Privacy Policy

How Striven Steadex collects, uses, stores and protects your personal data.

Data controller

The data controller for information collected through this website is [LEGAL ENTITY NAME], trading as Striven Steadex, contactable at [email protected].

Definitions

"Personal data" means any information relating to an identified or identifiable individual. "Usage data" means information collected automatically through use of the platform, such as pages visited and time spent. "Cookies" are small files placed on your device that help the site function and let us understand usage.

Personal data

We collect the minimum data needed to open and run your account: full name, email address, phone number, and, where relevant, identity-verification documents and the content of any request or message you send us.

Usage data

We collect standard technical data such as browser type, device type, pages visited and approximate location derived from IP address, used to keep the platform working correctly and to understand how it's used.

Cookies

Cookies are used for essential site functionality (such as keeping you logged in) and, where enabled, for analytics that help us understand aggregate usage. You can control cookies through your browser settings; disabling essential cookies may affect how the site functions.

Controller / processor of personal data

[LEGAL ENTITY NAME] acts as controller for the data described above. Where third-party providers process data on our behalf (for example, identity verification or hosting), they act as processors under our instructions and applicable data protection terms.

Collection and use of information

We use your data to respond to enquiries, provide the platform and its features, fulfil applicable legal obligations (including AML/KYC), analyse and improve the service, and — only with your separate consent where required — send marketing communications.

Legal bases

We process personal data under one or more of the following bases: performance of a contract with you, a legal obligation we must meet, our legitimate interests in operating and securing the platform, and, for marketing, your consent, which you can withdraw at any time.

Data retention

We keep personal data only as long as necessary for the purpose it was collected, including any period required by applicable financial and AML/KYC record-keeping obligations. Account data is generally retained for the life of the account plus a period required by law; you can ask about the specific retention period for your data at any time.

Data transfers

Where data is transferred outside Australia — for example, to a cloud hosting or verification provider — we take steps to ensure it remains protected to a comparable standard, including through contractual safeguards with those providers.

Data disclosure

We may share data with: our licensed operating entity and affiliated companies, IT and infrastructure providers who host or support the platform, identity-verification providers, and regulators or government authorities where legally required. We do not sell personal data to third parties.

Security

We apply technical and organisational measures including encryption, access controls and monitoring to protect personal data. Full detail is on our Security page.

Your rights

Depending on your jurisdiction, you may have the right to access the personal data we hold about you, correct inaccurate data, request deletion, restrict or object to certain processing, and request a copy of your data in a portable format. To exercise any of these rights, contact [email protected].

Service providers

We work with a limited set of vetted service providers for hosting, identity verification, communications and analytics, each bound by contractual data-protection obligations appropriate to the service they provide.

Analytics

Where enabled, we use privacy-conscious analytics tools to understand aggregate site usage. Analytics data is used to improve the platform, not to build individual marketing profiles without consent.

Advertising and retargeting

We do not run third-party advertising or retargeting scripts by default. If this changes, this policy will be updated before any such technology is enabled.

Links to third-party sites

Our site may link to third-party resources such as payment providers. We are not responsible for the privacy practices of external sites, and we encourage you to review their own policies.

Children's privacy

The platform is not directed at, and is not intended for use by, anyone under the age of 18. We do not knowingly collect personal data from minors.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by an updated effective date at the top of this page, and continued use of the platform after changes take effect constitutes acceptance of the revised policy.

Contact us

Questions about this Privacy Policy can be sent to [email protected].