Privacy

Scope and Application

This Privacy Policy explains how Digital Currency Institute Australia (DCI-AU) handles personal information in connection with the website located at dci-au.org and related services and communications. It applies to individuals in Australia and, where relevant, to users accessing our services from other jurisdictions.

DCI-AU manages personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and complies with the Notifiable Data Breaches scheme.

By accessing or using our services, you acknowledge this Privacy Policy. Where required, we will seek your consent for particular collections, uses, or disclosures.

About Us and Contact Details

Controller/Owner: Michael James trading as Digital Currency Institute Australia (DCI-AU)

Postal Address: 45 Benjamin Way, Belconnen ACT 2617, Australia

Email: [email protected]

For all privacy enquiries, access or correction requests, or complaints, please contact us using the above details.

Definitions

For the purposes of this Privacy Policy:

• Personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether true or not and whether recorded in a material form or not.
• Sensitive information includes information such as health information, biometric information, racial or ethnic origin, political opinions, religious beliefs, or sexual orientation, as defined in the Privacy Act.
• De-identified information is information that is no longer about an identifiable individual or an individual who is reasonably identifiable.

Personal Information We Collect

We collect only the personal information reasonably necessary for our functions and activities or as otherwise permitted by law.

• Identification and contact details: name, email address, and any information you include when you contact us.
• Account and preference information: user settings, saved preferences, newsletter subscriptions, and communication choices.
• Content and submissions: comments, feedback, survey responses, or other material you submit to us (including for research or community features).
• Usage and technical data: IP address, device identifiers, browser type, operating system, pages viewed, links clicked, time and date of visits, referral URLs, and general location data derived from IP address.
• Cookies and similar technologies: data stored via cookies, local storage, pixels, and tags for purposes including analytics, security, and site functionality.
• Professional information: if you engage with us in a professional capacity (e.g., as a partner, advertiser, or contributor), we may collect business contact details and role information.
• Third-party sources: information from service providers (e.g., analytics, email delivery), affiliates, or publicly available sources, in accordance with applicable law.

Sensitive Information

We do not actively seek to collect sensitive information. If we do collect sensitive information, we will do so only with your consent or as required or permitted by law.

Unsolicited Personal Information

If we receive unsolicited personal information, we will assess whether we could have collected it under the APPs. If not, we will take reasonable steps to destroy or de-identify it as soon as practicable, if lawful and reasonable to do so.

How We Collect Personal Information

• Directly from you: when you subscribe to updates, submit forms, provide feedback, or otherwise communicate with us.
• Automatically: via cookies, pixels, and analytics tools when you access our website.
• From third parties: where you have permitted disclosure to us or where permissible by law (e.g., service providers supporting our operations).

Purposes of Collection and Use

We collect, hold, use, and disclose personal information for the following purposes:

• Providing and operating our website, content, tools, and features.
• Responding to enquiries, providing support, and managing communications.
• Personalising content and improving user experience.
• Conducting research, analytics, and reporting (including de-identifying and aggregating data).
• Sending administrative messages, updates, and, where permitted, direct marketing communications.
• Maintaining the security and integrity of our services, including fraud prevention and diagnostics.
• Complying with legal obligations, resolving disputes, and enforcing agreements.

Use and Disclosure

Under APP 6, we use and disclose personal information for the primary purpose for which it was collected, for related secondary purposes that you would reasonably expect, or as otherwise permitted or required by law. We may also disclose information with your consent.

Third Parties We May Share With

• Hosting, cloud, and infrastructure providers.
• Analytics, measurement, and performance monitoring providers.
• Email delivery, marketing, and customer support tools.
• Professional advisers (e.g., legal and accounting), and insurers.
• Affiliate and referral partners in connection with tracking and attribution.
• Regulators and law enforcement where required or authorised by law.

We do not sell personal information.

Direct Marketing and Opt-Out

Consistent with APP 7, we may use your personal information for direct marketing (e.g., newsletters or updates) where permitted by law or with your consent. You can opt out at any time by using the unsubscribe link in our emails or by contacting us at [email protected]. We do not use sensitive information for direct marketing without consent.

