1.1 This Privacy Policy explains how Liberty Platform Pty Ltd (ACN 694 912 126, ABN 83 694 912 126) (Liberty Stone, we, us) collects, uses, discloses and protects personal information through the Liberty Stone platform at libertystone.com and libertystone.com.au and related apps (Platform).

1.2 We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Our financial services are provided as a Corporate Authorised Representative of YP Securities Pty Ltd (ACN 647 627 889, AFSL 531729) (Licensee).

1.3 Change to Idealx. Liberty Platform Pty Ltd is being converted to Idealx Pty Ltd, and YP Securities Pty Ltd to Idealx Securities Limited. The companies' ACNs do not change. The change of name does not change who holds your personal information or how we handle it under this policy.

1.4 Partner Institutions, the Prime Broker, product issuers and other third parties that hold your information in their own right have their own privacy policies, which apply to their handling of it.

2.1 What we collect. We collect the personal information reasonably necessary to provide our services, which may include:

• name, date of birth, contact details, residential address and citizenship or residency;
• identity documents and verification results, including for directors, trustees, beneficial owners and authorised persons of companies, trusts and SMSFs;
• tax residency details;
• bank account details, account balances, transactions, investments and instructions;
• financial information relevant to a product's target market or a required check;
• communications with us, complaints and consent records; and
• device, browser, IP address, login and security information.

2.2 How we collect it. We usually collect information directly from you. We may also receive it from Partner Institutions, the Prime Broker, identity verification and screening providers, product issuers and registries, your authorised representatives or advisers, and public registers.

2.3 Sensitive information. We collect sensitive information, such as biometric data used in identity verification, only with your consent or where the law allows.

2.4 Why we use it. We use personal information to:

• verify your identity and assess eligibility;
• open and operate your accounts with Partner Institutions and the Prime Broker;
• process deposits, withdrawals, conversions, term deposits and trades;
• send confirmations, statements and service notices;
• meet our obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth), the Corporations Act 2001 (Cth), tax laws (including FATCA and CRS reporting) and sanctions laws;
• detect and prevent fraud and protect account security;
• handle complaints and improve our services; and
• send marketing, where you have not opted out.

2.5 If you don't give it. You may make general enquiries anonymously or under a pseudonym. To open an account we must identify you; if you do not provide the information we need, we may be unable to provide our services.

2.6 Atlas AI assistant. When you use Atlas, the AI assistant in the Platform, we process your messages, any attachments and the account information needed to answer your request or prepare the action you ask for, within your account permissions. We may use third-party AI and hosting providers to do this.

• We do not use your identifiable financial information or conversations to train general-purpose AI models.
• Atlas may prepare an instruction, but nothing is carried out until you confirm it through the Platform's confirmation steps.
• Please do not share sensitive information with Atlas that it does not need to answer your request.

3.1 We disclose personal information only as reasonably needed for the purposes in section 2, to:

• Partner Institutions that hold your cash and term deposits: Cuscal Limited, JPMorgan Chase Bank (JPM), SSB Bank, Zenus Bank, Delos Banking, Mesta and OpenPayD, and any other Partner Institution we tell you about;
• the Prime Broker and its custodians, and the exchanges, registries and issuers of the investments you buy;
• the Licensee, which oversees our financial services;
• identity verification, screening, hosting, IT security and communications providers;
• your authorised representatives, advisers, accountants or SMSF administrators, where you have authorised it;
• our professional advisers, auditors and insurers; and
• regulators and government bodies, including ASIC, AUSTRAC, the ATO and AFCA, and courts or law enforcement where required or authorised by law.

Each recipient receives only the information it needs for its role. We do not sell your personal information.

3.2 Overseas disclosure. Some recipients are located, or store information, outside Australia. Because several Partner Institutions are overseas, your information is likely to be disclosed to recipients in the United States (including Puerto Rico), the European Union and the United Kingdom, and in other countries where our Prime Broker and technology providers (including hosting and AI providers) operate. You can ask our Privacy Officer for a current list of these countries. Before disclosing information overseas we take reasonable steps under APP 8 to ensure the recipient handles it consistently with the APPs.

4.1 Security. We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, change or disclosure, including encryption, access controls, multi-factor authentication and monitoring. We will never ask for your password by email, phone or any unsolicited message.

4.2 Data breaches. If a data breach is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme.

4.3 Retention. We keep records for as long as the law requires, generally at least seven years under AML/CTF and corporations laws, and as needed to deal with claims. When information is no longer needed, we take reasonable steps to destroy or de-identify it. Closing your account does not end our legal obligation to keep records.

4.4 Access and correction. You can ask to access or correct your personal information by contacting our Privacy Officer (section 5). We will verify your identity and respond within 30 days. There is no fee to make a request. If we refuse, we will tell you why and how to complain.

4.5 Marketing. We may send you information about our products and services. You can opt out at any time using the unsubscribe link or by contacting us. Opting out does not stop essential account, security and legal notices.

4.6 Cookies and analytics. The Platform uses cookies and similar technologies that are essential for login, security and sessions, and optional analytics to understand how the Platform is used. You can manage optional cookies in your browser or our cookie settings.

5.1 Privacy Officer. Contact our Privacy Officer with any request, question or complaint:

Privacy Officer, Liberty Platform Pty Ltd Suite 109, Level 1, 40 Burgundy Street, Heidelberg VIC 3084 compliance@libertystone.com.au

5.2 Complaints. We will acknowledge a privacy complaint promptly and aim to respond within 30 days, under our Complaints Policy. If you are not satisfied, you can complain to the OAIC at www.oaic.gov.au or 1300 363 992. Complaints that also concern a financial service can be referred to the Australian Financial Complaints Authority (AFCA) at www.afca.org.au or 1800 931 678.

5.3 Changes. We may update this policy to reflect changes to our services or the law. The current version is published at libertystone.com.au/privacy, and we will notify you of material changes.

Last updated: 9 November 2026.