Privacy Policy
1. Introduction
Bush to Beach Legal Pty Ltd ABN 15 638 239 371 is referred to in this Privacy Policy as we, us or our.
This Privacy Policy explains how we manage personal information. It also describes your rights to access and correct personal information we hold about you, and how you can make a complaint about our management of your personal information. This is in addition to our obligations of confidentiality to clients and other parties arising from sources other than the Privacy Act.
1.1 Application of this Policy
This Privacy Policy only applies to some of the personal information we manage. It only applies to personal information we manage for the purposes of or in connection with our obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (the AML/CTF Act).
1.2 Policy Updates
We review this Privacy Policy on a regular basis and may update it periodically without providing prior notice. The most current version of this Privacy Policy can be viewed on our website. This Privacy Policy was last updated on 26 June 2026.
2. Personal information: what we collect
2.1 Types of personal information
The types of personal information we may collect includes:
- Identity information: name, date of birth, gender, signature, photographic identification, offices or directorships held;
- Contact information: residential and postal addresses, email addresses, telephone numbers;
- Professional and business information: occupation, employer, job title, professional qualifications, business holdings and structures;
- Financial information: bank account details, billing information, payment card details, tax file numbers;
- Matter-related information: information relevant to your legal matter or the legal matter of our client;
- Transaction information: details of services provided to you or your organisation;
- Communication records: records of correspondence and communications with you;
- Website and technical data: IP address, browser type, device information, pages visited, cookies (see section 8);
- Recruitment information: employment history, qualifications, references, right to work status, background check results; and
- Sensitive information: including: sexual orientation, racial and ethnic origin, political beliefs, religious affiliation, criminal record, and health information.
2.2 Identity Verification and the AML/CTF Act
We may be required to verify your identity and collect certain information including under the AML/CTF Act when we provide designated services. Identity documents might also be required for other services such as court matters, real property transactions and asset dealings.
This includes collecting identification documents and information about the source of funds and beneficial ownership of entities.
3. How we collect personal information
3.1 Sources of Information
We collect information directly from our clients, from other lawyers, government sources or public sources such as registers or the internet.
3.2 Anonymity and Pseudonymity
If you are a client, you have the option of requesting to deal with us anonymously or by using a pseudonym. However, in most cases this is not lawful nor practical for legal services. If you do not provide us with the personal information we request, we may not be able to provide you with legal services or respond to your enquiry.
4. Why we collect personal information and how we use it
We collect, hold, use and disclose personal information for the primary purpose of providing legal services to our clients, complying with regulatory and insurance obligations and operating our legal practice.
Secondary purposes include financial management, system improvement, enforcement of our right to payment and managing the relationship between our firm and former clients once the retainer has concluded.
5. Disclosure of Personal Information
We may disclose personal information to third parties to facilitate the purposes of collection noted in section 4. These purposes include disclosure to parties to proceedings or transactions and their representatives, to Courts, government and regulatory agencies as may be necessary or appropriate to establish legal rights and to progress transactions in which we are instructed. We also disclose information to third parties (such as data storage or archiving companies, our regulators or our insurers) who hold or process information for us.
6. Overseas Disclosure
We will disclose information to overseas recipients where this is reasonably necessary to progress our instructions (dealing with a company with an overseas office, for example).
We may disclose personal information to recipients located outside Australia where reasonably necessary or convenient to facilitate the purposes of collection, holding, use and disclosure of information stated in sections 2 and 5 of this policy.
7. Security of Personal Information
7.1 Security Measures
We hold your personal information using a system designed to protect against data breaches, however like all data security systems, risks may only be mitigated but not eliminated. It is our practice to require our storage service providers to be reputable.
7.2 Retention and Destruction
We retain personal information for as long as necessary to fulfil the purposes for which it was collected, to comply with our legal and professional obligations and to ensure that pertinent evidence remains available if reasonably required.
8. Third Party Websites
Our website may contain links to third party websites, such as payment processors. We are not responsible for the privacy practices of those websites, and we encourage you to read their privacy policies.
9. Access and Correction
Access to and correction of your Personal Information
You have the right to request access to or correction of the personal information we hold about you. To make an access request, please contact our Privacy Officer (see Section 10). If we refuse to correct your personal information, we will provide written reasons for the refusal and information about how you may complain.
The Privacy Act permits us to refuse access in some circumstances. If we refuse your access request, we will provide you with written reasons for the refusal (unless unreasonable to do so or we are prohibited from doing so by law) and information about how you may complain.
10. Complaints and Questions
Privacy officer details and complaints:
Bush to Beach Legal Pty Ltd
Address: PO Box 7249, Sippy Downs QLD 4556
Email: in**@******************om.au
Phone: 1300 911 137
If you are not satisfied with our response, you may escalate your complaint to:
Office of the Australian Information Commissioner (OAIC) or the Legal Services Commission.
Website: www.oaic.gov.au
Phone: 1300 363 992
Email: en*******@******ov.au
Post: GPO Box 5218, Sydney NSW 2001
11. Personal Information about our people
We may collect personal information about employees, as well as partners and contractors, during recruitment, onboarding, and throughout their engagement with us. This information may be provided directly by the individual or obtained from third parties, including recruitment agencies. It can include details such as health information, confirmation of a person’s legal right to work in Australia, and other sensitive data. Certain roles may require individuals to complete additional screening processes, such as background checks, security clearances, or criminal history assessments.
We may share personal information with external parties where this is necessary for screening or in connection with the individual’s work and relationship with us. These third parties are generally located within Australia, although some may operate internationally. When we disclose personal information, we take reasonable steps, where lawful and appropriate, to ensure the recipient is subject to confidentiality obligations.
Under the Privacy Act, personal information relating to current and former employees may be stored, used, and disclosed where it is directly related to the employment relationship. We manage employee information in line with our legal obligations and in accordance with our policies, which may be updated from time to time.
