US Privacy Policy

Who this policy covers

BusyBee Labs Pty Ltd (ABN 68 688 853 723), trading as BusyBeeDoc, is an Australian website and marketing agency serving healthcare practices, including practices in the United States. This policy covers visitors to our US pages and people making US business inquiries or discussing our services. It is not a privacy notice for patients of a client practice or an authorization to process patient records.

Contact hello@busybeedoc.com about this policy or your information. The Australian Privacy Act 1988 and Australian Privacy Principles govern our Australian operations where applicable. Other privacy rights may apply depending on your location and the circumstances.

Information we collect

Our US business inquiry form collects your name, practice name, business email, state or territory, selected service interests and any selected plan. Phone number and preferred time zone are optional. We record your acknowledgment that the inquiry excludes patient information and the time of that acknowledgment. Correspondence may include the business details you provide when discussing a project.

Website and security providers may process technical information such as IP address, browser and device details, pages visited, approximate location, referral source and interaction or performance measurements. Google reCAPTCHA assesses technical signals to help prevent spam. The form's CAPTCHA token is used for verification and is not saved with the business inquiry. Our form route uses an IP-derived signal temporarily to limit repeated requests and does not save it in the inquiry record.

The form has no patient-message or file-upload field. Please do not enter patient information into any field or send it in replies. No general text field can prevent every accidental disclosure; tell us promptly if you send information that should not have been included.

Why we use information

We use business contact details to respond to your request, clarify scope and pricing, arrange meetings, deliver agreed services and provide related support. We use technical information to operate the website, understand its use and performance, prevent abuse and investigate faults. We also retain information where needed for legal, accounting or dispute-handling purposes.

An inquiry does not subscribe you to promotional emails. We will seek your permission for marketing communications, and you can withdraw it. We do not sell or rent business inquiry details or provide them to other businesses for their own marketing.

Providers and international processing

Our team operates from Australia. Business inquiry records are stored in our Supabase database in Sydney, Australia. Transactional notifications and confirmations use Amazon SES in the Sydney region. Agency staff access inquiries to respond and administer services; routine email correspondence also uses our Google Workspace business mail service.

Vercel hosts and delivers the website. Application functions are configured for Sydney, while its delivery network and supporting services can operate internationally. Google reCAPTCHA provides spam protection. Google Tag Manager and Google Analytics, where enabled, and Vercel Analytics and Speed Insights provide website usage and performance measurements. These providers may process technical information in the United States and other countries under their own arrangements. A Sydney application region does not mean all technical data or correspondence stays in Australia.

We share information with providers and authorized personnel only as needed for these purposes, and with professional advisers or authorities where necessary or legally required. If you later become a customer, payment processing and client-specific providers are identified before you commit. Our US inquiry form does not collect card details or take payment.

For provider information, see Google's Privacy Policy, Vercel's Privacy Notice, Supabase's Privacy Policy and AWS's Privacy Notice.

Cookies and browser storage

Analytics and security services may use cookies or similar technologies. You can manage cookies through your browser; blocking security scripts may prevent the form from working, in which case you can email us. Browser controls do not necessarily stop all server-side security or operational logging.

The US “Find your fit” tool keeps progress in session storage for your current tab, separately from the Australian tool. It does not submit your answers to our Australian lead forms. The regional banner's dismissal is also stored for the tab. Country detection uses Vercel's country signal to decide whether to offer a US-site link on the Australian homepage; it does not redirect you automatically.

Protection and retention

We use encrypted connections, server-side validation, access restrictions and spam controls to protect inquiries. Access is limited to personnel and providers who need it for the purposes described here. No internet service can guarantee absolute security.

We retain prospective-client inquiries for up to 12 months if no engagement proceeds, unless a legal obligation or an active dispute requires longer retention. Customer business records are retained as necessary for the engagement and applicable accounting or legal requirements. Backup and provider-log retention follows the applicable service lifecycle. Contact us to request deletion or ask what we hold.

Your choices and requests

You may contact us to request access, correction or deletion, ask about our handling of your information, or withdraw marketing permission. We may need to verify your identity before responding. Some information may need to be retained for legal or security reasons; we will explain if a request cannot be fulfilled.

We respond in accordance with applicable law, including additional rights that may apply in your US state. We do not claim that every US privacy statute applies to our business or that this policy limits rights you have under one. If you are dissatisfied, you may contact the relevant privacy regulator or state authority. For Australian privacy matters, the Office of the Australian Information Commissioner provides complaint information.

Patient information and client websites

Our agency inquiry service is for business contacts, not patient intake, clinical advice or emergencies. A client practice's patient systems have their own privacy notices and responsibilities. Any request for us to handle protected health information requires a separate workflow assessment and the necessary agreements and safeguards before that work begins. See US Service Terms: patient data and HIPAA.

Policy changes

We publish a version and effective date with this policy and preserve prior versions. If we propose a material change to how information already collected is used, we will provide appropriate notice and obtain any consent required by law before applying it. Updating a page does not retroactively authorize a new use of your information.