Not a company hotline
Inside MECCA is not MECCA's whistleblower service and does not present itself as an eligible corporate recipient, regulator or law firm.
Research questionnaire
Tell us what happened, in your own words
Share a brief account, choose how your information should be handled, then check and send.
There are three short steps. Sending this form does not give permission to publish your account or identity.
Three short steps
A brief account is enough
Only the clearly marked questions are required. The extra context section can be skipped.
Information and safeguards
Read what you need, when you need it
These notices remain available without sitting between you and the questionnaire.
Legal and safety limitsThis is not a company hotline or automatically protected legal pathway.Open the important legal limits.
No automatic legal protection
Sending information here does not automatically create whistleblower protection, journalist-source privilege or legal professional privilege.
Not for emergencies
If anyone faces immediate danger, contact emergency services on 000. Seek independent legal advice before relying on a statutory disclosure pathway.
Before you beginWays to protect yourself and other people.Open the practical safety checklist.
- Use a personal device, email address and network.
- Do not access, remove, record or send material unlawfully.
- Include another person's name or identifying details only when genuinely necessary.
- Consider whether your exact role, store, location, dates or wording could identify you.
- Preserve original files, but contact the project before sending highly sensitive material.
Contributor data-handling noticeRead the full notice before you submit.What is collected, why it is used, who can access it, and how long it is retained.
What happens to the information you provide
Inside MECCA independently operates this questionnaire. The project applies data-minimisation, access, correction, security, retention and deletion practices modelled on the Australian Privacy Principles, without representing that every provision necessarily applies in every circumstance.
What is collected
Your answers, identity preference, contact and consent choices, optional email, submission time, private reference and browser user-agent string are recorded. This form records whether supporting material exists but does not upload files.
Why it is used
Information is used to assess your account, organise research, conduct verification and contact you only as selected. Separate, non-identifying audience analytics improve the participation process. Information is not sold or used for commercial marketing.
Sensitive information
Workplace accounts may include health, disability, racial or ethnic origin, union membership or other sensitive information. Include only what is necessary. The final consent section asks for express consent to collect what you choose to provide.
Other people's information
Details about managers, colleagues or witnesses are separated from public material and minimised. Unnecessary third-party identifying information may be removed or segregated from the working research record.
Storage and providers
The submission is stored in a restricted Supabase database. When email delivery is available, Resend sends a copy to the restricted submission inbox. Hosting infrastructure processes the request in transit. Providers may process information outside Australia.
Access and disclosure
Access is limited to people who need the information for verification, editorial, legal or necessary technical work. Disclosure may occur where required by valid legal process or necessary to address an immediate serious safety risk.
Your requests
Using your private reference, you can request correction, stop contact, withdrawal or deletion. Practical or legal limits, including backups, a legal hold or material already published with separate permission, will be explained.
Publication boundary
Submission is not consent to quote, publish or identify you. If public use is proposed, the exact material, identity treatment and intended format must be separately agreed.
Retention schedule
Effective 11 August 2026. Review due by 11 August 2027.
| Information | Standard period | Action at the end |
|---|---|---|
| Spam, duplicate or test records | Within 30 days after identification | Delete. |
| Questionnaire funnel and optional audience feedback | 12 months from the event | Delete or retain only a non-identifying aggregate. Analytics exclude questionnaire answers, names, contact details, exact locations, IP addresses and visitor profiles. |
| Optional email and contact preference | Up to 24 months after the last meaningful contact | Delete or de-identify earlier if contact permission is withdrawn, subject to a documented legal reason. |
| Submission not used in an active inquiry | 3 years from receipt | Delete or de-identify. |
| Submission used in active verification, investigation or production | Until that work closes, then 3 years | Delete or de-identify unless a documented extension applies. |
| Minimum consent, correction, complaint, right-of-reply and editorial-decision records | 7 years after the relevant publication or final decision | Remove avoidable identifying details, subject to legal obligations. |
Extensions are not automatic. They require a recorded reason, scope and review date and are limited to 12 months at a time. Provider backups or delivery records may remain temporarily after deletion from active systems and must not be returned to routine use.
Privacy contact: shareyourstory@insidemecca.net. Include your private submission reference if available, but do not send additional sensitive information in the first email.