Privacy Policy
Lewers Hothouse Pty Ltd (ABN 43 635 075 679), trading as Redge
Last updated: 30 September 2026
In this policy, "Redge", "we", "us" and "our" mean Lewers Hothouse Pty Ltd, trading as Redge.
1. Who this policy is for
Redge is a market research platform. Three different groups of people give us information, and what we do with each is different.
- Clients: researchers and organisations who subscribe to Redge and use it to run studies.
- Respondents: people who answer a survey built in Redge. Most arrive through a panel provider who invited them; some through a link a client sent directly.
- Website visitors: anyone reading redge.com.au.
This policy covers all three, and says which is which throughout. It is written to meet our obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
An important distinction for respondents. When you answer a survey, the research is being run by our client, not by us. They decide what to ask, who to ask, and what to do with the answers. We provide the platform and hold the data on their behalf. Where this policy says a client decides something, that is why.
2. What we collect
From respondents
When you take a survey built in Redge, we record:
- Your answers, including anything you write in your own words.
- Follow-up conversation. Some studies use an interviewer that asks follow-up questions based on what you have said. Both the questions and your replies are recorded. See section 5.
- Video, where a study asks for it. If a study includes a video question, your recorded answer includes your image and voice. See section 6.
- How long you took: when you started and finished, and how long you spent on each question.
- Technical information: the type of browser and device you used, and a one-way cryptographic hash of your IP address. We do not store your IP address itself.
- A panel identifier, if a panel provider sent you. This is a code that identifies you to them, not to us. We use it to tell them you completed the survey so that you can be paid.
- Quality signals: whether you answered an attention check correctly, and whether your pace suggests the questions were not read.
We do not ask respondents for their name, email address or contact details as a matter of course, and a panel provider does not give them to us. If a particular study asks for identifying information, it will say so on screen before you answer.
From clients
Your name, work email address, and either a password (stored only as a cryptographic hash, never in readable form) or a link to a Google account used to sign in. Which organisation you belong to and what you are permitted to do in it. Information about the studies you build and run, and the billing details needed to invoice you.
From website visitors
If you fill in a form on redge.com.au (for example to request a quote, book a call, join early access or subscribe to our updates), we collect what you enter, which is usually your name, email address, organisation and message. Our website also collects the standard technical information a web server receives, such as your browser type and the pages you visit. See section 11 on cookies.
3. Why we collect it
Respondent data is collected to deliver the research a client commissioned: to ask the questions, to route you correctly, to check the quality of the sample, to report results to that client, and to confirm to a panel provider that you completed the survey so they can pay you.
Client data is collected to operate your account: to sign you in, to control who in your organisation can do what, to send service emails such as password resets and invitations, and to bill you.
Website visitor data is collected to respond to your enquiry, and, if you have subscribed, to send you updates. You can unsubscribe from updates at any time using the link in any email we send.
We do not sell personal information. We do not use respondent answers to advertise to anyone, and we do not combine answers across clients to build a profile of any individual.
4. How long we keep it
- Respondent answers, video responses and completion records are kept for as long as the client who ran the study keeps it in their account, so that they can access their research. A client can ask us to delete a study at any time.
- Panel identifiers are kept with the study record only so that completions can be reconciled with the panel provider, and are deleted with the study.
- When a client's subscription ends, we keep their account and study data for 30 days so they can export it, and then delete it within a further 60 days.
- Records we are required by law to keep, such as invoices and tax records, are kept for as long as the law requires.
- Backups are overwritten on a rolling basis. Data deleted from the platform may remain in a backup until that backup is overwritten, and is not used in the meantime.
- Website enquiries are kept for as long as we need them to respond to you and manage our relationship with you.
5. Artificial intelligence
Some Redge studies use an AI interviewer. Where they do:
- The question you have just answered, and the conversation so far, are sent to Anthropic (the provider of the Claude models) so a relevant follow-up question can be generated.
- After fieldwork, open-ended answers may be sent to the same service to group them into themes and help write a report.
