Privacy Policy

We collect only what we need to send you your order, run our business properly, and tell you what is genuinely new. We do not sell your data. This Policy explains, in plain English, what we collect, why, who we share it with, and the rights you have over it.

Last updated: April 2026
Effective from: April 2026

About Bussey

GEORGE G. BUSSEY & CO. PTY LIMITED (ACN 655 579 730 / ABN 71 655 579 730) has its registered office at 8/1 O'Connell Street, Sydney, NSW 2000, Australia ("Bussey", "we", "us", "our"). We are the data controller of personal information collected through ggbussey.com and any associated platforms (together, the "Platforms").

Our privacy commitments

Our Privacy Policy is centred on three commitments:

Commitment 1 — transparency & trust

Privacy is built into our Platforms by design and by default. We respect the trust you place in us with your personal information. We will be fully transparent about the purposes for which we use your personal information, and will only use it for those specified purposes when we have a right to do so. Material changes to how we process your personal information will be notified to you.

Commitment 2 — protecting your personal information

We commit to implementing leading data-protection, privacy, and security standards. If there is an incident affecting your personal information, we will notify you and the relevant regulator(s) in accordance with data-breach notification requirements. Your personal information will be handled with the same protection when shared with third parties or transferred internationally. We retain personal information only for as long as necessary or as required by law.

Commitment 3 — respecting your rights

We respect the choices you make about your personal information and the legal rights you have in relation to accessing, correcting, erasing, and updating it. We provide channels for questions or complaints, and we will respond.

1. Article 27 representatives

EU representative

For the purposes of the General Data Protection Regulation (EU) 2016/679 ("GDPR"), we will appoint an EU representative before processing the personal data of any data subject located in the European Union.

UK representative

For the purposes of the UK GDPR, we will appoint a UK representative before processing the personal data of any data subject located in the United Kingdom.

2. What we collect, and why

General personal & account information

When you purchase, register, or contact us, you may provide: name, title, postal and email address, telephone number, date of birth (optional), and account credentials.

Transactional & payment information

Shipping address, billing address, order and return history, proof of delivery, and tokenised payment information. Full card details are tokenised by our payment processors and not stored on our systems.

Identification information

Where required for customs clearance into certain jurisdictions, we may collect identification information such as a passport number or national ID number. We will request this only where it is necessary.

Client behaviour & preferences

To understand and serve our clientele, we may collect and store data about purchasing history, browsing behaviour, wish lists, preferences (products, topics, channel and frequency of communication), customer reviews, marketing campaign engagement, and general purchasing tendencies.

Correspondence, calls, and online chat

We collect information from you when you correspond with us by email, telephone, contact form, or online chat. Phone calls, online chat, and similar correspondence will on occasion be recorded for security, evidence, training, quality control, and service-improvement purposes. Where applicable law requires consent before recording, we will obtain it.

Social-media interactions

If you interact with us via a social-media platform or other third-party service, we may collect information you have provided through that platform, including behavioural data such as browsing and purchase history on that platform.

Cookie & similar technology data

We collect limited information automatically from visitors to the Platforms (device, browser, IP address, pages visited, items viewed). At launch this is provided to us by Shopify's native analytics; we do not use Google Analytics, Meta Pixel, or any other third-party tracking tool. See our Cookie Policy for detail.

Surveys & market research

We carry out surveys and market research. We collect your response data when you participate.

Sensitive or special categories of data

We may ask for sensitive or special-category data (for example, accessibility requirements for events). In such cases we will provide enhanced privacy information and ask for your explicit consent. If you provide such data without us asking, we will take your having provided it as your explicit consent to process it for the obvious purpose.

3. Purposes & legal basis

We process your personal information for the purposes listed below. Each purpose is supported by one or more lawful bases under the GDPR, the UK GDPR, the Australian Privacy Principles, and applicable US state law:

Performance of contract: fulfilling orders, taking payment, arranging delivery, handling returns, providing customer care, and managing your account.
Service-related communications: order acknowledgments, dispatch and delivery notifications, repair updates, programme updates, abandoned-cart reminders, and changes to terms or this Policy.
Marketing communications: sending the Groundskeeper's Gazette and related Bussey emails via Shopify Email, where you have opted in or where we are permitted under applicable soft opt-in rules.
Accounts & records management: managing customer accounts and maintaining transactional records for tax and audit.
Enquiries and customer care: responding to your questions, complaints, and requests.
Events, appointments, and members' communities: organising and running brand events, clubhouse activations, and the Groundskeeper's Gazette.
Competitions, drops, and campaigns: administering limited offerings.
Regulatory compliance, fraud prevention, and security: anti-money-laundering and sanctions checks, fraud screening, and protection of the Platforms.
Automated technologies & profiling: identifying products, services, or information that may be of interest to you, with transparency and the right to opt out of profiling that produces legal or similarly significant effects.
Market research & service improvement: conducting surveys and analysis.
Platform support, maintenance, and security: administering and protecting the Platforms.
Receipt of supplier services: managing our relationships with suppliers and manufacturing partners.
Business administration & legal compliance: meeting regulatory, tax, audit, and other legal obligations.
Corporate transactions: in the event of a merger, acquisition, or sale of business, we may disclose your personal information to the third party concerned.

