Privacy Policy
At Ochir Law, we take privacy seriously. Protecting personal information is not just a legal obligation, it is a core part of how we operate. We go beyond the minimum requirements of the Privacy Act 1988 (Cth) by embedding robust privacy practices into every aspect of our legal services.
We have cultivated a privacy-conscious culture within the firm, supported by clear procedures and secure systems for managing personal information. As legal practitioners, we are bound by strict professional duties of confidentiality to our clients and the courts. In many cases, our clients also benefit from legal professional privilege over communications and records connected to our services.
This privacy policy outlines how we handle personal information relating to individuals other than employees. Section 12 addresses privacy practices for employees, partners, and contractors.
1. What is personal information?
‘Personal information’ is information or opinion (in recorded form or otherwise) about an identified, or reasonably identifiable, individual. This includes your name, your date of birth and your contact details, and may also include information about your dealings with us.
‘Sensitive information’ is a sub-set of personal information and includes information or opinions about your racial or ethnic origin, political opinions, memberships, religious beliefs, sexual orientation, health or criminal record.
2. Collection and storage of personal information
Where possible, we collect your personal information directly from you during the course of our business relationship. Where it is not practicable or reasonable to collect your information directly from you, we may collect it from other sources.
We usually collect and hold the following kinds of personal information:
- Information about people’s dealings with us or our clients;
- Name, address, job title, professional membership and contact information;
- If you are a client or potential client, information about your organisation and your role, payment information and information about your legal matters;
- Interests in areas of legal practice or events; and
- Information provided by or on behalf of applicants for a role with us.
We only collect, use or disclose sensitive information where reasonably necessary to perform our functions and where you have consented, or where the law allows us to do so without consent.
3. Our purposes for handling your personal information
We collect, hold, use or disclose personal information:
- To provide our legal services;
- To provide communications, events or seminars;
- To engage third party service providers in connection with our services;
- To manage and improve our services and client relationships;
- Where required or authorised by law; and
- Otherwise to run our business.
4. Disclosures
Subject to our professional obligations, we may disclose personal information:
- To barristers, experts, valuers and other parties involved in dispute resolution;
- To service providers, agents and contractors;
- To professional advisers and insurers;
- To regulators, government agencies or law enforcement where required; and
- Where you have provided consent.
We do not routinely disclose personal information overseas, except where specifically appropriate to providing legal services.
5. Marketing
Where we have a business relationship with you or you have consented, we may send legal updates or communications. You may opt out at any time by contacting us or using the unsubscribe link in our emails.
6. Data quality
We take reasonable steps to ensure the personal information we collect, use and disclose is accurate, complete and up-to-date.
7. Data security
We hold personal information in paper-based and electronic files and take stringent measures to protect it from misuse, loss, unauthorised access, modification or disclosure.
When no longer required, information is securely destroyed or deleted unless we are legally required to retain it. For matter-related information, this generally occurs seven years after completion.
8. Access
You may request access to the personal information we hold about you by contacting us. We may recover reasonable costs associated with providing access.
9. Correction
If you believe the information we hold is inaccurate or incomplete, you may request correction. We will respond in accordance with our legal obligations.
10. Enquiries and complaints
If you have enquiries or complaints, please contact Munkh-Erdene Saruul on 0456 867 879 or at m.saruul@ochirlaw.com.au.
You may also contact the Office of the Australian Information Commissioner on 1300 363 992 or via enquiries@oaic.gov.au.
11. Changes to this privacy policy
We may update this Privacy Policy from time to time. The current version will always be available on our website.
12. Personal information about our people
We collect information relating to employees, partners and contractors as part of recruitment and ongoing engagement processes. This may include sensitive information where necessary and lawful.