Login

Country

Cart

Your cart is empty

Privacy policy

Last updated: 28 October 2026

Bonbon Fusion Pty Ltd (Bonbon Fusion, we, us or our) respects your privacy. This policy explains how we collect, hold, use and disclose personal information when you visit bonbonfusion.com.au, buy our products, contact us, subscribe to marketing or otherwise interact with us.

We handle personal information in accordance with applicable Australian law, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles to the extent they apply to us, and the Spam Act 2003 (Cth).

1. Personal information we collect

Depending on how you interact with us, we may collect:

  • Your name, email address, telephone number, billing address and delivery address.
  • Order details, products purchased, transaction amounts, payment status, returns and customer service history.
  • Information you provide in enquiries, reviews, competition entries, surveys or other communications, including your preferences and marketing choices.
  • A gift recipient's name, delivery address and contact details when you ask us to deliver to someone else.
  • Recruitment information you provide when applying for a role, such as your resume, qualifications, work history and referee details.
  • Technical and browsing information, including IP address, browser and device details, cookie and similar identifiers, approximate location, referring pages, pages and products viewed, searches, clicks, cart activity and checkout or purchase events.

We seek to collect only information reasonably necessary for our activities. You can generally browse without providing your name, although tracking technologies may collect technical information. You may contact us anonymously or using a pseudonym where lawful and practicable. If you do not provide information needed for an order or enquiry, we may be unable to fulfil it or assist you.

We do not ordinarily need sensitive information, such as health information. Please do not include sensitive information in order notes or general enquiries unless necessary. If we need to collect sensitive information, we will seek consent where required by law.

2. How we collect information

We collect information directly from you when you place an order, complete a form, subscribe, enter a promotion, apply for a role or communicate with us online, by phone or in person.

We also collect information automatically through our website, Shopify and the cookies, analytics tools and advertising pixels described below. We may receive information from payment and delivery providers, advertising platforms and other service providers in connection with your transactions or interactions with us.

If you give us another person's personal information, please ensure you are authorised to do so and make them aware of this policy.

3. Why we use personal information

We collect, hold, use and disclose personal information to:

  • Process payments and orders, deliver products, and manage refunds, returns and enquiries.
  • Communicate about your purchases and provide customer support.
  • Operate, secure, maintain and improve our website, products and services.
  • Understand website use, customer preferences and sales performance.
  • Measure advertising, improve campaigns and show relevant advertising, including retargeting, as explained below.
  • Send promotional communications where we have the consent required by law.
  • Administer promotions, reviews, surveys and recruitment.
  • Detect fraud, resolve disputes, maintain business records and comply with legal obligations.

We will only use or disclose information for other purposes where permitted or required by law, including with your consent where required. This policy does not, by itself, constitute your consent to every use of information described in it.

4. Shopify and payments

Our online store is hosted on Shopify, which processes information to operate the store and provide related services. See Shopify's Privacy Policy.

Payments are processed through the payment providers available at checkout. These providers handle payment card and related transaction information under their own privacy and security arrangements. We receive information needed to manage your order, such as payment confirmation and transaction details. We do not store full payment card numbers or card security codes in our own business records.

5. Cookies, analytics and advertising pixels

Our website uses cookies, pixels, tags and similar technologies for store functionality, security, analytics and advertising. Some support essential functions such as shopping carts and checkout; others help us understand activity and measure or personalise advertising.

Information collected through these tools may be personal information, even if it does not include your name. Advertising platforms may match website activity with information they already hold about you, including your account information.

TikTok Pixel — Standard data sharing

We use TikTok Pixel with the Standard data-sharing setting in our Shopify TikTok integration. This browser-based tool shares website activity with TikTok, which may include pages and products viewed, items added to a cart, checkout and purchase events, product identifiers, order value and currency, together with IP address, browser and device information, cookies and advertising interaction identifiers.

We use this information to measure the results of TikTok advertising, improve ad delivery and create audiences for relevant advertising, including retargeting. Our Standard integration does not enable TikTok Advanced Matching or TikTok Events API through that setting.

See TikTok's Privacy Policy.

Meta Pixel — Facebook and Instagram

We use Meta Pixel to share website activity with Meta, the provider of Facebook and Instagram. Depending on the event and configuration, this may include pages and products viewed, cart and checkout activity, purchases, product identifiers, transaction value and currency, IP address, browser and device details, cookies and advertising interaction identifiers.

We use Meta Pixel to measure advertising performance, understand actions taken after an advertisement, improve ad delivery and create audiences for relevant advertising, including retargeting. Meta may associate these events with your Facebook or Instagram account.

We also use Meta Advanced Matching. Depending on the information available and our configuration, this shares customer identifiers such as email address, telephone number, name and address details with Meta in hashed form to help match website activity with Facebook or Instagram accounts. Hashing transforms information into coded values for matching; it does not make the information anonymous.

See Meta's Privacy Policy.

Google Analytics

We use Google Analytics to understand website traffic and interactions, such as how visitors reach the site, pages and products viewed, engagement and purchases. It may collect cookie or similar identifiers, device and browser details, referral information and approximate location derived from technical information.

We use the resulting reports to improve our website and understand business performance. We do not intentionally send names, email addresses, telephone numbers or payment card details to Google Analytics. Google Analytics 4 does not log or store individual IP addresses.

See how Google uses information from sites and apps that use its services and Google's Privacy Policy.

6. Your tracking and advertising choices

You can use your browser settings to block or delete cookies. Restricting essential cookies may affect store functions. Browser controls may not block every tracking technology or prevent information already collected from being processed.

