Veracity Research Pty Ltd Privacy Policy

Effective Date: 28 August, 2026

1. About this Policy

Veracity Research Pty Ltd ("Veracity", "we", "our" or "us") is an Australian market, opinion and social research consultancy.

This Privacy Policy explains how we collect, hold, use, disclose, protect and dispose of personal information, including information collected through market, opinion and social research activities.

We manage personal information in accordance with:

  • The Privacy Act 1988 (Cth)

  • The Australian Privacy Principles (APPs)

  • ISO 20252:2019 Market, Opinion and Social Research

  • The Research Society Code of Professional Behaviour

Participation in Veracity research is voluntary. Research activities are clearly distinguished from marketing, sales and promotional activities.

2. Our Privacy and Research Commitments

Veracity is committed to:

  • Collecting only information that is reasonably necessary for the research purpose

  • Being transparent about how information is collected and used

  • Protecting participant confidentiality

  • Using identifiable information only where necessary

  • De-identifying information wherever possible

  • Restricting access to authorised personnel

  • Retaining information only as long as required

  • Securely destroying or de-identifying information when it is no longer required

  • Conducting research ethically, transparently and professionally

We do not use identifiable research information for direct marketing.

3. Information Covered by this Policy

This policy applies to personal information collected through:

  • Research projects

  • Participant recruitment activities

  • Surveys

  • Focus groups

  • Interviews

  • Online communities and discussion boards

  • Website enquiries

  • Client relationships

  • Supplier relationships

  • Employment enquiries and recruitment

4. Types of Information We Collect

Depending on the nature of the project or interaction, we may collect:

Contact Details

  • Name

  • Email address

  • Phone number

  • Residential or business location

  • Employer or organisation

  • Position or job title

Research Participation Information

  • Recruitment information

  • Screening responses

  • Participant eligibility information

  • Scheduling information

  • Incentive records

  • Participation status

Research Data

  • Survey responses

  • Interview responses

  • Focus group contributions

  • Discussion board contributions

  • Verbatim comments

  • Opinions and attitudes

  • Behavioural information

  • Uploaded images, files or videos where required for a project

Technical Information

  • Device type

  • Browser type

  • IP address

  • Survey platform metadata

  • Cookies and duplicate participation controls

  • Completion times and quality-control indicators

Sensitive Information

Some research projects may require collection of sensitive information such as:

  • Health information

  • Ethnicity

  • Political opinions

  • Religious beliefs

  • Union membership

  • Sexual orientation

  • Other sensitive information defined under the Privacy Act

We only collect sensitive information where:

  • It is reasonably necessary for the research project; and

  • Appropriate consent has been obtained.

5. How We Collect Information

We may collect information:

Directly from Participants

  • Online surveys

  • Telephone interviews

  • Focus groups

  • In-depth interviews

  • Discussion boards

  • Workshops and co-design activities

  • Recruitment forms

  • Competition or incentive forms

From Clients

Clients may provide:

  • Customer lists

  • Member lists

  • Stakeholder lists

  • Contact databases

Where client-provided information is used, participants will be informed in accordance with applicable privacy requirements.

From Third-Party Recruitment Suppliers

Including:

  • Panel providers

  • Qualitative recruiters

  • Research recruitment agencies

Through Advertising and Recruitment Activities

Including:

  • Social media advertising

  • Industry advertising

  • Community advertising

  • Website forms

  • Expressions of interest

Through Our Website

When you:

  • Submit forms

  • Contact us

  • Download materials

  • Subscribe to updates

6. Information Provided to Participants

At or before participation, Veracity will provide information appropriate to the research activity.

This may include:

  • The identity and contact details of Veracity

  • The purpose of the research

  • The source of participant contact details where relevant

  • Information being collected

  • Whether the activity is being recorded

  • Whether observers may be present

  • The intended use of the information

  • Any disclosure arrangements

  • Incentive arrangements

  • Participants' rights

  • Access to this Privacy Policy

Participants are informed that participation is voluntary.

7. How We Use Information

We use information only for legitimate business and research purposes.

These may include:

Research Activities

  • Recruiting participants

  • Managing participation

  • Conducting research

  • Quality control and validation

  • Analysis and reporting

  • Research administration

  • Research follow-up activities where consent has been provided

Business Activities

  • Responding to enquiries

  • Managing client relationships

  • Managing suppliers

  • Recruitment and employment activities

  • Legal and regulatory compliance

  • Internal administration

8. Research and Marketing are Kept Separate

Research conducted by Veracity is independent of marketing activity.

We do not:

  • Sell participant information

  • Use identifiable participant information for direct marketing

  • Allow clients to use identifiable research information for direct marketing arising from participation in research

Research participation will not result in marketing communications unless you independently consent to receive them.

9. Recordings, Observation and Research Materials

Some research activities may involve:

  • Audio recording

  • Video recording

  • Screen recording

  • Online observation

  • Client observation

Participants will be informed before participation occurs.

