Investors

Privacy Policy

IREN LIMITED

Website Privacy Policy

About this Privacy Policy

This Privacy Policy applies to the collection, processing, use, holding, communicating and disclosure of personal information (defined below) relating to you (“you”) by IREN Limited and/or its affiliates (collectively “IREN”, “us” or “we”), including but not limited to in connection with the use of https://iren.com, https://irencloud.com/ and any other IREN website on or accessible via any such IREN website or otherwise provided or made available by us (the “Websites”) or when you interact with us through any means e.g. provide services to us or request a service from us, attend our conferences, or correspond with us etc.

IREN is the data controller of your personal information for the processing activities described in this Privacy Policy.

PLEASE READ THIS PRIVACY POLICY CAREFULLY BEFORE MAKING ANY USE OF THE WEBSITES OR PROVIDING PERSONAL INFORMATION TO US.

BY MAKING ANY USE OF THE WEBSITES OR PROVIDING ANY INFORMATION TO US, YOU ACKNOWLEDGE AND UNDERSTAND THAT WE WILL PROCESS YOUR PERSONAL INFORMATION (AND, TO THE EXTENT AGREEMENT TO THIS POLICY IS REQUIRED BY APPLICABLE DATA PROTECTION LAW, YOU AGREE TO THE PRACTICES AND POLICIES AS DESCRIBED IN THIS PRIVACY POLICY).

Personal Information

“Personal information” means information about an identifiable individual. This includes names and email addresses. It does not include data where the identity of the individual has been removed (anonymous data) including where this is aggregated with other user data (aggregate user data).

What personal information do we collect?

We may collect and process the following personal information:

your name, address, telephone number, e-mail address, employing entity and title or position and any information relating to you which you may provide;

information to establish or confirm your identity and information related to “know-your-client” checks such as your name, employing entity, and the registration number and address of your employing entity;

financial information, transaction data and payment details such as credit card details when you procure services from us;

usage and account data such as your log-in credentials and information about your engagement with and utilization of any of our services;

your communication and marketing preferences;

our correspondence (this may include telephone calls, which we may record to assist us in training our staff and undertaking quality checks);

information associated with social media and other Internet accounts that you provide to us through and in connection with our social media accounts, including our Twitter or ‘X’, YouTube and LinkedIn accounts, which information may include your web address, profile and related information associated with your social media accounts; and

details of your visits to our Websites and information collected through cookies and other tracking technologies including, but not limited to, your IP address, domain name, your browser version and operating system, traffic data, location data, web logs and other communication data, and the resources that you access.

If you do not provide your personal information to us, we may not be able to provide our services to, or communicate with, you.

How do we collect your personal information?

We mainly collect your personal information directly from you.

When collecting personal information from you, we may collect it in various ways, including:

through your access to and use of our Websites or services;

when you register to attend any of the events that we host, organise or attend;

during conversations between you and our representatives; or

when you communicate with us via email, post or phone.

We may also collect personal information about you from publicly available sources and from third parties, including from your employer, your authorised representatives or your other professional advisors.

For what purposes do we collect, use, hold, process, communicate and disclose your personal information?

We collect, use, hold, process, communicate and disclose your personal information for some or all of the following purposes.

Certain applicable data protection law requires IREN to establish a “lawful basis” to justify the purposes. These are noted below:

administering our relationship with you, including providing services or receiving services, considering and managing community grants and communicating with you

Lawful basis: contract performance if we have a contract with you. In all other cases, legitimate interests (to manage our business and business relationships);

issuing and managing your user account and credentials

Lawful basis: contract performance if we have a contract with you. In all other cases, legitimate interests (to manage our business and business relationships);

to verify your identity as part of our internal “know-your-client” checks

Lawful basis: legal obligations where required by law. In all other cases, legitimate interests (to ensure that you fall within our acceptable risk profile). Where this involves the processing of special categories of personal data, the legal basis we generally rely on is that the processing is in the substantial public interest (prevention/detection of crime);

business development purposes including sending details of updates or new services or events that we host or organise or attend or other promotional material including by email, social media, telephone, SMS and/or post

Lawful basis: legitimate interests (to develop our business and business relationships) unless consent is required under applicable data protection law;

to build a picture of you and your interest, in order to better understand your requirements, personalise your experience, decide which products, services or content to share with you, classifying our audience into user profiles, groups or segments, using shopping habits information regarding your personal or professional interests, demographics, experiences with our products and contact preferences

Lawful basis: legitimate interests (to develop our business and business relationships) unless consent is required under applicable data protection law;

meeting legal or other regulatory obligations imposed on us

Lawful basis: compliance with legal obligations. Where this involves the processing of special categories of personal data, the legal basis we generally rely on is that the processing is in the substantial public interest (prevention/detection of crime) or legal claims;

updating our records and keeping your contact details up to date

Lawful basis: legitimate interests (to manage our business relationships); and

to ensure our Websites’ content is presented in the most secure and effective manner for you and for your device

Lawful basis: legitimate interests (to manage our Websites).

Who do we disclose your personal information to?

We may disclose your personal information to the recipients set out below for the purposes (and lawful basis) described above:

our employees, related entities, contractors, business partners and/or third party service providers in connection with the services that we provide to you, or you provide to us. As examples, we may use service providers to host out Websites and operate certain of its features, to provide advertising or promotional materials, send communications and/or process payments made by you;

our insurers and our professional advisors, including our accountants, business advisors, legal advisors, and consultants; and

any other organisation or individual for any authorised purpose as permitted by applicable data protection laws.

