BeeSTAR Technology Pty Ltd (ACN 657 715 136) ("BeeSTAR", "we", "us", "our") develops and operates hive monitoring sensors, the BeeSTAR app and a pollination data platform (together, the "Platform"). We also operate the website at beestar.com.au and its subdomains (the "Website"). The Platform and the Website are together the "Services".
This Privacy Policy explains what information we collect when you use the Services, why we collect it, how we protect it, who we share it with, and the rights and choices you have. It applies to everyone who visits the Website, uses the app, has a BeeSTAR device installed, or otherwise interacts with us.
We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and we participate in the Notifiable Data Breaches scheme. We are certified under the National Farm Data Code. Our information security program is aligned with ISO/IEC 27001. If you are in the United States, section 12 sets out additional information for you.
This policy covers two things.
Personal Information has the meaning given in the Privacy Act 1988 (Cth): information about an identified or reasonably identifiable individual, such as your name, email address or account activity.
Farm Data is data generated by or about an apiary, hives or a farming operation, such as sensor readings, hive records and pollination records. Farm Data usually relates to a business, but it can identify a person when it is linked to an account. We handle all Farm Data under the National Farm Data Code (section 6), whether or not it is also Personal Information.
We do not ask for sensitive information such as health, racial, religious, political or biometric information. If you give it to us voluntarily, we use it only for the purpose you gave it and with your consent.
When BeeSTAR devices are installed or you use the app, we collect:
We use Personal Information and Farm Data for the following purposes:
Providing the Services. Creating and managing accounts, operating devices and the Platform, displaying hive conditions, alerts, reports and pollination records, and providing support.
Communicating with you. Responding to enquiries, sending service messages such as alerts, maintenance notices and account information, and, where you have opted in or where the law allows, sending newsletters and product updates. Every marketing message includes an unsubscribe option. You cannot opt out of service messages while you have an active account.
Administration. Managing our relationship with you and your organisation and keeping business records.
Improving the Services. Analysing how the Services are used, testing features, fixing errors and developing new products.
Research. Contributing to scientific and industry research on bee health and pollination. We use deidentified or aggregated data for this unless you give specific consent to identifiable use. See section 6.
Security and integrity. Detecting and preventing fraud, misuse, unauthorised access and security incidents.
Legal compliance. Meeting our obligations under Australian law and other laws that apply to us, and establishing or defending legal claims.
We do not use Personal Information or Farm Data for any purpose that is not described in this policy or in your agreement with us, and we do not use it for automated decisions that have legal or similarly significant effects on you.
BeeSTAR is certified under the National Farm Data Code. Our commitments to you are:
You own your Farm Data. The raw sensor readings and the hive and pollination records generated by your operation belong to you. BeeSTAR owns the analytical models, algorithms, derived insights, benchmarks and aggregated outputs we create from Farm Data.
We are transparent. This policy and your agreement with us describe what we collect and why, in plain language, before you sign up.
You control who sees it. Identifiable Farm Data is visible only to you, to users in your organisation according to the permissions your administrator sets, and to people or businesses you choose to share it with in the app. We do not disclose identifiable Farm Data to any other third party without your consent, unless the law requires it. Once you share Farm Data with another party, that party controls what it does with the copy it receives.
You can take it with you. You can export your Farm Data in a common, machine readable format at any time while you have an account and for six months after your account closes.
Research and aggregated data. We combine deidentified Farm Data across many operations to produce regional and industry level insights, benchmarks and research datasets. Aggregated data cannot identify you, your hives or your business. If you do not want your Farm Data included in aggregated datasets, you can opt out by contacting us. Opting out does not affect the Services you receive.
No hidden terms. Our agreements do not contain data clauses that conflict with this policy. If an agreement treats Farm Data differently, it says so clearly.
We tell you before we change. If we change how we use Farm Data, we notify you before the change takes effect.
The Code is available at farmdatacode.org.au.
We do not sell Personal Information or Farm Data, and we do not share it for advertising.
We share information only with:
Service providers. Companies that help us run the Services, including cloud hosting, connectivity, satellite and cellular networks, analytics, email and messaging, and customer support tools. They may use the information only to provide services to us and are bound by confidentiality and security obligations. A list of our current service providers is available on request.
