Privacy Policy

Definitions

"We", "us", and "our" mean Steadfast Cargence, trading from Level 8, 20 Bond Street, Sydney NSW 2000. "You" means a visitor, a person who completes the registration form, or a registered user of the platform. "Personal information" has the meaning given by the Privacy Act: information or an opinion about an identified or reasonably identifiable individual. "Processing" covers collecting, holding, using, disclosing, and disposing of personal information. "Service providers" are the businesses that process personal information on our instructions.

Personal information we collect

When you register we collect at minimum: your first name and last name, phone number, email address, and the password you choose (stored only as a salted hash). During verification we collect identity documents, proof of address, and, where required, a selfie or liveness check. When you transact, we collect deposit and withdrawal records and the trading activity on your account. When you contact support, we keep a record of your requests and our replies, so the next person to help you has context.

Usage data

Like most websites, our servers record technical data when you visit: IP address (approximate location at country level), browser type and version, device type, referring page, the pages you open, and timestamps. This data keeps the site secure, helps us diagnose faults, and gives an aggregate picture of which pages help users. We do not build advertising profiles from it, and we do not sell it.

Cookies

The site uses a small number of cookies and equivalent browser storage: strictly necessary cookies that keep your session working and prevent fraud, functional storage that remembers choices such as a dismissed notice, and, if the site operator enables it later, an analytics measurement cookie. You can block or delete cookies in your browser settings; the site will still work, though some convenience features may not. Where a cookie is not strictly necessary, it is set only after consent where the law requires it.

Operator and processors of personal information

Steadfast Cargence is the operator of this website and the primary controller of the personal information collected through it. We use processors for specific jobs: identity verification providers that check documents, IT hosting and email providers that run our infrastructure, and the analytics and support tools named in the service providers section below. Processors act on our documented instructions, are bound by contractual privacy obligations, and never use your information for their own purposes.

Collection and use of information

We collect information only for the purposes we tell you about: to create and run your account, to contact you about your account, to verify identity as required, to process deposits and withdrawals, to personalise the support you receive, to improve the site, and to comply with legal obligations. Uses include your personal manager calling you after registration, verification staff reviewing documents, security systems checking logins, and support answering your emails. We do not use personal information for unrelated purposes without asking you first.

Legal bases for handling information

Under the Australian Privacy Principles, we handle personal information because it is reasonably necessary for our functions or activities, because you have consented, or because the law requires or authorises it. Contract: running your account and the trading service requires the account data. Legal obligation: identity verification, record keeping, and responding to lawful requests from authorities. Consent: marketing messages and non-essential cookies are sent or set only with your consent, which you may withdraw at any time. Legitimate interests, applied carefully: keeping the site secure, keeping records of support conversations, and aggregate service improvement.

Storage of information and retention periods

Personal information is stored on systems located in Australia or in jurisdictions with comparable privacy protections, encrypted at rest and in transit. Retention follows need: registration data is kept while your account is active and for seven years after closure, consistent with financial record-keeping obligations; verification documents are retained for the period required by applicable Australian requirements, then securely destroyed; support correspondence is kept for up to five years; usage logs are kept for up to twelve months; and marketing consent records are kept for as long as the consent is active plus three years. When retention ends, information is securely deleted or de-identified.

Transfers of information

Some service providers operate servers outside Australia. Where personal information crosses borders, we transfer it only under safeguards: the provider is bound by contract to handle it to a standard consistent with the Australian Privacy Principles, and we keep a record of the arrangement. You may contact us for the list of countries involved.

Disclosure of information

We disclose personal information only in these circumstances: to processors performing services for us (verification, hosting, email, support tooling); to the licensed entity that operates the trading service and executes transactions; to professional advisers under confidentiality; and to regulators, law enforcement, or courts where we are compelled or authorised by law. We never sell personal information, and we do not disclose it for anyone else's marketing.

Security of information

Access to personal information is limited to staff who need it for their role, with individual credentials and two-factor authentication for administrative systems. Data is encrypted in transit using current TLS and at rest in storage. We log administrative access, review it periodically, and test our controls. No system is perfectly secure; if a breach occurs that is likely to cause serious harm, we will notify affected users and the relevant authority as the law requires.

Your rights over your information

You have the right to access the personal information we hold about you, to ask us to correct it where it is inaccurate, out of date, incomplete, or misleading, and in some circumstances to ask us to delete it or limit its handling. You may also object to direct marketing at any time. To exercise any right, email [email protected] from the address on your account. We will verify your identity and respond within a reasonable period, normally within 30 days. There is no charge for a reasonable request, and we will explain in writing if a request is declined and how you can complain about that.

Service providers

Categories of providers that process personal information on our behalf include: identity verification and document checking services; cloud hosting and database providers; email delivery services; the support desk platform that tracks your requests; and the analytics tooling described next. Each provider receives only the information needed for its job and is contractually restricted from using it for anything else.

Analytics

The site keeps an analytics measurement slot so the operator can understand aggregate usage: which pages people read, where they get stuck, and what devices they use. At the time of publication the measurement identifier is not enabled. If it is switched on, data is reported in aggregate or pseudonymous form, is not combined with your identity for advertising, and can be declined via your cookie choice or browser settings.

Advertising and retargeting

We do not run third-party advertising trackers on this site. If the operator later runs campaigns that involve retargeting pixels, the pixels will load only with your consent, the consent choice will be recorded, and this section will be updated before that happens.

Links to other websites

Our pages occasionally link to external sites, such as a payment provider's help pages or a regulator's publication. Once you follow a link, you are on someone else's site with someone else's privacy policy; we recommend reading it. We are not responsible for the handling of information by linked sites.

Children's privacy

The platform is intended for adults. We do not knowingly collect personal information from anyone under 18. If we learn that we hold information about a child, we will delete it promptly. If you believe a minor has provided us information, contact [email protected] and we will act on it the same business day where practicable.

Changes to this policy

This policy may be updated to reflect changes in the law, our services, or our providers. The current version is always published on this page, and material changes affecting how we handle your information will be announced on the site or by email to registered users before they take effect. The review date of this version can be obtained from support at any time.

Contact us about privacy

Privacy questions, access requests, and complaints can go to [email protected], or by post to Level 8, 20 Bond Street, Sydney NSW 2000. If you are unhappy with our answer, you can escalate through the process on the Complaints page, which includes external dispute resolution arrangements.