Privacy Policy
LAST UPDATED: 25 SEPTEMBER 2026
Humble Bee Bio Limited (New Zealand) and Humble Bee Bio Pty Limited (Australia) (collectively, “Humble Bee Bio,” “we,” “us,” or “our”) are committed to protecting your privacy and handling personal information transparently and securely. This Privacy Policy explains how we collect, use, disclose, and protect your personal information, and what rights you have in relation to it.
If we make material changes to this Policy, we will update the “Last updated” date above and, where changes are significant, take reasonable steps to notify you (for example, via email to registered customers or a notice on our website).
Scope & Covered Entities
This Privacy Policy applies to personal information collected across our main website (humblebee.co.nz) and our regional online storefronts:
This Privacy Policy applies to personal information collected across our main website (humblebee.co.nz) and our regional online storefronts:
• New Zealand Storefront: sendd.store/silkdoctrine-nz
• Australia Storefront: sendd.store/silkdoctrine-au
• New Zealand Storefront: sendd.store/silkdoctrine-nz
• Australia Storefront: sendd.store/silkdoctrine-au
Regardless of which storefront you browse or purchase from, your personal information is collected, controlled, and managed by Humble Bee Bio in accordance with the New Zealand Privacy Act 2020 and the Australian Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs).
This Policy applies to all individuals interacting with our website and storefronts, including customers, prospective customers, and website visitors. A separate statement applies if we knowingly collect information from children (see Section 15).
Regardless of which storefront you browse or purchase from, your personal information is collected, controlled, and managed by Humble Bee Bio in accordance with the New Zealand Privacy Act 2020 and the Australian Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs).
This Policy applies to all individuals interacting with our website and storefronts, including customers, prospective customers, and website visitors. A separate statement applies if we knowingly collect information from children (see Section 15).
2. Controller vs. Processor Relationship
To power our online storefronts, we utilise Sendd as our e-commerce platform and infrastructure provider.
To power our online storefronts, we utilise Sendd as our e-commerce platform and infrastructure provider.
• Humble Bee Bio acts as the Data Controller - we determine why and how your personal data is collected and used.
• Sendd acts as a Data Processor - it stores and processes your data on our behalf, strictly in accordance with our operational instructions and data protection commitments.
• Humble Bee Bio acts as the Data Controller - we determine why and how your personal data is collected and used.
• Sendd acts as a Data Processor - it stores and processes your data on our behalf, strictly in accordance with our operational instructions and data protection commitments.
We require all processors and subprocessors to handle personal information only as instructed and to maintain appropriate security safeguards.
We require all processors and subprocessors to handle personal information only as instructed and to maintain appropriate security safeguards.
3. Information We Collect
We collect personal information necessary to operate our platform, process transactions, and fulfil orders across New Zealand and Australia, including:
Contact Information: Name, email address, phone number, billing address, and shipping address.
Order & Transaction Data: Items purchased, store region selected (NZ or AU), order history, and fulfilment preferences.
Technical & Usage Data: IP address, device and browser information, usage activity and session behaviour, and interaction data collected via cookies and performance logs.
Payment Data: Payment transactions are processed directly by our secure payment gateway provider (Stripe). Humble Bee Bio does not collect, receive, or store full credit card details or sensitive payment credentials on our systems. All card processing is encrypted in accordance with PCI-DSS standards.
Correspondence: Information you provide when contacting customer support, submitting inquiries, or leaving product reviews or feedback.
We collect personal information necessary to operate our platform, process transactions, and fulfil orders across New Zealand and Australia, including:
Contact Information: Name, email address, phone number, billing address, and shipping address.
Order & Transaction Data: Items purchased, store region selected (NZ or AU), order history, and fulfilment preferences.
Technical & Usage Data: IP address, device and browser information, usage activity and session behaviour, and interaction data collected via cookies and performance logs.
Payment Data: Payment transactions are processed directly by our secure payment gateway provider (Stripe). Humble Bee Bio does not collect, receive, or store full credit card details or sensitive payment credentials on our systems. All card processing is encrypted in accordance with PCI-DSS standards.
