Privacy policy.
1. Introduction
This privacy policy covers all the work of 3arc and their related businesses, including:
3arc Pty Ltd (ABN 20 053 336 799)
3arc Social Pty Ltd (ABN 22 656 435 237)
2. Commitment to Privacy
3arc respects and upholds your rights under the Australian Privacy Principles contained in the Privacy Act 1988 (Commonwealth) (“Privacy Act”) and the Notifiable Data Breach scheme. 3arc is a member of the Australian Data and Insights Association (ADIA) and adheres to the Privacy (Market and Social Research) Code 2021 (“Code”). For more information about the Privacy Act, the Australian Privacy Principles and the Notifiable Data Breach (NDB) scheme click here: Australian Privacy Principles, OAIC
For more information about the Code click here: ADIA Code
This Privacy Policy for 3arc outlines:
what personal information we hold
how that personal information is used
who that personal information is disclosed to
how you can access or amend personal information held bout you
how to opt out of receiving communications from us
3. The Purpose of the Information We Collect
3arc collect personal information from individuals for research purposes only, with further details set out below. We do this in order to provide accurate and timely information to government, commercial and not-for-profit organisations about issues relevant to their activities to support their decision-making processes.
In each case we must have your consent for the use of your personal data. Where we use your personal data with your consent, you have the right to withdraw your consent at any time.
The basis for 3arc collecting personal information includes:
to offer you opportunities to participate in research to help our clients make decisions about their products, services and brands;
to respond to your research inquiries;
to validate the research answers you gave;
to update our records to ensure your information is correct;
to send you information regarding your research participation such as how to redeem rewards;
to ensure that our research surveys are presented in the most effective manner for you;
to provide you with information that you request from us;
to notify you about changes to our service (this is based on our legitimate interest in keeping you informed about changes to our service);
to provide notice regarding changes to our terms, conditions, and policies.
The information 3arc collects for these reasons could include types of personal information and identifiable research information such as your name, phone number and email address, as well as demographic information such as gender, household income, and occupation. We also collect feedback about your preferences, behaviours and attitudes in relation to products, services and brands.
We generally collect information from you directly using various methods including (but not limited to) telephone surveys, face-to-face interviews, focus groups, SMS surveys, and internet surveys. We may collect information about other members of your household through the primary survey with a responsible adult member of the household.
When providing personal information to 3arc you have the option of remaining anonymous or using a pseudonym to be identified by. However, in certain circumstances, such as where we receive your contact details from a third party or where the research data itself may potentially allow for identification, this will not always be practicable. Depending on the nature of the research we conduct, we may also collect sensitive information from you, for example, ethnicity, political opinion, health information, etc. Sensitive information will only be collected with your prior consent and only if it is directly related to, or reasonably necessary for, the research we conduct.
3.1. Data Collection from Children
We never knowingly invite children under the age of 14 years to participate in research studies without consent from a parent or legal guardian. If it is necessary and appropriate to a particular project to directly involve children under the age of 14 years, we take measures to ensure we have been given permission by the child’s parent or legal guardian. When inviting children under the age of 18 years old to participate in research on sensitive subjects, we take measures to ensure we have been given permission by the child’s parent or legal guardian to proceed.
3.2. Digital Data Collection
3arc may collect information from your device via cookies. A cookie is a piece of information that an Internet website sends to your browser when you access information at that site.
We may use cookies on the 3arc website for the following information for statistical and administrative purposes:
authentication of the visiting domain name or IP address or server address to consider users who visit our website regularly and tailor the site to their interests and requirements
authentication of the computer operating system, browser and screen resolution to optimise the website for user hardware and software
a record of the date and time of visit to the site, in part to ensure maintenance is conducted outside of busy periods
a record of the duration of the visit, to indicate how interesting and informative the website is to prospects, clients and job candidates
a record of pages accessed and documents downloaded, to identify content that is the most important to users
If you are completing a survey hosted by a partner panel, please visit the panel’s privacy policy for more information on how they use cookies.
Our site may, from time to time, contain links to and from the websites of our clients, partner networks and other affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites. To learn more about the use of cookies in general, please visit http://www.allaboutcookies.org/, located outside the 3arc website.
3.3. Information We Collect from Other Sources
3arc will collect personal information about you from third parties. This may include, for example, information provided by:
Our clients (in these cases, your consent would have been given to our client who would have provided us only with information about you that is relevant to the research);
Organisations that collect online data;
Data suppliers;
List providers (e.g. organisations that specialise in providing contact lists like illion);
Other entities that have a legal right to provide such information to us.
Our policy is to receive and use only personal information that is publicly available or that you have consented to be used for research purposes. In addition, we will inform you as soon as practicable of this collection and the circumstances of this collection. We may combine the information that we ask you about directly with these additional information sources for the purposes of conducting our research and insights consulting. At all times, participation in market research is voluntary.
4. How We Use Personal Information
We will only use your personal information for the purpose of conducting our research and in accordance with this Privacy Policy. We will never use your personal information for the purpose of advertising, promotions or direct marketing activities. We use your feedback about your preferences, behaviours and attitudes in relation to products, services and brands in order to help our clients solve the most challenging business issues and make informed decisions. We use the information we collect to create a variety of research insights reports for our clients. We use tools and methods to make sure that there is no reasonable possibility of identifying an individual in most of the reports that we create for our clients. For example, we combine the responses we collect from you with the responses of others to produce “aggregated” reports.
