Data Protection

Data Controller and Contact

Digital Currency Institute Australia (DCI-AU) is the data controller for personal information processed in connection with this website.

Controller/Owner: Michael James

Postal Address: 45 Benjamin Way, Belconnen ACT 2617, Australia

Email: [email protected]

Scope and Jurisdiction

This notice explains how DCI-AU processes personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where we offer services to, or monitor the behaviour of, individuals in the European Union/European Economic Area or United Kingdom, we also apply the principles and rights set out in the EU/UK General Data Protection Regulation (GDPR) to those individuals.

Definitions

• Personal information/personal data: Information about an identified individual or an individual who is reasonably identifiable.
• Processing: Any operation performed on personal information, such as collection, storage, use, disclosure, or deletion.
• Controller: The entity that determines the purposes and means of processing personal information.
• Processor/Service provider: A third party that processes personal information on behalf of the controller.
• Special categories (GDPR): Sensitive data such as health, biometric, or data revealing racial or ethnic origin; we do not intentionally collect such data.

Categories of Personal Information We Process

• Identification and contact details: Name, email address, and any information you provide when contacting us or subscribing to updates.
• Technical and device data: IP address, device identifiers, browser type, operating system, timestamps, and similar diagnostic logs collected through our servers and cookies or similar technologies.
• Usage data: Pages viewed, referring/exit pages, interactions with site features, and performance metrics to help improve our services.
• Content you submit: Queries, feedback, or materials you voluntarily provide (e.g., comments, forms). If you choose to provide wallet/public addresses for notifications or research features (such as airdrop tracking), we process that data for the specified purpose.
• Marketing preferences: Your opt-in/opt-out choices and related interaction data.

Purposes and Legal Bases for Processing

Service delivery and site operation

We process data to operate, maintain, and secure our website; to provide informational content, tools, and comparisons; and to respond to your requests. Legal bases: performance of a contract (where applicable), legitimate interests in operating and improving our services, and compliance with legal obligations.

Communications and support

We use contact details to respond to inquiries, provide support, and manage relationship communications. Legal bases: legitimate interests; performance of a contract (where applicable).

Research, analytics, and improvement

We analyse aggregated and pseudonymised usage to enhance content relevance, performance, and user experience. Legal bases: legitimate interests; consent for non-essential cookies/analytics where required.

Marketing and newsletters

We send newsletters or updates only with your consent or as otherwise permitted by law. You may withdraw consent at any time.

Security and fraud prevention

We process technical data to detect, prevent, and investigate security incidents and misuse. Legal bases: legitimate interests; compliance with legal obligations.

Compliance and record-keeping

We retain certain data to comply with legal requirements, resolve disputes, and enforce agreements. Legal bases: legal obligations; legitimate interests.

Cookies and Similar Technologies

We use essential cookies necessary for core functionality and may use non-essential cookies (e.g., analytics) to understand usage and improve our services. Non-essential cookies are used with your consent where required. You can manage preferences via your browser settings and, where available, our consent tools. Disabling certain cookies may affect site functionality.

Sources of Personal Information

• Directly from you when you contact us, subscribe, or submit information.
• Automatically from your device through cookies, logs, and similar technologies.
• From service providers that support our operations (e.g., analytics or email delivery), in accordance with their obligations to us.

Disclosures to Third Parties

We disclose personal information only as needed for the purposes described above and subject to appropriate safeguards:

• Service providers and processors (e.g., hosting, analytics, email and communication platforms, security providers) bound by confidentiality and data protection obligations.
• Professional advisers (e.g., legal and accounting) under duties of confidentiality.
• Regulatory authorities and law enforcement where required by applicable law.
• Business transfers in connection with reorganisation or similar events, subject to continued protection of your information.

International Transfers

Your information may be processed in or transferred to countries outside Australia and, where applicable, outside the EU/EEA/UK. When we transfer personal data internationally, we use lawful transfer mechanisms, such as standard contractual clauses or equivalent safeguards, and require recipients to protect the information as described in this notice.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Criteria used to determine retention periods include the nature and sensitivity of the data, potential risk from unauthorised use or disclosure, the purposes of processing, and applicable legal obligations. Illustratively, routine server logs are typically retained for up to 12 months; support correspondence for up to 24 months; and marketing data until you unsubscribe or your consent is withdrawn.

Your Rights under GDPR (for EU/EEA/UK Individuals)

• Access: Obtain confirmation and a copy of your personal data.
• Rectification: Correct incomplete or inaccurate data.
• Erasure: Request deletion in certain circumstances.
• Restriction: Limit processing in specific cases.
• Portability: Receive data in a structured, commonly used format and transmit it to another controller where technically feasible.
• Objection: Object to processing based on legitimate interests or direct marketing.
• Withdraw consent: Withdraw consent at any time where consent is the legal basis.
• Complaint: Lodge a complaint with a supervisory authority. You may also contact us first so we can address your concerns.

Your Rights under the Australian Privacy Act and APPs

• Access: Request access to the personal information we hold about you, subject to lawful exceptions.
• Correction: Request correction of personal information that is inaccurate, out-of-date, incomplete, irrelevant, or misleading.
• Anonymity and pseudonymity: Where lawful and practical, you may interact with us without identifying yourself or by using a pseudonym.
• Direct marketing: Opt out of receiving direct marketing communications at any time.
• Complaint: Make a privacy complaint to us and, if unresolved, to the Office of the Australian Information Commissioner (OAIC).

How to Exercise Your Rights

You may exercise your rights by contacting us at [email protected] or by post to: Michael James, 45 Benjamin Way, Belconnen ACT 2617, Australia. Please provide sufficient information for us to verify your identity and understand your request. We will respond without undue delay and, in any event, within one calendar month for GDPR requests and within a reasonable period (usually 30 days) for APPs requests. If we cannot comply with your request, we will explain why and inform you of your options.

Security Measures

We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, least-privilege principles, audit logging, and vendor due diligence. No method of transmission or storage is completely secure; however, we strive to protect your information to a commercially reasonable standard. We comply with the Notifiable Data Breaches scheme under the Privacy Act, including assessing eligible data breaches and notifying affected individuals and the OAIC where required.

Childrens Privacy

Our website and resources are intended for a general audience and are not directed to children. We do not knowingly collect personal information from individuals under 16 years of age without appropriate consent. If you believe a child has provided us personal information, please contact us so we can delete it.

Automated Decision-Making and Profiling

We do not engage in solely automated decision-making that produces legal or similarly significant effects about individuals. We may conduct limited analytics to understand content performance and user engagement, which does not produce such effects.

Third-Party Content

Our website may reference third-party platforms, protocols, or resources. Your interactions with third parties are governed by their own privacy practices. We encourage you to review their notices as applicable.

Data Minimisation and Accuracy

We collect and process only the personal information that is relevant and necessary for the stated purposes and take reasonable steps to ensure the information is accurate, up-to-date, and complete. Please notify us of any changes to your personal information.

Non-Custodial Disclaimer

DCI-AU does not provide custodial services and will never request your private keys or seed phrases. Do not share sensitive wallet credentials with us or any third party claiming to represent us.

Changes to This Notice

We may update this notice from time to time to reflect changes in our practices or legal requirements. Material changes will be indicated by updating the effective date and, where appropriate, by additional notice. Your continued use of our services after changes take effect signifies your acknowledgment of the updated notice.

Contact

For any questions, requests, or complaints regarding this notice or our data handling practices, please contact: [email protected] or write to Michael James, 45 Benjamin Way, Belconnen ACT 2617, Australia.