Law Central Privacy Policy

1. Who we are

Law Central Co Pty Ltd ACN 091 824 225 (Law Central, we, us or our) operates https://lawcentral.com.au and provides online legal document generation services and related products and services.

This Privacy Policy explains how we collect, hold, use and disclose personal information. It applies to users of our website and services, customers, prospective customers, account holders, persons named in or connected with documents, and other people whose personal information we collect in the course of our business.

2. Customers, Third Party Clients and Document Parties

Our customer is generally the person or entity that accesses our Website, creates an account, orders a document, provides instructions to us, pays for a document, product or service, or otherwise deals with us.

In many cases, our customer may be an accountant, lawyer, adviser, business, trustee, company officer, agent or other person who is ordering or preparing a document for, on behalf of, or for the benefit of another person.

We may therefore collect, hold, use and disclose personal information about persons who are not our customer, including clients of our customers, parties named in documents, beneficial owners, controllers, directors, shareholders, trustees, appointors, beneficiaries, attorneys, agents, authorised representatives and other persons connected with a document, transaction, structure or matter.

In this policy, these persons are referred to as Third Party Clients or Document Parties.

If you provide us with personal information about another person, you warrant that you are authorised to do so and that, where required, you have made that person aware that their personal information may be provided to us and used, disclosed, stored and processed in accordance with this Privacy Policy, including for document generation, customer support, AML/CTF compliance, identity verification, sanctions screening, fraud prevention, legal and regulatory compliance, reporting and record keeping purposes.

Providing personal information about a Third Party Client or Document Party, or our collection, use, disclosure or verification of that information, does not by itself make that person our customer or create a direct contractual, advisory, legal or professional relationship between that person and Law Central.

We do not use personal information about Third Party Clients or Document Parties for direct marketing purposes, unless that person has separately dealt with us directly and we are permitted by law to use their personal information for that purpose. For example, if an accountant, lawyer or adviser provides us with personal information about their client for the purpose of preparing a document or conducting AML/CTF checks, we will not use that client's personal information to send marketing communications to that client.

3. Personal information we collect

The personal information we collect depends on your interaction with us. It may include:

• name, former names, aliases, date of birth, place of birth, gender, occupation and contact details;
• username, password, account profile information and communication preferences;
• business, firm, company, trust, partnership or other entity details, including ABN, ACN, registration details and addresses;
• details of directors, trustees, appointors, beneficiaries, shareholders, members, partners, officers, controllers, beneficial owners, authorised representatives and persons acting on behalf of a customer;
• identity verification information and documents, such as driver licence, passport, Medicare card, proof of address, trust deed, constitution, company extract, register, source of funds or source of wealth information;
• information entered into document questionnaires, uploaded documents, completed documents and related instructions;
• payment, transaction and order history, but not credit card details processed through our payment gateway unless expressly stated;
• records of communications with us, including email, phone, online forms, support requests and feedback;
• technical information such as IP address, browser type, device information, pages visited, access times, referrer URLs, cookies and server logs; and
• information reasonably necessary for AML/CTF, sanctions, fraud prevention, identity verification, risk assessment, reporting and record keeping purposes.

4. Sensitive information and government identifiers

We generally do not seek to collect sensitive information unless it is reasonably necessary for our functions or activities, you have consented, or collection is required or authorised by law. AML/CTF, identity verification or document generation processes may require collection of sensitive information or identity document details in some cases.

We may collect, use or disclose government related identifiers only where permitted by law, including for identity verification, AML/CTF, fraud prevention, regulatory, tax, company, trust or document related purposes.

5. How we collect personal information

We may collect personal information:

• directly from you when you create an account, order a document, complete a questionnaire, make a payment, contact us, subscribe to updates or otherwise use our services;
• from advisers, accountants, lawyers, agents, employers, representatives or other persons who use our services on your behalf or provide your information to us;
• from identity verification, sanctions, politically exposed person, fraud prevention, credit, company, business, trust, government, registry, data matching and other compliance service providers;
• from Law Central Legal, service providers, regulators, government agencies, courts, tribunals or law enforcement bodies where permitted;
• from publicly available sources; and
• automatically through cookies, analytics tools, server logs and similar technologies when you use the Website.

6. Why we collect, use and disclose personal information

We collect, use and disclose personal information for purposes including to:

• provide, administer, improve and support the Website, accounts, document generation engine and related services;
• generate, maintain, update, review and deliver documents and related materials;
• verify identity, authority, entity details, beneficial ownership and other information required for AML/CTF, sanctions, fraud prevention, risk assessment and compliance purposes;
• identify and verify customers and, where a document, transaction, structure or matter involves, or may involve, a designated service under the AML/CTF Laws, or where otherwise required or considered necessary, parties named in or associated with a legal document, transaction, structure or matter;
• conduct initial and ongoing customer due diligence, enhanced due diligence, politically exposed person checks, sanctions screening, adverse media checks, risk assessment and transaction monitoring where required or considered necessary;
• detect, prevent, investigate and respond to fraud, unlawful activity, misuse of the Website, security incidents and suspicious activity;
• make reports, notifications or disclosures to AUSTRAC, ASIC, the ATO, law enforcement agencies, courts, tribunals, regulators or other authorities where required or permitted by law;
• comply with legal, regulatory, tax, accounting, record keeping, audit, insurance and dispute resolution obligations;
• process payments, issue invoices and manage accounts;
• communicate with you about orders, accounts, services, legal updates, operational notices and support requests;
• send marketing communications to customers and other persons where permitted by law, and manage opt-outs;
• conduct analytics, product development, system testing and service improvement; and
• protect our rights, property, users, staff, contractors and the public.

7. AML/CTF reporting and restrictions on disclosure

We may be required or permitted to report suspicious matters or other information to AUSTRAC or other authorities. We may also be restricted by law from telling you or another person that a report has been, may be or is being considered, or that particular AML/CTF action has been, may be or is being taken.

8. AML/CTF checks and reliance arrangements

We do not conduct AML/CTF checks on every person or entity named in every document generated through Law Central.

We may collect, use, disclose, store and verify personal information about Third Party Clients, Document Parties and other persons connected with a document, transaction, structure or matter where the document, transaction, structure or matter involves, or may involve, a designated service under the AML/CTF Laws, or where we otherwise consider the collection, use, disclosure, storage or verification reasonably necessary for AML/CTF, sanctions, fraud prevention, risk assessment, reporting, record keeping or legal compliance purposes.

Where permitted by law, we may rely on KYC, KYB, identity verification or other customer due diligence information collected or verified by another reporting entity or under a reliance arrangement. Where this occurs, we may collect and hold information, documents, verification results and records provided to us under that arrangement.

We do not use personal information about Third Party Clients or Document Parties for direct marketing purposes merely because their information has been provided to us for a document, transaction, AML/CTF check, identity verification, sanctions screening, fraud prevention, reporting or record keeping purpose.

9. AML/CTF verification service providers

For AML/CTF, sanctions, fraud prevention, identity verification, risk assessment, reporting and record keeping purposes, we may use third party verification and compliance service providers. Our current AML/CTF verification service provider is Personr. We may change or add providers from time to time.

Information provided to, generated by, or obtained from those providers may be stored on their systems and servers. Our current AML/CTF verification provider Personr stores Law Central AML verification information on servers located in Australia.

This information may include identity document details and copies, biometric or liveness check results where used, proof of address documents, company and trust information, trust deeds, constitutions, registers, extracts, source of funds or source of wealth information, sanctions and politically exposed person screening results, verification outcomes, risk assessment records and other materials reasonably required for the AML/CTF verification process.

By using our services or providing information to us for a document or transaction, you acknowledge that this information may be disclosed to and processed by those third party providers for these purposes. If you provide information about another person, you warrant that you are authorised to provide that information and, where required, have made that person aware that their information may be used and disclosed for AML/CTF verification and compliance purposes.

Where AML/CTF checks are conducted in relation to a Third Party Client, Document Party or other person connected with a document, those checks are undertaken for Law Central's compliance, risk management, reporting and record keeping purposes. The fact that we conduct a check in relation to that person, or rely on information provided under a reliance arrangement, does not, of itself, make that person our customer or create a direct contractual, advisory, legal or professional relationship between that person and Law Central.

10. Disclosure to third parties

We may disclose personal information to:

• Law Central Legal, which assists with legal precedents, Law Central products and associated materials;
• identity verification, sanctions, politically exposed person, fraud prevention, risk screening, credit, data matching and AML/CTF compliance service providers, including Personr as our current AML/CTF verification provider;
• payment processors, banks, accounting providers, auditors, insurers and professional advisers;
• technology, hosting, cloud, analytics, email, marketing, customer support, security, backup and document generation service providers;
• government agencies, regulators, courts, tribunals, law enforcement bodies and dispute resolution bodies where required or permitted by law;
• third party service providers or referral partners where you request or consent to that disclosure, or where disclosure is necessary to provide a product or service requested by you;
• a purchaser, potential purchaser, assignee or transferee in connection with a sale, merger, restructure or transfer of all or part of our business; and
• other persons where required or authorised by law or where you have consented.

11. Overseas disclosure

Some of our technology, cloud, hosting, analytics, support or other service providers may be located outside Australia or may store or process information outside Australia. The countries in which overseas recipients are located may change over time.

This section does not apply to our current AML/CTF verification provider Personr to the extent that Personr stores Law Central AML verification information on servers located in Australia.

