Privacy policy

This policy explains how Spring Park Nursery (ABN 26 499 529 124) collects, uses and protects your personal information. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).

What we collect

We collect only what we need to supply your plants and run our business. This may include:

your name, email address, phone number, and delivery and billing addresses;
your orders, pre-orders, back-in-stock requests and payment records (we don't see or keep full card numbers);
messages and photos you send us;
your marketing preferences, if you join our mailing list; and
how you use our website, such as pages viewed, device and browser, approximate location and the site that referred you.

You can browse our website and ask general questions without telling us who you are, but we need your details to fill an order.

How we collect it

Mostly from you: when you order online, by phone or in person, create an account, contact us or join our mailing list. Some comes from our service providers, such as payment confirmations and delivery tracking, and from cookies on our website.

How we use it

To process, prepare and deliver your orders and pre-orders.
To answer your questions and handle claims under our Refund policy.
To meet our biosecurity, tax and accounting obligations.
To send you marketing emails, if you've agreed. Every email has an unsubscribe link.
To understand how our website is used, and to improve it and our advertising.
To protect against fraud.

Who we share it with

We share personal information only as needed for these purposes, with:

Shopify, which runs our website, checkout and customer records, and the apps we use with it for pre-orders and shipping;
payment providers, including Shopify Payments, PayPal and Afterpay;
Australia Post, to deliver your order;
state biosecurity authorities, when an interstate order needs an inspection or certificate showing your name and delivery address;
providers of the email, accounting, software and IT services we use to run our business, such as Microsoft and Xero;
Google and Meta, for website analytics and advertising; and
our professional advisers, and government agencies where the law requires it.

We don't sell your personal information.

Information stored overseas

Some of these providers store or process information outside Australia, including in the United States, Canada and Europe, and other countries where they or their subcontractors operate. We use established providers and take reasonable steps to make sure they protect your information.

Cookies and advertising

Our website uses cookies to work properly (for example, to keep your cart), to measure traffic and, through Google and Meta, to show you our ads on other sites. You can block or delete cookies in your browser, though parts of the site may not work without them. You can turn off personalised ads in your Google and Meta settings.

Automated decisions

Some of our systems use your information to help with decisions about your order:

Shopify's fraud checks use your order details, such as your name, addresses, payment details and device information, to flag orders that may be fraudulent. A person reviews any flagged order before we decide whether to cancel it.
Our checkout uses your delivery address to work out shipping costs and whether a plant can legally be sent to your state. This happens automatically: if a plant can't be sent to your address, checkout won't offer delivery for it.
When you make a refund or replacement claim, we may use software to help review your order details, messages and photos and to draft our reply. A person decides the outcome.

Keeping it safe

We take reasonable steps to protect your information from misuse, loss and unauthorised access. Card payments are handled by our payment providers. We keep information only as long as we need it, including for tax, accounting and biosecurity records, and then delete or de-identify it.

If a data breach is likely to cause you serious harm, we'll tell you and, where required, the Office of the Australian Information Commissioner.

Seeing and correcting your information

You can ask to see or correct the personal information we hold about you. Please contact us; we'll confirm your identity and respond within 30 days. There's no charge. If we can't give you access, we'll explain why. You can also update your details in your account.

Questions and complaints

If you have a question or concern about how we've handled your information, contact us and we'll respond within 30 days. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.