1. Introduction
The Firm is committed to protecting your personal information in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This Privacy Policy explains how we collect, hold, use, disclose, protect and manage personal information.
2. Consent
By using our website, contacting us or engaging us in any manner whatsoever you consent to the practices described in this Privacy Policy, including how we collect and process any information that we directly or indirectly receive about you. If you do not consent to this Privacy Policy we may be unable to provide our services or engage effectively with you.
3. What Information We Collect
We may collect personal information about:
- Clients, prospective clients and professional contacts;
- Parties connected with our legal matters;
- Our employees, partners, contractors and suppliers; and
- Visitors to our website and users of our digital platforms.
The type of information we collect may include: your name, your email address, your telephone number, your address, your date of birth, your bank account and credit card information (if a payment is being made or received), occupation, your profession or name of your employer, your opinions and feedback; and any other information you provide to us.
Where necessary, or where you voluntarily provide it, we may also collect sensitive information, such as information about your health or criminal history.
In addition, we collect anonymised or non-personal data through our website and online services, including IP addresses, browsing patterns and device information.
For the purposes of this Privacy Policy, all forms of data or information we handle is collectively referred to in this Privacy Policy as ‘Information’.
4. How We May Collect Information
- Directly from you via forms, calls, emails or other contact methods;
- Indirectly via website analytics, cookies or third parties; and
- From third parties, such as referees, other professionals or public sources.
Information that we collect may be stored by the Firm or by a third-party provider and may be stored physically or digitally.
5. Website Cookies and Tracking
We use cookies and similar technologies, including:
- Session cookies — expire when you close your browser.
- Persistent cookies — store preferences and settings across visits.
- Third-party cookies — for analytics (e.g. Google Analytics) and marketing.
We use cookies for:
- Site functionality and performance;
- Analytics for website improvement and
- Marketing and user experience customisation.
You can manage or block cookies through your browser settings; although this may affect website functionality.
6. Use and Purpose of Information
We use Information for:
- Providing legal services;
- Improving the services we offer;
- Responding to enquiries;
- Onboarding clients and opening files;
- Administrative processes (such as billing);
- Complying with legal and regulatory obligations; and
- Marketing and communications (where consented).
7. Automated Processing and Artificial Intelligence
We may use secure automated systems, including artificial intelligence (AI) technologies, to support the delivery of our services and the management of our operations.
We will not use automated systems to make decisions that could materially affect your rights, access to services (such as credit decisions, legal determinations or professional assessments), or obligations without meaningful human involvement and oversight.
All automated processing is managed with strict adherence to the APPs and in alignment with our professional obligations.
8. Disclosure of Information Internally
We may transfer and share Information within the Firm, but only in accordance with the purpose for which it was collected and subject to confidentiality constraints, your legal rights and the law.
We do not sell any Information.
9. Disclosure of Information Externally
We may share your Information with third parties on a confidential basis for the purpose of providing legal services, administration purposes or for any other permitted purpose.
We will disclose Information to Courts, regulators and any other party as required by law.
We may share information with third parties with your consent.
We may disclose, transfer, store or process your Information overseas for permitted purposes, including through Microsoft services hosted in the United States. When we do this, we require such service providers to protect your Information to standards consistent with the APPs.
10. Data Security and Retention
We implement reasonable technical and organisational safeguards to protect data from unauthorised access, breach or loss.
When information is no longer needed for the purpose in which it was collected or received, we will ensure it is securely destroyed or de-identified.
11. Access, Correction and Complaints
You have the right (subject to legal conditions) to request a copy of the information we hold about you, to have any inaccurate information corrected and to restrict how we use your information. You may also make a complaint about how we handle your information.
12. Updates to this Privacy Policy
We may update or change this Privacy Policy at any time without notice to you. We will update this Privacy Policy when our information practices change and publish any changes.
13. How to contact us
For inquiries, requests or complaints, please contact the Privacy Officer:
Email: privacy@glglegal.com.au
Post: GPO Box 757 Brisbane QLD 4000
