Powering the
web3 revolution

Security Statement

Data and Encryption Policies

Vulnerability Detection and Penetration Tests

Automated scans of BlockTrust’s infrastructure are performed every week. Vulnerability and security lists are actively monitored for CVE and other vulnerability disclosures with appropriate actions taken. An external agency is engaged to perform a penetration test at least annually, with results mitigated as appropriate. BlockTrust takes security seriously, and prioritises remediation of issues.

Data Center & Data Location

BlockTrust services are hosted on Amazon Web Services’ (AWS) EC2 platform. The physical servers are located in AWS’s secure data centres, within the Sydney (ap-southeast-2) region. From Amazon’s documentation: AWS has achieved ISO 27001 certification and has been validated as a Level 1 service provider under the Payment Card Industry (PCI) Data Security Standard (DSS). We undergo annual SOC 1 audits and have been successfully evaluated at the Moderate level for Federal government systems as well as DIACAP Level 2 for DoD systems. More information AWS EC2 data centre security can be obtained from Amazon directly here.

Production Environment

The production environment is kept separate from development and testing environments, with no network connectivity between the two. Maintenance of the production environment is performed mostly automatically, but where staff are required to connect, a separate specialised VPN is used. A restricted set of trained staff are authorised to connect via this VPN for other maintenance tasks as required. Extra policies and firewall rules are in place to ensure that production data cannot leak in any way via this VPN.

Network Security

BlockTrust uses CloudFlare for DDoS protection and Web Application Firewall services. BlockTrust is developed with the principle of least privilege and with best practise security in mind – such as OWASP, to prevent attacks such as SQL injection or Cross-Site Scripting attacks.

Application Login security

SAML 2.0 SSO is supported for BlockTrust users. All users are able to use either Google, Facebook, or LinkedIn authentication services. In these cases, the login security settings of the authentication service will be used. If logging in directly to BlockTrust using an email and password, we require a minimum of 6 characters. Passwords are stored securely in a hashed form and therefore can never be sent via email.

User Data

BlockTrust treats all user data as protected and access is granted by principle of least privilege. Select few authorised members of the BlockTrust team have direct access to production data and systems. A further limited list of authorised users are permitted to view aggregate data for reporting purposes. We maintain a list of members of the BlockTrust team with access to the production environment and all BlockTrust staff must undergo a police background check. Each environment (e.g. Development, Test, UAT) maintains a separate list of members with access. The BlockTrust team has limited access to user data through restricted access support tools. Support team members cannot review user-generated content without an express and revocable grant of permission.

Third Party Access

Member data is not shared with clients or third parties other than through member instructions, or through specific service providers. For example, to deliver email and SMS delivery, minimum required information is sent to providers of that service, and retained only for the time need to provide the service. BlockTrust takes all reasonable measure to ensure the privacy of this data in accordance with our Privacy Policy, including ensuring service providers are committed to Australian Privacy regulations and GDPR compliance and implement all best practice security measures.

Physical Security

BlockTrust relies on AWS for physical data centre security. BlockTrust’s platform is hosted on AWS’s EC2 platform. The physical servers are located in AWS’s data centres. Production data is never stored on physical media, and all data remains inside AWS data centres, with the exception of an encrypted (in transit, and at rest) database archive, which is kept on Microsoft Azure services, also located in the Sydney region. From Amazon’s documentation: AWS has achieved ISO 27001 certification and has been validated as a Level 1 service provider under the Payment Card Industry (PCI) Data Security Standard (DSS). AWS undergo annual SOC 1 audits and have been successfully evaluated at the Moderate level for Federal government systems as well as DIACAP Level 2 for DoD systems. More information on AWS EC2 data centers is available directly from Amazon here.

Corporate Network and Portable Media

As BlockTrust has a flexible working policy, our security policies reflect the need to be able to work from any location. As such, the corporate office networks are not treated any different from public networks. Connections to back-end services and development environments must still pass via encrypted VPN. Data stored within the production network is prevented from flowing back down to the office network, or to staff devices by means of strict firewall and OS policies. Because of this, data can never be copied onto removable media.

Data Encryption

BlockTrust uses standard Transport Layer Security (TLS) AES encryption for all data in transit. This includes all data sent between back end components such as web and database layers. In addition, insecure cipher suites have been disabled in accordance with best-practise. All user data is stored on drives that are whole-disk encrypted using AES encryption with a unique encryption key for each server. This also includes all backup sets.

