Privacy Policy
Last updated: June 2026
This Privacy Policy explains how The Hibiscus Collective collects, uses, stores, and protects personal information when you visit our website, purchase products from us, contact us, or interact with us online.
By using our website, placing an order, or contacting us, you agree to the handling of your personal information as described in this Privacy Policy.
1. Who we are
The Hibiscus Collective is an online business selling hibiscus plants through our website.
Business name: The Hibiscus Collective
Website: hibiscus.com.au
Email: hello@hibiscus.com.au
Address: Greenbank, Queensland, Australia
2. What personal information we collect
We may collect personal information that you provide to us directly, including:
- your name;
- email address;
- phone number;
- billing address;
- shipping address;
- order details;
- payment-related information;
- messages you send through our contact forms, email, or social media;
- account details if you create an account on our website;
- any other information you choose to provide.
We may also automatically collect certain technical information when you use our website, including:
- IP address;
- browser type;
- device information;
- pages viewed;
- referring website;
- approximate location data;
- cookies and similar tracking information.
3. How we collect personal information
We collect personal information when you:
- place an order through our website;
- create a customer account;
- subscribe to our newsletter or marketing updates;
- contact us with an enquiry;
- leave a review;
- interact with us on social media;
- use our website.
Our website is built using WordPress and WooCommerce. WooCommerce stores information needed to manage customer orders, checkout, accounts, shipping, and related ecommerce functions.
4. Why we collect and use personal information
We collect and use personal information to:
- process and fulfil your orders;
- pack and ship products to you;
- contact you about your order;
- respond to questions or support requests;
- manage customer accounts;
- send updates, newsletters, or promotions where you have subscribed or where permitted by law;
- improve our website, products, and customer experience;
- prevent fraud and protect our website;
- comply with legal, tax, accounting, and record-keeping obligations.
5. Payments
Payments made through our website may be processed by third-party payment providers such as PayPal, Square and Afterpay.
We do not intentionally store full credit card details on our website. Payment information is handled by the relevant payment provider according to their own privacy and security practices.
You should review the privacy policies of any payment providers used at checkout.
6. Shipping and delivery
To fulfil your order, we may share relevant personal information with shipping, courier, postal, or delivery providers. This may include your name, delivery address, phone number, email address, and order details.
If plant shipping is restricted to certain states, territories, or regions, we may use your delivery address to check whether we can legally or practically send plants to your location.
7. Email marketing
If you subscribe to our newsletter or marketing emails, we may use your name and email address to send you product updates, plant availability notices, care tips, promotions, and other news from The Hibiscus Collective.
You can unsubscribe at any time by clicking the unsubscribe link in our emails or contacting us directly.
We may use an email marketing service provider to manage our mailing list.
8. Cookies and analytics
Our website may use cookies and similar technologies to:
- make the website function properly;
- remember your cart and checkout details;
- improve website performance;
- understand how visitors use our website;
- support advertising or marketing activities.
We may use analytics or advertising tools such as Google Analytics.
You can usually disable cookies through your browser settings, but some parts of our website may not work properly without them.
9. Reviews, comments, and user content
If you leave a review, comment, or other public content on our website or social media pages, the information you provide may be visible to other users.
Please do not include private or sensitive information in public reviews or comments.
10. Who we share personal information with
We may share personal information with third parties who help us operate our business, including:
- website hosting providers;
- WordPress and WooCommerce service providers;
- payment processors;
- shipping and courier providers;
- email marketing platforms;
- analytics and advertising providers;
- IT, security, accounting, legal, and professional advisers;
- government, regulatory, or law enforcement bodies where required or permitted by law.
We only share information where reasonably necessary for our business operations, customer service, order fulfilment, website management, legal compliance, or related purposes.
11. Overseas disclosure
Some third-party services we use may store or process information outside Australia. This may include website hosting, payment processing, email marketing, analytics, advertising, or cloud-based business services.
Where we use these services, your information may be transferred to or accessed from countries outside Australia, depending on the service provider’s systems and locations.
12. How we protect personal information
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.
These steps may include secure website systems, access controls, password protection, secure payment processing, software updates, and limiting access to personal information where appropriate.
However, no method of online transmission or electronic storage is completely secure, and we cannot guarantee absolute security.
13. How long we keep personal information
We keep personal information for as long as needed for the purposes described in this Privacy Policy, including order fulfilment, customer support, legal, tax, accounting, and business record-keeping requirements.
When personal information is no longer needed, we will take reasonable steps to delete, destroy, or de-identify it where appropriate.
14. Accessing or correcting your personal information
You may contact us to request access to, or correction of, personal information we hold about you.
To protect your privacy, we may need to verify your identity before responding to your request.
15. Complaints
If you have a concern about how we handle your personal information, please contact us first so we can try to resolve the issue.
Email: hello@hibiscus.com.au
Please include your name, contact details, and a description of your concern.
If you are not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner or another relevant privacy regulator.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, legal obligations, or privacy practices.
17. Contact us
For privacy questions, requests, or complaints, please contact:
The Hibiscus Collective
Email: hello@hibiscus.com.au
Website: www.hibiscus.com.au