Privacy Policy

Bon Analytics Pty Ltd respects the privacy of the individuals and organisations we work with. This policy explains how we collect, use, store, and disclose personal information, and how individuals can access and correct the information we hold about them.

1. Introduction

Bon Analytics is a strategy, analytics, and capability consultancy serving services-based organisations across Australia. In the course of our work we collect, hold, and use personal information from a range of audiences, including client contacts, mystery shoppers, survey respondents, observed staff at client sites, job applicants, and visitors to our website.

This policy describes how we handle that information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Note: Australian privacy law was under review at the time of drafting. This policy should be reviewed against the current Privacy Act and any amendments before publication.

2. Scope

This policy applies to all personal information collected and handled by Bon Analytics Pty Ltd, its employees, and its contractors, regardless of the format in which it is held or the channel through which it is collected.

The audiences covered by this policy include:

3. Information We Collect

The personal information we collect depends on the nature of our relationship with the individual or organisation. In general, we collect only the information reasonably necessary to perform our services.

3.1 Information collected from client contacts

• Name, job title, and organisation.
• Work contact details, including email address and phone number.
• Correspondence and meeting notes relating to engagements.

3.2 Information collected from mystery shoppers

• Name, address, contact details, and bank or other payment details required to engage and pay contractors.
• Identification information required to confirm right to work and contractor status.
• Reports, photographs, and observations submitted as part of mystery shopping visits.

3.3 Information collected from survey respondents and members of the public

• Survey responses, including ratings, free-text comments, and demographic information where this has been provided.
• Optional contact details where respondents have elected to provide them (for example, to enter a prize draw or receive follow-up).

Survey responses are generally collected on a de-identified or pseudonymised basis. Where contact details are provided, they are stored separately from response data wherever practicable.

3.4 Information collected during mystery shopping visits

Mystery shopping visits assess service delivery against published service standards. During a visit, mystery shoppers may record observations about the conduct of client staff in their workplace role. These observations are made:

• Under contractual arrangements with the client organisation, which has informed its workforce that mystery shopping is conducted.
• Against pre-agreed, published service standards rather than personal characteristics.
• Without recording names or personal identifiers other than role and location.

Where a client requires named feedback on individual staff, this is treated as a special arrangement and is documented in writing in the engagement contract.

3.5 Information collected from job applicants

• Application materials, including CV, cover letter, and supporting documents.
• Interview notes, assessment results, and reference check outcomes.
• Verification of qualifications and right to work in Australia.

3.6 Information collected from website visitors

When you visit bonanalytics.com.au, we may collect:

• Technical information such as IP address, browser type, device type, referring URL, and pages visited.
• Analytics data collected through standard web analytics tools, used in aggregate to improve our website.
• Any information you choose to submit through a contact form or email link.

Note: This section assumes the Bon Analytics website uses standard analytics. The actual analytics tools in use should be confirmed and disclosed (e.g. Google Analytics, Microsoft Clarity), along with any cookie banner arrangements.

4. How We Collect Information

Wherever practicable, we collect personal information directly from the individual concerned. We may also collect information:

• From client organisations that engage our services (for example, lists of contacts authorised to liaise with us).
• From publicly available sources, such as professional directories and LinkedIn, for business development purposes.
• Through observation during mystery shopping visits, as described in section 3.4.
• From third parties such as recruitment agencies, for job applicants.

5. How We Use Information

We use personal information for the purposes for which it was collected and for related purposes that the individual would reasonably expect. These purposes include:

• Delivering consulting and research services to our clients.
• Producing reports, dashboards, and benchmarks for clients and the sector.
• Engaging and paying mystery shoppers and other contractors.
• Communicating with clients and prospects about our services.
• Recruiting employees and contractors.
• Improving our services, including through internal quality assurance and continuous improvement.
• Meeting legal, regulatory, and contractual obligations.

5.1 Use of de-identified and aggregated data

A core part of our service is producing benchmarks and longitudinal analysis using aggregated data drawn from multiple clients and visits. Where data is used in this way, it is de-identified so that individual respondents, observed staff, or individual sites are not identifiable in the outputs without the relevant client’s prior agreement.

6. Disclosure of Information

We may disclose personal information to:

• The client organisation that engaged the relevant piece of work (for example, in reports and dashboards).
• Bon Analytics employees, contractors, and advisers who require access to perform their roles.
• Service providers that support our operations, including IT, cloud hosting, accounting, legal, and insurance providers, under appropriate confidentiality and data-handling arrangements.
• Government, regulatory, or law enforcement bodies, where required or authorised by law.

We do not sell personal information.

6.1 Overseas disclosure

Bon Analytics uses cloud-based services to support its operations. Some of these services are operated by providers whose infrastructure may be located outside Australia. Before using any such provider, we take reasonable steps to ensure that the provider has appropriate data protection measures in place.

Note: The specific cloud providers used (e.g. Microsoft Azure / Microsoft 365, Power BI), and the countries in which their data centres are located, should be confirmed and disclosed here. This section currently uses generic wording and should be tailored before publication.

7. Storage and Security

Personal information is stored in electronic systems managed by Bon Analytics or by reputable third-party service providers. We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure, including through:

• Access controls and user authentication on internal systems.
• Encryption of data in transit and, where appropriate, at rest.
• Confidentiality obligations on employees, contractors, and service providers.
• Regular review of data-handling practices.

Personal information is retained only for as long as it is needed for the purposes set out in this policy, or as required by law, and is then securely deleted or de-identified.

8. Access and Correction

Individuals have the right to request access to the personal information that Bon Analytics holds about them, and to request that we correct information that is inaccurate, out of date, incomplete, irrelevant, or misleading.

To make a request, please contact the Bon Analytics Privacy Contact using the details in section 11. We will respond within a reasonable timeframe (usually within 30 days). There is no charge for making a request, although a reasonable charge may apply for retrieving and supplying information in some circumstances.

9. Privacy Complaints

If you believe Bon Analytics has not handled your personal information in accordance with this policy or with the Australian Privacy Principles, please contact our Privacy Contact (see section 11). Privacy complaints are handled in accordance with the Bon Analytics Feedback and Complaints Policy.

If you are not satisfied with our response, you may refer the matter to the Office of the Australian Information Commissioner:

OAIC contact details are commonly cited but should be verified at the time of publication.

10. Changes to This Policy

Bon Analytics may update this policy from time to time to reflect changes in our practices, in technology, or in legal requirements. The current version is available on request and, when published, on the Bon Analytics website.

11. Contact Us

If you have a question, request, or complaint about this policy or about how Bon Analytics handles personal information, please contact us:

12. Document Control