Correspondence: Information you provide when contacting customer support, submitting inquiries, or leaving product reviews or feedback.
Sensitive information
We do not intentionally collect sensitive information (such as health information) as part of normal order processing. If you voluntarily disclose sensitive information to us - for example, describing a skin condition in a customer support message or product inquiry - we will treat this information with additional care, only use it for the purpose you provided it, and will not use it for marketing without your separate, explicit consent.
We do not intentionally collect sensitive information (such as health information) as part of normal order processing. If you voluntarily disclose sensitive information to us - for example, describing a skin condition in a customer support message or product inquiry - we will treat this information with additional care, only use it for the purpose you provided it, and will not use it for marketing without your separate, explicit consent.
4. How We Collect Information
We collect information both directly from you and indirectly through automated technologies. Directly, when you:
We collect information both directly from you and indirectly through automated technologies. Directly, when you:
• Access or navigate our main website or regional storefronts.
• Select a regional storefront (NZ or AU), add items to your cart, and place an order.
• Register for a customer account or subscribe to marketing communications.
• Submit customer support requests or product inquiries.
• Access or navigate our main website or regional storefronts.
• Select a regional storefront (NZ or AU), add items to your cart, and place an order.
• Register for a customer account or subscribe to marketing communications.
• Submit customer support requests or product inquiries.
Indirectly, through:
Indirectly, through:
• Cookies, pixels, and similar tracking technologies deployed on our website and storefronts (see Section 9).
• Analytics and advertising partners such as Google Analytics and Meta Pixel, which collect technical and behavioural data on our behalf as you interact with our site.
• Our hosting and infrastructure providers, who may log technical data (e.g., IP address, device type) as part of standard operations.
• Cookies, pixels, and similar tracking technologies deployed on our website and storefronts (see Section 9).
• Analytics and advertising partners such as Google Analytics and Meta Pixel, which collect technical and behavioural data on our behalf as you interact with our site.
• Our hosting and infrastructure providers, who may log technical data (e.g., IP address, device type) as part of standard operations.
You may choose to interact with us anonymously or under a pseudonym for general product inquiries where this is lawful and practicable (for example, browsing our site or asking a general question). However, we will generally need to identify you to process an order, manage an account, or respond to a specific support request.
You may choose to interact with us anonymously or under a pseudonym for general product inquiries where this is lawful and practicable (for example, browsing our site or asking a general question). However, we will generally need to identify you to process an order, manage an account, or respond to a specific support request.
5. How We Use Your Information
We use your personal information to:
We use your personal information to:
• Process, fulfil, and deliver purchases placed through our NZ and AU storefronts.
• Communicate order status updates, delivery tracking, and customer support responses.
• Deliver localised marketing and promotional updates (where you have explicitly opted in).
• Prevent fraud, maintain platform security, and analyse site performance.
• Comply with tax, legal, and accounting obligations in New Zealand and Australia.
• Process, fulfil, and deliver purchases placed through our NZ and AU storefronts.
• Communicate order status updates, delivery tracking, and customer support responses.
• Deliver localised marketing and promotional updates (where you have explicitly opted in).
• Prevent fraud, maintain platform security, and analyse site performance.
• Comply with tax, legal, and accounting obligations in New Zealand and Australia.
We will only use personal information for a purpose you would reasonably expect, or as otherwise permitted or required by law.
We will only use personal information for a purpose you would reasonably expect, or as otherwise permitted or required by law.
6. Automated Decision-Making
Some of our fraud-prevention, security, and platform-performance processes (including those run by our infrastructure partners) use automated systems to flag or assess activity - for example, identifying potentially fraudulent transactions.
Some of our fraud-prevention, security, and platform-performance processes (including those run by our infrastructure partners) use automated systems to flag or assess activity - for example, identifying potentially fraudulent transactions.
• Automated flags of this kind may delay or affect an order, but decisions with a material impact on you (such as cancelling an order or restricting an account) are reviewed by a member of our team before being finalised, or are subject to review on request.
