BushroundPrivacy
Last updated 5 October 2026
This statement explains how Bushround collects, uses, stores and shares personal information, and your rights under the Privacy Act 2020. It covers this website and the Bushround app.
Who we are
Bushround is provided by Mark Stevens Limited, trading as Bushround ("we", "us"). Each group or club that uses Bushround decides who joins it and what it records. We look after that information on the group's behalf. Our privacy officer can be reached at privacy@bushround.nz.
What we collect
| Information | When |
|---|---|
| Your email address, name and role in a group | When you sign in, ask to join, or a coordinator adds you |
| The checks, tracks, photos and notes you add, and when you add them | When you use the app |
| Beekeeper and apiary registration numbers, and a contact phone number | If you or your club record them for beehives |
| Your phone's location | Only when you add or move a point. We never track you |
| The days you sign in, and every change you make | Automatically, in each group's audit log |
| What you tell us in a support request | When you contact support |
We collect information from you directly, or from your group's coordinators, for example when they add you to a group.
Why we collect it
- To give you access to your group, and to run the app
- To keep a reliable record of conservation and beekeeping work, including who did what
- To help beekeepers meet their legal obligations, such as AFB inspections and returns
- So groups can report to landowners, funders and councils, for example through Trap.NZ
- To answer support requests, keep the service secure, and fix problems
We don't sell personal information, and we don't use it for advertising.
Who sees it
- Your group: signed-in members of your group see its records, including who logged them. In beekeeping clubs, members see only their own hives; the club's coordinators see everyone's.
- Trap.NZ: if your group sends trap records to Trap.NZ, your name goes with the checks you logged.
- Our service providers, who store information for us and don't use it for their own purposes: Cloudflare (hosting, sign-in and the database), Wasabi (photo storage) and Atlassian (support requests).
- When the law requires it, or to prevent a serious threat to someone's health or safety, as the Privacy Act allows.
Where it's stored
Records are stored by Cloudflare, in its Oceania region (a location preference, not a guarantee). Photos are stored by Wasabi in Sydney, Australia. Support requests are stored by Atlassian. These are overseas companies, so your information may be held outside New Zealand. We use providers that protect information in ways broadly comparable to the Privacy Act, and they hold it for us, not for their own use.
How long we keep it
- While you're in a group, we keep your account details.
- After you leave, your records stay as part of the group's history, with your name on them. Ask us if you'd like your contact details removed.
- Deleted records are hidden, but kept so mistakes can be undone. The audit log is kept permanently.
- If a group closes, it can export everything, and we delete its data on request.
- Backups are kept for 12 months.
Keeping it safe
Sign-in uses a one-time code sent to your email; there are no passwords to steal. Every request is checked against your group and role. Information is encrypted in transit, and our providers encrypt it at rest. We take regular backups, and every change is logged. If a privacy breach is likely to cause serious harm, we'll tell the Privacy Commissioner and the people affected as soon as practicable, as the Privacy Act requires.
Your rights
You can ask to see the personal information we hold about you, and ask us to correct it. Email privacy@bushround.nz. We'll respond as soon as we reasonably can, and within 20 working days. If we can't correct something, you can ask us to attach a statement of the correction you wanted.
This website
This website doesn't use advertising or tracking cookies, or analytics. Our hosting provider, Cloudflare, keeps short-term technical logs, such as IP addresses, to protect the site. When you sign in to the app, Cloudflare Access sets a cookie that keeps you signed in; it's needed for the app to work. The links to our support portal take you to Atlassian's site.
Children
Children don't get their own accounts. On school and youth trips, the teacher or leader signs in and logs the checks. Groups shouldn't photograph identifiable children without consent; ask us or your coordinator to remove any photo.
Changes to this statement
We'll update this page if anything changes, and change the date at the top. For significant changes, we'll let groups know first.
Contact and complaints
Questions or concerns: privacy@bushround.nz. If you're not happy with how we've handled a privacy matter, you can complain to the Office of the Privacy Commissioner at privacy.org.nz or on 0800 803 909.