CapXcentric Privacy Policy
Effective Date: 15th January 2025
Version: 1.0
Excentricity Pty Ltd (ABN: 42 679 978 959) trading as CapXcentric (“we,” “our,” or “us”) is committed to protecting the privacy of your personal information. This Privacy Policy outlines how we collect, use, store, and disclose personal information in compliance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and our obligations as a Corporate Authorised Representative (CAR) of True Oak Investments Pty Ltd (AFSL 238184).
By using our website or engaging our services, you consent to the collection and handling of your personal information as described in this policy.
1. Purpose and Scope
This Privacy Policy explains:
- Why we collect personal information.
-
The types of personal information we collect.
-
How we collect, hold, use, and disclose your personal information.
-
How you can access or correct your personal information.
-
How you can make a privacy-related complaint.
We respect your privacy and will only collect, use, or disclose personal information in ways that are consistent with this policy and applicable laws.
2. Our Obligations as a Corporate Authorised Representative
As a Corporate Authorised Representative of True Oak Investments Pty Ltd (AFSL 238184), we may be required to collect or share certain personal information with our licensee and relevant regulatory bodies to comply with the Corporations Act 2001 (Cth), ASIC requirements, and other legal or regulatory obligations. Any personal information shared for these purposes is handled in accordance with the Australian Privacy Principles.
3. Why We Collect Personal Information
We collect personal information for one or more of the following lawful bases:
-
Provision of Services
-
To deliver our capital-raising advisory services to you or your company.
-
-
Legal and Regulatory Compliance
-
To meet our legal obligations, including those imposed by our AFSL arrangements and Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF) laws.
-
-
Legitimate Business Interests
-
To manage our operations, maintain internal records, respond to inquiries, improve our user experience, and develop new services.
-
-
Contractual Necessity
-
Where it is necessary for us to collect personal information to perform a contract or agreement with you (e.g., to provide advisory services).
-
-
Consent
-
Where you have provided clear, informed consent for specific purposes (e.g., newsletters, updates).
-
4. Types of Personal Information We Collect
-
General Information
-
Name, job title, company name, and business contact details (phone number, email address).
-
Details about your company’s financial and operational background relevant to our services.
-
Records of communication (e.g., emails, meeting notes).
-
-
Sensitive Information
-
We do not generally collect sensitive information (e.g., health, political, or religious data).
-
If we require sensitive information—for example, certain background checks—we will obtain your consent and only use such information for a primary or directly related purpose.
-
5. How We Collect Personal Information
We primarily collect personal information directly from you when you:
-
Engage us for services or enquire about our services.
-
Fill out online or paper-based forms.
-
Contact us by phone, email, or social media.
We may also collect publicly available information from sources such as business websites, LinkedIn, or regulatory databases to verify company or investor-related details.
6. Consequences of Not Providing Information
If you choose not to provide certain personal information when requested, we may be unable to:
-
Provide some or all of our services.
-
Comply with legal obligations (e.g., AML/CTF checks).
-
Respond adequately to your inquiries.
In some cases, we may have to cease our business relationship with you if we are unable to collect necessary information.
7. Use and Disclosure of Personal Information
We may use or disclose your personal information to:
-
Provide and manage our capital-raising advisory services.
-
Comply with regulatory requirements, including ASIC, the Corporations Act 2001 (Cth), and AML/CTF laws.
-
Collaborate with third-party service providers (hosting, data storage, analytics, administration), bound by strict confidentiality and privacy obligations.
-
Communicate with you about service-related matters.
-
We will not sell or trade your personal information.
8. Social Media Use
We maintain a presence on social media platforms (e.g., LinkedIn). While we may post updates or interact with you through these channels:
-
We do not request that you share personal or sensitive information publicly.
-
Any information you share on social media is subject to that platform’s own privacy practices, which we do not control.
-
If you send us a direct message containing personal information, we will handle it in accordance with this Privacy Policy.
9. Third-Party Links and Websites
Our website may include links to third-party websites. This Privacy Policy does not apply to the privacy practices of external sites. We recommend reviewing the privacy policies of any third-party websites you visit.
10. Cookies and Website Analytics
We use the Wix platform for our website, which may automatically collect certain usage data and deploy cookies to enhance your browsing experience. In addition, we use Google Analytics, a third-party service that uses cookies and other tracking technologies to help us understand how users interact with our website.
Cookies help us:
-
Understand website traffic patterns.
-
Identify usage trends.
-
Improve functionality and your experience on our site.
You can manage or disable cookies in your browser settings, although doing so may affect certain website features.
11. Security and Storage of Personal Information
We take reasonable steps to secure your personal information from misuse, interference, and loss, as well as unauthorised access, modification, or disclosure. Our security measures include:
-
Encrypted cloud storage.
-
Restricted access to client data for authorised personnel only.
-
Secure email and communication platforms for sensitive data.
12. Overseas Data Storage and Cross-Border Disclosure
While we primarily store data within Australia, certain members of our team and/or our third-party service providers may operate from or store data in countries outside Australia. We take reasonable steps (such as contractual confidentiality obligations and secure access protocols) to ensure these personnel and providers handle your personal information in a manner consistent with the Australian Privacy Principles.
If you would like more information on our overseas data handling practices, please contact us at privacy@capxcentric.com
13. Data Retention
We will only retain your personal information for as long as necessary to provide our services or comply with legal obligations. Typically, we retain client-related information for at least 7 years to meet requirements under the Corporations Act 2001 (Cth) or AML/CTF laws.
When we no longer need your personal information, we will securely destroy or de-identify it.
14. Accessing and Correcting Your Personal Information
You have the right to request access to the personal information we hold about you and to request corrections if it is inaccurate, incomplete, or out of date.
To make an access or correction request, please contact us using the details in Section 17. We may need to verify your identity. In certain cases, we may refuse access or correction requests as permitted by law, but we will provide a written explanation if this occurs.
15. Direct Marketing and the Spam Act 2003
We will not use your personal information for direct marketing unless you have opted in (for example, by subscribing to our Substack newsletter or another mailing list). Any marketing communication we send will comply with the Spam Act 2003, including providing a clear option to unsubscribe.
You can unsubscribe from marketing emails at any time by clicking the “unsubscribe” link in the message or contacting us.
16. Notifiable Data Breaches
In the event of a suspected or actual data breach, we will promptly investigate the circumstances, contain the breach, and assess whether it is an eligible data breach. If it is deemed eligible under Australian law, we will notify:
-
The Office of the Australian Information Commissioner (OAIC).
-
Affected individuals, outlining the nature of the breach, the type of information involved, and steps you can take to protect yourself.
17. Complaints and Dispute Resolution
If you have a complaint about how we handle your personal information, please contact us:
-
Email: privacy@capxcentric.com
We aim to resolve complaints within 30 days. If you are not satisfied with our response or if your complaint remains unresolved, you may be able to escalate it to:
-
Office of the Australian Information Commissioner (OAIC)
-
Website: www.oaic.gov.au
-
Phone: 1300 363 992
-
The OAIC oversees privacy law compliance and investigates complaints about personal information handling under the Privacy Act 1988 (Cth).
-
-
Australian Financial Complaints Authority (AFCA)
-
GPO Box 3, Melbourne VIC 3001
-
Phone: 1800 931 678
-
Email: info@afca.org.au
-
Website: www.afca.org.au
-
AFCA is an external dispute resolution scheme for financial service complaints. If your privacy complaint relates to or arises from a financial service matter, AFCA may be able to assist.
-
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The current version will always be available on our website, along with the Effective Date and Version information.
Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal information, please contact:
-
Name/Position: Warwick Donaldson - Managing Director
-
Email: privacy@capxcentric.com