Privacy Policy

About this document

This is the Privacy Policy of Hunt & Hunt Victoria Pty Ltd (ACN 612 126 879) and its related entities (collectively, "Hunt & Hunt", "Hunt & Hunt Lawyers", "we", "our" and/or "us").

At Hunt & Hunt, we are committed to protecting your privacy and handling your personal information with care. This document sets out how we manage your personal information in accordance with the Privacy Act 1988 (Cth) ("Privacy Act") and the Australian Privacy Principles.

This Privacy Policy explains:

• the types of personal information we collect;
• how we collect and store personal information;
• the purposes for which we use and disclose personal information and to whom;
• how you can access and correct the personal information we hold about you;
• how you can make a complaint about our handling of your personal information and how we will respond;
• whether we are likely to disclose personal information to overseas recipients; and
• how you can contact us.

This document was last updated in June 2026.

What is personal information?

Under the Privacy Act, "personal information" is defined as any information or opinion about an identified individual, or an individual who is reasonably identifiable, regardless of whether the information is true or whether it is recorded in a material form.

Common examples include an individual's name, signature, address, telephone number, date of birth, medical records, bank account details, employment information, and opinions or commentary about the person.

What constitutes personal information can vary depending on the context and whether the individual can be identified or is reasonably identifiable in the circumstances.

What kinds of personal information do we collect and hold?

The types of personal information we may collect and hold include:

• identity details (such as your name and date of birth);
• contact information (including your residential address, email address and telephone number);
• financial information (such as bank account and credit card details);
• information provided in employment applications (including your education history, academic results, resume or curriculum vitae, employment history and references);
• information obtained in the course of providing legal services to our clients;
• copies of identity documents and identity verification information;
• beneficial ownership and corporate structure information;
• information relating to source of funds and source of wealth;
• sanctions screening and due diligence information;
• records relating to legal proceedings, disputes and transactions; and
• electronic verification information obtained in connection with our regulatory compliance obligations.

Much of the personal information we collect and hold in the course of providing legal services may be subject to legal professional privilege and duties of confidence.

Collection of personal information

We collect personal information in several ways, including:

• information you provide directly to us (e.g., when you complete a contact form, speak with us by telephone or video call, meet with us in person, correspond with us via email, or respond to a survey);
• information we collect indirectly or automatically (e.g., when you interact with our website or social media platforms); and
• information we receive from third parties (e.g., employment references or reports from medical professionals or insurance providers).

We may obtain information from electronic verification providers, government records, public registers and other reliable and independent sources for AML/CTF compliance purposes.

While we usually collect personal information directly from you, there may be occasions where we collect or verify information through a third party. In such cases, we will take reasonable steps to obtain your consent before doing so.

We may also automatically collect non-personal, anonymised information provided by your browser when you visit our website. This may include your IP address, device type, browser type, location data, and the date and time of your visit.

We may provide separate privacy collection notices where personal information is collected for specific purposes, including employment recruitment, event registration or AML/CTF compliance activities.

Sensitive information

Sensitive information is a specific category of personal information that includes details or opinions about an individual's:

• racial or ethnic origin;
• political opinions or affiliations;
• religious or philosophical beliefs;
• trade union membership or associations;
• sexual orientation or practices;
• criminal record;
• health or genetic information; and
• biometric information or biometric templates used for identification or verification purposes.

Generally, sensitive information has a higher level of privacy protection than other personal information. Before we collect any information from you that is sensitive information, we will obtain your consent.

We will not use or disclose your sensitive information for any purpose other than the primary purpose for which it was collected, unless you have expressly consented to such use or disclosure.

Automated decision-making

We do not currently use computer programs to make decisions that significantly affect an individual's rights or interests without meaningful human involvement.

If our use of automated decision-making changes, we will update this Privacy Policy as required by applicable privacy laws.

Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF)

We may collect, use, verify and disclose personal information to comply with our obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) ("AML/CTF Act"), AML/CTF Rules and related laws.

Depending on the services we provide, we may collect and verify:

• identity information, including your name, date of birth and residential address;
• copies of identification documents, including passports, driver licences and other government-issued identification documents;
• information relating to beneficial ownership, control structures and authorised representatives;
• information regarding source of funds, source of wealth and the nature and purpose of transactions; and
• information obtained through sanctions screening, politically exposed person (PEP) screening, adverse media screening and other due diligence processes.

We may collect personal information directly from you or from third parties, including electronic verification providers, government agencies, public registers, company registries, credit reporting bodies, sanctions databases and other reliable and independent sources.

We may disclose personal information to AUSTRAC, law enforcement agencies, government authorities, regulators and other persons where required or authorised by law.

We may also retain personal information collected for AML/CTF purposes for the period required by applicable laws, including AML/CTF record-keeping obligations.

If you do not provide information reasonably requested for AML/CTF compliance purposes, we may be unable to establish or continue a client relationship or provide legal services.

How we use your personal information

We use your personal information for a range of purposes, including to:

• provide legal services and operate our business;
• manage our relationship with you and maintain effective communication;
• comply with legal and regulatory obligations (including in relation to our obligations under the AML/CTF Act);
• invite you to webinars, seminars, events, and functions that may be of interest;
• send you publications and legal updates;
• provide technical support and respond to your inquiries;
• send you marketing communications (where permitted);
• ensure compliance with our Website Terms; and
• recover outstanding debts.

We may use recruitment-related information for:

• assessing applications;
• reference checking;
• verification of qualifications; and
• maintaining talent pools.

We do not sell your personal information to third parties under any circumstances.

Disclosure of your personal information

We may disclose your personal information to:

• courts, tribunals, regulatory bodies, and government authorities where required or permitted by law;
• other individuals or organisations when you have authorised or directed us to do so; and
• debt collection agencies, if necessary, to recover outstanding payments.

Overseas disclosure

We may need to share your personal information with organisations located outside Australia, or with Australian organisations that store data or operate overseas, when we engage third-party service providers to perform functions on our behalf.

Where this occurs, we will take reasonable steps to ensure that appropriate data protection and security measures are in place to safeguard your information.

Children's privacy

We recognise the importance of protecting children’s privacy. While we do not generally provide services directly to children, we may collect and handle personal information relating to individuals under 18 years of age where it is reasonably necessary in connection with our legal services, for example, in family law, estate or dispute matters.

In such cases, we take reasonable steps to ensure that personal information is collected, used and disclosed in accordance with the Privacy Act and the Australian Privacy Principles, and, where appropriate, with the consent or authority of a parent, guardian or authorised representative.

We also take additional care to ensure that the information of children is handled securely, used only for lawful and relevant purposes, and not retained longer than necessary.

Storage and security of your personal information

We take reasonable steps to protect the personal information we hold from misuse, interference, loss, and unauthorised access, modification, or disclosure. This includes adherence to standard industry practices wherever possible.

Our security measures include both physical and electronic safeguards, such as restricted access to our offices, secure databases, and firewalls. All our primary data storage providers currently host data within Australia.

We maintain governance, access-control, monitoring and security measures designed to protect personal information processed using cloud-based systems, AI technologies and other digital platforms.

While we are committed to maintaining the security of your information, no system can be guaranteed as completely secure. Due to technical limitations, we cannot guarantee that your personal information will remain private, as third parties may unlawfully intercept or access communications or transmissions.

Our employees and contractors who support our IT systems are required to maintain the confidentiality and privacy of any personal information they access. However, we cannot be held responsible for unauthorised access that occurs beyond our control.

You can help protect your personal information by exercising caution before authorising or assisting any third party to access it.

Requests for access to and correction of your personal information

In most cases, you have the right to access the personal information we hold about you. If you believe that any of this information is inaccurate, outdated, or incomplete, please contact us at [email protected].

