Privacy Policy

Effective Date: 30 September 2026

Aura Capital Markets (“Aura Capital Markets”, “Aura”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal information of individuals who visit or use auracapitalmarkets.com and who access or use our websites, online platforms, applications, products and services.

This Privacy Policy explains how we collect, use, store, disclose and protect personal information and the rights you may have in relation to that information.

For the purposes of this Privacy Policy, “Personal Data”, “Personal Information” or “Data” means information that identifies, relates to, describes or can reasonably be associated with an identifiable individual.

By accessing our website, registering an account, submitting information to us or using our products and services, you acknowledge that you have read and understood this Privacy Policy. Where applicable law requires your consent, we will obtain the necessary consent before processing your Personal Data.

1. Who We Are

Aura Capital Markets operates through entities associated with the Aura Capital Markets business.

The corporate information currently associated with the website includes:

Aura Capital Pty Ltd
ABN: 48 143 700 887
ACN: 143 700 887
Main business location: NSW 2000, Australia

Depending on the services you use, your contractual relationship may be with a particular Aura entity. The applicable entity and governing terms will be identified in your account-opening documentation, Client Agreement or other applicable contractual documents.

2. Scope of This Privacy Policy

This Privacy Policy applies to Personal Data collected through:

• Our website and related web pages;
• Online account registration and client portals;
• Trading platforms and related applications;
• Contact forms and enquiry forms;
• Customer support communications;
• Email, telephone and other electronic communications;
• Marketing and promotional activities;
• Documents and information submitted during account opening and verification;
• Other products and services provided by or through Aura Capital Markets.

This Policy applies to prospective clients, existing clients, authorised representatives, agents, beneficial owners and other individuals who interact with us in connection with our services.

3. Information We Collect

We may collect different categories of Personal Data depending on your relationship with us and the services you use.

3.1 Identity Information

This may include:

• Full name;
• Date of birth;
• Nationality;
• Gender, where required;
• National identification information;
• Passport or identity document information;
• Photographs or identity-verification information;
• Signature;
• Information relating to beneficial ownership.

3.2 Contact Information

This may include:

• Residential or correspondence address;
• Email address;
• Telephone or mobile number;
• Country of residence;
• Other contact information you provide to us.

3.3 Financial Information

Where required for our services or legal and regulatory obligations, we may collect information such as:

• Employment information;
• Source of funds;
• Source of wealth;
• Income information;
• Financial circumstances;
• Trading experience;
• Investment knowledge;
• Account funding information;
• Bank or payment-account information.

3.4 Transaction and Account Information

We may collect information relating to:

• Trading accounts;
• Deposits and withdrawals;
• Transactions;
• Orders and positions;
• Trading activity;
• Account balances;
• Payment records;
• Account preferences;
• Communications relating to your account.

3.5 Verification and Compliance Information

To comply with applicable legal, regulatory and risk-management requirements, we may collect and process information relating to:

• Know Your Customer (“KYC”) verification;
• Anti-Money Laundering (“AML”) requirements;
• Counter-Terrorist Financing requirements;
• Sanctions screening;
• Politically Exposed Person (“PEP”) screening;
• Fraud prevention;
• Identity verification;
• Risk assessments;
• Regulatory reporting;
• Information concerning criminal convictions or offences where permitted or required by applicable law.

Such information may be obtained directly from you or from lawful third-party sources.

3.6 Technical and Usage Information

When you visit or use our website, we may automatically collect certain technical information, including:

• IP address;
• Browser type and version;
• Device type;
• Operating system;
• Time zone;
• Language preferences;
• Pages visited;
• Time spent on pages;
• Referral sources;
• Website navigation information;
• Login information;
• Error and diagnostic information;
• Information concerning interactions with our website and online services.

We may use this information to maintain, secure and improve our website and services.

4. How We Collect Personal Data

We may collect Personal Data:

1. Directly from you when you register an account or submit information;
2. When you communicate with us by email, telephone, live chat or other channels;
3. When you use our website, client portal or trading platform;
4. When you complete forms or submit documents;
5. From payment providers, financial institutions and other service providers;
6. From identity-verification, compliance and fraud-prevention providers;
7. From business introducers, affiliates or other authorised third parties;
8. From publicly available sources and official registers;
9. From regulatory, governmental or law-enforcement authorities where permitted or required by law.

5. How We Use Your Personal Data

We may use Personal Data for purposes including:

• Opening and administering your account;
• Providing requested products and services;
• Processing deposits, withdrawals and transactions;
• Verifying your identity;
• Conducting KYC and AML checks;
• Conducting sanctions and PEP screening;
• Preventing and detecting fraud, financial crime and abuse;
• Assessing and managing risks;
• Providing customer support;
• Maintaining and improving our website, platforms and services;
• Monitoring system performance and security;
• Processing and responding to enquiries;
• Maintaining business and transaction records;
• Meeting legal, regulatory and reporting obligations;
• Protecting our legal rights and interests;
• Conducting statistical and analytical activities;
• Understanding website usage and user interaction;
• Developing and improving products and services;
• Sending service-related communications;
• Sending marketing communications where permitted by applicable law and, where required, with your consent;
• Managing our business relationships with service providers and business partners.

6. Legal Basis for Processing

Depending on the circumstances and applicable law, we may process Personal Data because:

• Processing is necessary to perform a contract with you;
• Processing is necessary to comply with a legal or regulatory obligation;
• Processing is necessary for our legitimate business interests;
• You have provided consent;
• Processing is necessary to protect your or another person's vital interests; or
• Another lawful basis is available under applicable data-protection legislation.

Where we rely on consent, you may withdraw that consent at any time, subject to applicable legal restrictions and the legitimate reasons we may have for continuing to process certain information.

7. Disclosure of Personal Data

We treat Personal Data as confidential. We may disclose information where reasonably necessary for the purposes described in this Policy or where permitted or required by law.

Recipients may include:

• Companies within our corporate group;
• Payment service providers;
• Banks and financial institutions;
• Identity and verification providers;
• KYC, AML and sanctions-screening providers;
• Technology and IT service providers;
• Cloud hosting and data-storage providers;
• Trading and platform technology providers;
• Professional advisers, including lawyers, auditors and accountants;
• Customer-support providers;
• Fraud-prevention and cybersecurity providers;
• Regulators, governmental authorities and law-enforcement agencies;
• Courts, tribunals and other competent authorities;
• Business introducers or authorised representatives where appropriate;
• Other third parties where disclosure is necessary to provide a service requested by you.

We do not sell your Personal Data as a commodity to third parties.

8. International Data Transfers

Some of our service providers, affiliates or business partners may operate in countries outside your country of residence.

Where Personal Data is transferred internationally, we will take reasonable steps to ensure that the transfer is conducted in accordance with applicable data-protection laws and that appropriate safeguards are implemented where required.

These safeguards may include contractual protections, recognised transfer mechanisms, appropriate security measures or other lawful arrangements.

9. Data Security

We take reasonable technical and organisational measures designed to protect Personal Data against:

• Unauthorised access;
• Unauthorised disclosure;
• Accidental loss;
• Destruction;
• Alteration;
• Misuse;
• Fraud and other unlawful processing.

Security measures may include access controls, authentication procedures, encryption, firewalls, monitoring systems and other appropriate security technologies.

Access to Personal Data is restricted to employees, contractors and service providers who require such access for legitimate business purposes.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure. You should therefore take appropriate precautions when using the Internet and protect your account credentials, passwords and authentication information.

10. Monitoring and Recording of Communications

Where permitted or required by applicable law, we may monitor and/or record communications between you and us, including telephone calls, emails, online communications and other correspondence.

Such monitoring and recording may be undertaken for purposes including:

• Regulatory compliance;
• Quality assurance;
• Training;
• Security;
• Fraud prevention;
• Dispute resolution;
• Record keeping;
• Protection of our rights and those of our clients.

11. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Cookies are small text files stored on your device when you visit a website. They may help us:

• Operate our website;
• Remember preferences;
• Maintain website functionality;
• Understand website usage;
• Analyse traffic and performance;
• Improve user experience;
• Detect security issues;
• Support marketing activities where permitted.

Some cookies may be necessary for the operation of the website, while others may be used for analytics or other purposes.

You may adjust your browser settings to block or delete cookies. However, disabling certain cookies may affect the functionality or performance of parts of our website.

Where required by applicable law, we will obtain consent before placing non-essential cookies on your device.

