Privacy Policy

Our Commitment to Your Privacy

Goulburn Legal Pty Ltd ("Goulburn Legal", "we", "our" or "us") is committed to protecting your privacy and maintaining the confidentiality of the personal information entrusted to us.

As legal practitioners, we recognise that confidentiality is fundamental to the solicitor-client relationship. We understand the importance of protecting personal information and are committed to handling it responsibly, securely and in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and our professional obligations as Australian legal practitioners.

This Privacy Policy explains how we collect, use, disclose, store and protect your personal information when you engage our legal services, visit our website or otherwise interact with Goulburn Legal.

By engaging Goulburn Legal or using our website, you acknowledge that you have read this Privacy Policy.

What Personal Information We Collect

The personal information we collect depends on the legal services you require.

Information we may collect includes:

• your name;
• residential, postal and business addresses;
• email address and telephone numbers;
• date of birth;
• occupation and employment details;
• driver's licence, passport and other identification documents;
• financial information, including banking details where required;
• taxation and superannuation information;
• company, trust or business information;
• property ownership information;
• legal documents and correspondence;
• instructions provided by you;
• information relating to family members or beneficiaries where relevant;
• health or capacity information where relevant to your legal matter; and
• any other information reasonably required to provide legal services.

Where permitted by law, we may also collect information from third parties including accountants, financial advisers, mortgage brokers, banks, government authorities, courts, real estate agents, conveyancers, other legal practitioners, medical professionals and other persons involved in your legal matter.

Sensitive Information

Some legal matters require us to collect sensitive information.

Sensitive information may include health information, disability information, medical reports, criminal history, capacity assessments or other information defined as "sensitive information" under the Privacy Act.

We will only collect sensitive information where:

• you consent;
• collection is reasonably necessary to provide legal services;
• collection is required or authorised by law; or
• another exception under the Privacy Act applies.

How We Collect Your Information

We generally collect information directly from you.

Information may be collected when you:

• contact our office;
• complete an enquiry form;
• request a quotation;
• instruct us to act;
• attend an appointment;
• telephone or email us;
• provide documents;
• use our website;
• upload documents through secure electronic systems; or
• communicate with us through other lawful means.

Where appropriate, we may also collect information from third parties authorised by you or where reasonably necessary to progress your legal matter.

Why We Collect Your Information

We collect personal information so that we can provide legal services and manage our legal practice.

This includes:

• providing legal advice;
• preparing legal documents;
• acting in conveyancing and property transactions;
• conducting Verification of Identity (VOI);
• complying with Electronic Conveyancing Participation Rules;
• preparing wills and estate planning documents;
• administering deceased estates;
• providing commercial legal services;
• providing independent legal advice;
• providing notarial services;
• communicating with you;
• conducting conflict checks;
• verifying your identity;
• complying with legal and regulatory obligations;
• issuing invoices;
• managing trust accounts;
• preventing fraud;
• protecting our legal rights; and
• improving our services.

If we are unable to collect information reasonably required to provide legal services, we may be unable to act for you.

Verification of Identity and AML/CTF

Certain legal matters, particularly conveyancing and property transactions, require us to verify the identity of our clients.

We may collect identification documents to comply with:

• Verification of Identity (VOI) requirements;
• Right to Deal requirements;
• Electronic Conveyancing Participation Rules;
• anti-fraud measures;
• trust account obligations; and
• Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF) legislation where applicable.

Identity verification may be undertaken electronically or in person using approved Verification of Identity providers.

Where permitted by law, Goulburn Legal may rely upon Verification of Identity or customer due diligence undertaken by another law firm, licensed conveyancer or other appropriately qualified reporting entity where a written reliance agreement or other lawful arrangement is in place.

Similarly, other law firms or professional advisers may rely upon customer due diligence undertaken by Goulburn Legal where permitted by legislation and an appropriate reliance agreement exists.

We reserve the right to undertake additional verification where reasonably necessary to comply with our legal or professional obligations.

Fraud Prevention and Cyber Security

Protecting our clients from cybercrime is an important part of our practice.

We may use personal information to:

• verify payment instructions;
• verify settlement account details;
• prevent identity theft;
• detect fraudulent activity;
• comply with regulatory obligations;
• investigate suspicious transactions; and
• protect our clients and our practice from cybercrime.

For your protection, Goulburn Legal will never notify you solely by email of changes to our trust account or settlement banking details.

If you receive any communication requesting different payment instructions, you should telephone our office immediately using independently verified contact details before transferring any funds.

Disclosure of Personal Information

We only disclose personal information where reasonably necessary to provide legal services, where you authorise us to do so or where disclosure is required or permitted by law.

Depending upon your legal matter, we may disclose information to:

• courts and tribunals;
• government authorities;
• land registries;
• Revenue NSW;
• ACT Revenue Office;
• financial institutions;
• mortgage brokers;
• real estate agents;
• licensed conveyancers;
• barristers;
• other solicitors;
• accountants;
• valuers;
• surveyors;
• building consultants;
• Electronic Lodgment Network Operators (ELNOs);
• Verification of Identity providers;
• technology providers;
• cloud service providers; and
• other persons involved in your legal matter.

We take reasonable steps to ensure third parties protect your personal information appropriately.