We will take prompt and reasonable steps to correct the information. In some instances, we may ask you to provide supporting documentation to verify the requested changes.

If we do not agree that the information requires correction, we will provide you with a written explanation outlining our reasons. We will also include details on how you can lodge a complaint with the OAIC if you are not satisfied with our response.

Retention and deletion of your personal information

You may request that we delete or de-identify personal information that we hold about you. We will consider all such requests in accordance with applicable laws and our professional, legal and regulatory obligations.

In some circumstances, we may be required to retain personal information, including to comply with:

• legal professional obligations;
• court or regulatory requirements;
• taxation and accounting laws;
• AML/CTF laws;
• limitation periods and dispute resolution requirements; and
• other applicable legal obligations.

Where we are not required to retain personal information and it is no longer required for the purpose for which it was collected, we will take reasonable steps to securely destroy or permanently de-identify the information.

Once we are no longer required to retain your personal information and it is no longer needed for the purpose for which it was collected, we will take reasonable steps to securely destroy or permanently de-identify it. Please note that deleted information may continue to exist in our backup or archival systems for a limited time, until those systems are updated.

If your personal information has already been shared with third parties, we may no longer have control over it and cannot compel those parties to delete or modify the information. In such cases, you may need to contact those third parties directly to request deletion.

Opting out of direct marketing

If you prefer not to receive marketing communications from us, you can opt out at any time by contacting us directly or by clicking the "unsubscribe" link included in every promotional message.

Please note that even if you choose to opt out of marketing messages, we will continue to send you important updates related to any ongoing legal matters, as well as essential administrative and financial information.

Cookies and analytics

Our website uses cookies to enhance your browsing experience. Cookies cannot access or read data from your hard drive.

We use Google Analytics, which employs cookies to help us understand website traffic and user behaviour. The reports we receive from Google Analytics are anonymised and aggregated, meaning they do not identify individual users.

If you prefer not to receive cookies, you can adjust your browser settings to refuse all cookies or to notify you when a cookie is being sent, allowing you to choose whether to accept it. Please note that disabling cookies may limit the functionality of our website.

Notifiable data breaches

Under the Notifiable Data Breaches (NDB) Scheme, we are required to notify affected individuals and the Office of the Australian Information Commissioner (OAIC) if we experience an "eligible data breach".

Not all data breaches meet this threshold. For example, if we take prompt action to contain and remediate a breach and, as a result, the breach is unlikely to result in serious harm, notification is not required.

Determining whether a breach is likely to cause serious harm involves an objective assessment, based on the perspective of a reasonable person in our position and considering the information available at the time.

Complaints

If you wish to make a complaint about how we have handled your personal information, please contact our Privacy Officer at [email protected].

We will promptly investigate your complaint and notify you of the outcome. If you are dissatisfied with the outcome of your complaint, you may refer your complaint to the OAIC.

The OAIC can be contacted via the details below:

Street address: Level 3, 175 Pitt Street, Sydney NSW 2000
Web address: www.oaic.gov.au
Email address: [email protected]
Telephone (within Australia): 1300 363 992

Changes to our Privacy Policy

We may update this Privacy Policy from time to time. Updates may be communicated by either notifying you directly (for example, via email with a link to the updated policy) or by publishing the revised version on our website without prior notice.

By continuing to use our website or otherwise engaging with us, you agree to the terms of the Privacy Policy as updated from time to time.

If we make any material changes to how we handle your personal information, we will notify you by sending an email to the most recent address you have provided (if applicable) and/or by posting a prominent notice on our website.

Contact us

If you would like to access or correct your personal information, learn what information we hold about you, or have any questions about this Privacy Policy, please contact our Privacy Officer via the details below:

Street address: Level 5, 114 William Street, Melbourne VIC 3000
Email address: [email protected]
Telephone (within Australia): 1300 486 800