Legal

Privacy Policy

Last updated: January 2026

BeanHub Australia Pty Ltd (ACN 694 445 344) ("BeanHub", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website beanhub.com.au and our services.

We have adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). A copy of the Australian Privacy Principles may be obtained from the website of The Office of the Australian Information Commissioner at www.oaic.gov.au.

Section 1

Information We Collect

We may collect the following types of personal information:

Account Information

  • Name and email address
  • Password (encrypted)
  • Account preferences

Shipping & Contact Details

  • Delivery address
  • Phone number (for delivery notifications)

Order & Purchase Data

  • Order history and transaction details
  • Products purchased and quantities
  • Delivery preferences

Payment Information

Payment processing is handled securely by Stripe. We do not store your credit card numbers, CVV, or other sensitive payment details on our servers. We may retain the last four digits of your card and card type for order reference purposes.

Communications

  • Support enquiries and correspondence
  • Product reviews and feedback
  • Newsletter subscription preferences

Usage Data

  • Pages visited and browsing behaviour
  • Search queries on our platform
  • Device information and IP address
  • Referring website
Section 2

How We Use Your Information

We use your personal information to:

  • Process and fulfill your orders
  • Send order confirmations, shipping updates, and delivery notifications
  • Provide customer support and respond to enquiries
  • Improve our website, products, and services
  • Personalise your shopping experience
  • Send marketing communications (with your consent)
  • Detect and prevent fraud
  • Comply with legal obligations

You may unsubscribe from marketing communications at any time by clicking the "unsubscribe" link in our emails or by contacting us.

Section 3

Third-Party Sharing

We may share your personal information with the following third parties to provide our services:

Coffee Roasters (Merchants)

When you place an order, we share your shipping details (name and address) with the relevant coffee roaster(s) so they can fulfill and ship your order directly to you.

Payment Processor (Stripe)

Stripe securely processes all payments. Their use of your data is governed by their Privacy Policy.

Shipping Carriers

Delivery information is shared with shipping carriers (such as Australia Post, Sendle, or courier services) to deliver your orders.

Analytics Providers

We use analytics services including PostHog and Google Analytics to understand how visitors use our website. These services collect anonymised usage data to help us improve our platform.

Email Service Provider

We use a third-party email service provider to send transactional emails (order confirmations, shipping updates) and marketing communications (with your consent). Your email address and name may be shared with this provider solely for the purpose of delivering these communications.

We will not sell, rent, or trade your personal information to third parties for their marketing purposes.

Section 4

Cookies & Tracking

We use cookies and similar technologies to:

  • Essential cookies: Maintain your shopping cart, keep you logged in, and ensure the website functions properly
  • Analytics cookies: Understand how visitors interact with our website so we can improve it
  • Preference cookies: Remember your settings and preferences

You can manage your cookie preferences at any time using the button below or by clicking "Cookies" in the website footer. Disabling certain cookies may affect website functionality.

Section 5

Data Security

We take reasonable steps to protect your personal information from misuse, loss, unauthorised access, modification, and disclosure. This includes:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure storage with access controls
  • Regular security reviews
  • Staff training on data protection
Section 6

International Data Transfers

Some of our third-party service providers operate outside of Australia. When we share your personal information with these providers, your data may be transferred to and stored in countries including the United States.

Before disclosing personal information to overseas recipients, we take reasonable steps to ensure they comply with the Australian Privacy Principles or are subject to a law or binding scheme that provides comparable privacy protections.

Our key service providers and their locations include:

  • Stripe (payment processing) - United States
  • PostHog (analytics) - United States/European Union
  • Google Analytics (analytics) - United States
  • Supabase (database hosting) - Australia/United States
Section 7

Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

  • Order and transaction data: 7 years (for tax and accounting purposes)
  • Account information: Until you request deletion or close your account
  • Marketing preferences: Until you unsubscribe

When your data is no longer needed, we will securely delete or de-identify it.

Section 8

Your Rights

Under the Privacy Act, you have the right to:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information (subject to legal retention requirements)
  • Complaint: Lodge a complaint with us or the Office of the Australian Information Commissioner

To exercise these rights, please contact us using the details below. We will respond to your request within a reasonable timeframe. We do not charge a fee for access requests.

Section 9

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post any changes on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

Contact

Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your personal information, please contact us at:

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner.