Privacy Policy

1. About this policy

This Privacy Policy explains how Crypto Industry (ABN 84 158 718 471) (“we”, “us”, “our”) collects, uses, holds and discloses personal information when you use cryptoindustry.com and any associated subdomains, applications, newsletters and services (the “Site”).

We are based in Australia. We aim to handle personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). For users located in the European Economic Area (EEA) or the United Kingdom, we also aim to comply with the General Data Protection Regulation (GDPR) and UK GDPR. For users located in Brazil, we aim to comply with the Lei Geral de Proteção de Dados (LGPD).

By using the Site you acknowledge this policy. If you do not agree with how we handle personal information as described here, please do not use the Site.

2. Information we collect

Information you provide directly

Account information. When you create an account through our portal, we collect your name, email address, password (stored in hashed form), and any company information you choose to provide.

Listings and submissions. When you submit or claim a company listing, event listing, or other content, we collect the information included in that submission, including company name, description, logo, website, contact details and any other information you choose to provide.

Payment information. When you purchase a premium listing or advertising, we collect billing information necessary to process the transaction. Card payments are handled by Stripe; we do not store full card details on our systems. Cryptocurrency payments may involve us collecting wallet addresses and transaction hashes.

Communications. When you contact us by email, through forms, or via our support channels, we collect your contact details and the contents of your communication.

Newsletter subscription. When you subscribe to our newsletter, we collect your email address and any other details you choose to provide.

Information collected automatically

When you visit the Site, certain information is collected automatically, including:

• IP address
• Browser type and version
• Device type and operating system
• Pages viewed, referring URLs, and approximate location based on IP
• Cookie identifiers and similar technologies

Information from third parties

Payment processors. Stripe and any cryptocurrency payment provider may share information with us about completed transactions, including the success or failure of payments.

Affiliate networks. When affiliate links result in compensation to us, the relevant affiliate platform may share aggregate information about referrals.

3. How we use information

We use personal information to:

• Operate and maintain the Site, including the directory, events and Insights sections
• Create, authenticate and manage accounts
• Process and verify listing submissions and claims
• Process payments, manage subscriptions and renewals, and detect fraud
• Send transactional emails (account notifications, payment receipts, listing status updates)
• Send the newsletter and marketing communications where you have subscribed or otherwise lawfully consented
• Respond to enquiries and provide support
• Maintain Site security and prevent abuse
• Analyse Site usage and improve the product
• Comply with legal obligations and respond to lawful requests from authorities

Lawful bases (EEA/UK users)

Where GDPR or UK GDPR applies, we rely on the following lawful bases:

• Performance of a contract, when we process information to provide a service you have requested (such as managing your account or fulfilling a paid listing)
• Legitimate interests, when we operate and improve the Site, maintain security, and conduct general analytics, balanced against your rights and interests
• Consent, when we send marketing communications or use non-essential cookies; you may withdraw consent at any time
• Legal obligation, when we are required to retain or disclose information by law

4. Cookies and tracking

We use cookies and similar technologies to operate the Site, remember your preferences, analyse usage, and (where applicable) deliver advertising.

Essential cookies are necessary for the Site to function (for example, keeping you logged in or remembering your cookie preferences).

Analytics cookies help us understand how the Site is used. We use Google Analytics for this purpose. Google Analytics may set cookies and collect data including IP address, device information and pages visited. You can learn more about Google’s practices at policies.google.com/privacy and opt out using Google’s opt-out browser add-on.

Cookie consent. Where the law requires it (including in the European Economic Area, the United Kingdom and Brazil), you are shown a cookie consent banner on your first visit that lets you accept or decline non-essential cookies, and you can change your choice at any time through the Site. Visitors from other jurisdictions are not shown a banner and analytics cookies load by default. You can still opt out at any time using your browser settings or the Google Analytics opt-out tools described above.

5. Who we share information with

We do not sell personal information. We share information only with the parties below and only as needed:

• Stripe (Stripe, Inc.), our payment processor, for card payments
• Drip (our email marketing platform), for newsletter delivery and subscriber management
• Google (Google LLC), for Google Analytics
• Hosting and infrastructure providers that host the Site and store its data
• Professional advisers such as accountants and lawyers, where reasonably necessary
• Authorities or other parties, where required by law, court order, or to protect the rights, property or safety of Crypto Industry, our users or others
• Acquirers, in connection with a sale, merger or restructure of our business, subject to confidentiality obligations and continued protection of personal information consistent with this policy

We require service providers we share information with to handle it consistently with our obligations under this policy and applicable law.

6. International transfers

Several of our service providers (including Stripe, Drip and Google) are based outside Australia, primarily in the United States. By using the Site you acknowledge that personal information may be transferred to and processed in countries that have different data protection laws to Australia.

For users in the EEA or UK, where personal information is transferred outside those regions to a country without an adequacy decision, we rely on appropriate safeguards including the European Commission’s Standard Contractual Clauses or equivalent mechanisms. You can request more information about these safeguards by contacting us.

7. How long we keep information

We keep personal information only for as long as is reasonably necessary for the purposes set out in this policy, including any legal, accounting or reporting requirements. In general:

• Account and listing data: for as long as your account is active, plus a reasonable period afterwards
• Payment records: for at least the period required by Australian tax and accounting law (currently five years)
• Newsletter subscribers: until you unsubscribe, plus a short period to confirm your unsubscribe
• Communications: for as long as needed to provide support and demonstrate the history of any matter
• Analytics data: in accordance with the retention settings of the analytics service, which may be aggregated or anonymised over time

When we no longer need personal information, we delete or anonymise it.

8. Security

We take reasonable steps to protect personal information from unauthorised access, loss, misuse, alteration and disclosure. Measures include encryption in transit (HTTPS), access controls, password hashing, and use of reputable hosting and payment infrastructure. No system is perfectly secure, and we cannot guarantee absolute security.

9. Your rights

All users

You can:

• Update your account information through the portal
• Manage and remove listings you have claimed through the portal
• Unsubscribe from marketing emails using the unsubscribe link in any marketing email
• Manage cookie preferences through the cookie banner

Australian residents

Under the Privacy Act 1988 (Cth) and the APPs, you have the right to:

• Request access to the personal information we hold about you
• Request correction of personal information that is inaccurate, out of date, incomplete, irrelevant or misleading
• Make a complaint about how we have handled your personal information

To exercise these rights, contact us at hello@cryptoindustry.com.

EEA and UK residents

Under GDPR and UK GDPR, you have the right to:

• Access personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request erasure of personal information (“right to be forgotten”) in certain circumstances
• Restrict or object to processing in certain circumstances, including objecting to processing based on legitimate interests
• Receive your information in a portable format and have it transferred to another controller, where the processing is based on consent or contract and is automated
• Withdraw consent at any time, where processing is based on consent

To exercise these rights, contact us at hello@cryptoindustry.com. We will respond within the timeframes required by law.

10. Marketing communications

We send marketing communications (including the newsletter) only where you have subscribed or otherwise lawfully consented. Every marketing email includes a clear unsubscribe link. You can also email hello@cryptoindustry.com to be removed from marketing.

We do not sell or rent your contact information to other parties for their marketing purposes.

11. Children’s privacy

The Site is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a child, contact us and we will take steps to delete it.

12. Data breaches

If we become aware of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme. For breaches affecting EEA or UK residents, we will also notify the relevant supervisory authority and affected individuals where required by GDPR or UK GDPR.

13. Changes to this policy

We may update this policy from time to time. The “Last Updated” date at the top of this page shows when the current version took effect. If we make material changes we will take reasonable steps to notify you, including by posting a prominent notice on the Site or emailing account holders. Continued use of the Site after changes take effect means you accept the updated policy.

14. Complaints

If you have a privacy concern, please contact us first at hello@cryptoindustry.com so we can try to resolve it. We will acknowledge your complaint within a reasonable time and aim to provide a substantive response within 30 days.

If you are not satisfied with our response, you can lodge a complaint with the relevant regulator:

• Australia: Office of the Australian Information Commissioner (OAIC), oaic.gov.au
• United Kingdom: Information Commissioner’s Office (ICO), ico.org.uk
• EEA: the supervisory authority in your country of residence or work
• Brazil: Autoridade Nacional de Proteção de Dados (ANPD), gov.br/anpd

15. Contact

For any privacy questions, requests or complaints, contact us at:

Crypto Industry
ABN: 84 158 718 471
Email: hello@cryptoindustry.com
Web: cryptoindustry.com/contact