Privacy Policy

Effective Date: 24 August 2025
Last Updated: 10 October 2025

At Dlyte Pty Ltd (“Dlyte”, “we”, “our”, or “us”), we put people first. Protecting your privacy and keeping your information safe matters to us. This Privacy Policy explains how we collect, use, store, and protect your personal information in line with the Australian Privacy Principles (APPs), GDPR, and CCPA.

1. What We Collect

We only collect information we genuinely need to provide our services. This may include:

• Contact details: name, email, phone number, and organisation.
• Business and project details you provide when engaging us.
• Usage data from our website (cookies, analytics tools).
• Feedback from interviews, surveys, and usability testing.

Information is collected directly or via trusted third parties.

2. Sensitive Information

We only collect sensitive information (e.g. ethnicity, health data) if:

• You provide explicit consent,
• It is directly related to delivering our services, or
• We are legally required or authorised to collect it.

3. How We Use Your Information

• To deliver services and manage client relationships.
• To improve our digital tools and user experiences.
• To share updates, reports, or communications.
• To meet legal or regulatory obligations.
• For secondary purposes where reasonably expected (e.g. service improvement or internal research).

4. Email Communications & Preferences

Marketing emails contain an unsubscribe link. Essential service communications may still be sent. Contact accounts@dlyte.io to adjust preferences.

5. Data Retention & Deletion

We retain personal information only as long as necessary. For usability testing:

• Raw data (e.g. transcripts, audio/video recordings, session screen captures) is deleted after 90 days from delivery.
• You’ll receive a reminder email one week prior to any deletion.
• Insight decks and reports created by Dlyte are retained for long-term value and performance tracking.
• All raw personal data is anonymised or blurred to prevent exposure of identifiable details.
• Participants may withdraw consent at any time, and data will be removed where legally permissible.
• We do not reuse session data beyond the agreed study scope.
• We take reasonable steps to ensure deletion or de-identification of raw data on third-party platforms (see below).

6. Third-Party Research Platforms

In some projects, we use external vendors (e.g. research recruitment platforms or video tools). These providers act as data processors and are required to maintain strict confidentiality and security standards.

We instruct our vendors to remove or archive raw data in line with our internal policy. This includes participant screeners, session recordings, and transcripts. Clients are always notified in advance before deletion.

7. Participant Privacy & Consent

• Participants are informed about the nature of research before taking part.
• We obtain explicit consent for all recordings.
• Participants may withdraw at any time without penalty.
• Personally identifiable input (like payment details) is excluded from test flows, or substituted with non-identifiable placeholders.
• Where live sites are used, recordings are paused or stopped before sensitive data entry.

8. Information Masking & Anonymisation

If identifiable information (names, addresses, contact info) is visible in session footage, we apply blurring or masking. We ensure all research outputs are anonymised before being delivered to clients.

9. Cookies & Analytics

We use basic analytics tools (like Google Analytics) to understand visitor behaviour and improve usability. This data is anonymised and cannot be used to identify you. You can control cookie settings via your browser.

10. Your Rights

• Request access to personal data we hold about you.
• Request corrections or deletion where appropriate.
• Withdraw consent at any time.

Contact us at accounts@dlyte.io for requests. We may ask you to verify your identity first.

11. Data Security

• All data is stored in secure, access-restricted environments.
• We use encryption and best-practice protocols.
• Data is never sold or repurposed without permission.
• Session data is shared only with authorised stakeholders.

12. International Transfers

When transferring data outside Australia, we ensure compliance with Australian law and international data standards (GDPR, CCPA).

13. Updates to This Policy

This policy may be updated from time to time. All changes will be reflected on this page with a “last updated” date. For material changes, we’ll also notify clients directly.

14. Global Applicability & Ethical Research

Our privacy and research standards apply to all engagements regardless of client, project, or methodology. We uphold ethical practices and participant protection as part of every study.

15. Use of AI in Research

Dlyte does not use AI for any analysis, insight generation, or decision-making. We never upload, share, or process raw research data — including participant recordings, transcripts, or usability session outputs — through any AI tools, models, or services.

All analysis and reporting are conducted manually by our research team to ensure accuracy, privacy, and ethical oversight. Dlyte’s commitment to human-led interpretation ensures that every finding is grounded in real evidence, verified by experienced researchers, and never influenced by automated systems.

16. Contact Us