Encryption Keys

All encryption keys are managed using the Amazon Key Management Service. The encryption, key management, and decryption process is inspected and verified internally by Amazon on a regular basis as part of their existing audit process. All keys remain entirely within Amazon’s systems, and are managed by BlockTrust’s Infrastructure team. Archived backup sets stored within Microsoft Azure have separate keys that are kept solely within the Azure platform.
Removing/Deleting Data from BlockTrust
At the request of any user, all data belonging to the requesting party can be removed from the system.

Development, Patch and Configuration Management

All changes to BlockTrust systems and code are required to undergo both peer-review and testing within separate sand-boxed environments. All changes therefore are required to pass through at least two environments successfully before being approved for implementation in production. All operating systems undergo a similar patching regime, where patches must first pass through DEV and TEST environments before being approved and tested for installation within the production environment. Patches are generally prioritised dependent on relevance and level of security impact. Patches and system configuration are managed from a central system to ensure consistency across the server fleet.

Event Logging

BlockTrust logs events in multiple ways. Logical event actions are logged within the application database. All web traffic is also logged to a separate internal data store for analysis, capacity planning, and diagnostic purposes in the event of any issues. Other system logs also go to the same location for a clear picture across the environment if faults need this level of triage. Error logs and metrics are also sent to external logging services that keep logs for a limited time, to assist in alerting and monitoring. These external logs do not contain Personally Identifying Information.

Asset Management

BlockTrust leverages AWS as its primary cloud provider, and as such does not need to dispose of server hardware. Staff laptops/workstation policy is outlined in a further section below. Where virtual assets are required to be decommissioned, Amazon guarantee that deleted volumes are irrecoverable once destroyed. As there are several layers of abstraction across redundant systems, there is practicably no way to recover any data once this occurs.

Employee Policies

Workstations / Laptops

All staff computers are required to participate in BlockTrust security policy, which includes anti-virus and anti-malware, as well as password policies. Updates to anti-virus and security patching of workstations is managed centrally. As production data is prevented from leaving the data centre, BlockTrust has no need of portable or removable media for user data. As described above, data is always protected with strong encryption both in transit and at rest. Upon disposal, all equipment must pass through our internal infrastructure team to ensure all data is wiped and devices are returned to a factory state.

Remote access

BlockTrust has a flexible working policy for staff, and does not maintain any infrastructure on-site at offices (other than basic internet connectivity). This means that staff are able to work from any location just as well as at BlockTrust offices. In turn, this means that all connections to any back-end services are required to be encrypted via certificate-authenticated VPN. Additionally, production data is prevented from being transmitted outside of the data-center environment, which is housed within secure AWS data-centers. Any analytics and reporting work is therefore also required to be worked on within specialised remote sessions, which are only granted to a very limited number of trained staff. A limited number of engineering staff have access to the platform, and must also traverse VPNs in order to perform their maintenance tasks within BlockTrust’s various environments. Production services are kept completely separate from Development and Testing environments, as well as support services.

Security and Hiring Process

As part of BlockTrust onboarding process, employees are made aware of security policies and requirements. Any changes to security policy or procedure are distributed to staff in BlockTrust’s regular ‘all-hands’ meetings. Employment contracts contain Non-Disclosure and Intellectual Property clauses, which apply both during and after employment. Contractors that are required to work near production data must also sign NDA and restriction of IP contracts. Contractors will also undergo the same process if in their role they are required to work near production data, or BlockTrust’s codebase.

Password Requirements

BlockTrust uses an enterprise grade password manager, which requires all staff to have a strong password for, as well as 2FA. Where possible, other systems in use by BlockTrust require strong passwords, and 2FA is strongly encouraged. Limited VPN access is granted via user-specific certificate authentication.

Maintenance Policy

Planned Maintenance

BlockTrust’s systems are architected in such a way that regular maintenance should not cause any disruption of service. When larger maintenance is required, this is always performed outside of business hours, within a weekend outage window that occurs from 2AM AEST through till 8AM AEST, on both Saturday and Sunday. These times have been chosen as the quietest times in order to minimise impact to users. We frequently evaluate our outage windows in order to make sure this impact minimisation continues

Unplanned Maintenance

In rare circumstances, unforeseen events may require us to perform more urgent maintenance. When this occurs, our main concerns are the usability and stability of the platform. The impact of the required maintenance is weighed up against any current degradation of site reliability and performance, and we will endeavour to only perform the bare minimum required during business hours to restore functionality, while pushing as much as we can out of hours to minimise this impact.

