Behaviour ID

1. Introduction

Behaviour ID (“Behaviour ID”, “we”, “our”, or “us”) is committed to protecting the privacy and confidentiality of individuals who participate in our research and communications activities. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

We are a full member of The Research Society and adhere to its Code of Professional Behaviour.

This Privacy Policy outlines how we collect, use, store, and disclose personal information in connection with our research and marketing work.

2. Definitions

• Personal Information: Information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether true or not, and whether recorded in material form or not.

• Sensitive Information: A subset of personal information that includes information about racial or ethnic origin, political opinions, religious beliefs, sexual orientation, health or genetic information, and biometric data.

3. What Information We Collect

We may collect the following types of personal and sensitive information, as relevant to the purpose of our research or marketing activities:

• Personal details (e.g. name, contact information, age, gender, occupation, location)

• Sensitive information (e.g. racial or ethnic background, political or religious views, health conditions, sexual orientation)

• Research responses (e.g. to surveys, interviews, focus groups — both online and in person)

• Audio and video recordings (only with informed consent)

Sensitive information is collected only with your explicit consent and where directly relevant to the research or marketing purpose.

4. How We Collect Information

We collect information through:

• Online surveys and questionnaires

• Telephone or face-to-face interviews

• Online and in-person focus groups

• Recruitment agencies or client-provided lists

• Web forms hosted via GoDaddy

Participation is voluntary, and informed consent is obtained before any data collection — either in writing, through tick-box agreements, or verbally depending on the context.

5. Use of Personal Information

We use personal information solely for the purpose for which it was collected, including:

• Conducting market and social research

• Developing insights and recommendations for clients

• Informing the design of communications and behaviour change initiatives

All reporting is de-identified and aggregated unless express consent has been given to use identifiable information.

6. Disclosure of Personal Information

We may disclose de-identified, aggregated insights to:

• Clients who commission the research or campaign

• Subcontractors (e.g. transcription, translation services) under confidentiality agreements

• Technology platforms supporting data collection or analysis

Identifiable information is only disclosed with your explicit consent and only where necessary to meet research objectives.

7. Cross-Border Disclosure

Behaviour ID does not routinely disclose personal information outside Australia. Where international disclosure is required for specific research or marketing purposes:

• We will inform participants in advance and obtain their consent

• We will take reasonable steps to ensure overseas recipients comply with privacy protections substantially similar to the APPs

8. Data Storage and Security

We store the majority of our data using a secure Microsoft business account with Australian-based data centres.

Where other platforms such as Google, SurveyMonkey, or Inca are used, data may be stored either in Australia or in jurisdictions with equivalent privacy protections.

We use the following security measures:

• Encryption of data in transit and at rest

• Multi-factor authentication

• Access controls and staff training

• Routine system and software updates

Identifiable data is retained for no longer than three (3) months after final reporting, unless required for legal or compliance reasons. After this, it is securely deleted or de-identified.

9. Website Data and Cookies

Our website may use cookies and tools such as Google Analytics to gather anonymised usage data. This helps improve functionality and user experience.

Cookies do not identify individuals. You can manage or disable cookies through your browser settings.

Our website is hosted by GoDaddy, which may collect technical data (e.g. IP addresses, device/browser types) for operational and security reasons. We take steps to ensure GoDaddy’s practices align with Australian privacy obligations.

10. Access and Correction

You may request access to or correction of your personal information at any time by emailing mat@behaviourid.com. We will respond within a reasonable timeframe in line with the Privacy Act.

11. Complaints

If you have concerns about the way we have handled your personal information, please contact us at mat@behaviourid.com. We will review and respond to your complaint promptly.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au

• Phone: 1300 363 992

• TTY: 1800 620 241

• TIS (Interpreting Service): 131 450 (ask for the OAIC)