Legal123 Privacy Policy

Last updated: 17 July 2026

Legal123 Pty Ltd (ABN 66 153 012 269) (“Legal123”, “we”, “us” or “our”) is committed to protecting your privacy and handling your personal information in an open and transparent way. Legal123 is an Australian Incorporated Legal Practice.

This Privacy Policy explains how we collect, hold, use, disclose and protect your personal information, and how you can access and correct it or make a complaint. We handle personal information in accordance with the Privacy Act 1988 (Cth) (“Privacy Act”) and the 13 Australian Privacy Principles (“APPs”). Where relevant to visitors in other jurisdictions, we also have regard to comparable data protection laws such as the EU/UK General Data Protection Regulation (“GDPR”).

By using our website, purchasing our products or services, or otherwise providing us with your personal information, you agree to the collection, use and disclosure of that information as described in this Policy.

1. About this Policy and who it applies to

This Policy applies to all personal information we collect through:

  • our website at legal123.com.au and any related landing pages, forms or web applications;
  • our purchase, checkout and account systems;
  • our legal document templates, custom drafting, contract review and consulting services; and
  • our emails, phone calls, bookings and other dealings with you.

It does not apply to third-party websites we link to. Those sites have their own privacy policies, and we are not responsible for their practices.

2. What is personal information

“Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not and whether recorded in a material form or not. Examples include your name, email address, phone number, business details and payment information.

“Sensitive information” is a subset of personal information that includes health information and information about racial or ethnic origin, political or religious beliefs, sexual orientation and criminal record. We generally do not seek sensitive information. If we need to collect it (for example, where it forms part of the instructions for a custom legal document), we will do so only with your consent and where it is reasonably necessary for our functions.

3. The kinds of personal information we collect and hold

Depending on how you interact with us, we may collect and hold:

  • Identity and contact details – your name, email address, postal address, phone number and business name or ABN.
  • Account information – login credentials, purchase history and preferences.
  • Transaction and payment information – details of the products and services you buy and the amounts paid. Card and bank details are collected and processed directly by our payment provider; we do not store full card numbers on our systems.
  • Instructions and content – information you provide when you request custom documents, a contract review or advice, including details about your business and, where relevant, the other parties involved.
  • Correspondence – records of your enquiries, support requests, bookings and our communications with you.
  • Technical and usage data – your IP address, device and browser type, pages viewed, referring URLs and interactions with our site, collected through cookies and similar technologies (see Section 6).
  • Marketing data – your subscription preferences and engagement with our emails and campaigns.

4. How we collect personal information

We collect personal information in a number of ways, including when you:

  • complete a form, quiz or checkout on our website;
  • create an account, buy a template or engage our services;
  • email, call or book a consultation with us;
  • subscribe to our newsletter, guides or updates; or
  • interact with our website, emails or social media.

We collect personal information directly from you wherever practicable. Sometimes we collect it from third parties, such as our payment processor Stripe, our email marketing platform Mailchimp, Google Analytics, booking tools, or publicly available sources (for example, ASIC or a business website), where you would reasonably expect us to do so or where it is impracticable to collect it from you directly.

5. Anonymity and pseudonymity

You have the option to deal with us anonymously or use a pseudonym, for example when making a general enquiry. However, this will not be practicable where we need to identify you to provide a legal service, process a purchase, deliver a product or comply with our professional obligations.

6. Cookies, analytics and online tracking

Our website uses cookies and similar technologies to help it function, remember your preferences, keep your cart and login working, and understand how the site is used so we can improve it.

We use analytics and advertising tools such as Google Analytics and Recapture.io. These providers may set their own cookies and process data on our behalf. Some tools help us measure marketing and show you relevant ads on other platforms.

You can control or disable cookies through your browser settings. Blocking some cookies may affect how parts of the website work. Where required, we will request your consent to non-essential cookies through a cookie banner or similar mechanism.

7. Why we collect, hold, use and disclose your information

We collect, hold, use and disclose personal information for purposes connected with our business, including to:

  • provide, deliver and support our products and services;
  • process purchases, payments, refunds and account management;
  • respond to your enquiries, bookings and support requests;
  • provide legal services and meet our professional and regulatory obligations as an Incorporated Legal Practice;
  • send you administrative messages such as receipts, updates and template revisions;
  • with your consent or as otherwise permitted, send you marketing about our products, services and guides;
  • operate, secure, maintain and improve our website and services;
  • verify identity, prevent fraud and manage risk; and
  • comply with our legal obligations and enforce our terms.