Website Information

When you visit our website, certain information may be collected automatically to assist us in operating, maintaining and improving our website.

This information may include:

• your IP address;
• browser type and version;
• operating system;
• pages visited;
• date and time of access;
• referring website;
• device information; and
• general website usage information.

This information is generally used for website administration, security, performance monitoring and statistical analysis and does not ordinarily identify you personally.

Cookies

Our website may use cookies and similar technologies to improve your browsing experience.

Cookies assist us to:

• remember your preferences;
• improve website functionality;
• analyse website traffic;
• understand how visitors use our website; and
• maintain the security of our online services.

Most web browsers automatically accept cookies, however you may configure your browser to refuse or delete cookies. Doing so may affect the functionality of certain parts of our website.

Website Analytics

We may use website analytics services to help us understand how visitors use our website and improve the services we provide.

Analytics information is generally collected in an aggregated or de-identified form and may include:

• pages visited;
• time spent on pages;
• navigation paths;
• referring websites;
• general location information; and
• device information.

This information assists us to improve the content, functionality and performance of our website.

Electronic Communications

Email and other electronic communications are convenient but cannot be guaranteed to be completely secure.

Although Goulburn Legal employs reasonable cyber security measures, electronic communications may be intercepted, delayed, corrupted or fail to be delivered.

Clients should not send highly confidential information by unsecured email unless appropriate precautions have been taken.

If your matter is urgent or subject to strict legal deadlines, you should contact our office directly by telephone.

Artificial Intelligence and Legal Technology

Goulburn Legal may use technology-assisted tools, including document automation and artificial intelligence, to improve the efficiency and quality of our legal services.

These technologies may assist with legal research, document preparation, proofreading, document comparison, workflow management and administrative tasks.

All legal advice and legal documents provided to clients are reviewed by an appropriately qualified legal practitioner. Technology is used to support—not replace—professional legal judgment.

We take reasonable steps to ensure that any technology providers engaged by Goulburn Legal maintain appropriate privacy, confidentiality and security standards.

Storage and Security of Information

Goulburn Legal takes reasonable steps to protect personal information against misuse, interference, loss, unauthorised access, modification and disclosure.

Depending on the nature of the information, our security measures may include:

• secure office premises;
• restricted access to client files;
• password-protected systems;
• multi-factor authentication;
• encrypted electronic storage;
• secure cloud-based systems;
• secure backup procedures;
• firewall and anti-malware protection;
• staff confidentiality obligations; and
• cyber security monitoring.

While we take reasonable steps to safeguard personal information, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

Retention of Information

We retain personal information for as long as reasonably necessary to:

• provide legal services;
• comply with our legal and professional obligations;
• respond to regulatory requirements;
• protect legal professional privilege;
• resolve disputes;
• comply with applicable limitation periods; and
• meet our record keeping obligations.

When personal information is no longer required, we take reasonable steps to securely destroy or de-identify the information, unless we are required by law to retain it.

Accessing and Correcting Your Information

You may request access to the personal information that Goulburn Legal holds about you, or request that any personal information we hold is corrected if you believe it is inaccurate, incomplete or out of date.

Requests for access or correction should be made in writing. We will respond to your request within a reasonable period and, where appropriate, provide access to your personal information in accordance with the Privacy Act 1988 (Cth).

We do not charge a fee for receiving or considering a request for access to your personal information. However, we may charge a reasonable administrative fee for the reasonable costs associated with locating, retrieving, copying or otherwise providing access to the requested information.

In certain circumstances prescribed by the Privacy Act, we may refuse a request for access to personal information. If we refuse your request, we will provide you with a written notice setting out the reasons for the refusal (unless it would be unreasonable to do so) and advise you of the mechanisms available to make a complaint.

If, after accessing your personal information, or at any other time, you believe that the personal information we hold about you is inaccurate, incomplete, out of date, irrelevant or misleading, please notify us as soon as practicable. We will take reasonable steps to correct the information so that it is accurate, complete, current and up to date.

If we refuse to correct your personal information, we will provide you with a written notice explaining the reasons for our decision (unless it would be unreasonable to do so) and advise you of the complaint mechanisms available to you under the Privacy Act.

Overseas Disclosure

Some of the technology providers engaged by Goulburn Legal may store or process information outside Australia.

Where this occurs, we take reasonable steps to ensure that appropriate privacy and security safeguards are in place and that any overseas disclosure complies with applicable Australian privacy laws.

Third-Party Websites

Our website may contain links to third-party websites for your convenience.

Goulburn Legal does not control those websites and is not responsible for their privacy practices or content.

We encourage you to review the privacy policies of any third-party websites you visit.

Privacy Complaints & Feedback

If you believe your privacy has been breached or you have concerns about the way Goulburn Legal has handled your personal information, please contact us on hello@goulburnlegal.com.au.

We will acknowledge your complaint, investigate the issues raised and endeavour to respond within a reasonable time.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

Changes to this Privacy Policy

Goulburn Legal may amend this Privacy Policy from time to time to reflect changes in legislation, technology, professional obligations or our business practices.

The current version of this Privacy Policy will always be available on our website.

We encourage you to review this Privacy Policy periodically.

Last Updated: 9 August 2026