• If you believe an automated process has affected you unfairly, you can contact us (Section 16) to request a review.
• Automated flags of this kind may delay or affect an order, but decisions with a material impact on you (such as cancelling an order or restricting an account) are reviewed by a member of our team before being finalised, or are subject to review on request.
• If you believe an automated process has affected you unfairly, you can contact us (Section 16) to request a review.
7. Third-Party Systems & Overseas Data Transfers
To operate our e-commerce business, your information is processed through trusted third-party service providers. Because these providers operate globally, your personal information may be transferred to and stored in countries other than the one in which you reside, including:
To operate our e-commerce business, your information is processed through trusted third-party service providers. Because these providers operate globally, your personal information may be transferred to and stored in countries other than the one in which you reside, including:
• New Zealand (our parent entity and primary operations)
• Australia (hosting and cloud infrastructure used by our providers)
• United States (hosting and cloud infrastructure used by our providers)
• Ireland/European Union (hosting and cloud infrastructure used by our providers)
• New Zealand (our parent entity and primary operations)
• Australia (hosting and cloud infrastructure used by our providers)
• United States (hosting and cloud infrastructure used by our providers)
• Ireland/European Union (hosting and cloud infrastructure used by our providers)
We take reasonable steps to ensure that any overseas recipient is bound by obligations substantially similar to those under New Zealand and Australian privacy law - generally through data protection commitments, or because the recipient is itself subject to a comparable privacy regime (such as the EU GDPR or equivalent frameworks maintained by providers like Google and Stripe).
We take reasonable steps to ensure that any overseas recipient is bound by obligations substantially similar to those under New Zealand and Australian privacy law - generally through data protection commitments, or because the recipient is itself subject to a comparable privacy regime (such as the EU GDPR or equivalent frameworks maintained by providers like Google and Stripe).
Service Provider
Service Provided
Data Handled
Primary Location(s)
Policy
Sendd
Primary e-commerce platform, store hosting, & order management engine
Customer accounts, purchase details, IP addresses, and shipping data
Encrypted card verification and transaction data
Stripe
Payment gateway & processing
Encrypted card verification and transaction data
United States, Global infrastructure
Go Sweet Spot
Shipping Provider
Order details and recipient details (name, address, email, phone)
New Zealand, Global infrastructure
Google Analytics
Website and store performance analytics
Anonymised device IDs, traffic metrics, and browsing behaviour
Global infrastructure
Meta Pixel
Advertising analytics, ad conversion tracking, and retargeting
IP addresses, device identifiers, browsing actions, and cart activity
United States, Global infrastructure
Mailchimp (Intuit)
Newsletter & regional email dispatch
Contact names and email addresses (opted-in users only)
United States
Framer
Main website hosting infrastructure
Non-identifying operational log data (IP address, device type, country, page metrics), and contact form submissions
United States
8. AI, Automated Processing & Data Ownership
Data ownership and ad targeting: Humble Bee Bio retains ownership of customer relationship data. We use advertising tools such as Meta Pixel to measure campaign effectiveness and deliver relevant ads on social media platforms (such as Facebook and Instagram). Meta may correlate your website visit with your social media profile in accordance with Meta’s privacy policies. You can opt out of interest-based ads via your social media account settings.
AI safeguards: If automated systems or AI tools are used by us or our infrastructure partners for fraud detection, platform performance, or security analysis, your identifiable personal information will not be used to train generalised, publicly available AI models without your explicit, separate consent. “Generalised AI models” refers to broad-purpose machine learning models not built solely to operate our own store or services - for example, third-party foundation models offered commercially to other businesses. We may use aggregated or de-identified data to improve our own internal systems.
Data ownership and ad targeting: Humble Bee Bio retains ownership of customer relationship data. We use advertising tools such as Meta Pixel to measure campaign effectiveness and deliver relevant ads on social media platforms (such as Facebook and Instagram). Meta may correlate your website visit with your social media profile in accordance with Meta’s privacy policies. You can opt out of interest-based ads via your social media account settings.