If a cookie preference banner is displayed, you can use its controls to manage the categories it offers. Where consent is required by applicable law, we will obtain it before activating the relevant non-essential tracking.

You can also manage advertising preferences through your TikTok, Facebook, Instagram and Google account settings. Google offers a Google Analytics opt-out browser add-on.

To request that we stop using or disclosing your personal information for targeted advertising, email info@bonbonfusion.com. We will action applicable requests without charge. We may need limited information to identify the relevant records or browser and explain any additional steps needed to apply your choices. Opting out of personalised advertising does not mean you will stop seeing all advertisements.

7. Email and other direct marketing

We send commercial electronic messages only where we have express consent or another form of consent recognised by the Spam Act. Our marketing messages identify us and include a way to unsubscribe.

You can unsubscribe using the link or instructions in a marketing message, or email info@bonbonfusion.com. We will action requests within five working days. Unsubscribing does not prevent necessary, non-promotional order or service communications.

Email marketing preferences and website tracking preferences are separate. Unsubscribing from emails does not automatically change cookies or advertising preferences.

8. Who we disclose information to

We may disclose relevant personal information to:

  • Shopify and providers of hosting, IT, storage, security and store applications.
  • Payment processors, delivery companies and fulfilment providers.
  • Customer support and marketing service providers.
  • TikTok, Meta and Google for the purposes described above.
  • Professional advisers, insurers and parties assisting with disputes or fraud prevention.
  • Regulators, courts, law enforcement or other parties where authorised or required by law.
  • A prospective purchaser or successor in a business sale or restructure, subject to appropriate confidentiality protections.

Access within our business is limited to people who need the information for their work. We take reasonable steps to protect personal information shared with service providers. Platforms may also process information for their own purposes under their applicable terms and privacy policies.

9. Overseas handling

Some providers operate internationally. Personal information may be disclosed to, stored by or accessed by recipients outside Australia, including providers and related entities supporting Shopify, TikTok, Meta and Google.

Based on these providers’ published disclosures, overseas handling may include:

  • Shopify: Canada, the United States, Singapore and Ireland. Shopify also identifies affiliated service providers in France, Spain, Sweden, the United Kingdom, India, Japan and New Zealand, and third-party providers in the Netherlands, among other locations. Which providers handle information depends on the services used.
  • Meta (Facebook and Instagram): the United States, Ireland, Denmark and Sweden, among other countries in which Meta or its service providers operate.
  • TikTok: Singapore, Malaysia, Ireland and the United States. Information may also be accessed by relevant group companies and service providers in other countries as described in TikTok’s policy.
  • Google Analytics: the United States and other countries in which Google or its service providers operate. Google operates a global data-centre network and does not specify a fixed, exhaustive set of processing countries for our Analytics information.

These are potential recipient and processing locations identified from provider disclosures, not a statement that every customer’s information is sent to every country listed. Locations can change as providers and services change. The relevant providers’ privacy policies and Shopify’s subprocessor information provide further details. We review this disclosure as our arrangements change. For orders delivered to New Zealand, we also disclose necessary delivery information to delivery providers operating there.

Where the Australian Privacy Principles apply, we take the reasonable steps required by Australian Privacy Principle 8 before disclosing personal information overseas, unless a lawful exception applies. Using our website does not, by itself, waive those obligations.

10. Storage, security and retention

We hold personal information electronically in our business systems and those of our service providers, and in physical records where necessary. We take reasonable steps to protect it against misuse, interference, loss, and unauthorised access, modification or disclosure. No internet transmission or storage system can be guaranteed completely secure.

We retain personal information for as long as reasonably needed for the purposes for which it was collected, including order fulfilment, customer support, legal and accounting requirements, and resolving disputes. Relevant business and tax records may need to be retained for statutory periods. When information is no longer needed and we are not required to retain it, we take reasonable steps to destroy or de-identify it.

Analytics and advertising information is also subject to the retention settings and terms of the relevant providers. We may keep a limited suppression record to respect a marketing opt-out.

If a data breach occurs, we will assess and respond to it and notify affected individuals and the OAIC where required by the Notifiable Data Breaches scheme.

11. Access, correction and other requests

You can contact info@bonbonfusion.com to request access to personal information we hold about you or correction of inaccurate, out-of-date, incomplete, irrelevant or misleading information.

We may need to verify your identity. We will respond within a reasonable period, generally within 30 days. There is no fee to make a request or seek correction. If a lawful, reasonable access charge applies, we will explain it beforehand. If we refuse a request, we will explain our reasons and available complaint options, unless the law prevents us from doing so.

You can also ask us to delete information or withdraw consent to a particular use. We will consider the request and explain any legal or operational reasons for retaining information. Australian law does not provide an unconditional right to deletion in every circumstance. Withdrawal of consent does not undo lawful handling that occurred before withdrawal.

12. Privacy complaints

If you have a concern, contact our Privacy Contact at info@bonbonfusion.com with the details and your preferred contact method. We will acknowledge the complaint, investigate and aim to provide a substantive response within 30 days. If more time is needed, we will explain why and keep you informed.

If you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC), where the matter is within its jurisdiction:

13. Third-party websites

External websites and services linked from our website have their own privacy practices. Please review their policies when using those services. Their separate policies do not replace our responsibilities for personal information we collect or disclose.

14. Changes and contact

We may update this policy as our practices or legal obligations change. The current version will be published on our website with an updated date. Where required, we will provide additional notice or seek fresh consent for relevant changes.

For privacy questions, requests or complaints, or a free copy of this policy in another reasonably available format, contact:

Privacy Contact — Bonbon Fusion Pty Ltd
Email: info@bonbonfusion.com
Website: bonbonfusion.com.au