1. OUR COMMITMENT

Bullseye CX Pty Ltd  ("Bullseye CX", "we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, hold, use and disclose personal information, and how you can
access, correct or complain about our handling of it.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Policy applies to our website at www.bullseyecx.com.au, our consulting services, and our platforms and products including EmpathIQ, traCXio,
CRMaaS and EXCELERATE CX.

2. WHAT IS PERSONAL INFORMATION

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not
it is true and whether or not recorded in a material form.

3. WHAT PERSONAL INFORMATION WE COLLECT

Depending on your relationship with us, we may collect:

  a. Contact and identity details: name, job title, employer, business      email address, business postal address, telephone number.
  b. Engagement information: correspondence, meeting notes, session      recordings and transcripts where you have been notified and consented,
     proposals, statements of work and related records.
  c. Survey and feedback data: responses, ratings, scores and free text      comments collected through customer experience or employee experience
     research programs, including through EmpathIQ.
  d. Account information: usernames, access permissions and activity logs      for platforms such as traCXio and EmpathIQ.
  e. Billing information: billing contact details, purchase orders and      payment records. We do not store full credit card numbers.
  f. Technical information: IP address, device and browser type, operating      system, referring pages, pages visited, and dates and times of access.
  g. Recruitment information: where you apply to work with us, your      application, resume, references and related material.

4. SENSITIVE INFORMATION

We do not generally seek sensitive information as defined in the Privacy Act. Where a research or survey program requires it, we collect it only
with your consent and only where it is reasonably necessary for the purpose, or where otherwise permitted by law.

5. HOW WE COLLECT PERSONAL INFORMATION

We collect personal information:

  a. directly from you, when you contact us, submit a form, subscribe,      attend a workshop or session, participate in a survey or interview, or
     use one of our platforms;
  b. automatically through our website, using cookies and analytics tools      (see section 9);
  c. from our clients, where we deliver research, customer experience or      technology services on their behalf;
  d. from publicly available sources and business information providers,      for business development purposes; and
  e. from third parties such as referrers, event organisers and our service      providers.

Where it is lawful and practicable, you may deal with us anonymously or under a pseudonym. In most cases we will need your details to respond to
you or deliver services.

6. INFORMATION WE HANDLE ON BEHALF OF CLIENTS

Where we conduct research, surveys, benchmarking or customer experience programs for a client, the client generally determines what information is
collected and why. In those cases we handle the information as a service provider under our agreement with that client, and the client's own privacy
policy may also apply.

Where you have participated in a survey run for a client and you wish to access, correct or delete your responses, you may contact us and we will
direct your request to the relevant client or action it under their instructions.

Unless we tell you otherwise, individual survey responses are reported to clients in aggregated or de-identified form. Free text comments may be
reported verbatim, and you should avoid including information that identifies you or others if you do not want it shared.

7. WHY WE COLLECT, HOLD, USE AND DISCLOSE PERSONAL INFORMATION

We use personal information to:

  a. respond to enquiries and provide information you have requested;
  b. deliver, administer and improve our consulting services, platforms and 
     products;
  c. conduct research, analysis, benchmarking and reporting for our clients;
  d. manage accounts, billing and administration;
  e. maintain the security and integrity of our systems;
  f. send marketing and educational communications, subject to section 8;
  g. assess job applications; and
  h. comply with our legal and regulatory obligations.

We will not use or disclose personal information for a purpose unrelated to the purpose for which it was collected unless you would reasonably expect
it, you have consented, or the use or disclosure is required or authorised by law. 

8. DIRECT MARKETING

We may send you marketing communications about our services, research and events where you have consented or where you would reasonably expect to
receive them. Every marketing email includes an unsubscribe function, and we comply with the Spam Act 2003 (Cth). You can opt out at any time by
using the unsubscribe link or emailing info@bullseyecx.com.au. We will action opt out requests promptly.

We do not sell personal information.

9. COOKIES, ANALYTICS AND TRACKING

Our website uses cookies and similar technologies to operate the site, remember your preferences, and understand how the site is used. We may use third party analytics and marketing tools, which may set their own cookies and collect technical information.

Most browsers allow you to refuse or delete cookies. Disabling cookies may affect the functionality of the site.

Our website is hosted on a third party platform. That provider may collect technical information as part of delivering and securing the site.

10. WHO WE DISCLOSE PERSONAL INFORMATION TO

We may disclose personal information to:

  a. our employees, contractors and associates, on a need to know basis;
  b. the client that engaged us, where we are delivering services on their behalf;
  c. service providers who support our business, including cloud hosting,      email and productivity platforms, survey and research platforms,      customer relationship and marketing systems, analytics providers,      payment processors, and professional advisers;
  d. a purchaser or prospective purchaser in connection with the sale or restructure of our business; and
  e. any person where required or authorised by law, or where you have consented.

We require our service providers to protect personal information and to use it only for the purpose for which it was provided.

​

12. SECURITY

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. Measures include access controls, multi factor authentication, encryption in transit, restricted administrative access and supplier due diligence.

No method of transmission or storage is completely secure. If we suspect an eligible data breach has occurred, we will assess and respond in accordance with the Notifiable Data Breaches scheme under the Privacy Act, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.

13. RETENTION AND DESTRUCTION

We retain personal information only for as long as it is needed for the purposes set out in this Policy, or as required by law, contract or our record keeping obligations. When it is no longer required, we take reasonable steps to destroy it or ensure it is de-identified.

14. ARTIFICIAL INTELLIGENCE AND AUTOMATED PROCESSING

We may use artificial intelligence and automated tools to assist with tasks such as transcription, summarisation, thematic analysis of survey comments
and reporting.

Where we use these tools, human review remains part of our process, and we do not use them to make decisions that produce legal or similarly significant effects for an individual without human involvement.

We take reasonable steps to ensure that personal information submitted to third party AI tools is protected, and that it is not used to train publicly available models where we can control that setting.

15. ACCESS AND CORRECTION

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading.

Requests should be sent to info@bullseyecx.com.au. We may need to verify your identity. We will respond within a reasonable period, ordinarily within 30 days. If we refuse access or correction, we will tell you why in writing and explain how you can complain.

​

17. CHANGES TO THIS POLICY

We may update this Policy from time to time. The current version will always be published on our website with the date it was last updated.