AI safeguards: If automated systems or AI tools are used by us or our infrastructure partners for fraud detection, platform performance, or security analysis, your identifiable personal information will not be used to train generalised, publicly available AI models without your explicit, separate consent. “Generalised AI models” refers to broad-purpose machine learning models not built solely to operate our own store or services - for example, third-party foundation models offered commercially to other businesses. We may use aggregated or de-identified data to improve our own internal systems.
9. Cookies and Tracking
Our websites and Sendd storefronts use functional, analytical, and advertising tracking technologies (including cookies and tracking pixels like Meta Pixel) to:
Our websites and Sendd storefronts use functional, analytical, and advertising tracking technologies (including cookies and tracking pixels like Meta Pixel) to:
• Remember cart items and your selected store region (NZ vs. AU).
• Ensure secure operation and analyse overall site performance.
• Track conversion events and measure advertising performance across external platforms.
• Remember cart items and your selected store region (NZ vs. AU).
• Ensure secure operation and analyse overall site performance.
• Track conversion events and measure advertising performance across external platforms.
You can manage or block cookies through your browser settings, or adjust your preferences via platform ad settings (e.g., Meta’s ad preferences, Google’s ad settings). Disabling essential functional cookies may limit your ability to complete purchases. Non-essential analytics and advertising cookies are only set after you have had the opportunity to manage your preferences.
You can manage or block cookies through your browser settings, or adjust your preferences via platform ad settings (e.g., Meta’s ad preferences, Google’s ad settings). Disabling essential functional cookies may limit your ability to complete purchases. Non-essential analytics and advertising cookies are only set after you have had the opportunity to manage your preferences.
10. Direct Marketing
If you subscribe to updates, we may send you store news, product announcements, or regional promotions. You can opt out at any time by clicking the “unsubscribe” link at the bottom of any email or by contacting our support team (Section 16). We will not sell your personal information to third parties for their own marketing purposes.
If you subscribe to updates, we may send you store news, product announcements, or regional promotions. You can opt out at any time by clicking the “unsubscribe” link at the bottom of any email or by contacting our support team (Section 16). We will not sell your personal information to third parties for their own marketing purposes.
11. Data Security & Retention
Security: We and our infrastructure partners maintain industry-standard physical, technical, and administrative safeguards, including encryption in transit and at rest, access controls, and regular security review of our third-party providers. While no internet platform is completely immune to security risks, we maintain active safeguards aligned with modern data protection requirements.
Retention: We retain personal information only for as long as reasonably necessary for the purposes it was collected, including:
Security: We and our infrastructure partners maintain industry-standard physical, technical, and administrative safeguards, including encryption in transit and at rest, access controls, and regular security review of our third-party providers. While no internet platform is completely immune to security risks, we maintain active safeguards aligned with modern data protection requirements.
Retention: We retain personal information only for as long as reasonably necessary for the purposes it was collected, including:
• Order and transaction records: retained for 7 years to meet NZ and AU tax and accounting recordkeeping obligations.
• Customer account information: retained while your account remains active, and for 12 months/ years after closure or last activity, in case of returns, warranty claims, or legal requirements.
• Marketing contact details: retained until you unsubscribe or withdraw consent.
• Customer support correspondence: retained for 3 years to resolve disputes and improve service quality.
• Order and transaction records: retained for 7 years to meet NZ and AU tax and accounting recordkeeping obligations.
• Customer account information: retained while your account remains active, and for 12 months/ years after closure or last activity, in case of returns, warranty claims, or legal requirements.
• Marketing contact details: retained until you unsubscribe or withdraw consent.
• Customer support correspondence: retained for 3 years to resolve disputes and improve service quality.
Once information is no longer needed, we securely delete or de-identify it.
Once information is no longer needed, we securely delete or de-identify it.
12. Data Breach Notification
We take data security seriously and have processes in place to detect, respond to, and manage data breaches.