Need to report a vulnerability?

If you have a vulnerability or security concern to report, send it through to our security team here at BlockTrust on security@BlockTrust.com

Welcome to BlockTrust

Terms of Service for Australian, New Zealand and Asia-Pacific Users
These Terms of Service were last modified on: 30 September 2021

Our agreement with you

These Terms of Service are very important and constitute a legally binding agreement between you, the User, and us, True Ample Limited (Hong Kong Co. No. 3065248) (BlockTrust) of Rooms 2702-03, 27/F Bank of East Asia Harbour View Centre, Hong Kong SAR (Agreement), so please take a few minutes to read them. Amongst other things, this Agreement explains:

• how you can use or terminate our Services and your use of the Platform;
• how your content is used and protected, including privacy and copyright protection;
• how we can change, suspend or terminate your access to, and use of, the Services and the Platform;
• the warranties and disclaimers that apply; and
• the limitations of, and exclusions to, our obligations and liability to you.

You understand that by signing up to, or logging into, the Platform, or using the Services provided through the Platform, you are agreeing to be legally bound by this Agreement. If you do not accept this Agreement in its entirety, then you may not access or use the Platform. If you agree to this Agreement on behalf of any Person, you represent and warrant that you have the authority to bind that Person to this Agreement and that your agreement to these terms will be treated as the agreement of that Person. In that event, “you” and “your” will refer and apply to that Person.

Using our Services

Identity

All User identity information associated with an Account must be real and verifiable. Only the Person specified during the process of registering an Account may use that Account, and no User may have more than one Account. We may validate User information at any time by any reasonable means. Failure to provide identity verification when reasonably requested may result in suspension of your Account or restricted access.

The Platform and the Services are not for use by anyone under the Minimum Age. By using the Platform or the Services, you represent, acknowledge and agree that you are at least the Minimum Age. If you are not at least the Minimum Age, you may not use the Platform or the Services at any time or in any manner or submit any information to us or the Platform.

Security

You must ensure and maintain the secrecy and security of any username and password that you enter or we provide to you in connection with the Platform. You must not disclose the username or password to any third party. You will need to change your password regularly by following the relevant instructions. We will be entitled to treat any use of, or action taken through the use of, such password on the Platform as being made or authorised by you. You must not allow any third party to perform any action, including uploading of content, creation of smart contracts, minting of NFTs, listing NFTs for sale, or purchasing NFTs under or through your Account, and you remain entirely responsible for any and all activities that occur on the Platform or otherwise under your login name. You agree to immediately notify us if you become aware of any unauthorised use of your Account, your login name or any other breach of security known to you. You must not misuse our Services. For example, you must not interfere with our Services or try to access them using a method other than using the Platform and following the instructions and restrictions that we provide. You may use our Services only as permitted by law, including applicable export and re-export control laws and regulations. You must not enter into this Agreement or use the Platform or Services if you are: (a) a citizen of, or reside in, a country in which doing so is prohibited by law, decree, regulation, treaty or any other administrative act; (b) a citizen or resident of, or located in, a country or region that is subject to Australian sanction laws (which include Australian autonomous sanctions and United National Security Council sanctions) or New Zealand sanctions (if any); or (c) an individual or an individual employed by or associated with an entity identified on the Australian Department of Foreign Affairs and Trade Consolidated List or otherwise ineligible to receive items subject to Australian and/or New Zealand export control laws and regulations.

Rules of interpretation

Capitalised terms in this Agreement have the meaning set out in the “Definitions” section of this Agreement. In addition, the following rules of interpretation also apply to this Agreement:

• words like “us”, “we”, “our”, “BlockTrust”, “BlockTrust.com.au” refer to True Ample Limited (CN 3065248);
• words like “you” and “your” refer to the Person entering into this Agreement with us;
• “including” means “including, but not limited to”;
• the singular includes the plural, and vice versa; and
• headings are for ease of reference only and should otherwise be ignored.

Privacy

Our Privacy Policy explains how we treat your personal data and protect your privacy when you use our Services or the Platform. If you are an EU/ UK individual, please note that when you create an Account with us, we will process your information as described in our Privacy Policy. You consent to our collection, use, disclosure and storage of your Personal Information as set out in that Privacy Policy. In connection with your use of the Services, we may send you service announcements, administrative messages, and other information. You may opt out of some of those communications by following the unsubscribe process outlined in your ‘Profile Settings’ page. For any question in regards to your data and privacy you can contact us directly.

