Privacy policy | Australian Everest

About this policy

This policy applies to Australian Everest Fintech Pty Ltd (ABN 83 627 459 429), trading as Australian Everest (we, us, our). We are registered with AUSTRAC as a digital currency exchange provider, registrationDCE100581976-001.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. As a reporting entity, we also have obligations under theAnti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) (theAML/CTF Act). This policy explains how we handle personal information about clients, prospective clients, their representatives and visitors to our website.

By using our website or services, or by giving us your personal information, you agree to it being handled as described here.

Information we collect

Depending on how you deal with us, we may collect:

Identity information: full name, date of birth, residential address, nationality, and government-issued identification such as a passport or driver licence.
Contact information: email address, phone number and postal address.
Entity information: for companies, trusts, funds and other entities, details of directors, beneficial owners, trustees, authorised signatories and shareholders, along with constitutional and registration documents.
Financial information: bank account details, source of funds and source of wealth, occupation, employer, income or net asset details, and tax residency information.
Transaction information: trade history, quotes, settlement instructions, digital asset wallet addresses and related blockchain data.
Communications: emails, chat messages and, where we tell you, recorded phone calls with the desk.
Technical information: IP address, browser and device type, and pages visited on our website.

Sensitive information

To verify your identity we may collect biometric information, such as a photo or video of your face compared against your identification document. Screening against sanctions, politically exposed person and adverse media lists may reveal information about criminal records or political associations.

We only collect sensitive information with your consent, or where required or authorised by law, including the AML/CTF Act.

How we collect it

We collect personal information:

directly from you, when you submit an enquiry, complete onboarding, trade or contact the desk
from your authorised representatives, advisers or the entity you act for
from third parties, including electronic identity verification services, document verification services, sanctions and PEP screening providers, and blockchain analytics providers
from public sources, such as ASIC, the ABR and other public registers
automatically, when you use our website

If we receive personal information we did not ask for, we will destroy or de-identify it if we could not have lawfully collected it.

Why we collect and use it

We collect, hold and use personal information to:

respond to enquiries and assess whether our services suit you
verify your identity and carry out customer due diligence and ongoing monitoring under the AML/CTF Act
provide quotes, execute trades and settle transactions
detect, prevent and investigate fraud, scams, money laundering and other unlawful activity
meet our legal and regulatory obligations, including reporting to AUSTRAC and responding to lawful requests from regulators and law enforcement
manage our relationship with you, including account administration and complaints
maintain and improve our services, systems and website
send you information about our services, where you have not opted out

If you do not provide it

You can browse our website and make a general enquiry without identifying yourself. Before we can trade with you, the AML/CTF Act requires us to identify and verify you. If you do not provide the information we need, we will not be able to onboard you or carry out transactions.

Who we share it with

We may disclose personal information to:

service providers who help us run our business, including identity verification, screening, blockchain analytics, IT, cloud hosting, communications and data storage providers
banks, payment providers and custodians involved in settling your transactions
liquidity providers and counterparties, to the extent needed to complete a transaction
regulators, government agencies and law enforcement, including AUSTRAC, the Australian Taxation Office and the Australian Federal Police, where required or authorised by law
our professional advisers, such as lawyers, accountants and auditors
your authorised representatives
a prospective buyer or successor if all or part of our business is sold or restructured

We require service providers to keep your information confidential and use it only for the purpose we gave it to them. We do not sell personal information.

The AML/CTF Act may prevent us from telling you that we have reported a matter to AUSTRAC or disclosed information to a government agency.

Overseas disclosure

Some of our service providers store or process information outside Australia, including in the United States, the United Kingdom, the European Union and Singapore. Where we disclose personal information overseas, we take reasonable steps to make sure the recipient handles it in a way consistent with the Australian Privacy Principles.

Cookies and website data

Our website and hosting provider record standard technical information, such as IP address, browser type and pages requested, to deliver the site, keep it secure and understand how it is used. We may use cookies or similar technologies for the same purposes. You can block or delete cookies in your browser settings, although some parts of the site may not work as intended.

Direct marketing

We may send you updates about our services. Every marketing email includes a way to unsubscribe, or you can contact us at any time to opt out. We will still send you messages we need to send about your account, transactions or our legal obligations.

Security and retention

We hold personal information in electronic and paper form and protect it with technical, physical and organisational controls. These include encryption, access controls limited to staff who need the information, multi-factor authentication, and staff training and confidentiality obligations.

The AML/CTF Act generally requires us to keep customer identification and transaction records for at least seven years. When we no longer need personal information for any purpose permitted by law, we take reasonable steps to destroy or de-identify it.

Access and correction

You can ask to access the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date, incomplete or misleading. Contact us using the details below. We will respond within 30 days.

We may need to verify your identity first. In some cases the law allows or requires us to refuse access, for example where giving access would be unlawful or would prejudice an investigation. If we refuse, we will tell you why in writing, unless doing so would itself be unlawful. We do not charge for a request, but may charge a reasonable fee for the cost of giving access.

Data breaches

If a data breach involving your personal information is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme.

Complaints

If you are concerned about how we have handled your personal information, contact us using the details below. We will acknowledge your complaint promptly, investigate it and aim to give you a written response within 30 days.

If you are not satisfied with our response, you can complain to the OAIC atoaic.gov.au or on1300 363 992.

Changes to this policy

We may update this policy from time to time. The current version will always be on this page, with the date it was last updated.

Contact us

For privacy questions, requests or complaints, contact our Privacy Officer:

Email: info@australianeverest.com
Phone: +61 421 934 521
Post: Privacy Officer
Australian Everest Fintech Pty Ltd
43 Lawson Way
Caroline Springs VIC 3023