Where we disclose personal information overseas, we will take reasonable steps to comply with the Australian Privacy Principles, unless an exception applies.

12. Cookies, analytics and advertising technologies

We use cookies, tracking pixels, tags and similar technologies on our Website to operate the Website, remember user preferences, understand how users interact with the Website, measure the effectiveness of our advertising, improve our products and services, and track enquiries, orders and sales.

We currently use Google Analytics and Google Ads, including conversion tracking and related advertising tools. These tools may collect or receive information from our Website and elsewhere on the internet and use that information to provide measurement services, analytics, advertising reporting, ad personalisation, conversion tracking and remarketing services.

The information collected by these technologies may include your IP address, device information, browser type, pages visited, time spent on pages, referral source, search terms, interactions with advertisements, order or conversion events, and other usage information. Depending on the circumstances, this information may be personal information.

Google and other third party providers may use cookies, identifiers, pixels and similar technologies to collect or receive information from our Website and other websites and apps. Their use of that information is governed by their own terms and privacy policies.

You can control cookies through your browser settings. You can also manage some Google advertising settings and opt-out options through Google's advertising and privacy tools. If you disable or block cookies, some parts of our Website may not function properly.

13. Direct marketing

We may use your personal information to send you information about Law Central products, services, updates, webinars, events, offers and other information that may be relevant to you or your business.

We may send marketing communications by email, SMS, post, telephone or other electronic means, where permitted by law.

You may unsubscribe from receiving marketing communications from us at any time by using the unsubscribe link included in our marketing communications, or by visiting https://lawcentral.com.au/unsubscribe.asp.

Our marketing emails include an unsubscribe link and identify the specific email address to which the communication was sent, to assist you to manage your subscription preferences.

You may also contact us at support@lawcentral.com.au to ask us to remove you from our marketing list.

We do not use personal information about Third Party Clients or Document Parties for direct marketing purposes merely because their information has been provided to us for a document, transaction, AML/CTF check, identity verification, sanctions screening, fraud prevention, reporting or record keeping purpose.

Even if you unsubscribe from marketing communications, we may still send you non-marketing communications, including communications about your account, orders, documents, transactions, legal or regulatory notices, AML/CTF compliance, service updates, security matters, or changes to our terms, policies or services.

We may use website analytics, advertising cookies, tracking pixels and similar technologies to measure the effectiveness of our marketing and advertising, understand how users interact with our Website, and deliver or improve advertising. We do not use personal information about Third Party Clients or Document Parties for direct marketing merely because their information has been provided to us for a document, transaction, AML/CTF check, identity verification, sanctions screening, fraud prevention, reporting or record keeping purpose.

14. Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. Measures may include access controls, encryption, secure hosting, monitoring, backups, staff training, policies and technical safeguards appropriate to the information held.

No method of internet transmission or electronic storage is completely secure. You are responsible for keeping your username, password and account credentials secure.

15. Data breaches

We maintain procedures for responding to actual or suspected data breaches involving personal information.

If a data breach occurs, we will take reasonable steps to contain, assess and respond to the breach. Where required by the Privacy Act, including the Notifiable Data Breaches scheme, we will notify affected individuals and the Office of the Australian Information Commissioner.

We do not publish the operational details of our data breach response procedures for security reasons.

16. Retention and destruction

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to provide services, comply with legal and regulatory obligations, resolve disputes, enforce agreements, maintain business records and satisfy audit, insurance, tax and accounting requirements.

Where information forms part of AML/CTF, identity verification, risk assessment, transaction, suspicious matter, document generation or compliance records, we may retain it for the period required or permitted by law and our AML/CTF program. If we no longer need personal information and are not required or permitted to retain it, we will take reasonable steps to destroy or de-identify it.

17. Access and correction

You may request access to personal information we hold about you, or ask us to correct it, by contacting support@lawcentral.com.au. We will respond within a reasonable time.

We may refuse access or correction where permitted by law, including where giving access would be unlawful, would prejudice enforcement or regulatory activities, would unreasonably affect another person's privacy, would reveal commercially sensitive information, or where the request is frivolous or vexatious.

18. Complaints

If you have a concern or complaint about how we handle personal information, please contact support@lawcentral.com.au. We will consider your complaint and seek to respond within a reasonable time.

You may also complain to the Office of the Australian Information Commissioner (OAIC). Information about privacy complaints is available from the OAIC.

19. External websites

Our Website, emails, publications and documents may contain links to external websites. We are not responsible for the privacy, security, content or practices of external websites. You should review the privacy policy and terms of any external website you visit.

20. Changes to this Privacy Policy

We may amend this Privacy Policy from time to time by posting an updated version on our Website. The updated policy applies from the time it is posted or otherwise notified to you.

21. Contact

Privacy questions, access requests, correction requests and complaints may be sent to support@lawcentral.com.au.

Last updated 30 June 2026