How we collect, use, and protect your personal information
Carter Capner Law is committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
We collect personal information to:
The type of personal information we collect depends on your matter and how you interact with us. It may include:
Given the nature of compensation and class action work, we may collect sensitive information (for example, health information). We collect such information with your consent unless an exception under law applies, and only where reasonably necessary for our legal services.
We do not adopt government-related identifiers (such as TFNs, Medicare or driver licence numbers) as our own identifiers and will only use or disclose them as permitted by law.
We may collect your information through:
Where lawful and practicable (for example, general enquiries), you may interact with us without identifying yourself or by using a pseudonym.
If we receive personal information we did not request, we will determine whether we could have lawfully collected it. If not, we will de-identify or destroy it where lawful and reasonable to do so.
At or before the time we collect personal information (or as soon as practicable afterwards), we provide a collection notice explaining the purposes of collection, key third parties, and how to access or correct your information.
Your information may be used or disclosed to:
We may send legal updates or information about our services where permitted by law. You can opt out at any time via the unsubscribe link or by contacting us. We do not sell personal information.
We use trusted providers for practice management, secure file storage, email and collaboration, IT security, communications, document production, and website analytics. These providers may handle personal information under our instructions and contracts.
By submitting an expression of interest or class action form, you consent to us using the information provided to:
We use cookies and similar tracking technologies to improve user experience and analyse website traffic. Cookies are small data files stored on your device when you visit our website.
You can control cookie settings through your browser preferences. Disabling cookies may affect site functionality.
When you browse our website, our servers may automatically log information sent by your browser, such as your IP address, browser type and version, pages visited, time spent on each page, and any errors encountered.
While this data is not personally identifiable on its own, it may be used in combination with other data to identify you.
By providing personal information or using our site, you consent to its collection and use for the purposes stated in this policy.
For secondary purposes like marketing, we will seek your express or implied consent. You may withdraw consent at any time by contacting us or using the unsubscribe option in our emails.
Our services are not directed at children under the age of 13. We do not knowingly collect personal information from children.
If you become aware that a child has provided personal information, please contact us and we will take appropriate steps to delete it.
Your personal information may be stored or processed by some providers outside Australia. Before any cross-border disclosure, we take reasonable steps to ensure overseas recipients handle personal information in a way that is consistent with the Australian Privacy Principles. Where we disclose information overseas, we remain accountable under Australian law for certain acts of those recipients.
Likely recipient countries (update to reflect your vendors): United States, New Zealand, Singapore, European Union/EEA, and the Philippines.
We retain personal information only as long as necessary to fulfil the purpose for which it was collected or to comply with legal obligations.
Client and matter files are generally retained for at least seven (7) years after a matter closes (or longer where required by law or ongoing needs), after which we securely destroy or de-identify records.
You have the right to:
To request access to, or correction of, your personal information, contact us using the details below. We will respond within a reasonable period (usually within 30 days). We may ask you to verify your identity and—if access involves substantial effort—charge a reasonable cost-recovery fee for providing access (never for making a request).
Please tell us if your details change so we can keep your information accurate, up-to-date and complete.
We take reasonable precautions to protect personal information from unauthorised access, misuse, loss, or disclosure. These include secure data storage systems, access restrictions, and industry-standard cyber protection measures.
However, no transmission or storage method is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
In the unlikely event of a data breach, we assess promptly and, if the breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme.
Our website may include links to third-party sites or services. We are not responsible for their privacy practices or content.
We recommend reviewing their policies when interacting with those services.
We may use analytics and advertising technologies (for example, Google Analytics and Meta pixels) and embed third-party content (for example, maps, videos). These providers may collect your IP address, device and browsing activity subject to their privacy policies. You can manage cookies and ad preferences via your browser or provider tools.
We may update this policy periodically to reflect changes to our operations or legal obligations. Updates take effect once published on our website.
If changes are significant, we will provide a notice or seek renewed consent where required.
If you have any questions, complaints, or requests regarding your personal information or this policy, please contact:
If you believe your privacy has been mishandled, please write to our Privacy Officer using the contact details above. Tell us what happened and how you were affected. We will acknowledge your complaint and aim to respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC): Phone 1300 363 992; Post GPO Box 5288, Sydney NSW 2001; or via the OAIC website forms.
Our team is here to help. If you have concerns about how your information is handled or wish to exercise your privacy rights, don't hesitate to reach out.
Last Updated: November 2025
