Bulk Nutrients Privacy Policy

Bioflex Nutrition Pty Ltd trading as Bulk Nutrients | ACN 158 981 447

Last updated: 19/08/2026

Hey there! It's great to see you are interested in your data privacy, and how we use your information. We'd love you to pay attention to a couple of bits of key info before you dive into the legalese below.

Always use a secure password or passphrase

We have very tight cyber security here at Bulk Nutrients, but that won't prevent credential stuffing and some other forms of cybercrime.

Setting a secure password is crucial to protect your personal information from cybercriminals. A strong password should be at least 12 characters long and if it's random characters it should include a combination of uppercase and lowercase letters, numbers and symbols.

Avoid using easily guessable information such as your name, birthdate, or pet's name. Also, consider using a passphrase (a mix of random words or part of a song lyric that's easy for you to remember, but very hard to guess).

Do not reuse a password from another site

Let's not make it easy for them, ok? If you use the same password in multiple places, you are just increasing the hurt if it gets leaked or discovered via a hack. If you find it hard to remember all your passwords (and who doesn't!) consider using a password manager.

ABOUT THIS POLICY

This policy explains how Bioflex Nutrition Pty Ltd (ACN 158 981 447) operating as Bulk Nutrients (We, Our or Us) collects, holds, uses, discloses and destroys personal information. In this policy We refer to an individual as You unless talking about all individuals generally.

We comply with the Privacy Act 1988 (Cth) as amended (Act), including the Australian Privacy Principles (APPs).

This policy covers personal information We hold about customers and potential customers, job applicants, contractors and potential contractors, and other individuals who come in contact with Us. It does not cover employee records (within the meaning of the Act). We do not act as a credit provider.

THE SHORT VERSION

We tell you when We collect your personal information, and why
We do not ask for sensitive information from customers - and if you share it with Us anyway, We handle it carefully or securely destroy it
We store your information securely and comply with the Notifiable Data Breaches scheme
We only share your information with others in the normal course of business - We never sell it
Some of Our service providers process information overseas - We require them to protect it to Australian standards
We use AI tools to help answer your enquiries faster - you can always ask for a human, and your information is never used to train third-party AI models
We may use your information for direct marketing, always with a simple opt-out
You can access, correct or ask Us to delete your information
You can complain to Us or to the Office of the Australian Information Commissioner (OAIC) - Our privacy officer's details are at the end of this policy.

WHAT IS PERSONAL INFORMATION?

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not it is true and whether or not it is recorded in a material form. Examples include your name, email address, delivery address and phone number.

Sensitive information is a special category of personal information given extra protection under the Act. It includes information or an opinion about a person's racial or ethnic origin, political opinions or associations, religious or philosophical beliefs, trade union or professional association membership, sexual orientation or practices, or criminal record, as well as health information, genetic information and biometric information or templates.

WHAT WE COLLECT AND HOW

We usually collect personal information directly from you - for example when you create an account, place an order, complete a form on Our website or app, apply for a job, or talk with Our team.

We also collect some information automatically when you interact with Us:

When you visit Our website or use Our app – your IP address, browser and device information, cookies, and what you do on our platforms: the pages and products you view, the links clicked, searches ran, items added to cart, and whether you begin checkout and complete a purchase. We collect this information using cookies, tracking pixels and similar technologies
When you phone Us - your phone number, where available via caller ID
When you contact Us through Our customer support channels (live chat, email, phone or social media messaging) - your messages, chat transcripts and related communications.

Occasionally We receive personal information about you from third parties. We only do so where it is lawful and fair, and where it is not reasonably practicable to collect the information from you directly. Where this happens, We take reasonable steps to make sure you know what was collected and why.

Staying anonymous. You don't need to identify yourself to browse Our website or make a general enquiry - you're welcome to remain anonymous or use a pseudonym in those situations. We do need your real details to deliver an order, though. Powders don't post themselves.

SENSITIVE INFORMATION

We do not ask Our customers for sensitive information - it isn't needed to sell you supplements. The main exception is recruitment, where applicants may choose to share information such as health or working-rights details as part of their application.

Sometimes, in the course of contacting Us (for example via live chat, email or phone), you might volunteer sensitive information We didn't ask for - such as details about a health condition.

Where that happens, We assess whether We could have lawfully collected that information had We asked for it. If so, We handle it in accordance with this policy and only for the purpose you shared it. If not, We will de-identify or securely destroy it as soon as practicable, unless the law requires Us to retain it.

HOW WE USE YOUR INFORMATION

We only use personal information for the purpose for which it was collected, or for related purposes you would reasonably expect. By using the Bulk Nutrients website, app or support channels, you consent to Us using your personal information to:

process and deliver your order
contact you about the status of your order, or with information about products you have purchased
communicate with you generally and provide information or services you have requested
deliver customer support, which may involve AI-assisted tools (see 'How We use AI' below)
protect against fraud or error
comply with legal or government requirements
fulfil any other request from you, or purposes that would be reasonably apparent at the time We collect the information.

Direct marketing. We may use some personal information for direct marketing - like telling you when your favourite flavour is back in stock. Every marketing communication includes a simple opt-out, and We will always honour your request to stop receiving marketing from Us.

