What we do with your information

This page explains how we deal with the information that we obtain from visitors to our website and individuals that participate in our personality profile and psychometric testing, and users of the TALY platform. By proceeding to take a personality profile or psychometric test through this website you will be asked to consent to the use of your information as described on this page.

THE PEOPLE IDEA PTY LTD (ACN 602 736 836) PRIVACY POLICY

PLEASE READ THIS AGREEMENT CAREFULLY BEFORE ACCESSING THE WEB PLATFORM. BY ACCESSING AND USING THE WEB PLATFORM, YOU ARE AGREEING TO BE BOUND BY THIS AGREEMENT. IF YOU DO NOT AGREE TO ANY CONTENT WITHIN THIS AGREEMENT, YOU MUST NOT ACCESS OR USE THE WEB PLATFORM.

1. BACKGROUND

1.1 The privacy of your Personal Information is afforded the highest level of importance by The People Idea Pty Ltd (ACN: 602 736 836) (Company).

1.2 This privacy policy (Privacy Policy) sets out how the Company and its related bodies corporate (Taly, we, our and us) collects, stores, uses, protects, shares and discloses your Personal Information. Capitalised terms not defined in this Privacy Policy have the meanings given in our Terms of Use. This Privacy Policy applies to our web platform (Web Platform) and our service (Services). By accessing or using our Web Platform, including proceeding to take a personality profile or psychometric test through the Web Platform, you agree to the collection, storage, usage and disclosure of your Personal Information by us in the manner described in this Privacy Policy.

1.3 From time to time we will review our Privacy Policy. We will notify you about any changes to our Privacy Policy at any time by posting an updated version of the Privacy Policy on the Web Platform and emailing you an update. We do not make any representations about third party web platforms that may be linked to the Web Platform or the way in which our customers may use information, reports and data provided in connection with our Services.

1.4 The collection, processing, storage and disclosure of Personal Information will be in accordance with the applicable Laws (defined in clause 2) and if no Laws apply to your jurisdiction, we will comply with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (Privacy Act).

1.5 We have implemented a number of technical and organisational measures to ensure the protection of Personal Information processed through our Services.

1.6 This Privacy Policy sets out our information handling procedures and the rights and obligations that both you and we have in relation to your Personal Information. In the event of any inconsistency, the legislative requirements will override the provisions of this document.

1.7 For the purposes of this Privacy Policy, “Personal Information” means:

(a) information or an opinion about an identified individual, or an individual who is reasonably identifiable;

(b) whether the information or opinion is true or not; and

2. LOCAL LAWS

2.1 We collect and use your Personal Information in different jurisdictions for the provision of our Services. The Laws which apply to the collection and use of your Personal Information differ between jurisdictions.

2.2 For the purposes of this Privacy Policy, the Laws are:

(a) In Australia (and for any country without specific laws), the Privacy Act 1988 (Cth) (AU Privacy Act) and Privacy and Other Legislation Amendment Act 2024 (Cth) (AU Amendment Act);

(b) In Europe, the General Data Protection Regulation (GDPR);

(c) In the United Kingdom, the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (UK) and the Data Protection Act 2018 (UK);

(d) In the United States, the California Consumer Privacy Act of 2018, Cal Civ Code (2018);

(e) In Canada, the Personal Information Protection and Electronic Documents Act SC CAN 2000, c5 (PIPEDA); and

(f) In New Zealand, the Privacy Act 2020 (NZ) (NZ Privacy Act),

(collectively and severally the Laws).

3. USER CONTENT

3.1 Where we rely on your consent as the lawful basis to the collection and processing of your data under the Laws we will always ask you to positively affirm your acceptance of our Privacy Policy. By using the Web Platform, including proceeding to take a personality profile or psychometric test through the Web Platform, you indicate that you accept the terms of this Privacy Policy, you acknowledge and agree to be bound by this Privacy Policy.

