Your information, and what we do with it

BB Creations (BB Creations, ABN 90 822 970 095) is a small business in Lalor, Victoria, run by Ritika Bansal. We make surprise gift trays in Melbourne and send hampers to families in India. To do that we need some information about you and the person you're sending to. This page says what, why, and who else handles it.

What we collect

• When you order: your name, phone number and email; the recipient's name and delivery address; the delivery date and time; any message for the cake or card; and the photos you upload for balloons, frames, mugs or prints.
• When you pay: the screenshot or reference of your transfer, so we can match it to your order. We never see or store card numbers.
• If you make an account: your sign-in email and the orders, addresses and wishlist linked to it.
• When you message us on Instagram: your Instagram username and name as Instagram shows them to us, your messages, and any photos you send. We keep copies of the photos because Instagram's own links expire, and they're often the ones going on your tray.
• When you chat with the assistant on our website: what you type, so it can answer.
• Business enquiries and print orders: your company name, GST number if you give one, logos and design files.

Why

• To make and deliver what you ordered, and to contact you about it.
• To answer your questions — on the website, by email, on WhatsApp and in Instagram messages.
• To send the receipts and updates you'd expect, and reminders you choose to set.
• To understand which of our posts and ads are working, so we don't waste money on ones that aren't.

We don't sell your information, and we don't send you marketing you didn't ask for.

Featuring your tray

After an order, we may ask whether we can share a photo of your finished tray on our Instagram. It's off unless you say yes. We never name you or the person it's for, or say where they live. Change your mind at any time and we'll take the post down — message us.

Who else handles it

We use these services to run the shop. Each only gets what it needs for its part:

• Supabase — stores orders, accounts, messages and uploaded photos.
• Vercel — runs the website.
• Google (Gemini) — powers the chat assistant on the website and in Instagram messages, and writes drafts of our post captions. It sees the conversation, not your payment details.
• Meta (Instagram and Facebook) — delivers Instagram messages. The Meta Pixel on this website also tells Meta, and us, when a visit from one of our ads leads to an order, so ads can be measured; it uses cookies to do that.
• Resend sends our emails; Twilio sends WhatsApp messages.
• Google Maps — checks a delivery address is inside our area.

Some of these services keep data on servers outside Australia.

How long we keep it

Orders are kept for as long as we need them for tax and accounting records. Instagram conversations and the photos in them are kept while they're useful for your order and then deleted on request. You can ask us to delete anything we don't have to keep by law.

Seeing, correcting or deleting your information

Ask us and we'll do it, usually within a week:

• Email Bansalritu208@gmail.com with the subject “Delete my data”, or
• send a message to @BB__CREATIONS__ on Instagram, or WhatsApp +61 489 237 234.

Tell us the email, phone number or Instagram username you used. We'll delete your messages, photos and account, and tell you once it's done. Order records we're required to keep for tax are kept only for that, and nothing else.

Questions or complaints

Contact Ritika at Bansalritu208@gmail.com or 5 Dickens Street, Lalor VIC 3075. If you're not happy with how we handle it, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Back to the shop