4. Who we share your information with

At launch, Bussey operates a minimal technology stack. We share your information only with the carefully selected third parties listed below. We will update this list (and notify you, where required) before adding new categories of recipients.

Shopify Inc. and its affiliates (e-commerce platform, hosting, order processing, native analytics, transactional and Groundskeeper's Gazette emails sent via Shopify Email; Canada, with infrastructure globally).
Payment processors (Shopify Payments / Stripe, PayPal, Apple Pay, Google Pay, as selected at checkout).
Couriers and fulfilment partners (Australia Post / StarTrack, DHL, FedEx, UPS, Royal Mail, Aramex, and regional carriers as required for delivery).
Professional advisers (accountants, lawyers, auditors), where necessary.
Regulators, law enforcement, and other authorities where legally required.
Acquirers, investors, and their professional advisers in connection with corporate transactions.

We do not, at launch, share your personal information with any email-marketing platform separate from Shopify, with any analytics or advertising platform other than Shopify's own, with any live-chat or customer-care platform separate from Shopify, or with any third party for that third party's own marketing purposes. If we introduce any such third party in future, we will update this Policy and the Cookie Policy before doing so.

We do not sell your personal information.

5. International transfers

Bussey is an Australian company. Some of our service providers are based in the United States, the European Economic Area, the United Kingdom, Canada, and other jurisdictions. Your personal data may therefore be transferred outside the jurisdiction in which you reside.

When we transfer personal data internationally we use one or more of the following safeguards: European Commission and UK Government adequacy decisions, where available; Standard Contractual Clauses (SCCs) approved by the European Commission, including the UK Addendum; UK International Data Transfer Agreement, where applicable; and equivalent safeguards under Australian Privacy Principle 8.

6. Retention

We retain your personal data only for as long as we need it:

Order and transactional records: 7 years, to meet Australian tax and accounting obligations.
Account information: for as long as your account is active, plus 2 years thereafter.
Marketing data: until you unsubscribe, plus a short period to action the unsubscribe.
Customer-care correspondence: 3 years from the date of the most recent contact.
Call and chat recordings: typically 6 months for quality and security purposes.
Website analytics data: typically up to 26 months in aggregated form.

7. Your rights

Subject to applicable law, you have the following rights: access; correction; erasure; restriction; portability; objection to processing based on legitimate interests, including direct marketing; opt-out of automated decision-making and profiling that produces legal or similarly significant effects; withdrawal of consent where we rely on your consent; and the right to complain to a supervisory authority.

California, Colorado, Connecticut, Virginia, Utah, and other US states

You have additional rights under your state's privacy law, including the right to know what categories of personal information we collect and share, the right to delete personal information, the right to correct inaccurate information, the right to opt out of "sale" or "sharing" (as those terms are defined in your state), and the right not to be discriminated against for exercising your rights. California residents may submit a request via privacy@ggbussey.com or via the "Do Not Sell or Share My Personal Information" link in the website footer.

Australia

You have rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You may complain about our handling of your data to us, or to the Office of the Australian Information Commissioner (oaic.gov.au).

To exercise any right, contact privacy@ggbussey.com. We will respond within one month (or such shorter period as required by applicable law).

8. Security

We use technical and organisational measures to protect your personal data, including encryption in transit (HTTPS), tokenisation of payment data by our payment processors, access controls, and regular security review. No system is perfectly secure, however, and we cannot guarantee absolute security.

9. Children

The Platforms are not directed at children under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact privacy@ggbussey.com and we will delete it promptly.

10. Changes

We may update this Policy from time to time. The current version is always available at ggbussey.com/privacy. Material changes will be notified via email (where you have given us your email) or a prominent notice on the Platforms.

11. Contact & complaints

Privacy enquiries and requests: privacy@ggbussey.com
Post: George G. Bussey & Co. Pty Limited, 8/1 O'Connell Street, Sydney, NSW 2000, Australia

If you are not satisfied with our response, you may complain to your local data-protection authority — the Office of the Australian Information Commissioner (Australia), the Information Commissioner's Office (UK), or the supervisory authority in your EU member state.