3.2 For all areas of the Services where consent is given it is just as easily able to be withdrawn via email at privacy@asktaly.com.

4. WHO CAN USE THE WEB PLATFORM

4.1 We endeavour to make the Web Platform available to as many Users as possible. Use of the Web Platform is subject to the following conditions:

(a) you must be at least 18 years old to use the Web Platform.

(b) If you are under the age of 18, you may only use the Services with the consent of your parent or legal guardian. As such, if you are under the age of 18, you must ensure that a parent or legal guardian has reviewed and discussed the terms of this Privacy Policy with you. If you become aware that a User under the age of 18 has provided us with information or information has been collected without parental or guardian consent, please report this via email at privacy@asktaly.com. Any information provided that is in breach of this provision will be deleted, removed and disposed of in accordance with this clause.

5. PERSONAL INFORMATION WE COLLECT

5.1 We will, from time to time, receive and store Personal Information you enter onto our Web Platform, provided to us directly or given to us in other forms.

5.2 We collect, receive and store such Personal Information including but not limited to:

(a) your contact information, including full name, age, gender, residential postcode, geographical location, telephone number and email addresses;

(b) data relating to your activity on our Web Platform, including if you are a user of our platform and information about you is inputted as part of its functionality, and/or via tracking technologies such as cookies;

(d) relevant codes, passwords or entry access information in the event they may be required to render the completion or works and services.

5.3 We may collect additional information at other times, including but not limited to:

(a) when you provide feedback;

(b) change your content or email preference;

(d) communicate with our customer support.

5.4 The legal basis for the above processing is based on:

(a) your consent through your voluntary submission of the form/s agreeing to these terms;

(b) the Personal Information being necessary for the performance our Services;

(d) any other legitimate interests as detailed below.

6. COLLECTION

6.1 We collect your Personal Information for the following purposes:

(a) To produce a psychometric report for your employer or potential employer, including:

(i) producing a variety of reports requested by our customer that covers personality traits such as emotional intelligence, conscientiousness, openness, innovation profiles, team mapping, resilience profiles, sales profiles and risk profiles. More information about specific profiles can be obtained at taly.com.au. The information that is provided during a test will be collated and assessed electronically using algorithms built within our software. A report will be produced that provides a picture of your natural tendencies, based on the answers that you provide, according to standard industry practice in psychometric analysis. We may also use the information in team settings of employees where we use the results to run sessions to assist with balancing and understanding different personalities.

(b) To produce a personality profile for you, including:

(i) when you participate in a personality profile for personal use, we will use the information that you provide in the testing process to prepare a report that outlines where you sit on a number of key personality dimensions in comparison with the ‘average’ person. This is all done electronically using algorithms built within our software and compiled in a report form by us. If you request a personality profile from Taly, you will be asked to provide consent for Taly to use the information for the research purposes described below. Taly cannot offer you a personality profile unless consent is provided for us to use your responses for research purposes.

(i) using test responses to test the workability of our surveys and to help build new products and tools for understanding personalities. In conjunction with our third party partners we also use personality profiles in an aggregate form to conduct data mapping and form predictions of personality traits.

6.2 We will only collect Personal Information where it is reasonably necessary to do so for the conduct of our business and operate the Web Platform. Any collection of Personal Information by us will be fair and lawful and will not be intrusive.

6.3 Use of any information, reports and data by our customers is not governed by this Privacy Policy. If a third party has arranged for your to undertake a personality profile or psychometric test, you should contact that party directly to understand how they will use the information, reports and data provided by Taly.

6.4 We will collect Personal Information about you through our website which interfaces with our software, including when:

(a) you contact us via email or through our Web Platform with an enquiry;

(b) you visit our website;

(d) your employer or potential employer provides this to us.

(e) you establish an account on our Web Platform;

(f) you engage us to provide services to you; and/or

(g) if during the course of using our Web Platform either you or a third party (including your employer, potential employer or a recruiter) inputs information about you, as part of its functionality.