Where recording is used:

  • Appropriate consent is obtained

  • Access is restricted to authorised personnel

  • Recordings are used only for approved research purposes

  • Recordings are deleted when no longer required

Clients do not ordinarily receive identifiable recordings or participant contact information.

10. Research Involving Young People and Vulnerable Participants

Veracity applies enhanced protections when conducting research involving young people and vulnerable participants.

Where required:

  • Parent or guardian consent is obtained

  • Participant consent is also obtained

  • Activities are designed to minimise risk

  • Age-appropriate language is used

  • Participation remains voluntary at all times

Veracity does not conduct research with children under 14 years of age.

11. Cookies and Research Quality Controls

Our website and research platforms may use:

  • Cookies

  • Unique survey links

  • Browser controls

  • Device identifiers

  • IP address controls

  • Platform validation technologies

These technologies may be used to:

  • Operate surveys

  • Prevent duplicate participation

  • Validate eligibility

  • Detect fraudulent responses

  • Improve participant experience

  • Protect research quality

They are not used to market third-party products or services to participants.

You may control cookies through your browser settings. Doing so may affect the functionality of certain website features.

12. Artificial Intelligence (AI)

Veracity may use approved AI tools to support:

  • Research design

  • Data quality review

  • Transcription

  • Coding

  • Analysis

  • Reporting

Where AI is used:

  • Human researchers remain responsible for outputs

  • AI-generated outputs are reviewed before use

  • AI does not replace professional judgement

  • Privacy and confidentiality requirements continue to apply

Where AI directly interacts with participants or processes identifiable personal information, additional safeguards and disclosures may apply.

13. Disclosure of Information

We may disclose information where necessary to:

  • Clients

  • Panel providers

  • Recruiters

  • Research partners

  • Fieldwork suppliers

  • Incentive fulfilment providers

  • Survey platforms

  • IT providers

  • Legal advisers

  • Regulators or government authorities where legally required

Where identifiable information is disclosed:

  • Only the minimum necessary information is shared

  • Appropriate consent is obtained where required

  • Disclosure is restricted to the agreed purpose

Most research reporting is provided in aggregated or de-identified form.

14. Overseas Disclosure

Veracity's core research records are stored in Australia.

Some research suppliers or technology platforms may process information outside Australia.

Where overseas disclosure is likely:

  • Participants will be informed where appropriate

  • Reasonable steps are taken to ensure information is protected

  • Suppliers are required to meet privacy and security requirements consistent with applicable Australian obligations

15. Information Security

Veracity applies administrative, physical and technical safeguards to protect information.

These controls include:

  • Role-based access controls

  • Multi-factor authentication

  • Encryption in transit and at rest

  • Secure Microsoft 365 storage

  • Restricted file permissions

  • Security monitoring

  • Security awareness training

  • Confidentiality agreements

  • Controlled sharing arrangements

  • Backup and recovery controls

  • Secure destruction procedures

Access to personal information is restricted to authorised personnel who require access to perform their role.

16. Data Retention and Disposal

Veracity retains information only for as long as required for legitimate research, business, legal or contractual purposes.

Generally:

  • Identifiable participant information is retained only while required for the purpose for which it was collected

  • Research records may be retained for a minimum period to support traceability, quality assurance and ISO compliance

  • Information may be retained longer where required by law, contract or regulatory obligations

When information is no longer required, we:

  • Securely delete it

  • De-identify it; or

  • Securely destroy physical records

17. Access, Correction and Deletion Requests

You may request:

  • Access to personal information we hold about you

  • Correction of inaccurate information

  • Withdrawal of consent where applicable

  • Destruction or de-identification of information where legally and practically possible

Requests should be directed to the Privacy Officer using the contact details below.

We may need to verify your identity before responding.

In some circumstances, legal, contractual or research integrity requirements may limit our ability to alter or delete information.

18. Data Breaches

Veracity maintains procedures for investigating and responding to actual or suspected privacy or security incidents.

Where a data breach meets the requirements of the Notifiable Data Breaches scheme under the Privacy Act, Veracity will:

  • Notify affected individuals where required

  • Notify the Office of the Australian Information Commissioner (OAIC)

  • Take reasonable steps to minimise harm

  • Implement corrective actions

19. Complaints

If you have concerns regarding how your information has been handled, you may contact Veracity's Privacy Officer.

We will:

  • Acknowledge your complaint

  • Investigate the matter

  • Respond within a reasonable timeframe, generally within 30 days

If you are not satisfied with our response, you may contact:

Office of the Australian Information Commissioner (OAIC)
Website: OAIC Website

20. Contact Us

Privacy Officer
Veracity Research Pty Ltd

Email: hi@veracityresearch.com.au

21. Changes to this Policy

Veracity may update this Privacy Policy from time to time to reflect:

  • Changes in legislation

  • Changes in industry standards

  • Business process changes

  • Improvements in privacy practices

The most current version will always be available on our website.

Based on and aligned with Veracity's approved ISO 20252:2019 Framework Manual, confidentiality controls, information security framework, records management requirements and participant protection requirements.