Privacy policy.

  1. Purpose

SMAL Legal (‘the business’, 'we', 'us' or 'our') is committed to protecting your privacy and Personal Information when you deal with us and ensuring that it collects, stores and deals with your Personal Information appropriately and lawfully, including in accordance with the relevant privacy legislation. 

The Privacy Act 1988 (Cth) (as amended) (‘Australian Privacy Act’) applies to the collection of personal information by SMAL Legal.

2. Coverage

This policy applies to all Personal Information collected by the business in relation to its clients, suppliers, website visitors and other third parties (‘external parties’ or ‘you’). In this policy, we outline:

  •  what types of Personal Information we collect and hold;

  • the purposes for which we collect, hold, use and disclose Personal Information;

  • how we collect Personal Information;

  • how our Online Services collect Personal Information;

  •  how our third party providers collect and holds your information;

  • how you may access your Personal Information that we hold and seek any correction to that information;

  • how you are entitled to complain about a breach of this policy or any relevant law; and

  • how we disclose Personal Information

3. Personal information

Personal Information is information or an opinion, whether true or not, and whether recorded in a material form or not, about an identified individual, or an individual who is reasonably identifiable, or as defined in the relevant Privacy Act (‘Personal Information’).

4. Types of Personal information we collect and hold

The types of Personal Information we may collect from our external parties and hold include (without limitation):

  • Name, address and contact details

  • Identification 

  • Credit card numbers and other payment methods;

  • Organisation, employment; and

  • Personal details collected through your dealings with us and our clients, including any contact we have with you by email, telephone or online.

5. How we Collect your Personal Information

5.1  General 

We may collect your personal information directly from you, from clients or authorised representatives. We may also collect personal information from third parties such as regulatory authorities, your employer, other organisations with whom you have dealings, government agencies, credit reporting agencies, information or service providers, publicly available records and the third parties described in the ‘Use and Disclosure’ (section 8) below. We will handle any unsolicited information in accordance with law, including destroying or de-identifying such information where we are required to do so by a relevant law. 

5.2  Online Services

When you use our online services, we may collect the following:

5.2.1 Analytics

This website collects personal data to power our site analytics, including:

  •  Information about your browser, network, and device

  • Web pages you visited prior to coming to this website

  • Your IP address

This information may also include details about your use of this website, including:

  • Clicks

  • Internal links

  •  Pages visited

  • Scrolling

  • Searches

  • Timestamps

We share this information with Squarespace, our website analytics provider, to learn about site traffic and activity.

5.2.2 Webforms

When you submit information to this website via webform, we collect the data requested in the webform in order to track and respond to your submissions. We share this information with Squarespace, our online store hosting provider, so that they can provide website services to us. We also share this information with MailChimp and Google Workspace for storage and with Zapier for data porting.

5.2.3 Cookies 

This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses.

6. Purpose of Collecting, Holding or Using Personal Information

  • To provide you with information, products and services;

  •  To administer our relationship with you including responding to queries; 

  • For internal administrative purposes, such as but not limited to proceduural assessment, risk management, accounting, billing and product and service reviews;

  • To Squarespace to power their Analytics of this website to learn about site traffic and activity;

  • To identify and inform you about other products or services that may be of interest to you; and

  • To provide you with information about products, services and offerings that may be of interest to you.

6.1 Marketing Emails

We may send you marketing emails, which you can unsubscribe from by clicking the link at the bottom of the email. We share your contact information with MailChimp, our email marketing provider, so they can send these emails on our behalf.

7. Access to and Correction of Personal Information

In most cases, you can gain access to Personal Information about you held by the business. Australia's National Privacy Principles (and, from 12 March 2014, the Australian Privacy Principles) under the Australian Privacy Act set out some circumstances in which we are not required to provide you with such access. For example, we are not required to give access where we reasonably believe that giving access to the Personal Information would pose a serious threat to the life, health or safety of any individual, or to public health or public safety.

To make a request to access your Personal Information held by the company, contact hello@smallegal.com.au.  The business may charge a fee (which will not be excessive) to cover the cost of retrieving and copying requested information.

The business takes reasonable steps to ensure that the Personal Information we collect, use or disclose is accurate, complete and up to date, relevant, and not misleading. If your Personal Information is incorrect or changes, please contact hello@smallegal.com.au so that the business can update your Personal Information

8. Use and Disclosure

The business understands the importance of keeping Personal Information private, and will only disclose such information to others in limited circumstances. Other parties to which the business may disclose Personal Information include:

  • the business's professional advisers;

  •  government and regulatory authorities; and

  • our third party providers such as IT service providers Squarespace, Google Workspace, Calendly and MailChimp. Information is only disclosed to third parties to the extent necessary to enable them to provide these services.

The business may also be permitted or obligated to disclose Personal Information to other third parties where:

  • the business reasonably believes that the disclosure is necessary to lessen or prevent a serious threat to the life, health or safety of any individual, or to public health or safety and it is unreasonable or impracticable to obtain your consent to the disclosure;

  • there is reason to suspect that unlawful activity, or misconduct of a serious nature, that relates to the company's functions or activities has been, is being or may be engaged in, and the company reasonably believes that the disclosure is necessary for us to take appropriate action in relation to this matter;

  • the company is required or authorised to do so by law;

  • the company is required to do so by an enforcement body; or

  • as otherwise permitted by the Australian Privacy Act.

9.   Retention and destruction of Personal Information

The business maintains procedures and standards and takes reasonable steps to prevent unauthorised access to, use, modification, or disclosure of, Personal Information. The company takes reasonable steps to protect an individual's information from misuse, interference or loss including the use of firewalls, anti-virus software and ongoing internal monitoring. Once an individual's information is no longer needed by the company, reasonable steps are taken to destroy or de-identify it (except where archiving is required for the purposes for which the information was collected).

10.  Sensitive Information

Some information is classed as "Sensitive Information". This includes information or an opinion about a person's racial or ethnic origin, political opinions, philosophical or religious beliefs or affiliations, membership of a political, trade or professional association or trade union, sexual preferences or practices, criminal record, health or genetic information, biometric information that is used for the purpose of biometric verification or identification, or biometric templates.

The company will only collect, hold or disclose Sensitive Information if:

  •  the individual has consented; or

  • the collection is required or authorised by or under law (including the relevant Privacy Act) or a court/tribunal order.  

11.   Complaints 

If you have a complaint in relation to the collection and handling of your Personal Information, please contact hello@smallegal.com.au. All complaints will be dealt confidentially and investigated internally. In Australia, a response will be provided within 30 days unless otherwise specified (in accordance with the Australian Privacy Act). 

12.  Updates 

This policy will be reviewed from time to time to take account of new laws and technology, changes to our operations and practices and the changing business environment. The latest version of this policy will be the version posted to our website. We reserve the right to amend this policy from time to time. 

13.  Contact Us 

If you have any queries about this Policy, or wish to request access to (or correction of) your personal information, please contact SMAL Legal at hello@smallegal.com.au