Your organisation. Where your account is administered by an employer or another entity, the administrator can see and manage your account and the Farm Data recorded under it.
People you direct us to share with. Growers, beekeepers, agronomists or other parties you connect with through the app or ask us to share with.
Research institutions and industry bodies. Using deidentified or aggregated data only, unless you have given specific consent.
Related companies. Other companies in the BeeSTAR group, for internal administration, on the same terms as this policy.
Professional advisers. Our lawyers, accountants, auditors and insurers, where needed for compliance or to protect our rights.
Regulators, courts and law enforcement. Where required by law, court order or subpoena, or where we reasonably believe it is necessary to protect the rights, property or safety of BeeSTAR, our users or the public.
A buyer or successor. If BeeSTAR sells, merges or restructures its business, information may be transferred to the new owner subject to the commitments in this policy. We will notify you if this happens.
Personal Information and Farm Data are currently stored on cloud infrastructure located in Australia. As BeeSTAR expands into other regions, we may also store information on cloud infrastructure in those regions. If the location where your information is stored changes, we will update this policy and notify active users before the change takes effect.
Some of our service providers operate from, or provide support from, other countries, including the United States. Where information is accessed from overseas, we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles and this policy, including through contractual protections.
If you use the Services from outside Australia, your information is transferred to and processed in Australia, where privacy laws may differ from those in your country.
We operate an information security program aligned with ISO/IEC 27001. It includes:
No method of transmission or storage is completely secure. We cannot guarantee that unauthorised access will never occur. You are responsible for keeping your login details confidential and for telling us promptly if you think your account has been compromised.
Data breaches. If a breach is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme. Where the laws of another country also require notification, we will comply with them.
We keep information for as long as it is needed for the purposes in this policy, and then delete or deidentify it. In general:
You can ask us to delete your information at any time. See section 11.
You can:
To make a request, contact us using the details in section 16. We may ask you to verify your identity. We aim to respond within 30 days. If we cannot meet a request, we will tell you why.
If your account is administered by your organisation, some requests, such as changing your account details, may need to go through your administrator.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
This section applies if you are a resident of a US state with a comprehensive consumer privacy law, such as California, Colorado, Connecticut, Virginia, Texas or Oregon. It supplements the rest of this policy.
What we collect and why. The categories of Personal Information we collect, the sources we collect them from, the purposes we use them for and the categories of recipients we disclose them to are described in sections 3, 5 and 7. They include identifiers, account and professional details, internet and app activity, and the apiary and hive locations you record.
No sale or targeted advertising. We do not sell Personal Information, we do not share it for cross context behavioural advertising, and we do not use it for targeted advertising or for profiling that produces legal or similarly significant effects.
Geolocation. The apiary and hive locations you record may be precise geolocation. We use them only to provide the Services and to display them to you and to people you authorise.
Your rights. Where your state law provides them, you can access, correct and delete your Personal Information, receive a portable copy of it, and exercise these rights without discrimination. Contact us using the details in section 16. We will verify your identity and respond within the time your state law requires.
Opt out preference signals. We honour browser based opt out signals such as Global Privacy Control where the law requires it.
Cross border transfer. Your information is transferred to and processed in Australia.
We use cookies and similar technologies on the Website and in the app.
We do not use cookies for targeted advertising.
You can block or delete cookies through your browser settings. If you do, some parts of the Services may not work properly. The Website does not currently respond to browser Do Not Track signals, but we honour Global Privacy Control where the law requires it.
The Services are designed for commercial and professional users. They are not directed at, and may not be used by, anyone under 18. We do not knowingly collect Personal Information from anyone under 18, and never from children under 13. If you believe a minor has provided information to us, contact us and we will delete it.
The Website and app may link to, or connect with, third party websites and services. We do not control them and are not responsible for their privacy practices. Information you send to a third party, including through an integration you enable, is governed by that party's privacy policy.
Privacy Officer
BeeSTAR Technology Pty Ltd
Level 17, 144 Edward Street
Brisbane City QLD 4000, Australia
Email: info@beestar.com.au
We review this policy regularly and may update it from time to time. The current version, with its effective date, is always available on the Website. If we make a material change, we will notify active users by email or in the app before the change takes effect. Continuing to use the Services after that date means you accept the updated policy.