If we become aware of a breach involving personal information that has caused, or is likely to cause, serious harm to affected individuals (a “notifiable breach”), we will:
We take data security seriously and have processes in place to detect, respond to, and manage data breaches.
If we become aware of a breach involving personal information that has caused, or is likely to cause, serious harm to affected individuals (a “notifiable breach”), we will:
• Assess the breach promptly to determine its scope and severity.
• Notify the relevant regulator where required - the Office of the Privacy Commissioner (New Zealand, under the Privacy Act 2020) and/or the Office of the Australian Information Commissioner (Australia, under the Notifiable Data Breaches scheme).
• Notify affected individuals as soon as practicable, including a description of the breach, the information involved, and steps we recommend you take to protect yourself.
• Take reasonable steps to contain the breach and prevent further harm.
• Assess the breach promptly to determine its scope and severity.
• Notify the relevant regulator where required - the Office of the Privacy Commissioner (New Zealand, under the Privacy Act 2020) and/or the Office of the Australian Information Commissioner (Australia, under the Notifiable Data Breaches scheme).
• Notify affected individuals as soon as practicable, including a description of the breach, the information involved, and steps we recommend you take to protect yourself.
• Take reasonable steps to contain the breach and prevent further harm.
13. Accessing and Correcting Your Information
Under New Zealand and Australian privacy laws, you have the right to:
Under New Zealand and Australian privacy laws, you have the right to:
• Request access to the personal information we hold about you.
• Ask us to correct, update, or delete inaccurate, out-of-date, or incomplete information.
• Request access to the personal information we hold about you.
• Ask us to correct, update, or delete inaccurate, out-of-date, or incomplete information.
14. Privacy Complaints & Regulatory Recourse
If you have concerns about how your personal data has been handled, please contact us first (Section 16) so we can investigate and resolve the issue. We aim to acknowledge complaints within 5 working days and resolve them within 20 working days where possible.
If you remain unsatisfied with our response, you may lodge a complaint with your regional privacy regulator:
If you have concerns about how your personal data has been handled, please contact us first (Section 16) so we can investigate and resolve the issue. We aim to acknowledge complaints within 5 working days and resolve them within 20 working days where possible.
If you remain unsatisfied with our response, you may lodge a complaint with your regional privacy regulator:
• New Zealand residents: Office of the Privacy Commissioner (privacy.org.nz)
• Australian residents: Office of the Australian Information Commissioner (oaic.gov.au)
• New Zealand residents: Office of the Privacy Commissioner (privacy.org.nz)
• Australian residents: Office of the Australian Information Commissioner (oaic.gov.au)
15. Children’s Information
Our products and services are intended for adults. We do not knowingly collect personal information from children under the age of 18 without the consent of a parent or guardian. If we become aware that we have inadvertently collected personal information from a child without appropriate consent, we will take reasonable steps to delete it. If you believe we may have collected information from a child, please contact us using the details in Section 16.
Our products and services are intended for adults. We do not knowingly collect personal information from children under the age of 18 without the consent of a parent or guardian. If we become aware that we have inadvertently collected personal information from a child without appropriate consent, we will take reasonable steps to delete it. If you believe we may have collected information from a child, please contact us using the details in Section 16.
16. Contact Us
For any privacy-related inquiries, data access or correction requests, or issues regarding either of our regional storefronts, please contact us at:
Email: info@humblebee.co.nz
Postal Address: Level 2, 57 Willis Street, Wellington 6011, New Zealand
For any privacy-related inquiries, data access or correction requests, or issues regarding either of our regional storefronts, please contact us at:
Email: info@humblebee.co.nz
Postal Address: Level 2, 57 Willis Street, Wellington 6011, New Zealand
Humble Bee Bio is based in beautiful Wellington / Te Whanganui-a-Tara, NZ.
Copyright © 2026 Humble Bee Bio. All rights reserved.
Humble Bee Bio is based in beautiful Wellington / Te Whanganui-a-Tara, NZ.
Copyright © 2026 Humble Bee Bio. All rights reserved.