Our commitment to protect your privacy
We recognise that any personal information we collect about you should only be used for the purposes we have collected it for or as allowed under the law. It is important to us that you are confident that any personal information we hold about you will be treated in a way which ensures protection of your personal information.
Our commitment in respect of personal information is to abide by the Australian Privacy Principles for the protection of personal information, as set out in the Privacy Act and any other relevant law.
When we refer to personal information we mean information from which your identity is reasonably apparent. This information may include information or an opinion about you.
What information do we collect?
We do not collect personal information about you unless the information is reasonably necessary for providing legal services or products to you or relating to you, or is directly related to the provision of these services. The kinds of personal information we may collect about you include transaction information, your name, date of birth, address, occupation and any other information we may need to identify you.
Why we collect your personal information
We collect personal information for the purposes of undertaking the transaction the subject of any instructions from you or relating to you. We may also collect your personal information for the purposes of direct marketing and managing our relationship with you. From time to time we may offer you other products and services.
How do we collect your personal information?
Where reasonable and practical we will collect your personal information directly from you. Other parties, such as banks, mortgage managers and other law firms, might also give us personal information about you.
How do we hold your personal information?
The information we hold about you will be stored either electronically in secure data centres located in Australia or on physical files which are managed in secure business premises accessible only to our staff. We are also required to retain certain records for up to 7 years and where we do so we utilise contracted service providers who also implement information security controls to ensure your information is protected. We use a range of physical, electronic and other security measures to protect the security, confidentiality and integrity of the personal information we hold.
Do we disclose your personal information?
We will only use your personal information for the purpose for which it was collected and for any directly related purpose. We may disclose your personal information:
- to anybody who represents you;
- to anyone, where you have provided us consent;
- to anyone, where disclosure to that party is for the purpose for which the information was collected or directly related to that purpose;
- where we are required to do so by law, such as under the Anti-Money or Laundering and Counter Terrorism Financing Act 2006 (Cth); or
- to organisations that provide products or services used by us.
Prior to disclosing any of your personal information to another person or organisation, we will take all reasonable steps to satisfy ourselves that:
(a) the person or organisation has a commitment to protecting your personal information at least equal to our commitment, or
(b) you have consented to us making the disclosure.
From time to time we may use your personal information to provide you with current information about offers you may find of interest, changes to our organisation, or new products or services being offered by us or any company with whom we are associated.
If we market products and services to you, we will comply with applicable Privacy Laws to obtain your consent if required.
If you do not wish to receive marketing information, you may at any time decline to receive such information by telephoning us on (02) 9324 8000 or by writing to us at Galilee Solicitors, Level 11, 60 Carrington Street, Sydney NSW 2000. We will not charge you for giving effect to your request and will take all reasonable steps to meet your request at the earliest possible opportunity.
Updating your personal information
It is important to us that the personal information we hold about you is accurate and up to date. During the course of our relationship with you we may ask you to inform us if any of your personal information has changed.
If you wish to make any changes to your personal information, you may contact us. We will generally rely on you to ensure the information we hold about you is accurate or complete.
Access and correction to your personal and credit information
We will provide you with access to the personal information we hold about you. You may request access to any of the personal information we hold about you at any time. We may charge a fee for our costs of retrieving and supplying the information to you.
Depending on the type of request that you make we may respond to your request immediately, otherwise we usually respond to you within seven days of receiving your request. We may need to contact other entities to properly investigate your request.
There may be situations where we are not required to provide you with access to your personal information, for example, if the information relates to existing or anticipated legal proceedings. An explanation will be provided to you, if we deny you access to the personal or credit information we hold about you.
If any of the personal information we hold about you is incorrect, inaccurate or out of date you may request that we correct the information. If appropriate we will correct the personal information at the time of the request, otherwise, we will provide an initial response to you within seven days of receiving your request. Where reasonable, and after our investigation, we will provide you with details about whether we have corrected the personal information within 30 days.
Using government identifiers
If we collect government identifiers, such as your tax file number, we do not use or disclose this information other than required by law. We will never use a government identifier in order to identify you.
How safe and secure is your personal information that we hold?
We will take reasonable steps to protect your personal information by storing it in a secure environment. We may store your personal information in paper and electronic form. We will also take reasonable steps to protect any personal information from misuse, loss and unauthorised access, modification or disclosure.
Notifiable Data Breaches
Effective from 22 February 2018, the Privacy Act includes a Notifiable Data Breaches scheme which requires us to notify you and the Office of the Australian Information Commissioner (OAIC) of certain data breaches and recommend steps you can take to limit the impacts of a breach.
The Notifiable Data Breaches scheme requires us to notify about a data breach that is likely to result in serious harm to affected individuals. There are exceptions where notification is not required. For example, where we have already taken appropriate remedial action that removes the risk of serious harm to any individuals.
If we believe there has been a data breach that impacts your personal information and creates a likely risk of serious harm, we will notify you and the OAIC as soon as practicable and keep in close contact with you about the nature of the breach, the steps we are taking and what you can do to reduce the impacts to your privacy.
If you believe that any personal information we hold about you has been impacted by a data breach, you can contact us using the contact details below.
Complaints – your rights
If you are dissatisfied with how we have dealt with your personal information, or you have a complaint about our compliance with the Privacy Act and the Credit Reporting Code, you may contact our complaints officer on (02) 9324 8000 or via Live Chat at our public website, www.galilee.com.au.
We will acknowledge your complaint within seven days. We will provide you with a decision on your complaint within 30 days.
If you are dissatisfied with the response of our complaints officer you may make a complaint to the OAIC which can be contacted on either www.oaic.gov.au or 1300 363 992.
You may request further information about the way we manage your personal information by contacting us.
We are continuously reviewing our policies to keep up to date with changes in the law, technology and industry practice.