Privacy Policy

1. We respect your privacy

(a) TWMT Pty Ltd ACN 621 581 584 (“TWMT”, "Coinstash", “we”, “us”, or “our”) respects your right to privacy and is committed to safeguarding the privacy of our customers and website visitors. This policy sets out how we collect and treat your personal information.

(b) We adhere to the Australian Privacy Principles contained in the Privacy Act 1988 (Cth) ("Privacy Act").

(c) "Personal information" is information we hold which is identifiable as being about you. This includes information such as your name, email address, identification number, or any other type of information that can reasonably identify an individual, either directly or indirectly.

(d) You may contact us in writing at C/- MGISQ, Level 1, 200 Mary Street, Brisbane 4000, or [email protected], for further information about this Privacy Policy.

(e) This Privacy Policy is intended to operate in conjunction with our Website Terms and Conditions, and adopts the definitions and terms set out in that document unless otherwise specified. 

2. What personal information is collected

(a) Coinstash will, from time to time, receive and store personal information you submit to our Platform, provided to us directly or given to us in other forms.

(b) You may provide basic information such as your name, phone number, address and email address to enable us to send you information, provide updates and process your product or service order.

(c) We may collect additional information at other times, including but not limited to, when you provide feedback, when you provide information about your personal or business affairs, change your content or email preference, respond to surveys and/or promotions, provide financial or credit card information, or communicate with our customer support.

(d) Additionally, we may also collect any other information you provide while interacting with us. We may monitor and record calls between you and Coinstash. We will notify you when this occurs.

3. Who we collect personal information about

(a) The personal information we may collect and hold includes (but is not limited to) personal information about the following individuals:

(i) customers;

(ii) potential customers;

(iii) visitors to the Platform; and

(iv) service providers.

4. How we collect your personal information

(a) Coinstash collects personal information from you in a variety of ways, including when you interact with us electronically or in person, when you access our Platform and when we engage in business activities with you. We may receive personal information from third parties such as identity verification services, financial institutions or referrers. If we do, we will protect it as set out in this Privacy Policy.

(b) By providing us with personal information, you consent to the collection, use and disclosure of that information subject to the terms of this Privacy Policy and any other agreements we have with you.

(c) We will not collect sensitive information about you without your consent, unless an exemption in the Australian Privacy Principles applies. These exceptions include if the collection is required or authorised by law or necessary to take appropriate action in relation to unlawful activity of serious misconduct.

(d) We will not give you the option of dealing with us anonymously, or using a pseudonym if it is illegal or impractical for us to deal with individuals who are not identified.

(e) We may receive unsolicited personal information about you. We destroy or de-identify all unsolicited personal information we receive, unless it is relevant to our purposes for collecting personal information. We may retain additional information we receive about you if it is combined with other information we are required or entitled to collect. If we do this, we will retain the information in the same way we hold your other personal information.

5. How we use your personal information

(a) Coinstash may use personal information collected from you to provide you with information about our products or services. We may also make you aware of new and additional products, services and opportunities available to you.

(b) Coinstash will use personal information only for the purposes that you consent to. This may include to:

(i) provide you with products and services during the usual course of our business activities;

(ii) administer our business activities;

(iii) manage, research and develop our products and services;

(iv) provide you with information about our products and services;

(v) communicate with you by a variety of measures including, but not limited to, by telephone, email, sms or mail;

(vi) investigate any complaints;

(vii) comply with relevant laws, regulations and other legal obligations; and 

(viii) for market research to help us improve the services to our customers and enhance our business and performance

(c) We may use and disclose your personal information for any of these purposes. We may also use and disclose your personal information for secondary purposes which are related to the primary purposes set out above, or in other circumstances authorised by the Privacy Act.

(d) If you withhold your personal information, it may not be possible for us to provide you with our products and services or for you to fully access our Platform. We may disclose your personal information to comply with a legal requirement, such as a law, regulation, court order, subpoena, warrant, legal proceedings or in response to a law enforcement agency request. If there is a change of control in our business or a sale or transfer of business assets, we reserve the right to transfer to the extent permissible at law our user databases, together with any personal information and non-personal information contained in those databases.

(e) Sensitive information will be used and disclosed only for the purpose for which it was provided (or a directly related secondary purpose), unless you agree otherwise or an exemption in the Privacy Act applies.

6. Disclosure of your personal information

(a) Coinstash may disclose your personal information to any of our employees, officers, insurers, professional advisers, agents, suppliers or subcontractors insofar as reasonably necessary for the purposes set out in this Privacy Policy. This includes organisations that can verify information that you have supplied when applying for a product or service, including other banks and financial institutions that you may have products and services with, and commercially available third-party databases.

(b) We may share your information with regulatory bodies, government agencies, and law enforcement bodies to comply with our legislative or regulatory obligations.

(c) If you ask us to, we will share your personal information with third parties where you have authorised us to do so or where we are legally required. They include your financial adviser, or other professional and business advisers (such as lawyers and auditors), or other persons acting on your behalf (such as your executor, administrator, trustee, or guardian). This could include information held in your Account available for viewing by your advisers through the Platform.  

(c) If we do disclose your personal information to a third party, we will protect it in accordance with this Privacy Policy during the disclosure process.

7. Marketing

(a) We and/or our carefully selected business partners may send you direct marketing communications and information about our products and services, special offers, promotions and events that may be of interest to you. This may take the form of emails, SMS, mail or other forms of communication, including targeted advertising on or through the Coinstash or third party websites, in accordance with the Spam Act 2003 (Cth) and the Privacy Act. We may also market our products and services to you via third party channels (such as social media and other third-party applications). 