Cookies and Similar Technologies

We use cookies, local storage, pixels, and similar technologies to operate our website, remember preferences, analyse traffic, and measure performance. Types include:

• Strictly necessary cookies for core site functionality and security.
• Analytics and performance cookies to understand usage and improve services.
• Preference cookies to remember settings and choices.
• Advertising or affiliate cookies to measure referrals and campaign effectiveness.

You can manage or disable cookies through your browser settings. If you disable non-essential cookies, some features may not function as intended. We currently do not respond to Do Not Track signals.

Anonymity and Pseudonymity

Where lawful and practicable, you may interact with us anonymously or using a pseudonym, for example by browsing public content without logging in. Certain features may require identifiable information to function.

Quality, Access, and Correction

We take reasonable steps to ensure personal information we hold is accurate, up-to-date, and complete (APP 10). You can help by notifying us of changes.

Access

You may request access to the personal information we hold about you by contacting us. We will respond within a reasonable time (ordinarily within 30 days). We may need to verify your identity and may charge a reasonable fee to cover administrative costs where permitted by law.

Correction

If you believe information we hold is inaccurate, out-of-date, incomplete, irrelevant, or misleading, you may request correction. We will take reasonable steps to correct the information or, if we do not agree, we will record a statement with the information and inform you of our reasons.

Data Security

In accordance with APP 11, we implement reasonable technical and organisational measures to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Measures may include access controls, encryption in transit, secure storage, staff confidentiality obligations, and vendor due diligence.

Retention and Destruction

We retain personal information only for as long as necessary for the purposes outlined in this policy or as required by law. We may retain de-identified or aggregated data for research and statistical purposes. When no longer required, we take reasonable steps to destroy or de-identify personal information securely.

Cross-Border Disclosure

Some service providers and partners may be located outside Australia, including in (but not limited to) the United States, the United Kingdom, the European Union/EEA, and the Asia-Pacific region. Before disclosing personal information overseas, we take reasonable steps to ensure recipients comply with the APPs or are otherwise subject to a comparable privacy regime, or we obtain your consent where appropriate. By using our services, you acknowledge that overseas recipients may be subject to different privacy laws, and we will take reasonable steps to safeguard your information.

Notifiable Data Breaches

If we experience an eligible data breach that is likely to result in serious harm, we will conduct an assessment and, where required under the Notifiable Data Breaches scheme, notify affected individuals and the Office of the Australian Information Commissioner (OAIC) and provide recommended steps for protection.

Third-Party Content and Links

Our website may include links to third-party websites, content, tools, or services (including exchange comparisons and affiliate offers). We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you use.

Government Identifiers

We do not adopt, use, or disclose government-related identifiers (such as Medicare or driver licence numbers) as our own identifiers except as permitted by APP 9 or required by law.

Children and Young People

Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us so we can take appropriate steps.

Your Choices

• Opt out of marketing at any time via unsubscribe links or by contacting us.
• Adjust browser settings to manage cookies and similar technologies.
• Choose to browse our content without logging in where practicable.
• Withdraw consent for specific processing where consent is the basis for processing (noting this may impact the availability of certain features).

Additional Notices for International Users

If you are located in the EEA/UK, our processing may rely on legal bases such as consent, performance of a contract, legitimate interests, and compliance with legal obligations. Subject to applicable law, you may have rights to access, rectify, erase, restrict, object to processing, and data portability. You may also lodge a complaint with your local data protection authority. Please contact us to exercise these rights.

Making a Privacy Complaint

If you have concerns about our handling of your personal information, please contact us at [email protected] or by post to 45 Benjamin Way, Belconnen ACT 2617, Australia. Please provide details of your concern and any supporting information. We will acknowledge receipt and aim to respond within 30 days.

If you are not satisfied with our response, you may raise your complaint with the Office of the Australian Information Commissioner (OAIC).

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, or legal requirements. The updated version will be posted on our website with a revised effective date. We will take reasonable steps to notify you of material changes.

Effective Date

Effective: 9 October 2025

Contact Us

Controller/Owner: Michael James

Digital Currency Institute Australia (DCI-AU)

Address: 45 Benjamin Way, Belconnen ACT 2617, Australia

Email: [email protected]