Intellectual Property

The Platform and Services (including all associated Intellectual Property) are the sole property of BlockTrust and/or each Service Provider (as applicable) unless otherwise indicated. Using our Services or the Platform does not give you an interest in, ownership of or any rights (including Intellectual Property) in the Platform, the Services or any content you may access. You may not use content from our Services or the Platform unless you obtain permission from its owner or are otherwise permitted by law. This Agreement does not grant you any right or licence to use any branding or logos used in our Services or the Platform. You must not remove, obscure, or alter any legal notices displayed in or along with our Services or the Platform. You may not copy, modify, reproduce, distribute, sell, or lease any part of our Platform or the Services or any included software or Intellectual Property, nor may you reverse engineer or attempt to extract the source code of that software, unless you have our written permission or (and only to the extent) any applicable laws actually prohibit such restrictions. Some of our Services allow you to submit content. You retain ownership of any Intellectual Property that you hold in that content. You are liable for any content you upload, transmit or otherwise submit to or communicate via the Services or the Platform. If we receive any notice of alleged infringement of Intellectual Property by you, then we will respond as we see fit, which may include removing the relevant content from the Platform and/or suspending or terminating the provision of Services to you. When you upload or otherwise submit content via the Services or the Platform, you give BlockTrust, our Clients and Service Providers a non-exclusive, transferable, sub-licensable, royalty-free, perpetual, worldwide licence to use, host, store, reproduce, modify, create derivative works (such as those resulting from translations, adaptations, variations or other changes we make so that your content works better with the Services and the Platform), communicate, commercialise, analyse, publish, publicly perform, publicly display and/or distribute, in any way now known or in the future developed, such content. In some of our Services, there are terms or settings that narrow the scope of our use of the content submitted in those Services. Some Services may offer you ways to access and remove content that has been provided to the Platform. However, content may continue to exist on our systems where: (a) immediate deletion is not possible due to technical limitations; (b) your content has been used by Clients and/or  Service Providers and they have not deleted it; or (c) where deletion would restrict our ability to: (i) investigate illegal activity or breaches of this Agreement; (ii) to comply with our legal obligations; or (iii) to comply with a request from a law enforcement, judicial or administrative authority or a government agency. We may also use content in accordance with the licence in de-identified form, including statistical information which is aggregated and anonymised.  In each of these cases, this licence will continue even if you stop using our Services. It is your responsibility to ensure you have all necessary rights to grant us this licence for any content that you submit to our Platform or in the use of our Services. You agree not to infringe or violate any third party Intellectual Property rights in connection with, and remain liable for, any content or information you may make available on or through, your use of the Platform and the Services. If you submit feedback or suggestions about our Services or the Platform, we may use your feedback or suggestions without obligation to you.

Our Fees

Fees for Users

Blocktrust may charge a fee per NFT primary and secondary sale to the User, disclosed at the time of sale. Where you are a Client any charges for the Services will be governed by our commercial agreement with the Client.

Billing and Payments

If any fees apply to your use of the Platform or Services you must pay BlockTrust any applicable fees at the time those amounts are due and payable using agreed payment method(s).

Taxes

You will be liable to pay any foreign, federal and/or state taxes as may be applicable to you or your business in connection with your access to, or use or receipt of, the Services or the Platform.

Interest

If we are required to collect overdue fees from you, you must pay all costs (including legal fees), if any, incurred by us in collecting those overdue fees from you.

Coupons

Any voucher, coupon, discount or any other offer used to pay for or reduce any fees can only be used once. Where there isn’t an expiry identified on a voucher, coupon, discount or any other offer, and where permitted by law, it is valid for only 30 days from the date of the offer or notice date.

Mobile

We may charge Users for our mobile services, but in any event please be aware that your carrier’s normal rates and fees, such as text messaging and data fees, will also apply. Where you are a Client any mobile charges will be governed by our commercial agreement with the Client. In the event you change or deactivate your mobile telephone number, you must update your account information on the Platform within 48 hours to ensure that any messages or notifications are not sent to any person who may acquire your old number. You authorise other Users to sync (including through an application) their contact list information onto their mobile devices, which may include the transfer of your basic information visible to them on the Platform, as well as your name and profile picture if this is public.

General User Obligations

You must provide a consistent and high level of courtesy, respect and professionalism toward each other User. You must use good judgement when posting information, comments, feedback, or other content regarding us, other Users, or any other third party anywhere within the Platform. Any content that you submit via the Platform must not be Unacceptable Content, must be in English and must not contain any information enabling or requesting contact or payment outside the Platform. You must take your own precautions (including antivirus software) to ensure that your access to the Platform and Services does not expose you to viruses or other code that is harmful or may assist in causing harm.

Misleading conduct

You agree that it is a condition on your use of the Platform and the Services that you will not mislead or deceive others or engage in any conduct which is misleading or deceptive (or likely to mislead or deceive), malicious, or discriminatory, including by any act or omission.

Safety

We do our best to keep the Platform safe, however we cannot guarantee safety. You agree to help us keep the Platform safe and agree that you will not, on or through the Platform or in connection with the Services:

• engage in unlawful conduct, including in any multi-level marketing such as a pyramid scheme, or post unauthorised commercial communications (such as spam);
• upload viruses or other malicious code or content;
• solicit login information or access an Account belonging to someone else;
• upload any Unacceptable Content, or otherwise bully, intimidate, or harass any User or any other person;
• do anything that could disable, overburden or impair the proper working or appearance of the Platform, such as a denial service attack or interference with page rendering or other Platform functionality; or
• facilitate or encourage any of the above or any other violations of this Agreement or our policies set out on our Website.

You must not create any “links” to any part of the Platform, or “frame” or “mirror” any content contained in, or accessible through, the Platform, on any server or internet-based device without our prior written consent. Other than as provided by the Platform or Services, you may not use any data mining, screen scraping or similar software or other data gathering, analysis or extraction tools or processes on the Website, except with our prior written consent.

Suspension and Cancellation of Accounts

Suspension or cancellation by us for cause

Without limiting any other remedies available to us, we may suspend or cancel your Account at any time by notice to you if:

• you breach this Agreement or otherwise violate our rights or those of another User;
• we are unable to verify or authenticate any information you provide to us; or
• we reasonably believe that your actions might cause a legal liability to any other User or us.

Also, if you engage in any action or activity that circumvents the Platform or this Agreement in such a way as to avoid or reduce fees that would otherwise be payable to us, then you will be liable to us for the difference and we may suspend or cancel your Account.

Cancellation by us without cause

In addition to the above rights of suspension and cancellation, we may by notice to you cancel your Account at any time, at our sole discretion.

Cancellation by you without cause

You can cancel your Account at any time by notice to us, although we’ll be sorry to see you go.  If you created or have been using your Account in connection with your role with a Client or Service Provider, the cancellation of your Account will not automatically result in the cancellation or termination of any agreement between us and that Client or Service Provider, which will instead be governed by the terms of that agreement and applicable law.

Consequences of suspension or cancellation

If we suspend or cancel your Account, or you cancel your Account, then (without limiting any other rights we may have):

• you must not continue to use or access the Platform or any Service, including under a different Account, or re-register under a new Account;
• to the extent permitted by law, no amount paid in advance by you will be refundable;
• we may obtain payment of any outstanding amount (or that becomes payable) through any payment methods available to us in connection with your suspended or cancelled Account or any other Account that you register; and
• we may refuse to provide an Account to you in the future.

All of your and our accrued rights, and the provisions of this Agreement that by their nature are intended to survive termination or expiry of this Agreement (including the section above titled “Intellectual Property” and the sections below titled “Warranties and Disclaimers” and  “Limitations of Liability”) will survive any termination or expiry of this Agreement.

Our Role

You agree that:

• any information or content made available by us on the Platform or via the Services is intended to provide general information only in summary form, including in relation to legal or other issues, and
• in no event will we be liable to you or anyone else for any decision made or action taken by you or anyone else in reliance upon any information contained on or omitted from the Platform.

The Platform may contain links to internet sites maintained or controlled by third parties. You acknowledge and agree that: (a) we are not responsible for the contents of any such sites (including the accuracy, legality or decency of any information) or any link contained on such sites; (b) such link does not imply any endorsement by us; (c) we are not responsible for the legality or Intellectual Property compliance of any such site; and (d) we will not be liable for any damages or loss arising in any way out of, in connection with or incidental to any information or third party service provided by any third party. While we take all reasonable due care in ensuring the privacy and integrity of information you provide to us, the possibility always exists that this information could be unlawfully accessed or observed by third parties while in transit over the internet or while stored on our system. To the greatest extent possible pursuant to law, we expressly disclaim any liability to you should this occur.