(b) We may use de-identified and/or hashed data to help place marketing communications in channels that are likely to be relevant to broader audience segments. When used for this purpose, any personal information is hashed, meaning it is converted into a randomised code to help ensure it is not identifiable at an individual level.

(c) Where we market to prospective customers, we are happy to advise them how we obtained their information and will provide easy to follow opt-outs.

(d) You may opt-out of receiving marketing materials from us by following the unsubscribe link in any email or by contacting us at [email protected]. 

(e) You cannot opt out of receiving important service-related communications (e.g., security alerts, changes to terms).

8. Hosting and international data transfers

(a) Information we collect may from time to time be stored, processed or transferred between our offices or service providers located in Australia or overseas. Any overseas disclosures are conducted in accordance with Australian Privacy Principle 8. We take reasonable steps to ensure that personal information disclosed offshore is handled in a way that is consistent with the Privacy Act.

(b) You acknowledge that where you or an authorised adviser export or transmit your personal information to third-party systems outside our platform (such as accounting software or tax tools), Coinstash is not responsible for how those systems handle your data.

(c) You acknowledge that personal data that you submit for publication through our Platform or services may be available, via the internet, around the world. We cannot prevent the use (or misuse) of such personal data by others.

9. Security of your personal information

(a) Coinstash is committed to ensuring that the information you provide to us is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure information and protect it from misuse, interference, loss and unauthorised access, modification and disclosure.

(b) Where we employ data processors to process personal information on our behalf, we only do so on the basis that such data processors comply with the requirements under the Privacy Act and that have adequate technical measures in place to protect personal information against unauthorised use, loss and theft.

(c) The transmission and exchange of information is carried out at your own risk. We cannot guarantee the security of any information that you transmit to us, or receive from us. Although we take measures to safeguard against unauthorised disclosures of information, we cannot assure you that personal information that we collect will not be disclosed in a manner that is inconsistent with this Privacy Policy.

(d) If you grant Adviser Access or use platform integrations that transmit your data externally, you acknowledge that such actions may fall outside of Coinstash's control. While Coinstash applies security controls to our systems, we cannot guarantee the security of information once it has been accessed or exported by an authorised third party.

10. Accessing and correction of your personal information

(a) You may request details of personal information that we hold about you in accordance with the provisions of the Privacy Act. If you would like a copy of the information which we hold about you or believe that any information we hold on you is inaccurate, out of date, incomplete, irrelevant or misleading, please email us at [email protected].

(b) We reserve the right to refuse to provide you with information that we hold about you, in certain circumstances set out in the Privacy Act or any other applicable law.

(c) We will require identity verification and specification of what information is required. An administrative fee may be charged which includes the cost of our staff to compile the records requested, any postage charges and development costs for any bespoke data requests. 

(d) If you believe that any personal information held by us about you is inaccurate, out-of-date, incomplete, irrelevant, or misleading, you have a right to request its correction. To request a correction, please email us at [email protected]. We will take reasonable steps to correct the information or, if we do not agree with the request, a written explanation for the refusal will be provided, along with a statement that you believe the information is inaccurate, out-of-date, incomplete, irrelevant, or misleading.

11. Data retention

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. This may include retaining your records to comply with anti-money laundering laws, financial reporting obligations, or audit requirements. Once your information is no longer required, we will securely delete or de-identify it.

12. Complaints about privacy

(a) If you have any complaints about our privacy practices, please feel free to send in details of your complaints to [email protected]. We take complaints very seriously and will respond shortly after receiving written notice of your complaint.

(b) If you are not satisfied with our response or the outcome of your complaint, you may contact the Office of the Australian Information Commissioner (“OAIC”). The OAIC is the independent national regulator for privacy and freedom of information and can investigate complaints about the handling of personal information. The OAIC can be contacted via their website at www.oaic.gov.au or by phone on 1300 363 992.

13. Changes to Privacy Policy

Please be aware that we may change this Privacy Policy in the future. We may modify this Policy at any time, in our sole discretion and all modifications will be effective immediately upon our posting of the modifications on our Platform or notice board. Please check back from time to time to review our Privacy Policy.

14. Platform

When you come to our Platform (including the websites www.twmt.com.au, coinstash.com.au, coinstash.io), we may collect certain information such as your browser type, operating system, website visited immediately before coming to our Platform, etc. This information is used in an aggregated manner to analyse how people use our site, such that we can improve our service.

15. Cookies

We may from time to time use cookies on our Platform. Cookies are very small files which a website uses to identify you when you come back to the site and to store details about your use of the site. Cookies are not malicious programs that access or damage your computer. Most web browsers automatically accept cookies but you can choose to reject cookies by changing your browser settings. However, this may prevent you from taking full advantage of our Platform. Our Platform may from time to time use cookies to analyses website traffic and help us provide a better website visitor experience. In addition, cookies may be used to serve relevant ads to website visitors through third party services such as Google AdWords. These ads may appear on this website or other websites you visit. These technologies are configured to collect only the minimum personal information necessary and are used to analyse website traffic, measure advertising campaign success, and deliver targeted advertising on third-party platforms in accordance with this Privacy Policy.

You can manage cookie preferences through your browser. By continuing to use our Platform, you consent to our use of cookies, unless you disable them.

16. Third party sites

Our site may from time to time have links to other websites not owned or controlled by us. These links are meant for your convenience only. Links to third party websites do not constitute sponsorship or endorsement or approval of these websites. Please be aware that Coinstash is not responsible for the privacy practices of other such websites. We encourage our users to be aware, when they leave our Platform, to read the privacy statements of each and every website that collects personal identifiable information.

Last updated: 3 December 2025

Updated on: 03/12/2025