Privacy Policy

The registration form requests first name, last name, email and telephone number. A support enquiry also contains the message, attachments you choose to provide and subsequent correspondence. These details are used to respond to the request and organise the contact you asked for.

Please do not send passwords, API secrets, wallet recovery phrases or payment card details through the form or email. Identity documents should be provided only through the secure process identified by the actual service provider. We do not describe the public registration form as an identity-document upload system.

Browser storage and cookies may support form operation, preferences or embedded resources. Pages can load a market ticker and office maps from third parties; those providers receive connection information when their resources are requested and apply their own notices.

The website loads a Google Analytics tag to measure use of pages and interactions. Google processes information under its own privacy terms. You can manage cookies and third-party requests in your browser; blocking them can affect some functionality. Advertising or retargeting is not represented as enabled merely because analytics is configured.

Applicable privacy requirements depend on the activity, entity and jurisdiction. Canadian commercial handling may be subject to PIPEDA or applicable provincial law; Australian handling may be subject to the Privacy Act and Australian Privacy Principles where they apply. The relevant operator must assess its obligations.

Where GDPR applies, processing can rely on steps requested before a contract or performance of a contract, a legal obligation, a properly assessed legitimate interest or consent as appropriate. Optional marketing consent is separate from necessary service contact and can be withdrawn. Merely making a Canadian website accessible does not establish every GDPR obligation.

For website contact requests, the relevant purpose is to respond to the user’s enquiry. Security processing supports the protection of infrastructure and users, subject to applicable safeguards and rights. Ask the privacy contact which basis applies to a specific record or use.

The installed registration infrastructure sends submitted form information, including contact and technical context, to an external lead-processing service so that the request can be routed. Staff and necessary IT or communications suppliers may also handle an enquiry. Before an introduction or account activation, ask the desk to identify the receiving financial provider and its privacy notice. Affiliated companies should receive information only where necessary and lawful.

Service systems can operate in more than one country. Before a transfer that requires notice or safeguards, the responsible operator must consider applicable requirements and the recipient’s protection of the information. Contact the team for the recipients and locations relevant to your request.

Personal information should be handled with safeguards appropriate to its sensitivity, including controlled access and secure communication. No transmission or storage system is completely immune to failure. Do not assume that a public page proves a specific database encryption or certification arrangement.

Send only the information needed for an enquiry and use the provider’s secure document channel for sensitive verification records. If you believe information has been exposed, contact support with a description and remove credentials from attachments. The security page explains practical steps for protecting account access.

Hosting, form infrastructure, communication tools and embedded resources can involve external providers. Their role should be limited to the required function and governed by appropriate responsibilities. An external account provider can process information under its own notice rather than as our processor.

Google Analytics is configured in the website header. Its actual data retention and account settings should be confirmed with the website privacy contact. No separate advertising or retargeting configuration is asserted here. If further marketing technology is introduced, its purposes and applicable choices must be disclosed.

This notice may be updated when the website, processing activities or applicable requirements change. The current version is published here; material changes that require further notice or consent must be handled as applicable. Publication alone does not make an undisclosed processing purpose lawful.

Published version: 18 September 2026. For access, correction, deletion, communication preferences or questions about a recipient or retention period, contact [email protected] and mark the subject Privacy. You may also contact the competent privacy authority where applicable.