We will only use or disclose your personal information for the purpose we collected it, for a directly related purpose you would reasonably expect, or where you have consented, or the law otherwise permits or requires it.

8. Direct marketing and how to opt out

We may use your personal information to send you marketing communications where you have subscribed, are an existing customer, or have otherwise consented, in accordance with the Privacy Act and the Spam Act 2003 (Cth).

Every marketing email contains an unsubscribe link. You can opt out at any time by using that link or by emailing us at admin@legal123.com.au. We will action your request promptly. We do not sell your personal information, and we do not use or disclose your information for the direct marketing of unrelated third parties without your consent.

9. Who we disclose your personal information to

We may disclose your personal information to:

  • Service providers who help us run our business, such as our payment processor, email and CRM platform, website host, analytics and advertising providers, booking software, and IT and support providers.
  • Professional advisers such as accountants, insurers and lawyers, where reasonably necessary.
  • Regulators and authorities where required or authorised by law, or to respond to a lawful request.
  • A purchaser in connection with a sale or restructure of our business, subject to appropriate confidentiality protections.

We require our service providers to protect personal information consistently with the Privacy Act and to use it only for the purposes for which we engage them.

10. Overseas disclosure

Some of our service providers store or process data outside Australia. Depending on the providers we use, your personal information may be disclosed to, or accessible from, recipients located in countries including the United States.

Before disclosing personal information overseas, we take reasonable steps to ensure the recipient handles it in accordance with the APPs, for example, through contractual protections. Where practicable, we identify the relevant countries above so you can make an informed decision about providing your information to us.

11. How we hold and protect your information

We hold personal information in electronic systems and, occasionally, in paper records. We take reasonable steps to protect it from misuse, interference, loss, and unauthorised access, modification, or disclosure. These steps include appropriate technical and organisational measures such as access controls, encryption in transit, secure hosting, staff confidentiality obligations and regular review of our systems.

No method of transmission or storage is completely secure. While we work hard to protect your information, we cannot guarantee absolute security, and any transmission of information to us is at your own risk.

12. Data breaches

We maintain a data breach response plan. If we suspect or become aware of a data breach, we will assess it promptly. Where a breach is likely to result in serious harm to affected individuals and is not remediated in time, we will notify those individuals and the Office of the Australian Information Commissioner (“OAIC”) in line with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

13. Automated decision-making

We do not use computer programs to make, or substantially and directly support, decisions about you that could reasonably be expected to significantly affect your rights or interests.

If this changes, we will update this Policy to describe the personal information used, the kinds of decisions involved and how they are made, in line with the automated decision-making transparency requirements introduced by the Privacy and Other Legislation Amendment Act 2024 (Cth), which commence on 10 December 2026.

14. How long we keep your information

We keep personal information only for as long as we need it for the purposes described in this Policy, or as required by law or our professional obligations. As a law firm, we are subject to record-keeping and file-retention requirements, so some records are retained for extended periods. When information is no longer needed, we take reasonable steps to destroy it or de-identify it.

15. Accessing and correcting your information

You can ask us to access the personal information we hold about you and to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. To make a request, contact our Privacy Officer at admin@legal123.com.au.

We will respond within a reasonable time, usually within 30 days. There is no fee for making a request, though we may charge a reasonable cost for giving access in some cases. If we refuse access or correction, we will explain in writing why and how you can complain.

16. Complaints

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, please contact our Privacy Officer at admin@legal123.com.au. Please describe your concern so we can investigate. We will respond within a reasonable time, usually within 30 days.

If you are not satisfied with our response, you can lodge a complaint with the OAIC by visiting www.oaic.gov.au, calling 1300 363 992, or writing to GPO Box 5218, Sydney NSW 2001.

17. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices or the law. The current version is always available on our website, and the “Last updated” date shows when it was last changed. We encourage you to review it periodically. Significant changes may be notified to you directly.

18. How to contact us

For any privacy question, request or complaint, contact our Privacy Officer:

Legal123 Pty Ltd
Email: admin@legal123.com.au
Phone: (02) 8003 7317