Privacy Policy

Privacy Act

  1. We are bound by the Privacy Act 1988 (Cth)(Act) and the Australian Privacy Principles (APP). We are an APP entity as defined in s 6(1) of the Act.
  • We collect and hold personal information relating to  clients and other people and entities associated with clients as may be provided or disclosed to us in the course of business. Such personal information may include, but is not limited to, names, addresses, telephone numbers, social media details, email addresses, occupations, wage records, bank account details, credit card details, medical records and relationship details.
  • Personal information is collected in the following ways:
  • by providing it to us directly;
  • by authorising third parties to provide it to us;
  • by other parties providing it to us either voluntarily or pursuant to processes we conduct on our client’s behalf.

How is personal information received and held?

  • Personal information may be received and held either as a hard copy, paper, or a soft copy being electronic data, in any available form. In either case, we take the security of personal information very seriously. We secure hard copy documents carefully in and out of our office. We use cyber-security systems to protect soft copy documents. We never ask for bank details or other sensitive information by email alone.

Cookies

  • We may use cookies in a limited manner when you visit our website, for the purpose of providing you with a better and more customised service. Cookies are not used by us to collect and store your personal information. A cookie is a small text placed on your computer by our webpage server. A cookie can later be retrieved by our webpage services. Cookies are frequently used on websites. You can choose if and how a cookie will be accepted by configuring your preferences and options in your internet browser.
  • We use cookies for different purposes such as:
  • to allocate a unique number to your internet browser;
  • to customise our website for you;
  • for statistical purposes;
  • for security purposes; or
  • to authenticate or identify whether you are registered on our website, without requiring you to re-enter details each time you log on to our website.
  • If at any time you do not wish to accept cookies or wish to delete existing cookies, you may manually configure your browser to refuse cookies or may manually delete existing cookies from your hard drive. However, by deleting or refusing to accept cookies you may frustrate or hinder your access to or use of areas of our website.

For what purpose is personal information collected, held, used and disclosed?

  • All data is processed by the business on a lawful basis. The purposes for which we collect, hold, use and disclose personal information are:
  • to offer our products and services to our clients. In doing so we may disclose personal information to other people or entities involved in the provision of the same products and services, such as government departments, agencies, law firms and other businesses Unless compelled by law, we will never disclose personal information other than as described in this policy unless there is consent;
  • to facilitate our internal and external administrative processes including financial and business operations and reporting requirements;
  • as part of a transfer for reward of our database to others who may be able to serve your needs better;
  • to obtain, maintain and comply with the terms of our professional indemnity and other insurance policies; and
  • to comply with applicable laws.

Your data may be transferred to third parties who we consider may be able to advance your interests consistent with your objectives as we understand them. The exchange of your personal information is done so on a lawful basis. We may be remunerated for this data transfer. If you do not wish your data to be shared all you have to do is advise us by email or in writing.

How can personal information be accessed or corrected?

  • Clients may access their personal information and seek correction of it at any time by applying to our office in person or in writing.
  1. Clients will be formally identified before releasing or amending any personal information.

Is personal information disclosed outside of Australia?

  1. Where necessary we will disclose personal information to overseas recipients, including a related body corporate. The likely countries that information might be sent include the countries where our internet service providers hosting services are located from time to time, we do not have control over the location.

What is the complaints process relating to personal information?

  1. If there is a breach of this privacy policy, either of the Act or the APP, a complaint may be made to:
  2. our Managing Director ; or
  3. the Office of the Australian Privacy Commissioner.

Data breaches

  1. All staff are responsible for protecting the confidentiality of client  information.

What is an eligible data breach?

  1. An eligible data breach, defined in s 26WE(2) of the Act, is when:
  • both of the following conditions are satisfied:
  • there is unauthorised access to, or unauthorised disclosure of, the information;
  • a reasonable person would conclude that the access or disclosure would be likely to result in serious harm to any of the individuals to whom the information relates; or
  • the information is lost in circumstances where:
  • unauthorised access to, or unauthorised disclosure of, the information is likely to occur; and
  • assuming that unauthorised access to, or unauthorised disclosure of, the information were to occur, a reasonable person would conclude that the access or disclosure would be likely to result in serious harm to any of the individuals to whom the information relates;…

If there is a suspicion of a breach

  1. If we suspect that there has been an eligible data breach, a reasonable and expeditious assessment will be conducted within 30 days.
  1. If we believe or have reasonable grounds to believe there has been a breach then a statement will be prepared setting out:
  • the business’s details;
  • a description of the breach;
  • the kind or kinds of information concerned; and
  • recommendations about the steps that we will take in response to it.
  • If practicable, we will advise the contents of the statement to each of the affected clients who may be at risk from the breach. If this is not practicable we will publish the statement on our website and take other reasonable steps to publicise its contents. Communications with individuals will be via their preferred communication method.
  • The statement will be submitted to the Office of the Australian Privacy Commissioner.

Exception to reporting

  1. Mandatory notification requirements are waived if remedial action can be taken that results in a reasonable person concluding that the access or disclosure is not likely to result in serious harm to any of those individuals.

Acceptable Use Policy

  1. You must not use our website in any way that we deem to be inappropriate or unlawful, including but not limited to:
  2. any breach of privacy or any infringement upon the legal rights of any other person;
  3. defamation;
  4. uploading any virus, malware or other malicious software;
  5. posting, commenting or otherwise transmitting any unauthorised material including, but not limited to any material that is or is likely to be defamatory, racist, obscene, threatening, pornographic or otherwise deemed by us to be unacceptable.

Funds transfer critical information

  1. People across Australia have lost moneywhen hackers have impersonated a business by altering electronic communications including email, social media, text, instant messaging, applications, file sharing and documents including PDF or Word documents. It is critical that we all take steps to reduce this risk and if you are involved in a transfer of funds it is our expectation of you in helping to reduce the risk of such loss that you verify bank account details before transferring money. We cannot be responsible if funds intended for us are intercepted or diverted elsewhere as a consequence of fraud. If this happens to you please contact your bank immediately.

Marketing

  • If we have an existing relationship with you, or if you have subscribed to our mailing list, we may use your personal information to provide you with current information relating to new products and services that we offer, or events that you may find of interest. If you do not wish to receive marketing information, you may at any time decline to receive such information by contacting us, or if the direct marketing is by email you may also use the unsubscribe function in the email message.

Disclaimer

  • We shall not accept liability, either personal or corporate, for compensation for any loss or damage, howsoever arising, which you may suffer or become liable for because of your use of this website and your decision to rely upon any information provided on the website which is for general information purposes only and not specific to any individual and may not be absolutely current at any particular time.

Changes in our privacy policy

  • We regularly review all of our policies and attempt to keep up to date with market expectations. Technology is constantly changing, as are the law and marketplace practices.
  • As a consequence, we may change this privacy policy from time to time.

This version of this privacy policy is dated 1 September 2025.