Privacy Policy

Queensland Legal Pty Ltd (ABN 38 619 112 917) trading as RMA Australia (“we”, “us”, “our”, “the firm”) is committed to protecting the privacy of the personal information we handle. This policy explains how we collect, use, disclose, store and secure personal information, and how you can access, correct or complain about our handling of it.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). As a reporting entity under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) (AML/CTF Act), the Privacy Act applies to our handling of personal information in connection with our AML/CTF obligations, regardless of our size. We also owe you separate duties of confidentiality under the Australian Solicitors’ Conduct Rules and the Legal Profession Act 2007 (Qld).

1. What is personal information

“Personal information” is information or an opinion about an identified individual, or an individual who is reasonably identifiable. “Sensitive information” is a subset that includes health information and information about a person’s racial or ethnic origin, political opinions, religious beliefs, sexual orientation and criminal record, and generally attracts a higher level of protection.

2. The personal information we collect

Depending on your dealings with us, we may collect:

Identity and contact details — name, date of birth, address, email, phone, occupation;
Verification information collected for AML/CTF customer due diligence — identification documents, evidence of source of funds/wealth, and beneficial ownership details;
Financial information — bank and payment details, and trust account information;
Matter-related information — including information about other parties, and where relevant to your matter, sensitive information such as health, family, financial or criminal-record information;
Records of our dealings with you — correspondence, file notes and billing records.

3. How we collect personal information

Directly from you — through instructions, forms, correspondence, meetings and our website;
From third parties — such as other parties to a matter, government agencies, courts, other lawyers, experts, and identity-verification services; and
From publicly available sources — such as land, company and court registers.

Where we collect sensitive information, we do so only with your consent or as otherwise permitted by law. Where it is lawful and practicable, you may deal with us anonymously or using a pseudonym; however, this is usually not possible where we must verify your identity under the AML/CTF Act.

4. Why we collect, hold, use and disclose personal information

We handle personal information to:

provide legal services and conduct your matter;
meet our obligations under the AML/CTF Act, including customer identification and verification, ongoing due diligence, transaction monitoring and reporting to AUSTRAC;
carry out conflict checks, trust accounting, billing and debt recovery;
comply with our legal, professional and regulatory obligations; and
manage our relationship with you and administer our practice.

We use and disclose personal information only for the purpose for which it was collected, a directly related purpose you would reasonably expect, or as otherwise required or authorised by law. We are prohibited by the AML/CTF Act from disclosing certain matters, such as the existence of a suspicious matter report.

5. To whom we disclose personal information

We may disclose personal information, as reasonably necessary for the purposes above, to:

barristers, experts, agents and other advisers engaged on your matter;
courts, tribunals, and other parties and their representatives;
government agencies and regulators, including AUSTRAC, the ATO and titles/registry offices, and electronic conveyancing platforms;
our IT, cloud, practice-management and document-storage providers; and
our auditors, insurers and professional advisers.

We take reasonable steps to ensure third parties who handle personal information on our behalf are bound by appropriate confidentiality and privacy obligations.

6. Direct marketing

We may send you information about our services. You can opt out at any time by contacting us using the details below, and we will honour your request. We do not use sensitive information for direct marketing without your consent.

7. Overseas disclosure

Some of our service providers (for example, cloud storage or software providers) may store or process personal information outside Australia, including in the United States. Before disclosing personal information overseas we take reasonable steps to ensure it is handled consistently with the APPs.

8. Security of personal information

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These include access controls, multi-factor authentication, secure storage of physical and electronic files, staff training, and vetting of service providers. We destroy or de-identify personal information when it is no longer needed and we are not required to retain it (see our retention practices below).

9. Retention and destruction

We retain personal information only for as long as it is needed for the purposes described in this policy or as required by law (including record-keeping obligations under the AML/CTF Act and the Legal Profession Act 2007 (Qld)), after which we destroy or de-identify it securely.

10. Accessing and correcting your personal information

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. To make a request, contact our Privacy Officer using the details below. We will respond within a reasonable period. In some cases we may decline access as permitted by law (for example, where it would breach another person’s privacy, legal professional privilege applies, or a legal duty prevents disclosure); if so, we will tell you why and how to complain.

11. Complaints

If you have a concern about how we have handled your personal information, please contact our Privacy Officer. We will acknowledge your complaint and aim to resolve it within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or 1300 363 992.

12. Contact us

Privacy Officer: Michael Turner (Lawyer/Director)
Email: contact@qldlegal.com.au
Phone: 07 5391 0050
Post: PO Box 509, Mooloolaba, Queensland 4557

13. Changes to this policy

We may update this policy from time to time. The current version is available at https://qldlegal.com.au/privacy-policy-2/ and on request.

Last updated: 1 July 2026