Privacy Policy

PRIVACY POLICY

Last Updated: November 2026

MST Financial Services Pty Limited (ABN 54 617 475 180, AFSL 500 557) and other members of the MST group (together, “MST”, “we”, “us” or “our”) are committed to protecting the privacy and security of personal information that we collect and hold.

We handle personal information in accordance with the Privacy Act 1988 (Cth) (Privacy Act), including the Australian Privacy Principles (APPs), and other applicable laws.



1. WHAT IS PERSONAL INFORMATION?

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not and whether it is recorded in a material form or not.

Some types of personal information are considered sensitive information under the Privacy Act. This may include information about an individual’s health, racial or ethnic origin, political opinions, religious beliefs, sexual orientation, criminal record or membership of certain organisations.

We will only collect sensitive information where it is reasonably necessary for our functions or activities and where we are permitted or required to do so by law, including where any required consent has been obtained.



2. WHAT PERSONAL INFORMATION DO WE COLLECT AND WHY?

The types of personal information MST may collect and hold depend on our relationship with you and the products or services we provide.

This may include:

  • name, date of birth and contact details;
  • residential address and country of residence;
  • identification and verification information;
  • tax information, including Tax File Numbers where permitted by law;
  • bank account and payment details;
  • investment, transaction and financial information;
  • information relating to your relationship with MST;
  • information relating to representatives, employees, advisers or other persons acting on behalf of a client;
  • business contact and professional information;
  • correspondence and communications with MST; and
  • information required for regulatory, compliance, risk management and legal purposes.

We may collect and use personal information to:

  • provide our financial products and services;
  • establish and manage our relationship with clients and other persons;
  • verify identity and undertake customer due diligence;
  • comply with anti-money laundering and counter-terrorism financing requirements and other legal and regulatory obligations;
  • manage transactions, accounts and investments;
  • respond to enquiries and correspondence;
  • manage relationships with service providers, suppliers, advisers and other business contacts;
  • manage risk, security, fraud prevention and compliance;
  • administer and improve our business, systems and services; and
  • comply with applicable Australian and international laws and regulatory requirements.


3. HOW DO WE COLLECT PERSONAL INFORMATION?

Where practicable, MST will collect personal information directly from you or from your authorised representative.

We may collect information when you:

  • become or apply to become a client;
  • use our products or services;
  • communicate or correspond with us;
  • visit or interact with our website;
  • attend an event or meeting;
  • enter into a business relationship with us; or
  • otherwise provide information to MST.

In some circumstances, we may also collect personal information from third parties, including your authorised representatives, advisers, service providers, counterparties, identity verification providers, regulatory or government bodies, and publicly available sources, where permitted by law.



4. WHAT HAPPENS IF INFORMATION IS INCOMPLETE OR INACCURATE?

You are not required to provide us with personal information unless required by law.

However, if we are unable to collect certain information, or if information provided to us is incomplete or inaccurate, we may not be able to provide you with a product or service, process a transaction, respond to a request or otherwise conduct business with you.



5. HOW DO WE USE AND DISCLOSE PERSONAL INFORMATION?

MST may use or disclose personal information for the purpose for which it was collected and for related purposes where permitted by law.

This may include disclosure to:

  • other members of the MST group;
  • professional advisers, auditors and insurers;
  • technology, data, cloud and other service providers;
  • financial institutions, brokers, custodians, administrators and other parties involved in providing financial services;
  • identity verification and compliance service providers;
  • regulators, government agencies, law enforcement bodies, courts and tribunals;
  • parties involved in an actual or proposed corporate transaction involving MST; and
  • other parties where you have consented to the disclosure or where disclosure is authorised or required by law.

Where MST engages third-party service providers, we take reasonable steps appropriate to the circumstances to protect personal information disclosed to or handled by those providers.

MST may also communicate with clients and other contacts about products, services, events or information that we consider may be relevant to them, where permitted by law.

You may opt out of receiving marketing communications from us at any time by using the unsubscribe facility provided in the relevant communication or by contacting us.

6. OVERSEAS DISCLOSURE

Some of MST’s affiliates, service providers or other recipients of personal information may be located outside Australia or may store or process information outside Australia.

Where personal information is disclosed overseas, MST will take reasonable steps as required under applicable privacy laws in relation to that disclosure.

The countries in which overseas recipients are located may change from time to time depending on the service providers and systems used by MST.

7. HOW DO WE PROTECT PERSONAL INFORMATION?

MST takes reasonable steps to protect personal information it holds from misuse, interference and loss, and from unauthorised access, modification or disclosure.

These steps include appropriate technical and organisational measures, which may include access controls, information security systems and processes, policies and procedures, staff training and oversight of relevant third-party service providers.

No method of transmitting or storing information is completely secure. MST regularly considers the security measures appropriate to the nature of the personal information it holds and the risks associated with that information.

Where MST no longer requires personal information for a permitted purpose, and is not required by law or a court or tribunal order to retain it, MST takes reasonable steps to destroy or de-identify that information.

8. DATA BREACHES

MST maintains processes for identifying, assessing and responding to actual or suspected data breaches involving personal information.

Where a data breach is likely to result in serious harm and the requirements of the Notifiable Data Breaches scheme are met, MST will notify affected individuals and the Office of the Australian Information Commissioner as required by law.

9. OUR WEBSITE, COOKIES AND ONLINE INFORMATION

When you visit MST’s website, we may collect information about your interaction with the website, including through cookies and similar technologies.

Depending on the circumstances, this information may include your IP address, browser or device information, pages viewed, dates and times of access, referral information and information about how you interact with our website.

Some of this information may constitute personal information or may become personal information when combined with other information.

Cookies and similar technologies may be used to operate and secure our website, understand how the website is used and improve our website and services.

Some information may be collected or processed on our behalf by third-party service providers.

You may be able to control the use of cookies through your browser settings. Disabling certain cookies may affect the functionality of the website.

10. Artificial intelligence and automated decision-making

MST may use technology, including artificial intelligence and automated tools, in connection with its business operations.

Where personal information is used in connection with these technologies, MST will handle that information in accordance with applicable privacy laws and our internal policies and procedures.

From 10 December 2026, the Privacy Act requires additional information to be included in a privacy policy in certain circumstances where a computer program uses personal information to make, or substantially and directly assist in making, a decision that could reasonably be expected to significantly affect an individual’s rights or interests.

11. Links to other websites

Our website may contain links to websites operated by third parties.

Third-party websites are not operated or controlled by MST and are not covered by this Privacy Policy. We recommend reviewing the privacy policies of those websites before providing them with personal information.

12. Accessing and correcting your personal information

You may request access to personal information that MST holds about you and request that inaccurate, out-of-date, incomplete, irrelevant or misleading information be corrected.

There are some circumstances in which we may refuse access or correction as permitted by the Privacy Act. Where we refuse a request, we will generally provide you with written reasons for doing so, where required by law.

We may need to verify your identity before providing access to or correcting personal information.

MST will respond to requests for access or correction within a reasonable period.

We will not charge you for making an access request. In some circumstances, we may charge reasonable costs associated with providing access to your personal information. We will advise you of any proposed charge before proceeding.

13. Privacy complaints

If you have a concern or complaint about how MST has handled your personal information, or believe that MST has breached the Privacy Act 1988 (Cth) or the Australian Privacy Principles, please contact us using the details below.

MST will investigate and respond to privacy complaints within a reasonable period.

If you are not satisfied with our response, you may be entitled to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

Privacy Officer

MST Financial Services Pty Limited

Email: compliance@mstfinancial.com.au

Phone: +61 (2) 8999 9988