Privacy policy
Bygreen (ABN 55 168 789 535) (we, us or our) is committed to protecting your personal information. This Privacy Policy outlines how we collect, hold, use and disclose personal information when you interact with us, including on our website. This policy is designed in accordance with the Privacy Act 1988 (Cth).
The information we collect
We may collect the following classes of personal information:
- Identity Data: your name, date of birth and gender
- Contact Data: email address, phone number, mailing address
- Financial Data: bank account or payment card details (via third-party payment processors)
- Transaction Data: details of products or services purchased, returned or enquired about
- Technical and Usage Data: IP address, browser type, device information, page views, session statistics, cookie identifiers, geolocation data and system logs for security monitoring
- Profile Data: account username and password, order history, saved preferences and subscriptions
- Interaction Data: survey responses, contest entries, event registrations, customer support requests and chat transcripts
- Marketing and Communications Data: your preferences for receiving marketing communications from us
- Professional Data: for job applicants, your resume, qualifications and references
How we collect personal information
We obtain information through various methods:
- Direct interactions when you contact us face-to-face, by phone, email or via our website forms
- Automated technologies when you access our websites, including cookies, analytics tools and tracking pixels
- Social login providers (for example, Google or Facebook OAuth), where you choose to authenticate using an existing social media account
- Third parties, such as social media platforms, email service providers (e.g. Klaviyo, HubSpot), marketing partners and publicly available registers
- Publicly available sources, for example, ASIC and social media profiles
Cookies & Tracking Technologies
We use cookies and similar technologies to enhance your experience and support analytics, security and marketing:
|
Category |
Purpose |
Examples & Duration |
Your Choices |
|
Strictly Necessary |
Enable core website functionality |
Session cookies (expire when you close your browser) |
Cannot be disabled; required for site operations |
|
Preferences |
Remember language, region and display settings |
Cookiebot “pref” (1 year) |
Manage via Cookie Settings in the footer or browser settings |
|
Statistics |
Understand site usage and performance |
Google Analytics 4 (_ga, 2 years) |
Opt-out via Google Analytics Opt-out Browser Add-on |
|
Marketing & Retargeting |
Build audiences, deliver targeted ads |
Facebook Pixel (180 days), LinkedIn Insight (90 days) |
Opt-out at Facebook Ad Preferences or Google Ads Settings; manage Cookie Settings |
Why we collect, hold, use and disclose personal information
|
Purpose |
Personal Information Types |
|
To provide you with access to our websites and portals |
Identity Data, Contact Data |
|
To manage your orders, subscriptions and event bookings |
Identity Data, Contact Data, Transaction Data |
|
To communicate with you about enquiries or support |
Identity Data, Contact Data, Profile Data, Interaction Data |
|
For internal records, billing and invoicing |
Identity Data, Contact Data, Financial Data, Transaction Data |
|
For analytics, market research and business development |
Technical and Usage Data, Profile Data |
|
For marketing, promotional communications and lead nurturing |
Contact Data, Marketing and Communications Data, Profile Data |
|
To run promotions, competitions and referral programs |
Identity Data, Contact Data, Profile Data, Interaction Data |
|
To assess job applications |
Identity Data, Contact Data, Professional Data |
|
To build audiences and retarget users across devices |
Technical and Usage Data, Marketing and Communications Data |
|
To comply with legal obligations |
All relevant Personal Information |
Disclosure to third parties
We may disclose your personal information to:
- Related entities, employees, contractors and service providers
- Payment processors and financial institutions
- Delivery and logistics partners
- Email service providers (e.g. Klaviyo, HubSpot)
- Marketing, analytics and advertising services (including, but not limited to, Google Analytics, Facebook, LinkedIn)
- On-site chat and support platforms (such as Intercom, Zendesk)
- Professional advisers, auditors and insurers
- Government agencies, courts or law enforcement authorities when required by law
- Any other third party where you have given consent or as permitted by law
Overseas disclosure
While we store personal information in Australia, some service providers we engage operate overseas. We will only transfer personal data abroad in accordance with the Australian Privacy Principles and applicable data protection laws, using appropriate safeguards such as standard contractual clauses.
Your rights and controlling your personal information
- You can choose not to provide personal information, though this may limit our ability to serve you.
- You may request access to or correction of your personal information. We will respond within a reasonable timeframe and advise you of any fees.
- You can opt out of marketing communications at any time by following the unsubscribe link or contacting us directly.
- You can control cookie categories via the Cookie Settings link in our website footer.
- You may withdraw consent for any processing based on consent, without affecting lawful processing prior to withdrawal.
- If you believe we have breached your privacy rights, you may lodge a complaint with us or with the Office of the Australian Information Commissioner.
Storage and security
We implement physical, electronic and managerial safeguards to protect your personal information from misuse, interference, loss, unauthorised access, modification and disclosure. We retain system logs, including IP addresses and user-agent strings, for up to 90 days to monitor for malicious activity. However, no internet transmission can be guaranteed completely secure.
Data breaches
In the event of a data breach likely to cause serious harm, we will comply with the Notifiable Data Breaches (NDB) scheme, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC).
Complaints
If you believe we have breached your privacy, please contact us. We will investigate and respond within a reasonable timeframe.
If you are not satisfied, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
- Website: www.oaic.gov.au
- Phone: 1300 363 992
Changes to this Privacy Policy
We may update this Privacy Policy by posting the revised version on our website. Please review it regularly to stay informed of any changes.
Contact us
Bygreen
7 Flinders Parade, North Lakes, Queensland 4059
Email: sales@bygreen.com.au