Privacy Policy
Effective date: 1 October 2026 · Last updated: 1 October 2026
1. Introduction
Onyx Bolt — The Vault Ledger ("Onyx Bolt", "we", "us", "our") is an independent editorial publisher operating from Level 4, 111 Macquarie Street, Hobart TAS 7000, Australia. This Privacy Policy explains how we collect, use, disclose, and protect personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
By using the website onyxbolt.com or contacting us, you acknowledge this Policy.
2. What Information We Collect
We collect personal information only when you voluntarily provide it:
- Contact form: name, email address, and message content.
- Automatically collected: IP address (hashed before logging), browser type, operating system, pages visited, referrer URL, and date/time of access. This information is collected by our server software and is used for security and operational purposes.
We do not collect sensitive information as defined in the Privacy Act (health, racial origin, financial account details, etc.).
3. How We Use Personal Information
- To respond to enquiries submitted through the contact form.
- To detect and prevent spam, abuse, and automated submissions (honeypot and rate limiting).
- To monitor site security and diagnose technical issues.
- To improve editorial content based on aggregate, non-identifiable usage patterns.
We do not use personal information for marketing, profiling, or automated decision-making that has legal or significant effects on you.
4. Cookies and Tracking
This site uses only strictly necessary server-side processing. We do not use third-party analytics cookies (such as Google Analytics), advertising cookies, or tracking pixels. The contact form rate-limiting function uses a server-side hash — no tracking cookies are set.
The only external iframe embedded on the Contact page is a Google Maps embed (for the editorial office address). Google's privacy policy applies to that iframe: policies.google.com/privacy.
5. Disclosure of Personal Information
We do not sell, rent, or trade personal information. We may disclose it in these limited circumstances:
- Legal obligation: where required by Australian law, a court order, or a regulatory authority.
- Hosting provider: our web hosting provider processes server logs in the ordinary course of hosting operations. We take reasonable steps to ensure they handle personal information in accordance with Australian law.
We do not disclose personal information to any bank, financial institution, or financial services company.
6. Cross-Border Disclosure
Our hosting infrastructure may be located outside Australia. We take reasonable steps to ensure that overseas recipients handle personal information consistently with the APPs (APP 8). Where we cannot ensure this, we will notify you before any overseas transfer.
7. Data Retention
- Contact form submissions: retained for up to 24 months in our secure logs directory, then deleted.
- Rate-limiting data: IP address hashes stored for a maximum of 48 hours for security purposes, then automatically overwritten.
- Server logs: retained according to our hosting provider's standard retention schedule, typically 90 days.
8. Security
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. Measures include:
- HTTPS (TLS) encryption on all connections.
- Log files stored in a directory protected by server-level access controls.
- Input sanitisation and validation on all form submissions.
- Honeypot and rate-limiting on the contact form to prevent abuse.
9. Accessing and Correcting Your Information
Under the APPs (APP 12 and APP 13), you have the right to request access to personal information we hold about you, and to request correction of inaccurate, out-of-date, or incomplete information.
To make an access or correction request, contact us at privacy@onyxbolt.com or in writing to: Level 4, 111 Macquarie Street, Hobart TAS 7000, Australia. We will respond within 30 days.
10. Children's Privacy
This site is intended for adults. We do not knowingly collect personal information from individuals under the age of 18. If you believe a child has submitted information to us, please contact privacy@onyxbolt.com.
11. Third-Party Links
Our dispatches and editorial pages contain links to third-party websites (Australian bank public websites, ASIC MoneySmart, the Australian Banking Association). These sites have their own privacy policies and we are not responsible for their practices.
12. Changes to This Policy
We may update this Policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of the site after changes constitutes acceptance of the updated Policy.
13. Complaints
If you believe we have not handled your personal information in accordance with the Privacy Act, please contact us first at privacy@onyxbolt.com. We will investigate and respond within 30 days.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
- Website: oaic.gov.au
- Phone: 1300 363 992
- Post: GPO Box 5218, Sydney NSW 2001
14. Contact
Privacy enquiries:
privacy@onyxbolt.com
+61 3 6230 4175
Level 4, 111 Macquarie Street, Hobart TAS 7000, Australia
Mon–Fri 9:00 AM – 5:00 PM AEST