We would only use your individually identifiable personal information in reports with your prior consent and only if it is directly related to, or reasonably necessary for, the research we conduct.
Among other things, our insights have helped clients to:
understand community awareness and attitudes about important issues to aid in policy and decision making;
understand community behaviour and status, such as their health and medical history, gambling behaviour, vehicle or technology usage, in order to aid in policy and decision making;
understand the highest priority areas to focus on in order to improve in their existing products and services;
understand which parts of a service interaction lead to the highest consumer satisfaction;
forecast the likely demand for new products and services;
identify and locate different groups of people who would be most likely to use new services;
determine the best pricing and bundling strategies for products and services.
If you declined to participate in our research, we may use your personal information to re-contact you for a research purpose if we have valid reasons to believe a genuine research concern warrants such re-contact. If you have participated in our research, we will only re-contact you if you were informed of this or we have valid reasons to believe a genuine research concern warrants such re-contact. If you would like to opt out of participating in any of our research please send us an email at insights@3arc.co .
5. How We Store and Retain Personal Information
3arc will take reasonable steps to protect your personally identifiable information as you transmit your information from your computer/device to our website. Unfortunately, the transmission of information via the internet is not completely secure and we cannot guarantee the security of your data during transmission to our site or surveys. Any transmission is at your own risk. You should therefore take special care in deciding what information you transmit.
Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. We store your information for as long as needed for our research purposes and in accordance with law. We use reasonable organisational, technical and administrative measures to protect your information under our control. Please remember that storage of personal data cannot always be one-hundred percent secure. All information you provide to us is stored on secure servers. We limit access to the information by our own employees, contractors, site service providers and those individuals who are authorised for the proper handling of such information. We request that our third party contractors and site service providers follow similar standards of security and confidentiality.
3arc will destroy or de-identify your personal information as soon as practicable once it is no longer needed for our research purposes. The period for which we keep your personal data will be determined by a number of criteria including the purposes for which we are using the information, the amount and sensitivity of the information, the potential risk from any unauthorised use or disclosure of the information, and our legal and regulatory obligations. However, we may in certain circumstances be required by law to retain your personal information after our research has been completed. In this case your personal information will continue to be protected in accordance with this Policy. If we destroy personal information we will do so by taking reasonable steps and using up-to-date techniques and processes.
6. Disclosure and Transfer of Personal Information
We will never disclose any personal information we collect from you unless you have provided express prior consent. We will never use or disclose your personal information for the purpose of advertising, promotions or direct marketing activities. In most instances, our clients have no access to your personal information. The information we provide to most of our clients will only report the information you provide in an “aggregate” form (combined with responses of others) or another form that will not personally identify you. We will not disclose any personal information or identifiable research information to a third party for a purpose other than conducting our research unless you have provided express prior consent, or we are required to do so by an Australian law or court/tribunal order.
In the course of conducting our research we may use third-party service providers who are located overseas, to assist us in the purpose of conducting our research. These activities include, but not exclusively, data hosting, data storage, and digital fingerprinting technologies which may be used for quality control and validation . In most cases, this research data will not be identifiable research information. We will also take reasonable steps to ensure any third-party service providers (and their employees and contractors) comply with the Privacy Act and this Privacy Policy and/or are subject to similar privacy laws and you have the ability to enforce those rights.
7. How You Can Access or Correct Your Own Personal Information
You have the following rights in relation to your personal data:
the right to change your mind and to withdraw your consent;
the right to access your personal data;
the right to rectify / correct any personal data that we hold about you that’s inaccurate or incomplete;
the right to erase your personal data from our systems, unless we have legitimate reasons for continuing to process the information;
the right to port your personal data (portability right);
the right to restrict processing of your personal data;
the right to ask whether we’re processing your personal data and, if we are, to find out details of that processing;
the right to object to how we’re processing your personal data, and to ask us to restrict how we’re processing your personal data;
the right to have the personal data that you’ve provided to us, provided to you, in a structured and commonly-used electronic format;
the right to ask us to transfer your personal data directly to another company if that’s feasible.
Note that depending on the time of your request, your personal, identifying information may already have been deleted and the information collected about you deidentified, in which case it is not possible to identify and delete the information you provided.
We will respond to any of the above requests in a reasonable time. A fee may be charged to cover the cost of data retrieval. This fee will not be excessive and will only apply to the facilitation of your request. You can exercise any of these rights by contacting 3arc at the details listed below.
8. Complaints
If you believe that we have breached the Australian Privacy Principles, you may complain to the Privacy Officer using the contact details below. The Privacy Officer will investigate your complaint and advise you whether the complaint has been upheld and, if so, the action taken. If it is not resolved to your satisfaction within 30 days you may refer the complaint to the Office of the Australian Information Commissioner at this link: https://www.oaic.gov.au/privacy/privacy-complaints/lodge-a-privacy-complaint-with-us/
9. Contact Us
If you have any questions about this Privacy Policy, you may contact us using the following contact details: Email the Privacy Officer at: insights@3arc.co You can also write to: The Privacy Officer 3arc Level 44, 600 Bourke Street, Melbourne VIC 3000.
10. Miscellaneous
In this policy “personal information” has the same meaning as under the Privacy Act. This privacy policy was last updated on 10 July 2023. We may update this policy further from time to time. Any changes we make to our privacy policy will be posted on our website.