Privacy Policy

1. General

This Privacy Policy applies to all Personal Information collected by Bressington & Partners (we, us, our). We are committed to complying with the Privacy Act 1988 (Cth) (Act) and the Australian Privacy Principles (APPs) in the collection, use, storage and disclosure of Personal Information.

This Privacy Policy explains how and why we collect Personal Information, how we use it, the circumstances in which we may disclose it, and the steps we take to safeguard it.

By engaging us to provide legal services, interacting with our staff, accessing our website, or otherwise providing us with Personal Information, you agree to the terms of this Privacy Policy.

2. Definitions

In this Policy:

1. OAIC means the Office of the Australian Information Commissioner.
2. Personal Information means information or an opinion about an identified individual or an individual who is reasonably identifiable.
3. Sensitive Information has the meaning given in the Act and includes information such as health information, criminal records, professional memberships, and information about ethnicity or religion.
4. Services means the provision of legal services or related services by us.
5. Website means www.bresso.com.au and any related pages or platforms we operate.
6. You means any individual whose Personal Information we collect, including clients, prospective clients, suppliers, employees, job applicants, contractors and website users.

3. Types of Personal Information We Collect

Depending on your dealings with us, we may collect the following Personal Information:

1. Personal details – name, date of birth, gender, occupation.
2. Contact details – address, email address, phone number.
3. Identification details – driver licence, passport, or other identity documents where required for legal services or conflict checks.
4. Financial information – payment details, billing information, trust account information where applicable.
5. Employment information – for job applicants, this may include resumes, qualifications, employment history, interview notes, references, test results and right-to-work documentation.
6. Legal matter information – any information you provide to us or which is obtained during the course of providing legal services, which may include Sensitive Information.
7. Website user information – browser data, IP address, device information, cookies and analytics information.

We only collect Sensitive Information where:

1. it is reasonably necessary for us to provide the Services; and
2. you have consented to the collection (which may be implied), or the collection is required or authorised by law.

4. How We Collect Personal Information

We generally collect Personal Information directly from you, including when:

• you meet with us in person
• you contact us by phone or email
• you provide information via our Website
• you complete our forms, questionnaires or engagement documents
• you apply for employment with us.

We may also collect Personal Information about you from third parties where:

• it is necessary for the provision of our Services
• you have consented
• it is unreasonable or impractical for us to collect it directly from you
• we are permitted or required to do so by law.

These third parties may include:

• people acting on your behalf
• publicly available databases (e.g., ASIC, ABR, court registries)
• government agencies
• referees, recruiters and previous employers (for job applicants)
• opposing parties or their legal representatives
• service providers such as accountants, insurers and experts.

If you do not provide the requested Personal Information, we may be unable to provide Services or may be required to limit the scope of our advice.

If you provide Personal Information about someone else, you warrant that you are authorised to do so and that they have been made aware of this Privacy Policy.

5. Data Storage and Security

We hold Personal Information in both physical and electronic formats. We take reasonable steps to safeguard Personal Information against misuse, interference, loss, and unauthorised access, modification or disclosure.

Security measures may include:

• secure offices and restricted physical access
• encrypted and password-protected electronic systems
• secure document management platforms
• confidentiality obligations in staff and contractor agreements
• access controls and audit logs
• regular cyber-security reviews.

We cannot guarantee the security of information transmitted via the internet. Transmission of Personal Information via our Website or email is undertaken at your own risk.

Our Website may contain links to third-party sites. We are not responsible for the privacy practices of those third parties.

6. Why We Collect, Hold, Use and Disclose Personal Information

We generally collect, use and disclose Personal Information for purposes including:

1. providing legal services and managing our relationship with you
2. verifying your identity and conducting conflict checks
3. billing, accounting and trust account management
4. responding to enquiries or complaints
5. complying with our legal, professional and regulatory obligations
6. managing and improving our legal practice, systems and services
7. marketing our services, with your consent or where permitted by law
8. recruitment, employment and contractor processes.

We may also use de-identified information for research, reporting or service development.

We do not sell Personal Information.

7. Disclosure of Personal Information

We may disclose Personal Information to:

• our employees, partners and contractors
• barristers and legal consultants
• experts, valuers, investigators and other professional advisers
• IT and cloud service providers
• insurers and auditors
• payment processors
• government bodies and regulatory authorities
• courts, tribunals or law enforcement agencies where required by law
• third parties you authorise or instruct us to contact.

Where we engage third-party service providers, we take reasonable steps to ensure they:

• only access the information necessary to perform their role, and
• handle Personal Information in accordance with privacy obligations.

8. Direct Marketing

We may use your Personal Information to provide you with information about legal developments, firm updates or services that may be of interest to you.

You may opt out of marketing communications at any time by:

• using the “unsubscribe” link in any email; or
• contacting us at admin@bresso.com.au.

We will not sell or disclose your Personal Information to third parties for their direct marketing purposes.

9. Overseas Disclosure

We may disclose Personal Information to service providers located overseas, including cloud-hosting or IT service providers. Common destinations may include the United States, New Zealand or other jurisdictions where our software providers store data.

Where overseas disclosure occurs, we take reasonable steps to ensure such entities comply with privacy standards comparable to the APPs.

10. Website Use and Cookies

Our Website may use cookies and similar technologies to:

• operate and personalise the Website
• analyse usage trends
• improve user experience
• assist with marketing and advertising.

You may disable cookies through your browser settings; however, some features may not function correctly.

11. Third-Party Websites

Our Website may contain links to third-party websites or resources. We are not responsible for the privacy practices, content or security of those third parties.

12. Data Retention

We retain Personal Information only for as long as reasonably necessary to:

• provide Services
• meet our legal and professional obligations (including file retention requirements)
• manage potential disputes or litigation.

In many cases, legal files must be retained for a minimum period under professional rules or legislation.

We may retain de-identified information indefinitely.

13. Access and Correction of Personal Information

You may request access to, or correction of, your Personal Information by contacting us using the details below.

We will respond to requests within a reasonable period and in accordance with the Act and the APPs.

We may require evidence of your identity before granting access.

Access may be denied in circumstances permitted by law, including where disclosure would breach legal professional privilege.

14. Complaints

If you have a complaint about the way we handle your Personal Information, please contact us using the details below.

We will investigate your complaint and endeavour to respond within 30 days.

If you are not satisfied with our response, you may contact the OAIC at www.oaic.gov.au.

15. Contact Us

For questions, requests or complaints relating to this Policy, please contact us by phone on +61 7 4927 7344 or by email on admin@bresso.com.au

16. Review of Policy

We review this Privacy Policy regularly and may update it from time to time. The most current version will be available on our Website.