PRIVACY POLICY

Whitestone Law is a boutique legal practice based in Sydney, Australia. We are committed to protecting your privacy and ensuring that your personal information is managed in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains:

  • Who we are and how we operate;

  • The personal information we collect;

  • How and why we use your information;

  • When we may share your information;

  • The steps we take to safeguard your data; and

  • Your rights in relation to your information.

1. Who We Are

Whitestone Law is an independent Australian law practice providing specialist services in property law, private lending, and commercial transactions. References in this Privacy Policy to "Whitestone Law", "we", "our", or "us" mean Whitestone Law and its associated personnel.

Any reference to "partner" means a principal or lawyer of equivalent standing within the firm.

2. Information We Collect

We collect personal information necessary to provide legal services and operate our business. This may include:

  • Contact information: name, phone number, email, postal address;

  • Business information: details relating to the matters in which you instruct us;

  • Financial and identification information: where required for client due diligence (e.g., AML/CTF checks);

  • Website and technical information: IP address, browser type, usage data, and cookies;

  • Event or preference data: when you register for briefings, updates, or provide feedback;

  • Special category data: only where strictly necessary, e.g., health or dietary information for events, or information required to comply with legal obligations.

We may collect this information directly from you, from your representatives, from publicly available sources, or from third parties assisting in the conduct of your matter (e.g., regulators, service providers).

3. How We Use Your Information

Your personal information may be used for the following purposes:

  • Providing legal advice and related services;

  • Managing our business relationship with you, including billing and administration;

  • Responding to enquiries and keeping you updated on your matter;

  • Sending newsletters, updates, and invitations (where you have subscribed or consented);

  • Conducting compliance checks (AML/CTF, sanctions, fraud prevention);

  • Improving our services, website, and client experience;

  • Complying with our legal and regulatory obligations.

We will only use your personal information for the purposes for which it was collected, unless another use is authorised by law.

4. Sharing Your Information

We may share your personal information with:

  • Barristers, experts, and consultants engaged in your matter;

  • Third-party suppliers supporting our business (e.g., IT, data hosting, administrative services);

  • Regulators, courts, and government authorities where required;

  • Other parties with your consent, or as reasonably necessary to progress your matter.

All third parties engaged by Whitestone Law are bound by confidentiality obligations and are not permitted to use your information for purposes unrelated to their engagement.

We do not sell or rent your personal information to third parties for marketing.

5. Data Security

We implement a range of technical and organisational measures to protect your information, including:

  • Secure IT systems, encryption, and firewalls;

  • Access controls and confidentiality undertakings;

  • Regular monitoring and compliance procedures.

If a data breach occurs that is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches Scheme.

6. International Data Transfers

As a boutique Australian practice, most of your personal information is stored and processed in Australia. Where it is necessary to transfer data overseas (for example, to cloud service providers or overseas counsel in cross-border matters), we take steps to ensure that your information is protected in accordance with Australian privacy requirements.

7. Cookies and Website Tracking

Our website uses cookies and similar technologies to improve your browsing experience. These collect information such as your IP address, device type, and browsing behaviour. You may disable cookies in your browser settings, though some features of our site may not function properly.

8. How Long We Keep Your Information

We retain personal information for as long as necessary to provide services to you and to comply with legal, regulatory, and professional obligations. Retention periods vary depending on the nature of the matter, but documents are typically kept for 7 years after completion of a matter unless longer retention is required.

9. Your Rights

Under Australian privacy law, you have the right to:

  • Access the personal information we hold about you;

  • Request corrections or updates;

  • Request deletion of information (subject to legal obligations);

  • Opt out of direct marketing.

We will respond to all requests within a reasonable timeframe.

10. Communications and Confidentiality

If you contact us by email or through our website, please do not provide confidential information until we confirm that we represent you. Sending information to us does not establish a lawyer-client relationship.