6.5 In order to maintain and continue to improve our Web Platform and user experience, we may automatically collect information about how you use our Web Platform, the areas of our Web Platform that you visit, as well as information about your computer or mobile device including your IP address, device ID, physical location, browser and operating system type, and referring URLs, via cookies and other tracking technologies. Some of the information we collect may be anonymous and/or aggregated, while other information may be Personal Information. We may also collect information about you through analysing your actions with electronic communications we send to you from time to time, including your opening of such communications and clicking on included links. This information is necessary for providing personalised and location-based content as well as for analysing the use of resources, troubleshooting problems, preventing fraud, and improving our services. We may combine this information with information in your account to help prevent fraud. Any information collected, stored and analysed by us helps us to build our product and ensure the best user experience possible.

6.6 If we collect Personal Information about you from a third party in circumstances outside the input requirements associated with our Web Platform and Service we will, where appropriate, request that the third party inform you that we are holding such information, how we will use and disclose it, and that you may contact us to gain access to and correct and update the information.

6.7 When we collect Personal Information from you, we will take reasonable steps to notify you or ensure you are aware of:

(a) our identity and contact details;

(b) that we have collected your Personal Information, and whether that collect is required or authorised by law;

(d) the consequences if Personal Information is not collected (such as if this will affect our ability to provide the Services to you);

(e) our usual disclosures of Personal Information of the kind collected;

(f) information about this Privacy Policy; and

(g) whether we are likely to disclose Personal Information to overseas recipients, and if practicable, the relevant countries in which they are located.

6.8 Some information referred to in clause 6.7 above is included in this Privacy Policy.

7. HOLDING OF PERSONAL INFORMATION

7.1 We will hold Personal Information as either physical records, records on our servers, records in cloud storage, and in some cases, records on third party servers or cloud storage facilities, which may be located overseas.

7.2 We take active steps to hold all hard copy and electronic records of Personal Information in a secure manner to ensure that they are protected from misuse, interference, loss, and any unauthorised access, modification or disclosure.

7.3 We have procedures in place to destroy or de-identify Personal Information once it is no longer needed for a valid purpose or required to be kept by law.

7.4 If you require further information about these procedures, please contact us via email at privacy@asktaly.com and we will respond to your queries promptly.

8. USE OF PERSONAL INFORMATION

8.1 We will only use or disclose your Personal Information for the purposes for which we advised you we were collecting it for (which are set out as follows and otherwise in this Privacy Policy) or a related purpose which would reasonably be expected or otherwise with your permission.

8.2 Generally we will use your Personal Information:

(a) to operate the Web Platform, provide our Services (including generating reports) and provide customer support (including updates and improvements);

(b) for our administrative, planning, product or service development, quality control, survey and research purposes;

(c) to provide, administer, market and manage our Web Platform, including but not limited to, providing you with customary search results for use in our Services to enhance your experience;

(d) to provide you with access to protected areas of the site and to authenticate your account;

(e) to conduct surveys to determine use and satisfaction with our Services and Web Platform;

(f) to enforce our Terms of Use, this Privacy Policy or any other policy related to our Web Platform;

(g) to verify your information for accuracy or completeness (including by way of verification with third parties);

(h) to comply with our legal obligations, a request by a governmental agency or regulatory authority or legally binding court order;

(i) to combine your Personal Information with information we collect from third parties and use it for the purposes set out this Privacy Policy;

(j) to resolve disputes and to identify, test and resolve problems;

(k) to notify you about updates, improvement and changes to the Web Platform and Services we provide from time to time; and

(l) to protect a person’s rights, property or safety.

8.3 The Web Platform may make third party social media features available to its users. We cannot ensure the security of any information you choose to make public in a social media feature. Also, we cannot ensure that parties who have access to such publicly available information will respect your privacy.

8.4 In the event that we hold sensitive information about you, we will only disclose or use that information with your consent or if another exception applies under applicable laws.