This means the words you write in a survey may be transmitted outside Redge's own systems for processing. They are sent for that purpose only.
Your answers are not used to train AI models. Redge uses Anthropic's commercial service, under terms that do not permit Anthropic to train its models on the data we send. We do not use respondent answers to train any model either.
We record the question the interviewer asked alongside every answer it produced, so the client running a study can see exactly what you were asked.
6. Video responses and sensitive information
Some studies ask respondents to record a video answer. A video of your face is biometric information, which the Privacy Act treats as sensitive information and which may only be collected with your consent.
Where a study includes a video question:
- You are told before you answer, and you choose whether to record.
- Redge automatically declares to the panel provider that the study collects personal information, so that they can obtain the appropriate consent and route the invitation accordingly.
- Some studies additionally analyse facial expression in the recording. Where that happens it is a decision of the client running the study, and the client is responsible for telling you before you record.
7. Who we share it with
We disclose personal information to the following, and only as far as each needs it:
- The client running the study receives answers and completion records, because it is their research.
- Panel providers (including Cint) receive a respondent identifier and the outcome (completed, screened out, quota full, or ended for quality), so respondents are paid and panels are managed.
- Anthropic receives open-ended answers and interview conversation, where AI features are used, to generate follow-up questions and analyse themes.
- Microsoft Azure hosts the Redge platform and all platform data.
- Amazon Web Services stores uploaded media, including video responses.
- Postmark receives client email addresses, to send service emails. No respondent email addresses are sent.
- Google receives nothing. Where a client signs in with Google, Google tells us their identity; we tell Google nothing.
- Our website provider (Odoo) hosts redge.com.au and stores website form submissions.
We may also disclose information where the law requires it.
Overseas disclosure
The Redge platform is hosted in Australia, in Microsoft Azure's Australia East region, and uploaded media is stored in Amazon Web Services' Sydney region.
Some of the service providers above process data outside Australia. Anthropic, Postmark and Odoo may process data in the United States or Europe, and panel providers such as Cint operate internationally. Before we use a provider, we take reasonable steps to ensure it handles personal information in a way consistent with the Australian Privacy Principles.
8. How we protect it
- All traffic to and from Redge is encrypted in transit.
- Passwords are stored only as bcrypt hashes and can never be read back.
- Access to a study is limited to the organisation that owns it, enforced on every request rather than only in the interface.
- IP addresses are hashed rather than stored.
- Access within a client organisation is controlled by role.
No system is perfectly secure. If a data breach occurs that is likely to cause serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.
9. Your rights
If you are a client, you can see and correct your account information by signing in.
If you are a respondent, you may ask us what personal information we hold about you, ask for it to be corrected, or ask for it to be deleted. Two honest caveats:
- Most survey responses reach us without any information identifying you, so we may need the panel identifier from your invitation to find yours at all.
- Because the research belongs to our client, a request about your answers may need to be directed to them. We will tell you who that is and help you reach them.
If you contacted us through our website, you can ask us what we hold about you, or ask us to correct or delete it.
Ask by writing to info@redge.com.au. We will respond within 30 days.
10. Complaints
If you think we have mishandled your personal information, write to info@redge.com.au and we will investigate and respond within 30 days.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, or on 1300 363 992.
11. Cookies
On the Redge platform, we store a sign-in token in your browser when you sign in as a client, so that you stay signed in. Respondents taking a survey are not tracked across sites.
On redge.com.au, our website platform sets cookies that are needed for the site to work, such as remembering your session and your language, and for recording which pages are visited. We do not use advertising cookies. You can block or delete cookies in your browser settings; the website will still work, although some features such as forms may not.
12. Children
Redge is not intended for children. We do not knowingly collect personal information from anyone under 16, and studies fielded through panel providers are restricted to adults.
13. Changes
We may update this policy. The date at the top shows when it last changed, and material changes will be notified to clients by email.
14. Contact
Lewers Hothouse Pty Ltd, trading as Redge
Kew, Victoria, Australia