Privacy Policy
Last updated: 12 October 2026
This Privacy Policy explains how personal information may be handled when you visit the Alboriessa Novia web design education website or contact us about its courses and resources. Our current website is primarily informational: it has no user registration, checkout, account dashboard or enquiry submission form. We aim to be transparent about what the site itself does and what may occur if you contact us by another channel.
1. Who is responsible
The operator and point of contact for privacy enquiries is . Our published address is . You can reach us by email at info@alboriessanovia.com , or by telephone at +64 7 482 6193 . We describe our New Zealand organisation as the controller for personal data we determine the purposes and means of processing, where that legal concept applies.
2. Scope of this notice
This notice covers visitors to our publicly accessible pages about curriculum, learning philosophy, design exercises, company information and legal matters, together with enquiries that you send directly to us. It does not govern independent sites that we link to, including standards and developer-reference resources. Those providers publish their own privacy notices. The services and data practices described here reflect the visible functionality of this version of the website.
3. Information you choose to provide
The website does not ask you to create a login or submit information through a web form. If you separately write to our displayed email address, call us or correspond with us by another channel, we may receive your name, contact details, message and details needed to understand your educational enquiry. Please send only information necessary for that purpose, and avoid sharing health, financial or other highly sensitive data unless we specifically request it for a legitimate and lawful reason.
4. Technical access information
Even a static website can involve ordinary technical records at the hosting or network layer. Depending on the hosting arrangements, requests may generate an IP address, requested path, time of access, browser or device information, HTTP status, and security diagnostics. Such records may be needed to deliver content, troubleshoot faults, prevent abuse and maintain infrastructure security. We do not claim that this site deploys a specific analytics vendor or monitoring product when none is included in its frontend code.
5. Purposes of processing
We may use information that you provide to respond to questions about web design learning, clarify published course descriptions, handle accessibility or rights requests, manage genuine correspondence and maintain a secure and functional site. Technical access records, where generated, are used for delivering the requested pages, maintaining availability and investigating errors or misuse. We do not sell visitor data, operate behavioural advertising based on this website or create a user profile from activity on these pages.
6. Legal bases where the GDPR applies
Where the EU or UK GDPR applies to a particular activity, processing may rely on legitimate interests in responding to enquiries and securing the website (Article 6(1)(f)), steps taken at your request before entering into a separate agreement (Article 6(1)(b)), or compliance with a legal obligation (Article 6(1)(c)). Consent under Article 6(1)(a) would be sought separately before optional processing that legally requires it. We assess the applicable basis against the actual activity rather than treating all site visits as consent.
7. New Zealand privacy requirements
For personal information handled by the New Zealand operator, the Privacy Act 2020 and the Information Privacy Principles may apply. These principles address, among other things, collection for a lawful purpose, transparency, secure storage, access and correction, retention and disclosure. You may ask to access or correct information we hold about you, subject to relevant exceptions. New Zealand residents may raise unresolved concerns with the Office of the Privacy Commissioner.
8. Cookies, storage and analytics
The website’s current frontend does not include advertising tags, third-party web analytics, embedded social-media widgets or a visitor profiling system. The navigation and frequently asked questions operate in the browser without requiring a tracking cookie. Some browsers or hosting environments can still use necessary network-level features or caching. Our Cookie Policy provides additional detail. If optional tracking is introduced later, we will update these documents and implement appropriate consent controls where required.
9. Service providers and recipients
Infrastructure providers that deliver or host a website may act as processors or independent controllers for limited technical records, according to their services and agreements. If we use an email or telephone provider to answer an enquiry, that provider may process information necessary to transmit the communication. Access inside the organisation should be limited to persons who need it for a legitimate purpose. We do not publish personal enquiries to the website or share them with marketing brokers through this static frontend.
10. International transfers
Because our organisation is based in New Zealand, an enquiry from outside New Zealand may be received and handled there. Service infrastructure or correspondence systems may also operate in other countries. Where GDPR transfer rules apply, we take account of an applicable adequacy mechanism or other appropriate safeguards for the particular transfer. New Zealand’s own international disclosure requirements may also be relevant. Contact us for more information about a transfer that affects your information.
11. Retention and deletion
We keep correspondence only for as long as reasonably necessary to address the enquiry, maintain a useful record of what was agreed, resolve a dispute or meet an applicable legal obligation. The exact period depends on the nature of the correspondence and any separately agreed services. Technical records, if created by a hosting provider, follow its configured retention and security settings. Once information is no longer needed and no duty requires preservation, it should be deleted or anonymised using reasonable processes.
12. Security practices
We take reasonable steps to protect personal information against unauthorised access, alteration and loss, including by limiting access to correspondence and maintaining site resources. No internet transmission or storage method is entirely risk-free. You should avoid submitting passwords, payment-card numbers or unnecessary identity documents in general enquiries. If we become aware of a privacy incident, we assess whether notification or other action is required by relevant law.
13. Your rights and choices
Depending on the law that applies, you may request access, correction, erasure, restriction of processing or portability, object to processing based on legitimate interests, and withdraw consent where consent is actually the legal basis. These rights are subject to statutory conditions and exceptions. In New Zealand you may request access to and correction of personal information under the Privacy Act 2020. We may need sufficient information to verify that a request concerns you, but will not request more than is necessary.
14. Complaints and regulatory authorities
If you are concerned about the handling of your information, please contact us first with enough detail to investigate. You may have the right to complain to the New Zealand Office of the Privacy Commissioner or, where relevant, a supervisory authority in the EEA or United Kingdom. We will consider requests under the law that actually governs the processing. No part of this notice limits a right that the law gives you.
15. Children and educational audiences
The pages provide general design-learning information and do not currently offer accounts or collect children’s details through a form. Anyone contacting us about a child should share only information necessary for the enquiry and should have appropriate authority to do so. We do not knowingly build advertising profiles of children using this website. If a separate course later requires age-related information, the relevant collection and notices must be explained at that time.
16. Changes and further questions
We may amend this notice when legal requirements or the actual website and correspondence arrangements change. The revision date at the top identifies the version. We encourage visitors to review it when making an enquiry. For a specific request or privacy concern, use the contact details above or see the Contact page . We will aim to respond in a reasonable period, having regard to applicable statutory deadlines.