9. DISCLOSURE OF PERSONAL INFORMATION

9.1 We work with third-party partners who help us provide and improve the Web Platform and Services. We do not sell your Personal Information to anyone.

9.2 We may disclose your Personal Information to any of our employees, officers, insurers, professional advisers, agents, suppliers or subcontractors insofar as reasonably necessary for the purposes set out in this Privacy Policy.

9.3 We may disclose your information, including your Personal Information, to third parties for the purposes contained in this Privacy Policy (including those listed above), including but not limited to:

(a) Affiliates and Acquirers

(i) We may share some or all of your Personal Information with our subsidiaries, or other companies under a common control (Affiliates), in which case we will require our Affiliates to honour this Privacy Policy. In the event we are involved in a merger, acquisition or sale of assets we may disclose Personal Information collected by us to such entities that we propose to merge with or be acquired by, and will assume the rights and obligations regarding your Personal Information as described in this Privacy Policy. This includes the disclosure of information to our clients where we act as a data processor.

(b) Third parties and others you choose to share with:

(i) to whom you expressly ask to us to send the Personal Information to or to others you directly or indirectly choose for us to disclose your Personal Information to.

(i) Where a third party (including your employer, potential employer or recruiter) has requested that you undertake a personality profile or psychometric test, by participating in such testing, you expressly consent to Taly disclosing your Personal Information, information, reports and data to that customer in order to deliver our Services;

(d) Other

(i) We may from time to time need to disclose Personal Information to comply with a legal requirement, such as a law, regulation, court order, subpoena, warrant, in the course of a legal proceeding or in response to a law enforcement agency request.

(ii) We may also use your Personal Information to protect the copyright, trademarks, legal rights, property or safety of Taly, its Web Platform, website and customers or third parties.

(iii) Information we collect may from time to time be stored, processed in or transferred between parties located in countries outside of Australia. These may include, but are not limited to EU, USA, UK and Vietnam.

(iv) We will take reasonable steps to ensure that anyone to whom we disclose your Personal Information respects the confidentiality of the information and abides by the APPs or equivalent privacy laws.

(v) We will not share, sell, rent or disclose your Personal Information in ways different from what is disclosed in this Privacy Policy.

10. IF WE CANNOT COLLECT YOUR PERSONAL INFORMATION

If you do not provide us with the Personal Information described above, some or all of the following may happen:

(a) we may not be able to provide the Services to you, either to the same standard or at all;

(b) we may not be able to conduct a personality profile or psychometric test;

(d) we may be unable to tailor the content of our Web Platform to your preferences and your experience of our Web Platform and/or Services may not be as enjoyable, useful or applicable to your requirements.

11. ACCESS OF PERSONAL INFORMATION

11.1 You may request details of Personal Information that we hold about you in accordance with the provisions of the Laws. If you would like a copy of the information which we hold about you or believe that any information we hold on you is inaccurate, out of date, incomplete, irrelevant or misleading, please email us at privacy@asktaly.com. We reserve the right to refuse to provide you with information that we hold about you, in certain circumstances set out in the Laws.

12. COMPLAINTS ABOUT PRIVACY

12.1 If you have any complaints about our privacy practices, please feel free to send in the details of your complaints via email at privacy@asktaly.com. We take complaints very seriously and will respond shortly after receiving written notice of your complaint.

13. COOKIES POLICY

13.1 We may use cookies and URL information to gather information regarding the date and time of your visit and the information for which you searched and which you viewed. “Cookies” are small pieces of information that a Web Platform sends to your computer’s hard drive while you are viewing a web site. We may use both session Cookies (which expire once you close your web browser) and persistent Cookies (which stay on your computer until you delete them) to provide you with a more personal and interactive experience on our Site. Persistent Cookies can be removed by following Internet browser help file directions. Cookies may enable automatic logins when you visit in the future and may enable content customisation.

13.2 Cookies may collect and store your Personal Information. This Privacy Policy applies to Personal Information collected via Cookies. You consent and acknowledge that we collect your Personal Information through Cookies.