In addition, we may disclose your personal information where required to do so by law, such as in connection with any legal proceedings or prospective legal proceedings, law enforcement purposes, or to establish, exercise or defend our legal rights including providing information to others for the purposes of fraud prevention and reducing credit risk. 

We may also disclose your personal information to the purchaser or prospective purchaser of our business which we are or are considering selling. 

Overseas transfers of personal information

Certain of our disclosures of your personal information may be to recipients (including global service providers) located outside of the jurisdiction from which your personal information was originally collected or from which you are located, including Canada, the United States and Australia. Some of these countries may not protect personal information in the same way as the jurisdiction which your personal information was originally collected from or which you are located in. In these circumstances, legal authorities of that country may be able to obtain access to your personal information through the laws of the foreign country.

We will take steps to protect and transfer your personal information in a manner consistent with the legal requirements applicable to the personal information, including by implementing data transfer mechanisms and safeguards as required by applicable data protection law.

Please contact us as per the “Contact Us” section below if you would like more information of the specific safeguards applied to the transfers of your personal information.

Minors

We do not knowingly collect personal information from children under the age of 16. If a child under 16 has provided us with personal information without parental, guardian or tutor consent, then the parent, guardian, or tutor may contact us by emailing us at privacy@iren.com.

Security

We take steps to protect the security of your personal information from misuse and loss, and from unauthorised access, modification or disclosure.

Where you have set a password which enables you to access your account on one of our Websites, you are responsible for keeping this password confidential and for complying with any other security procedures that we notify you of. We ask you not to share a password with anyone. If you are made aware of your password having been exposed, please advise us immediately.

Please be aware that there are inherent risks in transmitting information by use of the Internet and other online or electronic transmission systems and that we cannot guarantee the security of information transmitted in this way.

How long we keep your personal information

How long we keep your personal information will depend on our business needs and any legal requirements to keep the personal information in question. We retain personal data for as long as is necessary for the relevant purpose. There may also be laws that set out a minimum period for which we have to keep your personal information, even if we no longer need it for its purpose. 

Marketing

We may provide you with promotional material including by email, social media, telephone, SMS and/or post. Where required by applicable data protection law, we will obtain your consent.

As part of our marketing activities, we may use third party marketing providers to provide marketing communications on our behalf and to identify a wider customer base to direct our marketing to (in relation specifically to social media providers).

You generally have the right to ask us not to process your personal information for direct marketing purposes at any time, including any profiling related to the direct marketing. Please contact us as per the “Contact Us” section below if you would like to exercise this right.

Sale of Personal Information the subject of California law

While we don't sell or share personal information for financial gain, we may share certain information (such as your email address) to provide and promote our services to you.  This could be considered a "sale" or "share" under California law, so you have the right to opt-out of such actions.  To exercise your right to opt-out, please contact us as per the “Contact Us” section below.

Cookies and similar technologies

IREN uses cookies and similar tracking technologies to collect and maintain statistics relating to the number of visits to the Websites, to analyse trends, to track your movements around our Websites and to record information about your visit to help target advertising and to build a profile of you and your approximate geographic location. As part of this, we may share your data with our partners to assist us with delivering relevant advertising.

We recognize the Global Privacy Control. We will not respond to web browser “do not track” signals. If you would like additional information about online tracking and various opt-out mechanisms, please see https://youradchoices.com/.

Because we link to social media sites, and from time to time may include third party advertisements, other parties may collect personal information about your online activities over time and across different websites when you visit our Websites.

Please note that not all tracking will stop even if you delete cookies.

For more information, please see our Cookies Notice.

Your rights

You may, depending on applicable data protection law, have some or all of the following rights in respect to your personal information:

to ask us to provide you with a copy of your personal information;

to ask us to update any inaccuracies in the personal information we hold;

to ask us to delete any personal information that we no longer have a lawful ground to use;

where processing is based on consent, to withdraw your consent (this will not affect the validity of the processing based on your consent before you withdrew it);

to ask us to transmit the personal information you have provided to us and we still hold about you to a third party electronically;

to object to the processing of your personal information;

to ask us to restrict how we use your personal information whilst a complaint is being investigated;

to not be subject to a decision when it is based on automatic processing, including profiling; and

to ask us not to process your personal information for direct marketing purposes at any time, including any profiling related to the direct marketing.

Please note that there may be circumstances where the right you have requested does not apply, or does not apply in full.

If you withdraw consent, we may not be able to provide you with certain services. We will explain the consequences of consent withdrawal at that time to assist you in your decision.

Please contact us as per the “Contact Us” section below if you would like to exercise a right.

You also have the right to complain to your relevant data protection authority.

Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, you can contact our Privacy Officer at:

Email: privacy@iren.com

Mail: IREN Limited,

PO Box A35

Sydney South NSW 1235

Attention: Privacy Officer, IREN

Links to Third Party Websites

Our Websites may contain links to third party websites. This Privacy Policy does not apply to the practices of such other websites and we are not responsible for the actions and privacy policies of the third parties that operate or interact with those websites.

Changes To This Privacy Policy

We may change this Privacy Policy at any time and from time to time without notice to you, including by publishing a new version on our Websites. We will update the date it was last changed below.    

Any change will be prospective only, and we will not make any changes that have retroactive effect unless legally required or permitted to do so.

This Privacy Policy was last updated on 4 April 2025. 