Warranties and Disclaimers

We provide our Services using a reasonable level of skill and care and we hope that you will enjoy using them. But there are certain things that we don’t promise about our Services. You must not rely on the Platform, any information in it, or its continuation. To the extent permitted by law, and other than as expressly set out in this Agreement, BlockTrust, each Service Provider and, to the extent applicable, each Client:

• provide the Platform and all information and Services on an “as is” and “as available” basis;
• disclaim any and all implied warranties, representations, conditions and guarantees, including any warranties, representations, conditions and guarantees of merchantability, fitness for a particular purpose, title, accuracy of data, and non-infringement; and
• exclude any warranties, representations, conditions and guarantees about the Platform or Services, including about the content within the Platform or the Services, the specific functions of the Platform or the Services, or their reliability, availability or ability to meet your needs, the safety or security of the Platform or the Services or regarding the delivery of any messages (such as emails, in-mails, SMS, social media, posting of answers or transmission of any other User generated content) sent through the Platform or the Services to anyone.

If you are dissatisfied or harmed by us or anything related to us, then you may cancel your Account and terminate this Agreement in accordance with the section above titled “Suspension and Cancellation of Accounts” and, to the extent permitted by law, such cancellation and termination will be your sole and exclusive remedy. In no event shall you seek or be entitled to rescission, injunctive or other equitable relief, or to enjoin or restrain the operation of the Platform or the Services, exploitation of any advertising or other materials issued in connection therewith, or exploitation of the Platform or the Services or any content or other material used or displayed through the Platform or Services. We do not have any obligation to verify the identity of the persons subscribing to our Services or the Platform, nor do we have any obligation to monitor the use of our Services or the Platform by other Users of the community. To the extent permitted by law, we exclude any warranty or representation that the Services and Platform will function without interruption or errors. You acknowledge that the Services and Platform may be interrupted, or subject to errors, due to maintenance, updates, or system or network failures or other causes. To the extent permitted by law, we disclaim all liability for any Losses as may be caused by or in connection with any such interruption or errors in functioning. To the extent permitted by law, we expressly exclude any liability for any remarks, information or other content posted or made available on the Platform or via the Services, including by any User or third party, even if it may not be Unacceptable Content. Other than as required by law, we do not have, and expressly exclude any liability for, any obligation to monitor content on the Platform or submitted via the Services for Unacceptable Content. We will remove or restrict access to any information or content posted or made available on the Platform or via the Services where required by law or if ordered to do so by a court. Otherwise, we may remove or restrict access to any such information or content if we consider such information or content to be Unacceptable Content, but we have no obligation to do so.

Limitations of Liability

To the extent permitted by law, other than as expressly provided below, neither we nor any Service Provider will be responsible to you or any other Person in connection with any lost profits, revenues, or data, financial losses or indirect, special, consequential, exemplary, or punitive loss or damages relating to or in connection with your use of the Platform or the Services. To the extent permitted by law, neither we nor any Service Provider shall be cumulatively liable for: (a) any Losses in excess of five times the most recent (as at the date such liability to you accrued) monthly fees that you paid for the Services, if any; or (b) AUD$100, whichever amount is greater. You agree that this limitation of liability is part of the basis of the bargain between the parties and without it the terms and prices charged would be different. This limitation of liability shall:

• apply regardless of whether: (i) you base your claim on contract, tort, statute or any other legal theory; (ii) we knew or should have known about the possibility of such damages; or (iii) the limited remedies provided in this section fail their purpose;
• not apply to any damage that we may cause you intentionally or knowingly in violation of this Agreement or applicable law, or as otherwise mandated by applicable law that cannot be disclaimed from in this Agreement; and
• not apply if you have entered into a non-standard agreement to purchase Services with a separate Limitation of Liability provision that expressly supersedes this section in relation to those Services.

We recognise that in some countries, you might have legal rights as a consumer. To the extent permitted by law, any liability of ours in connection with the Services or Platform under any statutory right (including any condition or warranty implied by law or any guarantee or other right under any statute) that by law cannot be excluded is, where permitted by law, limited at our option to the resupply of the relevant services or the payment of the cost of same.
Without limiting the foregoing, if you reside in New Zealand and are in “trade” as defined in the Fair Trading Act 1986, you agree that for the purposes of section 5D of the Fair Trading Act 1986 and section 43 of the Consumer Guarantees Act 1993:

• the Platform and the Services are being supplied and acquired in trade;
• the parties to these Terms of Service are all in trade;
• sections 9, 12A, 13 and 14(1) of the Fair Trading Act 1986 and the provisions of the Consumer Guarantees Act 1993 do apply to these Terms of Service or to any matters, information, representations or circumstances covered by these Terms of Service; and
• it is fair and reasonable that the parties are bound by this provision.

