Privacy Policy

Last updated: 14 May 2026

This Privacy Policy explains how Busy Bee Florist (ABN 29 696 179 841), of 166 Clayton Road, Clayton, Victoria 3168 ("we", "us", "our") collects, uses, stores and discloses personal information when you visit our website www.busybeeflorist.com.au, place an order, or contact us.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information We Collect

1.1 Order information

When you place an order through our website, we collect:

• Your name and email address (the sender)
• Your phone number
• The recipient's name, phone number and delivery address (street, suburb, postcode)
• Your billing name, company name (optional), and billing address (if different from delivery)
• The card message you would like delivered with the flowers
• Any special delivery instructions you provide
• Your chosen delivery or pickup date and time
• Order details (products purchased, prices, delivery fee, total)

1.2 Payment information

Payments are processed by PayPal. We do not see, collect, or store your credit card or debit card details. After a successful payment, PayPal provides us with a PayPal Order ID and a Payer ID, which we store with your order so we can reconcile the transaction and process refunds if needed. PayPal's handling of your information is governed by its own privacy policy: paypal.com/au/legalhub/privacy-full.

1.3 Contact form

If you send us a message through our Contact page, we collect:

• Your name
• Your email address
• The contents of your message
• Your IP address and browser information (for spam prevention)

Our contact form is protected by Google reCAPTCHA v3, which analyses signals about your browser session to detect automated submissions. Use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service.

1.4 Automatically collected information

When you browse our website, we automatically collect:

• Your IP address
• Your browser type and version (user agent)
• The pages you visit on our site, and the time and date of your visit
• The referring website (the page you came from)
• Actions you take on the site (for example, viewing a product, adding to cart, starting checkout)

This information is recorded against a randomly generated session ID stored in a cookie on your device. We use it to understand how visitors use the site, to improve the site's design and product offering, and to diagnose technical problems.

1.5 Error logs

If a technical error occurs while you are using the site, we may record diagnostic information including your IP address, browser type, the page you were on, the time of the error, and a technical description of what went wrong. This is used solely to identify and fix bugs.

2. Cookies and Similar Technologies

We use a small number of cookies. The cookies we set are:

• .BusyBeeFlorist.Session — an essential cookie that keeps your shopping cart and delivery selections during your visit. Without it, the checkout process will not work.
• AnalyticsSessionId — a session identifier (valid for 30 minutes) used to group your activity on the site for the analytics described in section 1.4.
• .BusyBeeFlorist.Auth — an authentication cookie set only when a staff member logs into the admin area. It is not set for regular customers.

Google reCAPTCHA and embedded Google Maps may also set their own cookies on the Contact page. Embedded fonts and stylesheets are loaded from Google Fonts and Cloudflare's content delivery network; those providers may receive your IP address when their resources load.

2.1 Advertising and marketing analytics

We may use the Meta (Facebook) Pixel on our website to measure the performance of advertising campaigns we run on Facebook and Instagram. The Meta Pixel records anonymised events such as page views, product views, items added to cart, checkout starts, and completed purchases (including the order value and currency). It does not collect your name, address, or payment details.

The information collected by the Meta Pixel is shared with Meta Platforms, Inc. and used to measure and optimise our advertising. You can manage how Meta uses this data for advertising in your Facebook ad preferences at facebook.com/settings?tab=ads. Meta's handling of personal information is described in its Privacy Policy.

2.2 Managing cookies

Most browsers let you block or delete cookies through their settings. Please note that if you block our essential session cookie, the shopping cart and checkout will not function.

3. How We Use Your Information

We use the personal information we collect to:

• Process and fulfil your order, including arranging delivery to the recipient
• Send order confirmations, invoices, and updates about your order
• Respond to enquiries you send through our contact form, phone, or email
• Detect and prevent fraud, spam, and abuse of our website
• Improve the design, performance, and product range of our website
• Measure the effectiveness of advertising campaigns we run
• Comply with our legal obligations, including tax and accounting record-keeping

4. Who We Share Your Information With

We do not sell your personal information. We share it only with the following parties, and only to the extent needed:

• PayPal — to process payment for your order.
• Delivery partners and couriers — to deliver flowers to the recipient address you provide.
• Google — reCAPTCHA on our contact form, Google Maps on our Contact page, and Google Fonts. Google may receive your IP address and browser information.
• Meta Platforms, Inc. — advertising measurement data via the Meta Pixel, where in use (see section 2.1).
• Our website hosting and email providers — to operate the website and send transactional emails.
• Law enforcement, regulators, or other parties — where we are required or permitted by law to do so.

Our own database and website are hosted in Australia, so the personal information you provide directly to us is stored in Australia. However, some of the third-party providers listed above (for example, PayPal, Google and Meta) may store or process the information we share with them overseas, including in the United States and other countries. By using our website, you consent to this transfer.

5. How Long We Keep Your Information

We retain order records, invoices and related customer information indefinitely. We do this so that we can:

• Provide ongoing service to repeat customers (for example, recalling past arrangements or recipient addresses)
• Resolve any disputes or queries about past orders, no matter when they arise
• Meet our tax, accounting and other legal record-keeping obligations
• Maintain accurate historical sales records for the business

Contact form messages are typically kept for up to two (2) years after the enquiry is resolved. Website analytics events and error logs are kept for up to two (2) years, after which they are deleted or anonymised.

If you would like us to delete the personal information we hold about you, please contact us using the details in section 10. We will do so unless we are required to keep it by law (for example, tax records).

6. How We Protect Your Information

We take reasonable steps to protect your personal information, including:

• Serving our website over HTTPS (encrypted in transit)
• Hosting our website and storing customer data on servers located in Australia
• Storing data in a secured database accessible only to authorised staff
• Using PayPal so that we never receive or store your card details
• Using cookies that are marked HttpOnly and Secure where appropriate
• Limiting access to customer information to staff who need it to fulfil orders

No method of transmission over the internet or electronic storage is completely secure. While we take reasonable steps to protect your information, we cannot guarantee its absolute security.

7. Your Rights

Under the Australian Privacy Principles you have the right to:

• Request access to the personal information we hold about you
• Request that we correct information you believe is inaccurate or out of date
• Ask us to delete information we no longer need to keep
• Withdraw your consent for marketing-related tracking at any time
• Lodge a complaint about how we have handled your personal information with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992

To exercise any of these rights, please contact us using the details in section 10. We may need to verify your identity before acting on your request. We will respond within a reasonable time, usually within 30 days.

8. Children's Privacy

Our website and services are intended for use by adults. We do not knowingly collect personal information from children under the age of 16. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, the services we offer, or our legal obligations. When we do, we will update the "Last updated" date at the top of this page. Significant changes will be highlighted on the website.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us using the details above.