WHAT IS PERSONAL INFORMATION?
‘Personal information’ is information or opinion (in recorded form or otherwise) about an identified, or reasonably identifiable, individual. This includes your name, your date of birth and your contact details, and may also include information about your dealings with us.
‘Sensitive information’ includes information or opinions about more private matters such as your origins, political opinions, memberships, religious beliefs, sexual orientation, health or criminal record which we may obtain in the course of providing our services to you (eg Family Law matters).
COLLECTION AND STORAGE OF PERSONAL INFORMATION
Where possible, we collect your personal information directly from you during the course of our client relationship. Where it is not practicable or reasonable to collect your information directly from you, we may collect it from other sources. Information may also be collected from sources such as your employer or colleagues, government registers, and online publications.
We usually collect and hold the following kinds of personal information:
- Information about people’s dealings with us or our clients;
- Name, address, job title, professional membership and contact information;
- If you are a client or potential client, information about your organisation and your role, information on other employees and management in your organisation, payment information and information about your legal matters;
- Interests in areas of legal practice or events; and
- We only collect, use or disclose sensitive information about you if it is reasonably necessary for us to do so in order to perform our functions and if you have consented to us doing so, or if the law allows us to do so without that consent.
OUR PURPOSES FOR HANDLING YOUR PERSONAL INFORMATION
We collect, hold, use or disclose personal information:
- To provide our legal services;
- To provide you with our communications;
- To provide you with events or seminars;
- To obtain the services of third party service providers as part of providing our services;
- To manage and improve our legal services and client relationships;
- Where we are otherwise required or authorised to do so by law; and
Otherwise, to run our business.
Without collecting personal information we would not be able to provide you with some of our services.
USE OF PERSONAL INFORMATION
Subject to our professional obligations to our clients, we may disclose personal information:
- To other parties (such as barristers, experts and/or valuers we have engaged, and other parties involved in dispute resolution) as part of providing our services to our clients;
- To third party service providers, agents and contractors such as copying services, marketing firms and couriers;
- To our professional advisers and insurers;
- To regulators, government agencies, and law enforcement agencies or as otherwise required or authorised by law; and
- To others where you have provided your consent for us to do so.
We disclose personal information overseas when it is specifically appropriate to providing our legal services from an administrative point of view for a particular client (eg typing services). If we do disclose your information, we ensure that the recipient is bound by an obligation of confidentiality, where it is lawful and appropriate to do so.
Where we have a client relationship with you, or you have consented, we may send legal updates or other communications to you. You may opt out at any time if you no longer wish to receive our marketing information. You can make this request by using the contact details provided below, or by ‘unsubscribing’ from our email marketing messages.
We do not disclose your personal information (including your email address) to any third party for the purpose of allowing them to market their products or services to you.
ACCURACY OF PERSONAL INFORMATION
The accuracy of your personal information is important to us and is fundamental to providing you with proper legal services. We seek to ensure that the personal information we collect, use and disclose is accurate, complete and up-to-date and, in the case of use or disclosure, relevant.
SECURITY OF PERSONAL INFORMATION
We hold your personal information in paper-based and electronic files and we take measures to protect that information from misuse, interference and loss and from unauthorised access, modification or disclosure.
We have a broad range of security safeguards in place to protect your personal information, including that:
- electronic databases incorporate strict password access and virus and firewall protection processes;
- Sensitive personal information is only accessible by staff bound by duties of confidentiality; and
- Physical and logical security measures are employed to deal with possible threats.
- When we no longer require your personal information, it is securely destroyed and/or deleted from our systems. For matter-related information, this usually occurs seven years after the completion of your matter.
ACCESS TO PERSONAL INFORMATION
You may request access to the personal information we hold about you at any time, by using our contact details below. We will acknowledge your request for access and let you know when we will provide you with the requested information. If we refuse access, we will provide you with a written notice which sets out (unless the law allows us not to specify a reason) the reasons for the refusal and how you can complain about our refusal. We may recover our reasonable costs for giving access to your personal information. Please be aware that due to our professional obligations, we may not be able to confirm that we act for a particular client or whether we hold any information about any person at a particular time or at all.
CORRECTION OF PERSONAL INFORMATION
We seek to ensure that the personal information we hold is accurate, up-to-date, complete and, in the case of use and disclosure, relevant.
Where we believe that the information we hold is inaccurate, out-of-date, incomplete, irrelevant or misleading, we will take reasonable steps to correct that information and (if you ask and it is reasonable and practicable for us to do so) to notify that correction to third parties that may have received the incorrect information from us. If you believe that information we hold about you should be corrected, you may also request that we do so, by using our contact details below.
If we do not agree with the corrections you have requested, we are not obliged to alter your personal information. Instead, we will give you a written notice which sets out (unless the law allows us not to specify a reason) the reasons for our refusal and how you can complain about our refusal. You can also ask us to associate a statement with the relevant information that puts your view that it is inaccurate, out-of-date, incomplete, irrelevant or misleading. We will not charge you for making a correction request, for correcting your information or for associating a statement with your information.
ENQUIRIES AND COMPLAINTS
We usually respond in writing within 30 days, unless we need further information to respond to your enquiry, concern or complaint.
If you would like to make an inquiry or complaint about how we handle your personal information, you can contact the Office of the Australian Information Commissioner on 1300 363 992 or via email at firstname.lastname@example.org.