Privacy policy

1. About this policy

The Company Counsel Pty Ltd (we, us or our) is an incorporated legal practice. We are committed to protecting personal information and handling it responsibly in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles and other applicable legal and professional obligations.

This policy applies to personal information handled in connection with our legal services, website, communications, client and business relationships, recruitment and administration. It does not create contractual rights or obligations beyond those imposed by law.

2. Personal information we collect

The information we collect depends on the nature of our relationship with you and the services being provided. It may include:

• contact and identification details, such as your name, address, telephone number, email address, date of birth and identity documents;

• client and matter information, including instructions, correspondence, documents and information about transactions, disputes, investigations or proceedings;

• business and professional information, including your role, organisation, business contacts and ownership or control information;

• financial and billing information, including payment and bank account details;

• information required for conflict checks, identity verification, client due diligence, beneficial ownership and control checks, sanctions screening, anti-money laundering and counter-terrorism financing (AML/CTF) compliance, and other legal or regulatory obligations;

• website and technology information, such as your IP address, device, browser and website usage information; and

• recruitment information, including resumes, qualifications, employment history, references and right-to-work information.

We may also collect sensitive information where it is reasonably necessary for our legal work or business activities and where collection is authorised or required by law or undertaken with your consent. This may include health information, criminal history or information relevant to a dispute, investigation or legal proceeding.

3. How we collect personal information

We generally collect personal information directly from you, including when you contact us, instruct us, use our website, provide documents or complete an identity verification or compliance process. We may also collect information from clients, counterparties, witnesses, advisers, courts and tribunals, regulators, government bodies, service providers, recruitment agencies, referees, publicly available sources and other persons connected with a matter.

If you provide us with personal information about another person, you should ensure that you are authorised to do so and, where appropriate, make them aware of this policy.

4. Why we use personal information

We may collect, hold, use and disclose personal information to:

• provide legal advice and services, manage matters and communicate with clients and relevant third parties;

• conduct conflict checks, verify identity, undertake client due diligence and beneficial ownership checks, and comply with applicable AML/CTF and sanctions requirements;

• comply with legal, regulatory, ethical and professional obligations;

• administer client relationships, issue invoices, receive payments and recover debts;

• operate, secure and improve our systems, website and business;

• manage insurance, risk, auditing, record keeping and quality assurance;

• assess employment or contractor applications;

• send legal updates or information about our services, where permitted by law, with an option to unsubscribe; and

• establish, exercise or defend legal rights and claims.

If you do not provide information we reasonably request, we may be unable to act for you, provide particular services, verify your identity or comply with our obligations.

5. Disclosure of personal information

Where reasonably necessary for the purposes above, or where authorised or required by law, we may disclose personal information to:

• clients and their authorised representatives;

• barristers, experts, consultants, witnesses, other lawyers and professional advisers;

• courts, tribunals, mediators, arbitrators, regulators, government agencies and law enforcement bodies;

• counterparties and persons involved in a transaction, dispute or legal process;

• identity verification, AML/CTF, sanctions and other compliance providers, as well as technology, cloud, document management, cybersecurity, accounting, payment, insurance and other service providers;

• our employees, consultants and contractors on a need-to-know basis; and

• any other person authorised by you or permitted or required by law.

We do not sell personal information.

6. Legal professional obligations

Information provided to us may be protected by duties of confidentiality and legal professional privilege. This policy does not limit those protections. We handle information consistently with our duties as an incorporated legal practice, subject to lawful exceptions and disclosure requirements.

7. Overseas disclosures

Some of our technology, cloud or other service providers may store or process information outside Australia. The countries involved may vary according to the provider and service used. Where required, we take reasonable steps in relation to overseas disclosures in accordance with applicable privacy law. Information may also be disclosed overseas where this is necessary for a matter or you have authorised the disclosure.

8. Security and retention

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These steps may include access controls, passwords, secure technology systems, confidentiality obligations and appropriate service-provider arrangements. No electronic transmission or storage method is completely secure.

We retain personal information for as long as reasonably necessary for the purpose for which it was collected and to meet legal, regulatory, taxation, insurance, professional and record-keeping obligations. When information is no longer required, we may securely destroy or de-identify it, subject to applicable obligations.

9. Website, cookies and links

Our website may use cookies and similar technologies to support functionality, security and aggregated usage analytics. You may be able to manage cookies through your browser settings, although this may affect website functionality.

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites, and you should review their privacy policies separately.

10. Access and correction

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. We will respond within a reasonable period and may need to verify your identity. In some circumstances, applicable law permits us to refuse access or correction. If so, we will generally explain the reason, unless it would be unreasonable or unlawful to do so.

11. Privacy enquiries and complaints

If you have a question, wish to request access or correction, or want to make a privacy complaint, please contact our Privacy Officer:

Contact	Privacy Officer
Email	privacy@thecompanycounsel.com.au

We will assess and respond to privacy complaints within a reasonable period. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at www.oaic.gov.au.

12. Changes to this policy

We may update this policy from time to time to reflect changes in our practices, services or legal obligations. The current version will be made available on our website.

Last updated: 22 October 2026