INTRODUCTION

GLR Law (ABN 84 855 295 796) values and respects your privacy. Whether you are a client, employee, or member of the public, we take your privacy seriously and are committed to securing your personal information in compliance with the Australian Privacy Principles (APP’s), the Privacy Act 1988 (Cth) (the Privacy Act), and good privacy and data safety practices.

This Privacy Policy sets out how we collect, use, store and disclose your personal information, and the steps we take to ensure it is kept secure. It includes:

  1. the kinds of personal information that we collect and hold;
  2. how we collect and hold personal information;
  3. the purposes for which we collect, hold, use, and disclose personal information;
  4. how you may access personal information about yourself that is held by us, and seek the correction of such information;
  5. how you may complain about a breach of the Australian Privacy Principles, and how we will deal with such a complaint;
  6. whether we are likely to disclose personal information to overseas recipients.

WHAT IS PERSONAL INFORMATION?

‘Personal information’ means any information or opinion, whether true or not, and whether recorded in a material form or not, about an identified individual or an individual who is reasonably identifiable. In general terms, this includes information or an opinion that personally identifies you either directly (e.g. your name) or indirectly. Examples of personal information include an individual’s name, date of birth, signature, address and contact details, occupation, employment history, family circumstances, bank account details, financial and tax information, IP addresses, or government identification numbers.

WHAT IS SENSITIVE INFORMATION?

‘Sensitive information’ is a subset of personal information that includes information or an opinion about an individual’s racial or ethnic origin, political opinions, religious or philosophical beliefs, memberships of a political, professional, or trade association or union, sexual orientation, criminal record, health information, or genetic or biometric information.

WHAT PERSONAL INFORMATION DO WE COLLECT?

The personal information we collect about you depends on the nature of your dealings with us or what you choose to share with us. The personal information we collect about you may include your name, email address, phone number, address, payment information, or any other information that you choose to provide to us. Depending upon the nature of your dealings with us, we may come to require and collect a considerable amount of personal information, particularly if we are assisting you with complex commercial or financial transactions, family or criminal law proceedings, or other civil proceedings.

Under certain circumstances, we may need to collect sensitive information about you. If we collect your sensitive information, we will do so only with your consent, in the course of our provision of products and services to you, if it is necessary to prevent a serious and imminent threat to life or health, or as otherwise required or authorised by law. We will take appropriate measures to protect the security of this information.

HOW WE COLLECT YOUR PERSONAL INFORMATION

We may collect personal and sensitive information from you in a range of ways. By way of example, such situations may include (but are not limited to) when you visit our website, when you contact or communicate with us via email, phone, or other communication channels, when you engage with us as a client or stakeholder, or otherwise when you use or interact with us or our products or services.

We will request information from you in the ordinary course of our provision of products and services to you. You are not obligated to provide us with this requested information. However, failure to do so will impact our ability to provide our products and services.

By voluntarily providing us with your personal, financial, health, or other sensitive information, or in the course of you voluntarily using our website, products, or services, you consent to the collection, use, storage, and disclosure of your personal information as set out in this Privacy Policy. We reserve the right to monitor and record telephone calls for training and security purposes.

COLLECTION OF PERSONAL INFORMATION FROM THIRD PARTIES

We may also collect your personal information from third parties or through publicly available sources. By way of example, situations where we may collect your personal information from these third parties may include (but are not limited to): providing our products and services, conducting due diligence, meeting our statutory and contractual obligations, and other legitimate business and marketing purposes.

Examples of third parties from whom we may collect your personal information include (but are not limited to): records and information from government agencies or judicial entities such as courts and tribunals, medical records from doctors and health professionals, statements from policing authorities or witnesses, employment records from current and previous employers, financial information and records from accountants, financial advisors, or the Australian Taxation Office, claims records from insurers and brokers, and information from third party contractors and service providers in relation to other legitimate business and marketing purposes.

USE OF PERSONAL INFORMATION

We will use your personal information for the purposes for which it was collected, for related purposes where you would reasonably expect us to use the personal information, or otherwise as permitted or required by law. By way of example, reasons why we may use your personal information may include (but are not limited to):

  • assessing and processing your legal matter, including determining whether we can assist you with your legal matter whether or not we come to accept your instructions;
  • attending to and conducting your legal matter, or otherwise providing our products and services to you;
  • communicating with you, whether in relation to a legal matter, or in order to foster a client-business relationship;
  • complying with our statutory and contractual obligations;
  • conducting market research and analysis to improve our business;
  • internal business and administrative purposes;
  • seeking, processing, and enforcing payment of fees (including fees in arrears);
  • other legitimate purposes.

HOW DO WE STORE AND PROTECT YOUR PERSONAL INFORMATION?

We may store your personal information in both physical and electronic forms.

We will take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or unlawful disclosure. We use a variety of security measures to protect your personal information, including but not limited to implementing procedures to restrict access to personal information, maintaining robust physical security of our offices, maintaining digital security of our systems such as through firewalls, antivirus software, and other digital security measures, and by only dealing with reputable service providers.

THIRD PARTIES GENERALLY

We may on occasion refer you to information, products, or services provided by third parties, such as through their websites, literature, offices, or otherwise. By way of example, we may refer you to the websites or literature of various service providers such as (but not limited to) various courts and tribunals, statutory databases of legislation and regulations, or third-party service providers.

If you interact with a third party, your personal information may be collected by that third party. We make no representations or warranties in relation to the privacy practices, accuracy, or suitability for purpose of any such information, products, or services as provided by a third party (whether provided by their websites, literature, offices, or otherwise), and are not responsible for their content.

