How we handle your personal information.

BlackVault Technologies, ABN 37 622 309 540 of Brisbane, Queensland, Australia trades as BlackVault Technologies. BlackVault™ is a trade mark used by that business. In this Privacy Policy, “BlackVault”, “we”, “us” and “our” refer to MVP Ventures Pty Ltd trading as BlackVault Technologies — a single legal entity, not a separate operator. This Privacy Policy explains how we collect, hold, use and disclose personal information in connection with the website located at blackvault.au (the “Website”) and your dealings with us. We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

This Privacy Policy applies to personal information collected through the Website and through general enquiries made to BlackVault™. It does not describe the technical architecture, data residency, or data sovereignty controls of the BlackVault™ Sovereign AI Infrastructure service itself. Those controls are governed separately under the service agreement entered into with each client and the compliance governance documentation issued to that client.

We may collect the following categories of personal information:

We do not knowingly collect sensitive information (as defined in the Privacy Act) through the Website. Please do not include sensitive information in any enquiry unless it is strictly necessary.

We collect personal information:

• ·directly from you, when you complete a form on the Website (including a request for an Infrastructure Assessment), email us, or otherwise contact us;
• ·automatically, through cookies and similar tracking technologies (see section 7); and
• ·from a person authorised to act on your organisation’s behalf, such as a colleague who refers you to us.

We collect, hold, use and disclose personal information to:

• ·respond to and assess your enquiry, including requests for an Infrastructure Assessment;
• ·provide information about BlackVault™ and prepare proposals and service agreements;
• ·communicate with you, including sending updates you have requested;
• ·operate, maintain and improve the Website;
• ·comply with our legal and regulatory obligations; and
• ·any other purpose disclosed to you at the time of collection, or to which you have consented.

We will only use personal information for direct marketing purposes where permitted by law, and will provide a simple means for you to opt out of any future marketing communications.

We may disclose personal information to:

• ·our personnel and related bodies corporate, on a need-to-know basis;
• ·contracted service providers who assist us in operating the Website and our business, including IT hosting, email and customer relationship management providers;
• ·our professional advisers, including legal, accounting and insurance advisers;
• ·a government or regulatory authority, where required or authorised by law; and
• ·a proposed purchaser or successor in the event of a sale, merger or restructure of our business.

Some of our contracted service providers may store or process personal information outside Australia. Where this occurs, we take reasonable steps to ensure any overseas recipient handles personal information consistently with the Australian Privacy Principles, to the extent required by the Privacy Act. We will identify the relevant countries in this Privacy Policy where it is practicable to do so.

We take reasonable steps to protect personal information held by us from misuse, interference, loss, and unauthorised access, modification or disclosure. No method of transmission over the internet, or method of electronic storage, is completely secure, and we cannot guarantee absolute security.

The security architecture, data residency, and governance controls that apply to the BlackVault™ Sovereign AI Infrastructure service — deployed within a client’s own Australian cloud environment — are separate from, and materially more extensive than, the security measures applied to this corporate Website, and are described in the compliance documentation issued under each client’s service agreement.

The Website may use cookies and similar tracking technologies to operate correctly, understand how visitors use the Website, and improve its content. You may configure your browser to refuse cookies, though some parts of the Website may not function as intended if you do so.

We take reasonable steps to ensure the personal information we collect, use and disclose is accurate, complete and up to date. You may request access to, or correction of, personal information we hold about you by contacting us using the details in section 13. We will respond to a request within a reasonable period and in accordance with the Privacy Act, and may charge a reasonable fee for giving access. We may decline a request in the circumstances permitted under the Privacy Act, in which case we will provide reasons for our decision.

We retain personal information for as long as is necessary to fulfil the purposes for which it was collected, or as required by law, after which it is securely destroyed or de-identified.

If we become aware of a data breach involving personal information that is likely to result in serious harm, we will comply with our notification obligations under the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth).

The Website is not directed at, and we do not knowingly collect personal information from, children under the age of 18.

The Website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites and encourage you to review their privacy policies.

If you have a question about this Privacy Policy, wish to access or correct your personal information, or wish to make a complaint about how we have handled your personal information, please contact:

Privacy Officer
BlackVault Technologies (a trading name of MVP Ventures Pty Ltd)

We will investigate any complaint and respond within a reasonable time. If you are not satisfied with our response, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We may update this Privacy Policy from time to time. The current version will always be available on the Website, with the effective date shown below.

This Privacy Policy is governed by the laws of Queensland, Australia.

Effective date: 18 July 2026