13.3 We sometimes use Cookies to show remarketing communications via third party networks like Google Display network and Facebook.

13.4 You can control and/or delete cookies manually as you wish.

14. MANAGING YOUR PERSONAL INFORMATION

14.1 Accessing or Rectifying your Personal Information

(a) Subject to the Privacy Act, you may request to access the Personal Information we hold about you by contacting us via email at privacy@asktaly.com. All requests for access will be processed within a reasonable time.

(b) We may, if required, provide you with tools and account settings to access, correct, delete, or modify the Personal Information you provided to us. In the event that you are unable to access your account to access or rectify your Personal Information, you may submit a request to us to correct, delete or modify your Personal Information. Rectifications, deletions or modifications will be processed within a reasonable time.

14.2 Deletion

(a) We keep data for as long as it is needed for our operations. If you deactivate and delete your account, your data will no longer be visible on your account. Please keep in mind that third parties may still retain copies of information you have made public through our Web Platform.

(b) If you wish to have us delete your data please contact us via email at privacy@asktaly.com.

14.3 Object, restrict or withdraw consent

(a) If you have an account on the Web Platform you will be able to view and manage your privacy settings. Alternatively, if you do not have an account, you may manually submit a request to us if you object to any Personal Information being stored, or if you wish to restrict or withdraw any consent given for the collection of your Personal Information.

(b) You may withdraw your consent to the processing of all your Personal Information at any time. If you wish to exercise this right you may do so by contacting us via email at privacy@asktaly.com.

(c) You may withdraw your consent or manage your opt-ins by either viewing your account on the Web Platform or clicking the unsubscribe link at the bottom of any marketing materials we send you.

14.4 Portability

(a) We may, if required and possible, provide you with the means to download the information you have shared through our Web Platform. Please use the ‘Contact Us’ function within the Web Platform for further information on how this can be arranged.

(b) We may retain your information for fraud prevention or similar purposes. In certain instances, we may not be required or able to provide you with access to your Personal Information. If this occurs, we will give you reasons for our decision not to provide you with such access to your Personal Information in accordance with the Privacy Act.

(c) There is no application fee for making a request to access your Personal Information. However, we may charge an administrative fee for the provision of information in certain circumstances such as if you make repeated requests for information or where the information is held by a third-party provider.

15. ANONYMITY AND PSEUDONYMITY

We cannot facilitate the use of pseudonyms or allow anonymous personality profiles or psychometric testing due to the nature of the services provided by our Web Platform, namely, the engagement by our customer to produce a report on a particular individual.

16. STORAGE AND SECURITY OF PERSONAL INFORMATION

16.1 We are committed to protecting the security of your Personal Information. We (and our third-party service providers) use a variety of industry-standard security technologies and procedures to help protect your Personal Information from unauthorised access, use or disclosure. We use secure web services to collect your information and we store certain kinds of data in encrypted form.

16.2 We follow reasonable technical and management practices to help protect the confidentiality, security and integrity of data stored on our system. While no computer system is completely secure, we believe the measures implemented by us reduce the likelihood of security problems to a level appropriate to the type of data involved.

16.3 We encourage you to be vigilant about the protection of your own information when using digital services, such as social media. While we will endeavour to ensure that any relationships, we have with third parties include an appropriate level of protection for your privacy, we will be limited in our ability to control any electronic platform operated by a third party.

17. INTERNATIONAL TRANSFER AND DISCLOSURE OF PERSONAL INFORMATION

17.1 Where we transfer Personal Information outside of Australia or any other approved, pre-determined geographical location, we ensure an adequate level of protection for the rights of data subjects based on the adequacy of the receiving country’s data protection laws.

17.2 We may disclose Personal Information to our related bodies corporate and third-party service providers located overseas for some of the purposes listed above. We take reasonable steps to ensure that the overseas recipients of your Personal Information do not breach the privacy obligations relating to your Personal Information.

