Cruz Group is committed to ensuring the confidentiality and security of your personal information. This policy outlines why we need to collect personal information and how we manage the personal information we collect about individuals.
In this policy, “Cruz Group”, “Cruz Capital”, “Cruz”, “We”, “Us” refers to all staff, representatives, and associated entities of the following companies:
“You” means an individual whose personal information we hold, and “your” has a corresponding meaning.
We are bound by the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs) set out in Schedule 1 of the Privacy Act, in our handling of personal information. The Privacy Act protects ‘personal information’, which means ‘information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not and whether the information is recorded in a material form or not.’
This Policy details our treatment of personal information that we gather, including any personal information that we gather from you when you enquire about, apply for or participate in any investment, lending or tokenisation arrangement offered through Cruz Capital. We undertake to collect and handle your personal information lawfully, respect your privacy, and be transparent about how we handle personal information.
We may collect the following types of personal information about you:
In the context of Cruz Capital, we may collect personal information relating to investors, commodity holders and their representatives for the purpose of identity verification, wholesale client assessment, transaction processing, fraud prevention, audit trail creation, and compliance record-keeping, including under anti-money laundering and counter-terrorism financing laws.
We may collect personal information in the following ways:
We may use your personal information for the following purposes:
We may disclose your personal information in the following circumstances:
We do not disclose personal information to overseas recipients.
We take reasonable steps to ensure that the personal information we collect, use, and disclose is accurate, complete, up to date, and securely stored in cloud-based facilities located in Australia. We protect your information from misuse, interference, loss, and unauthorised access.
We will delete or de-identify personal information when it is no longer needed for the purposes for which it was collected, or upon request, unless a specified retention period is required by applicable laws.
If you wish to access or correct the personal information we hold about you, please contact our Privacy Officer by emailing privacy@cruz.tech.
As required by the NDB Scheme under the Privacy Act, if there is any loss, unauthorised access, or disclosure of your personal information likely to result in serious harm, we will investigate and notify both you and the Australian Information Commissioner as soon as practicable.
If you are not satisfied with how we handle your personal information or this policy, please contact our Privacy Officer at privacy@cruz.tech.
Our Privacy Officer will work to understand your concerns and discuss potential resolutions. If you remain unsatisfied, you may contact the Office of the Australian Information Commissioner (OAIC). Visit the OAIC website or call 1300 363 992 for further assistance.
We may update this Privacy Policy from time to time, providing additional notice as required by applicable laws. Please refer back to this policy regularly for updates.
If you have any queries about this policy or wish to access your personal information, please contact our Privacy Officer at privacy@cruz.tech.