Privacy Policy

Our Commitment

MAI Capital Pty Ltd is committed to protecting your privacy and handling personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), as well as other applicable laws such as the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) (AML/CTF Act), the Common Reporting Standard (CRS), and the Foreign Account Tax Compliance Act (FATCA).

What We Collect

We collect personal information necessary to provide and administer our financial and investment services, including:

  • Full name, date of birth, contact details

  • Identification documents (e.g. passport, driver's licence)

  • Tax File Number, ABN, and entity structure

  • Employment and income details

  • Bank account and financial information

Sensitive Information

We may collect sensitive information (e.g. AML/KYC documentation, source of wealth data) primarily from prospective and existing investors. This is information collected (including consent where required) through our application forms, onboarding platforms, or digital interfaces. You may withdraw your consent at any time, subject to our legal or regulatory obligations.

How We Collect It

We collect information:

  • Directly from you (via forms, meetings, calls, email, or online platforms)

  • From your financial adviser or nominated representative

  • Through third-party platforms (e.g. identity verification, eKYC)

  • From government registers or service providers

  • From cookies or usage data via our website

Why We Collect It

We use personal and sensitive information to:

  • Verify your identity and meet legal obligations (AML/CTF, FATCA, CRS)

  • Assess wholesale or professional investor eligibility

  • Onboard, manage, and administer investments or fiduciary services

  • Monitor and report compliance risks and audit trails

  • Communicate updates and opportunities (unless you opt out)

Who We Disclose It To

We may disclose personal information to third parties where necessary to provide our services, comply with laws, or perform our contractual obligations. This includes:

  • Application onboarding platforms

  • Customer Relationship Management (CRM) systems

  • eKYC providers and identity verification platforms

  • Fund administrators, custodians, auditors, tax advisers, legal counsel

  • Regulatory authorities (e.g. AUSTRAC, ATO, ASIC, foreign tax bodies)

  • Technology partners and cloud storage providers

  • Other MAI Group entities involved in service delivery

Where overseas transfers are necessary, we implement reasonable measures to ensure your data remains protected under privacy standards equivalent to the Australian Privacy Principles.

Data Security and Storage

We take reasonable steps to secure personal information from misuse, loss, unauthorised access or modification. These include:

  • Physical and electronic security controls

  • Access limitations and staff confidentiality undertakings

  • Routine IT security and data governance reviews

Personal information is stored in a combination of secure electronic systems and cloud-based platforms, some of which may be located in Australia or overseas. Where data is stored or processed offshore, we take reasonable steps to ensure the third-party service providers (such as cloud hosting, CRM or investment management and onboarding platforms) comply with privacy obligations equivalent to the Australian Privacy Principles (APPs). These steps include contractual safeguards and assessments of the provider's data protection practices.

Data Retention and Access

We retain personal information for a minimum of seven (7) years, or longer where required by law or necessary for compliance or legal defence.

You may request access to or correction of your personal information by contacting us. We will respond promptly unless legal restrictions apply.

Data Breaches

If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and report it to the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches (NDB) scheme.

Children's Privacy

Our services are designed for adults. We do not knowingly collect personal information from individuals under the age of 18.

Contact Us

For questions, complaints, or to exercise your rights, please contact:

Privacy Officer

MAI Capital

Level 8, 257 Collins Street

Melbourne, VIC 3000

Email: info@maicapital.com

Changes to This Policy

We may update this Privacy Policy periodically. Where changes are material, we will notify you via email or a prominent notice on our website.