17.3 We may disclose your Personal Information to entities located outside of Australia, including the following:

(a) our related bodies corporate;

(b) our data hosting and other IT service providers, located in various countries; and

17.4 We may disclose your Personal Information to entities within Australia who may store or process your data overseas.

18. NOTIFIABLE DATA BREACHES

18.1 We take data breaches extremely seriously and notification of data breaches will be applied and conferred in accordance with this clause 18.

18.2 In the event that there is a data breach and where the Laws require notification of a data breach, we will notify:

(a) In Australia, the Australian Information Commissioner;

(b) In the United Kingdom, the Information Commissioner’s Office;

(d) In Europe, to the applicable Supervisory Authority;

(e) In Canada, to the Privacy Commissioner of Canada;

(f) In New Zealand, to the Privacy Commissioner.

18.3 We will take all reasonable steps to contain the suspected or known breach where possible and follow the following process set out in this clause.

18.4 We will take immediate steps to limit any further access or distribution where possible. If we have reasonable grounds to suspect that the data breach is likely to result in serious harm to any individuals involved, then we will take all reasonable steps to ensure an assessment is completed within 30 days of the breach or sooner if possible.

18.5 If we reasonably determine that the data breach is not likely to result in serious harm to any individuals involved or any remedial action we take is successful in making serious harm no longer likely, then no notification or statement will be made.

18.6 Where, following an assessment and undertaking remedial action (if any), we still have reasonable grounds to believe serious harm is likely, as soon as practicable, we will provide a statement to each of the individuals whose data was breached or who are at risk. The statement will contain details of the breach and recommendations of the steps each individual should take. We will also provide a copy of the statement to any body required under the Laws.

19. INTEGRITY AND RETENTION OF DATA

We take all reasonable steps to ensure that the Personal Information we collect about you is accurate, up to date and complete. Where we collect that information from you directly, we rely on you to supply accurate information. We make it easy for you to keep your Personal Information accurate, complete, and up to date. We will retain your Personal Information for the period necessary to fulfil the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law.

20. DISCLAIMER – THIRD PARTY LINKS

Our Web Platform may contain links to third party webpages or social media pages (Third Party Pages), including but not limited to those of third parties for whom we have provided our Services to and you acknowledge and agree:

(a) this Privacy Policy and any other policy of ours does not apply to Third Party Pages and we recommend you make reasonable efforts to familiarise yourself with the policies contained on third-party pages;

(b) we are not liable for and you expressly indemnify us for any loss or damage incurred as a result of the failure by Third Party Pages to have in place and provide access to their privacy policy, terms of use or any other company policies or their failure to comply with the Laws or any other applicable laws.

21. CONTACT INFORMATION

21.1 We welcome your comments or questions regarding this Privacy Policy. You can confidentially contact our Support Officer at:

Email: privacy@asktaly.com

21.2 If we do not resolve your enquiry, concern or complaint to your satisfaction or you require further information in relation to any privacy matters, please contact the Office of the Australian Information Commission at:

Telephone: 1300 363 992 (from within Australia) 1300 363 992 (from outside Australia)

Fax: +61 2 6123 5145

Postal Address: GPO Box 5288, Sydney NSW 2001

Website: www.oaic.gov.au

22. CHANGES TO THIS PRIVACY POLICY

This Privacy Policy is subject to occasional revision and we reserve the right, at our sole discretion, to modify or replace any part of this Privacy Policy. It is your responsibility to check this Privacy Policy periodically for changes as continued use of our Web Platform shall indicate your agreement to our then current Privacy Policy. Not all changes to our Privacy Policy will require your consent, for example where office security procedures are changed. We will notify you of any change to our Privacy Policy that requires your consent before being implemented.

23. GENERAL

This Privacy Policy was last updated on 1 July 2025 by Merton Lawyers of 713 Glenferrie Road, Hawthorn VIC 3122.