In Australia, if you are a “consumer” as defined in the Australian Consumer Law, our services come with guarantees that cannot be excluded under the Australian Consumer Law. For major failures with the services, you are entitled to cancel your service contract with us and to a refund for the unused portion of the agreement, or to compensation for its reduced value. You are also entitled to be compensated for any other reasonably foreseeable loss or damage. If the failure does not amount to a major failure, you are entitled to have problems with the services rectified in a reasonable time and, if this is not done, to cancel your contract and obtain a refund for the unused portion of the contract.

In New Zealand, if you are a “consumer” as defined in the Consumer Guarantees Act 1993, our services come with guarantees that cannot be excluded under that Act. For failures with the services that cannot be remedied or if the failure is of a substantial character, you can cancel your service contract with us and are entitled to a refund for the unused portion of the agreement, or to compensation for the service contract’s reduced value.  You are also entitled to be compensated for any other reasonably foreseeable loss or damage. If the failure with the service can be remedied, you are entitled to have the problems with the services rectified in a reasonable time and, if this is not done, to either have the failure remedied elsewhere and recover from us the reasonable costs incurred in having the failure remedied, or cancel your contract and obtain a refund for the unused portion of the contract.

General

Language

Where we have provided you with a translation of the English language version of this Agreement and/or any other documentation, you agree that the translation is provided for your convenience only and that the English language versions of this Agreement and any other documentation will govern your relationship with us.

Notices

Each User must provide and maintain a valid Address on the Platform. You consent to the use of: (a) electronic signatures or other electronic means to complete this Agreement and any other agreements to be entered into between you and BlockTrust; (b) electronic means to deliver any notices and provide any disclosures pursuant to this Agreement; and (c) electronic records to store information related to this Agreement or your use of the Platform. Notices will be invalid unless made in writing and given: (i) by us, via email to the relevant Address that you provide and maintain on the Platform; (ii) by us, by posting on the Website; or (iii) by you, via email to info@BlockTrust.com. An email will be taken to have been served at the time of sending, unless within 24 hours of it being sent the sender receives a manual or automated response indicating that it was not delivered successfully.

Amendments to the Services or this Agreement

We are constantly changing and improving our Services. From time to time we may modify functionalities or features, and we may suspend or stop a Service altogether. We reserve the right to modify this Agreement and/or any policy set out on our Website applicable to your use of the Platform or the Services (including the Privacy Policy) in our discretion from time to time, including to reflect changes to the law or changes to our Services. Modifications to this Agreement will be notified to you and/or posted on the Website. It is your duty to stay up to date regularly with changes to this Agreement and our Privacy Policy. You agree that the provision of an updated version of this Agreement (or any relevant part of it) will be sufficient notification of any modification, without the need to specifically identify the modification. Modifications will not apply retroactively and will become effective on the date specified which will be no sooner than 7 days after they are posted or notified (whichever is earlier). If you do not agree to the modified Agreement, you must cancel your Account and terminate this Agreement. By logging into the Platform after we have posted any modifications on the Website or provided a notice to you, you accept and agree to be bound by the Agreement as modified. Except only as permitted above, no modification or amendment to this Agreement will be binding upon either party unless in a written instrument signed by a duly authorised representative of each party.

Dates and Timelines

All references to days shall be to calendar days, except as expressly noted otherwise.

No Waiver

The failure or delay of either party to exercise or enforce any right or claim does not constitute a waiver of such right or claim and shall in no way affect that party’s right to later enforce or exercise it, unless such party issues an express written waiver, signed by a duly authorised representative of each party.

Assignability

You may not assign this Agreement, or any of your rights or obligations under it, without our prior written consent. We may freely assign this Agreement without your consent.

No Third-Party Beneficiary Rights

Except to the extent that this Agreement purports to confer a right on any Service Provider (which we hold in trust for that Service Provider), this Agreement shall: (a) create rights and obligations only between us and each User; and (b) not create any rights for any other Person. For the avoidance of doubt, no User will be entitled to enforce the terms of this Agreement as they apply between us and another User.