DISCLOSURE OF PERSONAL INFORMATION TO THIRD PARTIES

We may disclose your personal information to third parties in accordance with this Privacy Policy in circumstances where you would reasonably expect us to disclose your information. By way of example, third parties to whom we may disclose your personal information may include (but are not limited to): third party service providers (such as IT and financial contractors), marketing providers, professional service providers, other parties in the course of legal proceedings, courts and tribunals, and other such entities.

We will take reasonable steps to ensure that your personal information is only disclosed to reputable or necessary third parties. However, we note that third parties are ultimately responsible for their own conduct, and will have their own privacy obligations. We cannot control or guarantee the conduct or policies of third parties, and are not responsible for their handling or use of your personal information. We encourage you to review the privacy policies of such third parties as applicable.

TRANSFER OF PERSONAL INFORMATION OVERSEAS

Some of the third-party service providers we disclose personal information to may be based in or have servers located outside of Australia. The nature of cloud computing and such service providers renders it uncertain as to whether any given piece of personal information may be stored in Australian or international data centres or servers. As we only deal with reputable service providers, the likely locations for international data centres or servers may include the United States, Canada, the European Union, the United Kingdom, Singapore, Malaysia, or Japan.

Where we actively disclose your personal information to third parties overseas, we will take reasonable steps to ensure that data security and appropriate privacy practices are maintained. We will only actively disclose personal information to overseas third parties if you have given us your consent to disclose personal information to that third party, or we reasonably believe that the overseas recipient is subject to a law or binding scheme that is, overall, substantially similar to the APP’s and the law or binding scheme can be enforced, or the disclosure is required or authorised by an Australian law, or the order of a court or tribunal of competent jurisdiction.

AUTOMATED DECISION MAKING

GLR Law does not currently use ‘automated decision making’ systems that use personal information to make – or substantially assist in making – decisions that could reasonably be expected to significantly affect the rights or interests of an individual.

COOKIES AND WEBSITE ANALYTICS

Our website operates using cookies and website analytics. A cookie is a small file of letters and numbers the website puts on your device if you allow it. These cookies recognise when your device has visited our website before, so we can distinguish you from other users of the website.

We use cookies and website analytics for several reasons. Some cookies are required for technical reasons in order for our website to operate. Other cookies also enable us to track and target the interests of our users to enhance the experience. Third parties may also serve cookies through our websites for advertising, analytics, and other purposes. Cookies may collect information about your device and website use, which may in some circumstances constitute personal information.

If you do not wish to use cookies, you can amend the settings on your internet browser so it will not automatically download cookies. However, if you remove or block cookies on your computer, please be aware that your browsing experience and our website’s functionality may be affected.

Website analytics allows us to better understand visitor traffic, so we can improve our services. Although this data is mostly anonymous, it is possible that under certain circumstances, we may be able to connect it to you by inference or circumstance.

DIRECT COMMUNICATIONS AND MARKETING

We may send you direct communications, marketing, and information about our services, opportunities, or events that we consider may be of interest to you if you have requested or consented to receive such communications. These communications may be sent in various forms, including mail, SMS, fax and email, in accordance with applicable marketing laws, such as the Australian Spam Act 2003 (Cth).

Your consent to receive these communications may be express or inferred – including where you have an existing relationship with us and the communication is relevant to that relationship – or where otherwise permitted by law. Where you have indicated a preference for a method of communication, we will endeavour to use that method whenever practical to do so.

You may opt-out of receiving marketing communications from us at any time by following the instructions to ‘unsubscribe’ as set out in the relevant communication, or by contacting us using any of our contact options.

RETENTION OF PERSONAL INFORMATION

We will only retain your personal information for the duration of your relationship with us unless we are required to retain your personal information to comply with applicable laws.

We may be required by law or professional obligations to retain client files and related records for at least seven (7) years once a matter is concluded. In some instances, the nature of your matter will dictate that we retain your personal information for a longer period (for example, for Wills).

Where information about you is held electronically, and it is not possible to irretrievably destroy or de-identify without compromising other information that we are entitled or obliged at law to retain, we will restrict access or put the information about you beyond use.

ACCESS TO AND CORRECTION OF PERSONAL INFORMATION

We endeavour to keep your personal information accurate, complete, and up-to-date. If you believe that any personal information we hold about you is inaccurate, incomplete or out-of-date, please contact us and we will take reasonable steps to update or correct your personal information.

You may request access to the personal information we hold about you at any time. Note that access to personal information may be refused or limited at law, including legal privilege, confidentiality, or unreasonable impact on another person’s privacy.

COMPLAINTS

If you believe that we have breached the APP’s or any other privacy law, we invite you to contact us through our website to raise your concerns. We will investigate your complaint and will provide an acknowledgement as soon as practicable, usually within 14 days. Please allow up to 30 days for us to provide a formal response to your complaint.

Note, we may require proof of your identity and full details of your request before we can process your complaint. If your complaint is incomplete or insufficiently particularised, this may delay or prevent us from being able to respond to your complaint.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) to make a complaint. The OAIC can be contacted on 1300 363 992 or at www.oaic.gov.au.

CONTACTING US

If you have any questions or concerns about this Privacy Policy or our handling of personal information, you can contact us through our website, or at [email protected].

CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time without notice. The most current version of our Privacy Policy is available on our website, or you can contact us by email to request a copy.

 

This Privacy Policy was last reviewed on 1 July 2026.