At Griffiths Parry Lawyers & Notary, we respect people’s privacy. Personal information refers to any information or any opinion, whether true or not, and whether recorded in a material form or not, from which an individual’s identity is apparent, or can be reasonably ascertained. Sensitive information refers to information about a person’s:
- racial or ethnic origin,
- political opinions or associations,
- religious beliefs or affiliations,
- philosophical beliefs,
- trade and professional memberships,
- sexual preferences or practices,
- criminal record or
- health, genetric or bio-metric information.
Collecting personal information
We may need to collect personal information about our clients and others including names, addresses, phone numbers and other contact details, as well as details regarding directorshiops, sharehodlings, employment history, bank account details, credit card information and tax file numbers. We may also collected details of the age, sex, hobbies and other personal information about you or others.
We may need to collect personal information so we can:
- identify our clients, potential clients and their representatives;
- identify parties with whom our clients have dealings or who are in some wa involeved in proceedings
- involving our clients;
- identify any actual or potential conflicts of interest in acting for particular clients;
- inform you or others of any initiatives we think may be of interest to you or them;
- inform you or others of developments in the law;
- provide or offer you or others services or other benefits;
- conduct our business and provide our services in a professional and efficient manner; and
- develop and implement initiatives to improve our services.
If we are not provided with all the personal information we request, we may be unable to act for you or do business with you or others.
Unless it is unreasonable or impractical, we will collect personal information directly from the individual concerned. However, an individual’s representative may hold personal information that we may need to access for particular dealins, legal proceedings or other purposes. Where we are at liberty to do so, we will use our best our best endeavours to seek an individual’s consent before obtaining their personal information from third parties.
Personal information my be collected by us:
- when we are contacted about our services, in person or over the phone or via email/internet;
- during the course of a dealing or proceedings involving a client;
- when we negotiate and enter into dealings; or
- when we respond to an enquiry where we consider personal details are required or appropriate to fulfill the query.
Any additional purpose for which the information is collected (not included in this policy) will be identified when we collect the personal information, or as soon as practicable afterwards.
Collecting sensitive information
We may need to collect sensitive information about you or others for dealings or in relation to proceedings.
Under the Australian Privacy Principles (APPs), we are entitled to collect sensitive information about you or others for a number of reasons, including where the collection is reasonably necessary to establish, exercise or defend a legal or equitable claim.
Where we are required to and it is practicable to do so, we will seek your consent before collecting your sensitive information and inform you of the purpose at the time. Your consent to collection of your sensitive information may be implied in limited circumstances.
Use of personal information
We will use personal information:
- to identify individuals and protect them from unauthorised access to their personal information, accounts
- or services;
- to improve our services to you or others;
- where reasonably required to provide legal services that we are obliged to provide;
- to inform you or others of our marketing initiatives;
- to inform you or others of developments in the law and relevant business markets;
- to derive or aggregate anonymous information from which individuals cannot be identified;
- to prevent or lessen a threat to a person’s life or health;
- where disclosure is reasonly necessary for the establishment, exercise or defence of a legal or equitable
- for the purpose for which it was collected, or for a related purpose (or a directly related purpose in the case
- of sensitive information);
- where the individual concerned would reasonably expect us to use the information;
- where reasonably required toprovide legal services that we are instructed or obliged to provide; or
- for any other purpose, where an individual has consented to its use for that purpose.
Disclosure of information
Except where indicated above, we will not disclose personal information to a third party unless:
- the disclosure is for a primary purpose for which the information was collected;
- the individual concerned has consented to the disclousre;
- the third party is our agent or contractor, in which case we will require them to disclose and to use the
- personal information only for the purpose for which it was disclosed;
- the third party is a person involved in a dealing or proposed ealing (including a sale) of all or part of our
- assets and business;
- there are reasonable grounds to believe that disclosure is necessary to prevent or lessen a threat to your
- life or health or that of another person;
- the disclosure is to a related body corporate;
- the disclosure is reasonably necessary for the establishment, exercise or defence of a legal or equitable
- claim; or
- the disclousre is permitted, required or authorised by or under law.
Information collected via our website
To ensure we are meeting the needs and requirements of our website users, and to develop our online services, we may collect aggregated information by using cookies.
Cookies are unique identification numbers like tags that are placed on the bowser of our website users. The cookies do not in themselves identify users personally, but are linked back to a database record about them.
- the address of a user’s server;
- a user’s top level domain (such as .com or .au);
- the date and time of a user’s visit;
- the pages a user accessed and downloaded;
- the search engine a user used;
- the type of browser that was used.
When a user visits our site, a cookie may be placed on their device. Where a user has visted us before, the cookie may be reach each time they re-visit the site.
