Privacy Policy
Robert Dommett and Associates Pty Ltd
Effective Date: 28/08/2025
Last Reviewed: 28/08/2025
Robert Dommett and Associates Pty Ltd ("RDA", "We", "Us", "Our") respects your privacy and protects your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains how we handle your personal information across all our geoTribes services, websites, and business operations.
What Information We Collect
We collect personal information when you interact with our services, visit our websites, or engage with our team. This includes contact details like your name, email, phone number, and address, along with demographic information such as age, gender, and location where relevant to our services. When you register for our portals or make purchases, we collect account information, preferences, and billing details necessary for service delivery.
Our websites automatically collect technical information including your IP address, browser type, device details, and how you navigate our sites. We use cookies and tracking technologies to understand usage patterns and improve your experience, integrating with Google Analytics for website performance analysis and Google Maps for location services.
For employment applications, we collect comprehensive details including personal information, employment history, qualifications, references, and proof of identity. With your consent, we may conduct background checks and collect related verification information.
When providing analytical services to clients, we may receive datasets containing personal information. In these cases, we act as a data processor, collecting only the minimum information necessary to deliver requested services and removing all personally identifiable data once the work is completed.
Personal information means information or an opinion about an identified individual, or someone reasonably identifiable, whether true or not and whether recorded or not. This excludes de-identified or aggregated data that cannot reasonably identify individuals.
How We Use Your Information
We use personal information for legitimate business purposes centered on delivering high-quality services while respecting your privacy. Our primary use is service delivery - providing data analysis, segmentation, and consulting services, managing customer relationships, processing transactions, and delivering requested products and content.
Essential business operations include customer support and complaint resolution, quality assurance and service improvement, staff training, and legal compliance. We analyze service usage to identify improvements and ensure we meet customer needs effectively.
With appropriate consent or legitimate business interests, we use information for marketing and communications including service updates, direct marketing of relevant products and services, market research, and product development. We respect your communication preferences and provide easy optout mechanisms.
We also process information for legal and security purposes including fraud prevention, regulatory compliance, protecting our interests, and maintaining system security. The legal basis for processing varies - sometimes based on your consent (particularly for marketing), sometimes to fulfill contractual obligations, often for legitimate business interests (provided these don't override your privacy rights), and sometimes to comply with Australian legal requirements.
Sharing Your Information
We don't sell or rent your personal information. We share information with trusted third parties only when necessary for business operations, including IT service providers and cloud hosting companies, payment processors and billing services, data analysis contractors, and marketing platforms. We also work with professional service providers like legal advisors, auditors, and business consultants, and may share information with related corporate entities for business operations.
Legal requirements may necessitate sharing with government agencies, law enforcement, courts, or regulatory bodies. When sharing information, we limit disclosure to what's necessary for the specific purpose, require contractual protections for your information, ensure recipients have appropriate security measures, and prohibit use for recipients' own purposes without your consent.
International Transfers
Some business operations involve transferring personal information overseas to countries including the United States, United Kingdom, and Canada where our service providers operate. We transfer information for data processing and storage services, business operations, and international service delivery.
We protect overseas transfers by only transferring to countries with substantially similar privacy protections, implementing contractual safeguards requiring equivalent protection, obtaining explicit consent where required, and ensuring full compliance with Australian Privacy Principle 8. By using our services, you consent to these transfers subject to these comprehensive protections.
Security and Data Breaches
We implement robust security measures to protect your information against unauthorized access, accidental loss, and malicious attacks. This includes encrypting data in transit and at rest, maintaining access controls and authentication systems, conducting regular security assessments, providing staff training on security practices, and maintaining secure data destruction procedures.
If we experience an eligible data breach likely to result in serious harm, we will notify affected individuals as soon as practicable, notify the Office of the Australian Information Commissioner (OAIC) as required by law, provide clear information about the breach and our response, and offer support to help affected individuals protect themselves. We maintain comprehensive incident response procedures to quickly identify, contain, and respond to potential breaches.
Data Retention
We retain personal information only as long as necessary for collection purposes, legal compliance, or dispute resolution. Customer data is typically retained during our relationship and up to seven years afterward for legal compliance. Website analytics data is retained for 26 months following standard practices. Marketing data is kept until you opt out or we no longer have legitimate business needs. Employment records are retained as required by employment and taxation laws. When information is no longer needed, we securely destroy or de-identify it using industry-standard methods.
Your Privacy Rights
Under Australian privacy law, you have important rights regarding your personal information. You can access personal information we hold about you by requesting confirmation of what information we have, copies of your information, and details about how we've used or disclosed it. Contact us with sufficient detail to locate your information, and we'll respond within 30 days.
You can request correction of information that's inaccurate, outdated, incomplete, misleading, or irrelevant to our business purposes. We'll investigate correction requests and make appropriate changes, notifying relevant third parties where reasonable.
You can request deletion of your information where it's no longer necessary for our business purposes, you withdraw consent and we have no other legal basis for processing, or we're required to delete it under applicable law. Email info@rdaresearch.com with your full name, contact details, organization, and specific deletion requests. We'll verify your identity and respond within 30 days, though some information may be retained for legal compliance.
For marketing communications, you can opt out at any time using unsubscribe links in emails, updating account preferences, or contacting us directly. Opting out won't affect service-related communications necessary for account management or transaction completion.
Making Complaints
If you believe we've breached your privacy rights, failed to comply with privacy laws, or handled your information inappropriately, you can make a complaint by contacting us at info@rdaresearch.com, calling +61 2 8923 6600 , or writing to our Privacy Officer at Robert Dommett & Associates Pty Ltd, Level 2, 68 York Street, Sydney NSW 2000.
We take all complaints seriously and will investigate thoroughly, responding within 30 days with our findings and any corrective actions. If you're unsatisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au, phone 1300 363 992, or mail GPO Box 5218, Sydney NSW 2001.
Third-Party Services and Updates
Our websites integrate with third-party services like Google Analytics and Google Maps, and may contain links to external websites. We're not responsible for the privacy practices of these third parties, and we recommend reviewing their privacy policies before sharing information with them.
We periodically review and update this Privacy Policy to reflect changes in business practices, legal requirements, or privacy protection improvements. When we make updates, we'll post the revised version on our website and update the review date. For significant changes affecting how we handle your information, we'll notify you directly. Continued use of our services constitutes acceptance of policy updates.
Contact: info@rdaresearch.com | +61 2 8923 6600
Privacy Officer: Robert Dommett & Associates Pty Ltd, Level 2, 68 York Street, Sydney NSW 2000