Targeted advertising. We also use website information to show you Our ads on Google, Bing, Meta, TikTok and OpenAI, including reminding you about something you looked at. Under the Privacy Act that is direct marketing, so you can opt out of it too - adjust your ad settings on each platform, or contact Our privacy officer.

Google Ads personal preferences can be updated here
Microsoft Bing personalised advertising preferences can be updated here
Meta (Facebook, Instagram) personalised advertising preferences can be updated here
OpenAI personalised advertising preferences can be updated here
Klaviyo emailing preferences can be updated by selecting unsubscribe in an email or contacting Our privacy officer

HOW WE USE AI

We use third-party platforms that incorporate artificial intelligence (AI) and automated processing to help Us deliver customer support. When you contact Us through Our website chat or other support channels, your conversation may be processed by AI-powered tools that help generate responses and resolve your enquiry faster.

When you interact with Our AI-assisted customer support:

The kinds of personal information used by the AI are your conversation content and any contact or order details you provide during the conversation
The AI may suggest answers, or recommend Our products or services, based on your enquiry
Our AI tools do not make decisions on their own that significantly affect your rights or interests - Our team remains responsible for decisions about your account, orders, refunds and complaints
Our AI service providers are contractually required to protect your personal information and use it only to deliver services to Us
Your personal information is not used to train third-party AI models
You can ask to speak with a human at any time - just ask and we'll make it happen.

Our AI tools are there to support Our team, not replace human judgement. If you have any concerns about an automated response you've received, please contact Our Customer Service team by emailing info@bulknutrients.com.au.

WHO WE SHARE YOUR INFORMATION WITH

We never sell personal information. We only disclose it for the purpose it was provided, or a related purpose - typically to trusted service providers who help Us run the business. Examples include:

delivery and freight partners, so your order reaches you
payment processors (see 'Payments' below)
customer communication and support platforms, including Our AI-assisted support tools
email delivery, marketing, analytics and other operational service providers.

We may also disclose personal information where required or authorised by law - for example in response to a court order or police investigation.

Text messaging originator opt-in data and consent are never shared with any third parties.

Overseas disclosure

Some of the service providers We use process personal information on infrastructure located outside Australia. This may include providers of customer communication, email delivery, marketing, billing, analytics and other operational services.

Where personal information is disclosed to overseas recipients, We take reasonable steps to ensure they are required to protect your information in a manner consistent with the Australian Privacy Principles - for example, through data processing agreements that require APP-equivalent protections. We will not disclose your personal information to an overseas recipient where We cannot take such reasonable steps.

PAYMENTS

Payments are made through Our payment gateway provider(s). You provide your payment card details directly to them - they operate secure servers that encrypt your card information and authorise payment. Information you supply to Our payment gateway provider(s) is subject to their privacy policies and terms of use. None of your payment card details are permanently stored with Us.

HOW WE STORE AND PROTECT YOUR INFORMATION

We take reasonable technical and organisational steps to protect the personal information We hold from misuse, interference, loss, and unauthorised access, modification or disclosure. Our employees and any agents who access personal information are bound by confidentiality and privacy obligations.

We store personal information as regular business records, in soft or hard copy, and destroy it when it is no longer required. Records of transactions are normally kept for seven years, as required by the Australian Taxation Office and other regulators.

Notifiable data breaches

If a data breach occurs that is likely to result in serious harm to any individual whose information is involved, We will comply with Our obligations under the Notifiable Data Breaches (NDB) scheme - including notifying affected individuals and the Office of the Australian Information Commissioner as required by law.

If you believe your personal information held by Us may have been compromised, please contact Our privacy officer immediately using the details at the end of this policy.

ACCESSING, CORRECTING OR DELETING YOUR INFORMATION

You can request access to, or correction of, the personal information We hold about you by contacting Our privacy officer. There is no fee to make a request. We will normally respond within 30 days. If for some reason We can't give you access, We will explain why.

Account deletion requests

You can request deletion of your Bulk Nutrients account and associated personal information via Our Request Account Deletion form at bulknutrients.com.au/request-account-deletion. Deletion requests are subject to verification and will be actioned within a reasonable timeframe.

What gets deleted:

Personally identifiable information - name, email address, phone number, address and other personal details
Usage data - preferences and other ancillary account details associated with your account.

What We must keep (for a limited period, due to legal, security or operational obligations):

Operational data - de-identified information related to sales, operational and financial activity, retained to comply with Australian regulatory requirements. Financial data must be held for seven years
Support tickets - previous support interactions are kept as a record of actions taken.

A note on social media ads. Even after We have deleted your account and associated personal information, you may still see Our ads on your social media feeds. This doesn't mean your deletion was unsuccessful - social media platforms use their own data and algorithms to decide which ads to show you. You may see Our ads because you fit a broad audience selected by the platform, because your other activity suggests Our products may interest you, or because you are viewing advertising shown to the general public. If you'd like to stop seeing Our ads, you'll need to manage your ad preferences within the relevant social media platform.

COMPLAINTS

If you are concerned about your privacy, contact Our privacy officer using the details below. We will investigate all complaints and respond within 30 days. If We need more time, We will tell you and give you a timeframe.

You can also complain to the Office of the Australian Information Commissioner (OAIC), including if you are not satisfied with Our handling of your complaint: