Your privacy, protected by design
not by accident

01. Our Commitment to Your Privacy

At h13crypto (operated by Innerzcity Pty Ltd, ABN: 67 096 562 613), we believe that learning to trade should be a safe and enjoyable experience. Your privacy is at the core of how we build our platform.

We collect only the information necessary to provide our educational service. We never sell or trade your personal data. We are committed to complying with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

02. What Information We Collect

We collect minimal information to operate the platform and improve your experience:

03. How We Use Your Information

Your data helps us deliver a better learning experience:

• Create and manage your account – registration, login, and profile management.
• Provide the simulated trading environment – track your virtual positions, trades, and balance.
• Send important service updates – subscription reminders, platform improvements, and security alerts.
• Improve the platform – analyze how users interact with features to enhance usability.
• Comply with legal obligations – record‑keeping for Australian tax purposes (e.g., transaction logs).
• Prevent abuse – detect and prevent fraudulent or prohibited activities.

04. Legal Basis for Processing (Australian Privacy Principles)

Under the Australian Privacy Principles (APPs), we process your personal information only where:

• Consent: You have provided clear consent (e.g., registration, marketing opt-ins).
• Contractual necessity: Processing is necessary to provide the services you requested.
• Legal obligation: We are required to retain records for tax or regulatory purposes.
• Legitimate interests: We have a legitimate business interest in improving platform security and user experience.

05. Disclosure of Information

We never sell your personal information. We may share limited data only in these circumstances:

• Service Providers: Stripe (payment processing) and our hosting provider (Australian VPS). They are bound by strict confidentiality agreements.
• Legal Requirements: If required by law or to protect the rights, property, or safety of h13crypto, our users, or others (e.g., responding to a court order or regulatory request from AUSTRAC, ASIC, or the ATO).
• Business Transfers: In the unlikely event of a merger or acquisition, your data would remain protected under the same privacy commitments.

We do not share data with advertising networks, data brokers, or marketing platforms.

06. Data Security

We use industry‑standard security measures to protect your information:

• Encryption: All connections are encrypted with TLS/SSL (HTTPS).
• Password Security: Passwords are hashed using PBKDF2 (bcrypt/scrypt) – never stored in plain text.
• Access Controls: Our servers are located in Australia with strict access controls and firewalls.
• Two-Factor Authentication (2FA): Optional but strongly recommended for account security.
• Regular Updates: We continuously monitor and improve our security safeguards.

07. Data Retention and Deletion

We retain your personal information only as long as necessary:

• Active accounts: Data is retained while your account is active.
• Inactive accounts: After 12 months of inactivity, we may delete or anonymize your data.
• Legal retention: Transaction logs and records may be retained for up to 5 years for Australian tax and regulatory compliance.
• Upon request: You may request deletion of your account and associated data (subject to legal retention requirements).

08. Your Rights & Choices (Australian Privacy Principles)

Under the Australian Privacy Principles (APPs), you have the following rights:

• Right to Access: You can view and update your account information at any time in Settings.
• Right to Correction: You may correct inaccurate or outdated information.
• Right to Deletion: Contact us to request deletion of your account and associated data.
• Right to Opt-Out: You can disable email notifications in your Settings.
• Right to Lodge a Complaint: If you believe we have mishandled your data, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

To exercise any of these rights, please contact us at privacy@h13crypto.com.au.

Data Deletion

You can request deletion of your account and all associated personal data at any time by emailing support@h13crypto.com.au with the subject line "Data Deletion Request". We will process your request within 30 days.

Or go straight to Contact Page We have a easy to use system form for your convenience... 'Sorry To See You Go!'

09. Cookies & Similar Technologies

We use essential cookies only:

• Authentication cookies: Keep you logged in.
• Preference cookies: Remember your settings (e.g., dark mode, language).
• Security cookies: Help detect and prevent fraud.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies (e.g., Google Analytics).

Most browsers allow you to block cookies, though some platform features may not work as intended.

10. Overseas Disclosure

Our servers are hosted in Australia. Some service providers (such as Stripe) may process data outside Australia, but they are bound by data protection agreements that comply with Australian Privacy Principles.

We do not transfer your data to countries with inadequate privacy protections.

11. Children's Privacy

Our platform is primarily designed for users aged 18 and over. However, we permit minors aged 13 to 17 to use the Platform through a Guardian-Controlled Account, where a parent or legal guardian registers the account and accepts full responsibility, as described in our Terms of Service.

Data We Collect for Minor Users: When a parent or legal guardian creates a Guardian-Controlled Account, we may collect the minor's username, email address, and simulated trading activity — the same data we collect for adult accounts. This data is used solely for educational purposes and is never shared with third parties for marketing, advertising, or commercial purposes.

Parental Rights: A parent or legal guardian has the right to:

• Request a copy of all data we hold about the minor
• Request correction of inaccurate data
• Request deletion of the minor's account and associated data
• Withdraw consent at any time by contacting privacy@h13crypto.com.au

No Behavioural Advertising: We do not serve any advertising to users on the Platform, regardless of age. We do not use behavioural tracking, targeted advertising, or third-party analytics that profile children.

Children Under 13: We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us immediately at privacy@h13crypto.com.au so we can remove it.

12. Changes to This Policy

We may update this Privacy Policy occasionally to reflect improvements or legal requirements. We will notify you of significant changes via:

• Email notification (if you have opted in)
• A prominent notice on the platform
• Updating the "Last updated" date at the top of this page

13. Notifiable Data Breaches (NDB) Scheme

Under Australian law, we are required to notify affected individuals and the Office of the Australian Information Commissioner (OAIC) if a data breach is likely to result in serious harm. We have procedures in place to detect, investigate, and report data breaches in accordance with the Notifiable Data Breaches (NDB) scheme.

14. Contact Us

Questions, concerns, or just want to say hello? We'd love to hear from you.

⭐ Fun fact: The best traders never stop learning – and we're on that journey with you. Thanks for trusting us with your learning experience.

📌 Additional Regulatory Information

This Privacy Policy is for informational purposes only and does not constitute legal advice. Users should consult their own legal advisor for any questions regarding their privacy rights.

© 2026 Innerzcity Pty Ltd (trading as H13 Crypto Institute). All rights reserved.