Privacy policy

Who we are

Surfbee Pty Ltd, ABN 13 667 014 100, 901 Calimo St, Albury NSW 2640, Australia. In this policy, "Surfbee", "we" and "us" mean Surfbee Pty Ltd.

We are responsible for the personal information collected through surfbee.io. If you are in the United Kingdom or the European Economic Area, we are the data controller for that information.

Privacy contact: privacy@surfbee.io

What we collect

Only what you give us. When you send an enquiry through our form, we collect:

• Enquiry type
• Full name
• Email address
• Organisation, if you provide it
• Country or region, if you provide it
• Product or instrument, if you provide it
• Your message
• Which consent boxes you ticked, together with the date and the version of the wording you agreed to

We do not ask for payment details, government identifiers, or health, biometric or other sensitive information through this website. Please do not include them in your message.

What we do not collect

This website does not use advertising cookies, tracking cookies or third-party marketing pixels, and it does not build profiles of visitors.

We use aggregated website analytics that count page views and referrers without cookies and without identifying individual visitors. Nothing is stored on your device.

We do not sell, rent or trade personal information to anyone, for any purpose.

Cookies

We do not set cookies for advertising, tracking or analytics. Any cookie we do set is strictly necessary to make the website work.

Embedded video

One page embeds a video hosted by YouTube in privacy-enhanced mode. YouTube does not set advertising cookies until you play the video. If you play it, Google may receive your IP address and device information, and that is handled under Google's own privacy policy rather than ours.

Why we use your information

To answer your enquiry and provide the technical or commercial information you asked for. Where the UK GDPR or the GDPR applies, our legal basis is the steps we take at your request before entering a contract, and our legitimate interest in responding to business enquiries.

To send occasional product news and event invitations, but only if you ticked the separate optional marketing box. Our legal basis is your consent, and you can withdraw it at any time.

To keep records connected to a quote, an order, a warranty or a support case. Our legal basis is the performance of our contract with you and our legal obligations.

We do not use your information for automated decision-making or profiling.

Marketing

The marketing box on our form is separate from the box that lets us reply to you, it is optional, and it is unticked by default. Ticking it is never a condition of getting an answer.

Every marketing email includes an unsubscribe link. You can also email privacy@surfbee.io at any time. Withdrawing marketing consent does not affect our ability to reply to an enquiry that is still open.

Who we share it with

We share personal information only with the service providers who help us run the business, and only as far as they need it to do their job:

• Vercel Inc., website hosting and enquiry handling, United States
• Surfbee Hive (Google Cloud Firestore), customer relationship management, Sydney, Australia (australia-southeast1)
• Google, business email through Google Workspace, United States and other locations
• Our distribution partners, only where you asked to be put in touch with the partner for your region, and only the information needed to do that

We do not share your information with anyone else unless the law requires it, or unless you ask us to.

Sending information overseas

Surfbee is based in Australia and some of our service providers process data outside Australia, including in the United States.

Where we transfer personal information out of the United Kingdom or the European Economic Area, we rely on the UK International Data Transfer Addendum or on the European Commission's standard contractual clauses, and we take reasonable steps to make sure the information keeps a comparable level of protection.

How long we keep it

We keep enquiry records for as long as your enquiry is open or while we have an active commercial relationship with you. We review our enquiry records at least every 24 months and delete records that have had no activity.

We keep records connected to a quote, an order, a warranty or a support case for as long as we need them for those purposes and to meet our tax and legal obligations.

We delete anything sooner if you ask us to, unless we have a legal reason to keep it, in which case we will tell you what that reason is.

Keeping it secure

Access to enquiry records is limited to the people at Surfbee who need it to do their work. Information sent through this website is encrypted in transit using TLS.

No system is perfect. If a data breach happens that is likely to cause serious harm, we will notify the people affected and the Office of the Australian Information Commissioner, and the Information Commissioner's Office where the UK GDPR applies.

Your rights

Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you can ask us for access to the personal information we hold about you, and ask us to correct it if it is wrong.

If you are in the United Kingdom or the European Economic Area, you can also ask us to delete your information, to restrict or object to how we use it, to receive a copy in a portable format, and to withdraw any consent you have given.

Email privacy@surfbee.io. We will respond within 30 days. There is no charge, and asking will never affect how we deal with you.

Complaints

If you are unhappy with how we have handled your personal information, please tell us first at privacy@surfbee.io so we can try to put it right.

If you are still unhappy, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au. If you are in the United Kingdom, you can complain to the Information Commissioner's Office at ico.org.uk.

Children

This website is intended for professional and business use. We do not knowingly collect personal information from anyone under 16.

Changes to this policy

We will update this page when our practices change, and we will change the date at the top. If a change is significant, we will say what changed.