12. Marketing Communications

We may use your contact information to provide information about products, services, market-related content, educational materials or other communications that may be relevant to you.

Where required by applicable law, we will obtain your consent before sending direct marketing communications.

You may unsubscribe from marketing communications at any time by using the unsubscribe mechanism provided in the relevant communication or by contacting us.

Please note that opting out of marketing communications will not prevent us from sending essential service, account, security, legal or regulatory communications.

13. Your Privacy Rights

Depending on your location and applicable law, you may have rights relating to your Personal Data, including:

Right of Access

You may request confirmation as to whether we process your Personal Data and, where applicable, request a copy of that information.

Right to Rectification

You may request correction of inaccurate or incomplete Personal Data.

Right to Erasure

In certain circumstances, you may request that your Personal Data be deleted.

This right is not absolute. We may be required to retain certain information to comply with legal, regulatory, contractual or record-keeping obligations.

Right to Restrict Processing

In certain circumstances, you may request that we restrict how your Personal Data is processed.

Right to Data Portability

Where applicable, you may request certain Personal Data in a structured, commonly used and machine-readable format.

Right to Object

You may have the right to object to certain types of processing, including direct marketing and certain processing based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Rights Relating to Automated Decision-Making

Where applicable law provides such rights, you may have protections concerning decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

Right to Lodge a Complaint

If you believe that your Personal Data has been handled improperly, you may have the right to lodge a complaint with the relevant data-protection authority in your jurisdiction.

Your rights may be subject to legal limitations and exemptions.

14. Accuracy of Personal Data

We take reasonable steps to ensure that the Personal Data we hold is accurate and up to date.

You should notify us if any information you have provided changes. We may also periodically request updated information or documentation where necessary to meet legal, regulatory or contractual requirements.

15. Data Retention

We retain Personal Data for as long as reasonably necessary for the purposes described in this Policy.

The period for which information is retained may depend on:

• The nature of the information;
• The purpose for which it was collected;
• Our relationship with you;
• Applicable legal and regulatory requirements;
• Accounting and reporting obligations;
• Dispute-resolution requirements;
• Fraud-prevention requirements;
• Our legitimate business needs.

Even after our relationship with you ends, we may retain certain information where required by law or where reasonably necessary to establish, exercise or defend legal claims.

Information contained in backups or archival systems may remain for a reasonable period until those systems are securely overwritten or deleted in accordance with applicable procedures.

16. Third-Party Websites

Our website may contain links to websites, platforms or services operated by third parties.

Those third parties may have their own privacy policies and terms. We are not responsible for the privacy practices, security or content of third-party websites.

You should review the applicable privacy policies before providing Personal Data to third-party websites.

17. Children's Privacy

Our services are intended for individuals who are legally permitted to access and use them under applicable laws.

We do not knowingly collect Personal Data from children where such collection is prohibited by applicable law.

If you believe that a child has provided Personal Data to us improperly, please contact us so that we can take appropriate action.

18. Account Credentials

You are responsible for maintaining the confidentiality of your usernames, passwords, authentication information and other account credentials.

You should never share your account credentials with another person.

If you believe that your account credentials have been compromised or that there has been unauthorised activity on your account, you should notify us immediately.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, business practices, technology or applicable legal and regulatory requirements.

When we make material changes, we may provide an appropriate notice through our website or other communication channels.

The updated version will become effective on the date stated at the beginning of the revised Policy.

You should review this page periodically to remain informed about how we handle Personal Data.

20. Contact Us

If you have questions regarding this Privacy Policy, wish to exercise your privacy rights or have a concern regarding the processing of your Personal Data, please contact us through the contact details provided on our website.

Aura Capital Markets
Website: auracapitalmarkets.com

Aura Capital Pty Ltd
ABN 48 143 700 887
ACN 143 700 887
NSW 2000, Australia

Privacy / Data Protection Contact:
compliance@auracapitalmarkets.com

We will review and respond to privacy-related requests in accordance with applicable law. We may request reasonable information to verify your identity before processing a request.

21. Governing Law

The processing of your Personal Data and your rights under this Privacy Policy may be subject to the data-protection laws applicable to you and to the entity with which you have entered into a contractual relationship.

Where applicable, the terms of your Client Agreement and other contractual documents will specify the relevant legal jurisdiction and governing law.