Privacy Policy

2Regulatory Framework

Capital Corporation Pty Ltd states that it operates within the regulatory frameworks applicable to its services and jurisdictions, including:

• Australian Securities and Investments Commission (ASIC)
• Australian Transaction Reports and Analysis Centre (AUSTRAC)
• Financial Conduct Authority (FCA) — FRN 982642
• Australian Financial Complaints Authority (AFCA)
• Privacy Act 1988 (Cth)
• Australian Privacy Principles
• UK GDPR, where applicable
• EU GDPR, where applicable
• Applicable AML/CTF legislation

The current Capitals.au website identifies ABN 91 639 200 329, FCA FRN 982642 and AUSTRAC registration, and states that Australian client data is handled under the Privacy Act and APPs, with UK/EU protections where applicable.

3Information We Collect

We may collect the following categories of information.

The current Capitals.au Privacy Policy expressly identifies identity, contact, financial, KYC/AML, technical, trading and communications data as categories collected.

4Technical Information

When you access our website or platforms, we may automatically collect:

• IP address
• Browser type
• Operating system
• Device information
• Device identifiers
• Login information
• Session information
• Cookies
• Usage analytics
• Platform activity
• Security logs

5Communications

We may retain communications between you and Capitals.au, including:

• Emails
• Live chats
• Support tickets
• Telephone communications
• Account messages
• Complaints
• Platform communications

Communications may be retained for customer service, quality assurance, security, compliance and regulatory purposes.

6How We Use Your Information

We may use personal information to:

• Create and maintain your Account
• Verify your identity
• Conduct KYC/AML checks
• Process deposits and withdrawals
• Provide trading services
• Execute Orders
• Provide AI-powered services
• Provide AI signals
• Provide automated trading tools
• Prevent fraud
• Detect suspicious activity
• Monitor security
• Comply with regulatory obligations
• Conduct regulatory reporting
• Improve our platforms
• Improve AI models
• Provide customer support
• Communicate with you
• Provide educational content
• Administer promotions and rewards

The existing Capitals.au Privacy Policy identifies contractual performance, legal obligations, legitimate interests and consent as applicable processing bases.

7AI and Automated Processing

Capitals.au uses artificial intelligence and algorithmic technologies in connection with its trading platform. These technologies may process:

• Market data
• Historical information
• Trading information
• Sentiment information
• Platform activity
• AI signal interactions

AI systems may be used to provide signals, analytics, market intelligence, risk tools and automated trading functionality.

8Cookies

We use cookies and similar technologies to:

• Maintain sessions
• Provide essential functionality
• Remember preferences
• Analyse website usage
• Improve performance
• Monitor security
• Measure marketing
• Provide advertising and remarketing where permitted

The current Capitals.au Privacy Policy identifies strictly necessary, analytics, functional and marketing cookies.

Non-essential cookies may require consent depending on your jurisdiction.

9Information Sharing

We may share information with:

We do not sell personal information to third parties.

10International Transfers

Personal information may be transferred to or processed in jurisdictions outside Australia. Where required, appropriate safeguards may include:

• Standard Contractual Clauses
• Adequacy decisions
• Approved contractual mechanisms
• Other lawful transfer mechanisms

11Data Security

We maintain technical and organisational controls designed to protect information from:

• Unauthorised access
• Alteration
• Disclosure
• Destruction
• Loss
• Misuse

The Capitals.au website identifies TLS encryption, multi-factor authentication, access controls, penetration testing and security monitoring among its security measures.

No internet-based system can be guaranteed to be completely secure.

12Data Retention

We retain personal information for as long as reasonably necessary to:

• Provide services
• Satisfy legal obligations
• Satisfy regulatory obligations
• Prevent fraud
• Resolve disputes
• Maintain financial records

13Your Rights

Depending on your jurisdiction, you may have rights to:

• Access your personal information
• Correct inaccurate information
• Request deletion
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent
• Complain about processing

Some rights are subject to legal and regulatory limitations.

14AML and Regulatory Restrictions

Privacy rights may be restricted where disclosure could:

• Prejudice an investigation
• Compromise AML controls
• Reveal a suspicious transaction report
• Violate a legal obligation
• Compromise security
• Interfere with regulatory requirements

15Marketing

Where permitted, we may send:

• Platform updates
• Educational material
• Market information
• Promotional offers
• Rewards information
• Product updates

You may withdraw consent from non-essential marketing communications. Essential Account, security and regulatory communications may continue.

16Children

Our financial services are not intended for individuals who are not legally eligible to enter into financial-service agreements. We do not knowingly provide Accounts to persons who do not satisfy applicable age requirements.

17Changes to This Policy

We may update this Privacy Policy from time to time. Material changes may be communicated through the website or directly to clients where required.

18Contact