Severability

If and to the extent any provision of this Agreement is held illegal, invalid, or unenforceable in whole or in part under applicable law, such provision or such portion thereof shall be ineffective as to the jurisdiction in which it is illegal, invalid, or unenforceable to the extent of its illegality, invalidity, or unenforceability, and shall be deemed modified to the extent necessary to conform to applicable law so as to give the maximum effect to the intent of the parties. The illegality, invalidity, or unenforceability of such provision in that jurisdiction shall not in any way affect the legality, validity, or enforceability of such provision in any other jurisdiction or of any other provision in any jurisdiction.

Applicable law

The courts in some countries will not apply the laws of Victoria, Australia to some types of disputes. If you reside in a country where the laws of Victoria, Australia are excluded from applying or if you reside in New Zealand, then your country’s laws will apply to such disputes related to this Agreement. Otherwise, you agree that the laws of Victoria, Australia, excluding its choice of law rules, will apply to any disputes arising out of or relating to this Agreement or the Services. Similarly, if the courts in your country will not permit you to consent to the jurisdiction and venue of the courts in Melbourne, Victoria, Australia, then your local jurisdiction and venue will apply to such disputes related to this Agreement. Otherwise, all claims arising out of or relating to this Agreement or the Services will be litigated exclusively in the federal or state courts of Melbourne, Victoria, Australia or if you reside in New Zealand, and you and we consent to the jurisdiction of those courts.

Definitions

In this Agreement the following phrases have the following meanings:
Account means the User’s account in the Platform.
Address means, in respect of a User, each of the User’s email address and postal address (where the User can usually be contacted) registered for that User’s Account.
Client means an entity, organisation or individual which has a commercial arrangement with us which permits them to use our Services and/or Platform, primarily to mint, digital content, list in a marketplace environment, and facilitate commercial transaction.
Intellectual Property means any and all intellectual property rights (whether statutory, common law or otherwise), including all rights in inventions, patents, patent applications, utility models, copyright (including future copyright), trademarks, logos and design marks, service marks, trade names, business names, brand names, designs, know how, trade secrets and rights in confidential information, domain names, other names and locators associated with the world wide web, internet addresses, semiconductor or circuit layout rights, and all and any other intellectual property rights, whether registered or unregistered, and including all applications and rights to apply for any of the same.
Losses means all claims, legal proceedings, judgements, adjudications, damages, liabilities, losses (including losses of revenue), costs, and expenses (including reasonable lawyers’ fees and all related costs and expenses on a solicitor and own client basis).
Member means a User who registers with the Platform as a buyer, seller, or browser of NFT content.
Minimum Age means 16 years old. However, if applicable law requires that you must be older in order for you to legally enter into this Agreement or for BlockTrust to lawfully give you access to the Platform and to provide the Services to you without parental consent (including using your Personal Information) then the Minimum Age is such older age.
Person means any individual, buyer, seller, company, partnership, joint venture or other legal entity or entities.
Personal Information in Australia as the meaning in the Australian Privacy Act 1988 (Cth) as amended and, in New Zealand has the meaning in the New Zealand Privacy Act 1993 as amended.
Platform means the Website and all associated software, apps, files, emails, SMS, pictures, data, hardware, technology, business systems and processes and other resources.
Service Providers include a range of parties to whom we outsource certain functions of our business for our back-office, IT, professional support services (such as partners, service providers, contractors, suppliers, distributors and agents, including IT and web support contractors, cloud service providers, finance agencies, marketing partners and analysis companies).
Services means any products, goods or services that we or any Client or Service Provider provide to or for you, whether or not via the Platform.
Unacceptable Content means any content that we determine:

• is racist, hateful, violent, defamatory, harassing, abusive, threatening, malicious, inflammatory or otherwise objectionable;
• is pornographic, sexually explicit, obscene or excessively profane;
• is unlawful or encourages unlawful conduct;
• is fraudulent, false, misleading or deceptive or likely to mislead or deceive;
• infringes or violates, or encourages the infringement or violation of, any Person’s rights, including Intellectual Property, confidentiality, security or privacy rights;
• amounts to commercial advertising of any other website, product or service; or
• contains any link to any website that includes any of the above types of content.

User means a Person whose name is specified during an online registration process to create an Account on the Platform in the name of that Person, whether that Person then uses the Platform as, or on behalf of, a Client or Service Provider, as a Member, or on some other basis.
Website means the website(s) located at www.BlockTrust.coin, www.BlockTrust.com.au and/or www.blocktrust.nft, our Blog and all other related domains and subdomains.