PRIVACY POLICY

GrilloHiggins > PRIVACY POLICY

Purpose of Our Policy

This Privacy Policy deals with how GrilloHiggins Lawyers (we, us or our) handles “personal information” as it is defined in the Privacy Act 1988 (Cth) (personal information).

We comply with the Australian Privacy Principles set by the Australian Government for the handling of personal information under the Privacy Act 1988 (Cth) (Privacy Act).

Personal Information We Collect

It is necessary for us to collect personal information in the ordinary course of the conduct of our business of providing legal services. The types of information we collect depends on the nature of your interaction with us. If you don’t provide personal information to us, we may not be able to provide our services to you.

Common situations where we collect personal information include where:

  • you contact us to enquire about engaging us to provide legal services to you, your business, your employer or another person or organisation you represent or hold an interest in (together, related person);
  • we have legal or commercial dealings with you or a related person (for example, if you or a related person are involved in a legal matter or transaction where we are engaged to act);
  • you are a partner, employee or consultant of ours or you enquire about or apply for a role with us; or
  • you or a business you represent provides goods or services to us in connection with our business or that of our clients.

Without limitation, the types of personal information we may collect include:

  • if you are a client or prospective client, or represent a related person which is a client or prospective client: information such as your name, any former name(s), date and place of birth, residential address, email address, telephone number or other information such as your business interests or banking details, required to enable us to verify your identity (including in connection with any client due diligence we undertake), to communicate with you, or to represent you or a related person;
  • if you apply for a role with us, your name and address, your qualifications and credentials, background checks, identity verification information, information about your right to work in Australia, reference checks and similar information;
  • if you are a current or former partner, employee, consultant, such information as is necessary and relevant to your employment, including emergency contact details, information about your remuneration and information about your performance, banking, taxation and superannuation arrangements, and training and development.

Under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) and the Anti-Money Laundering and Counter-Terrorism Financing Rules 2005 (Cth) (together, AML/CTF Laws), we are required to collect and verify certain personal information and may be prohibited from providing services if we are unable to do so. Personal information is collected for AML/CTF Laws purposes only where reasonably necessary to comply with our legal obligations and only in connection with matters where we determine a designated service is or is reasonably likely to be provided.

How Information Is Collected

Most personal information is collected directly from you. However, there are occasions where we collect information from other sources such as:

  • third party service providers and public sources (such as in connection with client due diligence checks including where required under the AML/CTF Laws);
  • recruitment agencies, previous employers, referees or universities in connection with any employment opportunities with us.

When Personal Information Is Used and Disclosed

We will only use personal information we collect for the purpose for which it was collected or for reasonably related purposes or as otherwise provided for in this policy.

The purpose of collection is determined by the circumstances in which the information was collected. Generally, personal information is collected for the purpose of enabling us to verify your identity, communicate with, and represent you or a related person, in the ordinary course of providing legal services.

We will retain personal information for the period necessary to fulfil the purposes outlined in this policy unless a longer retention period is required or permitted by law.

We may disclose personal information to government agencies or other third parties in accordance with this policy, the Australian Privacy Principles, the AML/CTF Laws and rules and the law.

In limited circumstances, we may use or disclose an individual’s information to a third party without the individual’s permission including:

  • where we reasonably believe that an individual may be engaged in fraudulent, deceptive or unlawful activity that a governmental authority should be made aware of; and
  • as otherwise required by any law (including the Privacy Act or the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth)).

Securing Your Personal Information

We will take reasonable precautions to protect your personal information from unauthorised access. This includes appropriately securing our office and electronic networks.

We are not responsible for the privacy or security practices of any third party (including third parties that we are permitted to disclose an individual’s personal information to in accordance with this policy or any applicable laws). The collection and use of an individual’s information by such third parties may be subject to separate privacy and security policies.

We are not liable for any loss, damage or claim arising out of another person’s use of the personal information where we were authorised to provide that person with the personal information.

An individual who suspects any misuse or loss of, or unauthorised access to, their personal information, should let us know immediately.

How to Access and/or Update Information

Subject to the Australian Privacy Principles, an individual has the right to request from us the personal information that we have about them, and we have an obligation to provide them with such information within 28 days of receiving their written request.

We will correct any errors in the personal information we hold about an individual within seven days of receiving written notice from them about those errors.

It is an individual’s responsibility to provide us with accurate and truthful personal information.

Complaints and Disputes

Complaints about our handling of their personal information should be addressed in writing to the details below.

If a dispute arises regarding an individual’s personal information, we both must first attempt to resolve the issue directly between us.

If we become aware of any unauthorised access to an individual’s personal information we will inform them at the earliest practical opportunity once we have established what was accessed and how it was accessed.

Contacting Us

All correspondence relating to privacy should be addressed to:

Managing Partner
GrilloHiggins Lawyers
Level 25, 367 Collins Street, Melbourne
VIC 3000Email: reception@grillohiggins.com.au

Additions to This Policy

If we decide to change this Privacy Policy, we will post the changes on our webpage at https://www.grillohiggins.com.au. Please refer back to this Privacy Policy to review any amendments.

We may do things in addition to what is stated in this policy to comply with the Australian Privacy Principles. Nothing in this policy will be taken to imply that we have not complied with the Australian Privacy Principles.