We do no use this technology to access any other personal information of a user in our records and a user cannot be personally identified from a cookie.
If a user chooses not to have their browser accept cookies from our site, they are still able to view the content of our website on their device.
We may use personal information to advise the individual concerned of new services and marketing initiatives that we think may be of interest to them. This may include newsletters, invitations to seminars or business functions, and general about the firm.
Those who prefer not to receive information about our services or seminars, can request to be removed from the relevant circulation list.
We do not disclose personal information to a third party to enable that party to direct market their products or services to you, unless individuals have expressly consented to that disclosure. We may require written confirmation of a request to be removed from our circulation list, for example where legislation requires us to provide particular communicatons to the individual concerned.
Updating your information
We aks that you tell us of any change to the personal information we hold about you. You may notify us at any time to request that your personal information is amended or updated. We will then take reasonable steps to correct the information in the manner requested.
If we consider that the personal information we retain does not require amendment, we will annotate the request on our files.
The protection of personal informationi is a priority for us and we are committed to maintaining:
- safeguards to protect personal informationi against unauthorised use, disclosue, access, interference,
- modification, destruction and accidental loss. All personal information we hold is dealt with in accordance with the APPS;
- industry standards for the security and protection of information. Personal information is stored securely and
- access is restricted to authorised personnel only. Our computer system requires passwords and these are kept securely; and
- internal policies on personal information and staff training to ensure compliance with these policies. All our staff are required to read this policy and understand their obligations regarding personal informatilon.
Destruction of records
We will destroy or de-identify any personal information that we hold which is no longer needed for any purposes permitted by the APPS unless we are required by law to retain such personal information.
Access to personal information
We will generally allow an individual access to any personal information that we hold about them on request – subject to any restrictions on access. We will try to give the individual concerned access in a form and manner that suits their needs. To request such access please contact us.
Restrictions on access
We are entitled to restrict access to personal information in accordance with the APPs.
You may not be allowed access to personal information we hold where access would reveal evaluative information generated by us in connection with a commercially sensitive decision-making process. Instead, we may give you an explanation for the decision, rather than direct access to the information.
If we have given you such an explanation and you believe that direct access to the evaluative information is necessary to provide a reasonable explanation of the reasons for the decision, we will, at your request, review the decision. Personnel other than the original decision-maker will conduct the review.
Wherever direct access by you is impractical or inappropriate, we should consider together whether the use of a mutually agreed intermediary would allow sufficient access to meet both our needs and concerns.
Other instances where it may not be appropriate to provide you with access to the personal information we hold, include where:
- providing access would pose a serious and imminent threat to the life or health of an individual;
- providing access would have an unreasonable impact upon the privacy of others;
- the request for access is frivolous or vexatious; or
- the information relates to an anticipated or existing legal dispute and disclosure would compromise our
- position of the position of others.
Charge for access
An individual will not incur charges for lodging a request to access personal information. However, we may levy a reasonable charge for providing access to that information. We will provide an estimate of any charge on request, or if it appears to us that the work will be onerous or otherwise warrants a charge.
Transferring information overseas
We may transfer personal information overseas if necessary for the conduct of a legal matter or for a business transaction or other dealing. We will take reasonable steps to ensure that an overseas recipient does not breach
the APPs in relation to the disclosed personal information unless:
- we reasonably believe that the recipient of the information is subject to legal obligations that uphold
- principles for the protection and fair handling of personal information that are substantially the same as the APPs;
- we are given consent by the individual concerned to do so, expressly or by implication after they are expressly informed that the Act will not apply in relation to the management of personal information by the overseas recipient and the individual may not be able to seek redress under the Act; or
- we are legally authorized or required to do so.
Changes to our policy
We may update or change this policy. When we do so, we will publish the current policy on our website.
We are committed to constantly improving our procedures so that personal information is treated appropriately.
If you feel that we have failed to deal with your personal information in accordance with the APPs or this policy, please speak to us so that we have an opportunity to resolve the issue to your satisfaction.
- listen to your concerns and grievances regarding our handling of personal information;
- discuss with you the ways in which we can remedy the situation; and
- put in place an action plan to resolve your complaint and improve our information handling procedures (if appropriate).
If this process does not result in an outcome that is satisfactory to you, you may contact the Office of the Australian Information Commissioner’s Office.
We will work together with the Information Commissioner’s Office to resolve the issues between us. The contact details for the Office of the Australian Information Commissioner’s Office are as follows:
ADDRESS: GPO Box 521 8 SYDNEY NSW 2001
PHONE: 1300 363 992 (for the cost of a local call anywhere in Australia) FAX: 02 9284 9666
EMAIL: enquiries @oaic.gov.au
You can view further information about the Australian Privacy Principles (APPs) at