonable steps to ensure that the disclosure is consistent with applicable privacy laws. The OAIC notes that if an organisation’s privacy policy says personal information is likely to be sent overseas, the organisation may remain legally responsible if something goes wrong.
9. Security of personal information
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.
These steps may include:
1. using secure systems and service providers;
2. limiting access to personal information to those who need it;
3. maintaining appropriate internal procedures;
4. using password protection and access controls where appropriate;
5. keeping business records reasonably organised and secure; and
6. reviewing our privacy and security practices from time to time.
No method of electronic transmission or storage is completely secure. We cannot guarantee the absolute security of information transmitted to or from our website.
10. Retention of personal information
We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to:
1. respond to enquiries;
2. manage client, supplier, or project relationships;
3. maintain business records;
4. comply with legal, accounting, insurance, and regulatory obligations;
5. resolve disputes; and
6. protect our legal rights and interests.
When personal information is no longer required, we will take reasonable steps to destroy it, delete it, or de-identify it, subject to our legal and business record-keeping obligations.
11. Accessing and correcting your personal information
You may request access to personal information we hold about you.
You may also ask us to correct personal information if you believe it is inaccurate, out of date, incomplete, irrelevant, or misleading.
To make a request, please contact us at hello@hendersonandco.com.au.
We may need to verify your identity before responding. In some circumstances, we may refuse access or correction where permitted by law. If we refuse a request, we will provide reasons where reasonable and legally appropriate.
APP 1 guidance states that a privacy policy should explain how individuals can access and seek correction of their personal information.
12. Anonymity and pseudonymity
Where lawful and practicable, you may interact with us anonymously or using a pseudonym.
However, in many circumstances, we will need your name and contact details to respond to an enquiry, assess a project, provide services, prepare proposals, or manage an ongoing relationship.
13. Third-party websites
Our website may contain links to third-party websites, platforms, social media pages, or resources.
We are not responsible for the privacy practices, content, or security of third-party websites. You should review the privacy policies of those third parties before providing personal information to them.
14. Privacy complaints
If you have a question, concern, or complaint about how we handle your personal information, please contact us at:
Henderson & Co Projects Pty Ltd
ABN: 17 656 762 908
Address: 1.10/46a Macleay St, Potts Point NSW 2011
Email: hello@hendersonandco.com.au
Please include enough information for us to understand and respond to your concern.
We will aim to respond to privacy complaints within a reasonable period.
If you are not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner. The OAIC is the Australian regulator responsible for privacy rights and the Australian Privacy Principles.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time by publishing an updated version on our website.
The updated Privacy Policy will apply from the date it is published, unless stated otherwise.
16. Contact us
For any privacy-related enquiries, please contact:
Henderson & Co Projects Pty Ltd
ABN: 17 656 762 908
Address: 1.10/46a Macleay St, Potts Point NSW 2011
Email: hello@hendersonandco.com.au
