Privacy Policy

Res Legal Group Pty Ltd Trading As R&G Law Group (ABN 15 669 702 649) Last updated: 10 June 2026

R&G Law Group ("we", "us", "the firm") is bound by the Privacy Act 1988 (Cth) ("the Act") and the Australian Privacy Principles ("APPs"). We are an APP entity as defined in s 6(1) of the Act. As a law practice, we are also bound by duties of confidentiality and legal professional privilege under the Legal Profession Act 2007 (Qld) and the Australian Solicitors' Conduct Rules, which in many respects provide protection beyond that required by the Act.

This Privacy Policy explains how we collect, hold, use and disclose personal information. Where you engage us to act for you, this Privacy Policy forms part of the basis on which we handle your information and should be read together with our costs agreement and disclosure documents.

1. What personal information we collect

We collect and hold personal information relating to our clients and to other people and entities associated with our clients' matters, as provided or disclosed to us in the course of providing legal services. Depending on the matter, this may include: names, dates of birth, contact details, occupations and employment records, financial information (including bank account, asset, liability, superannuation, taxation and investment details), relationship and family details, medical and health information, immigration status, and information about other parties to a matter.

Because family law, property and estate planning matters frequently require it, some of the information we collect is sensitive information within the meaning of the Act (for example, health information). We collect sensitive information only where it is reasonably necessary to provide our services and with your consent, or where otherwise permitted by law.

Identity verification (AML/CTF). As a provider of certain designated services, we are a reporting entity under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth). From 1 July 2026 we are required to collect and verify identity information — including government-issued identity documents — before providing certain services, to keep records of that verification, and in some circumstances to disclose information to the Australian Transaction Reports and Analysis Centre (AUSTRAC). We cannot provide those services if you do not provide the required identification information.

Website visitors. When you use our website, we collect information including details submitted through our contact and booking forms, IP addresses, browser type, operating system, and dates and times of access. We use analytics tools (such as Google Analytics) to understand how the website is used. This information is used to improve our website and services and is not used to identify visitors personally.

2. How we collect personal information

We collect personal information:

1. directly from you, including in person, by telephone, by email, through our website forms, and through messaging platforms you choose to use to communicate with us (such as WeChat);

2. from third parties you authorise to provide it to us (for example, your accountant, financial adviser, doctor or migration agent);

3. from other parties and their representatives in the course of a matter, including through court processes, disclosure obligations, subpoenas and searches we conduct on your behalf; and

4. from publicly available sources such as title, company and bankruptcy registers.

If we receive personal information we did not solicit, we will deal with it in accordance with APP 4.

Anonymity. You may make general enquiries with us anonymously or using a pseudonym. However, we cannot provide legal services, open a file, or comply with our identity verification obligations unless you identify yourself.

3. How we hold and secure personal information

Personal information may be held in hard copy or electronically. We take the security of personal information seriously. Hard copy records are held securely at our office, including in locked storage with alarm systems. Electronic records are held on our practice management system and computer network, protected by measures including access controls, password protection, multi-factor authentication, anti-virus and firewall software.

We never ask for bank account details or other sensitive information to be changed by email alone, and we will always verify payment instructions by an independent channel. If you receive an email claiming to be from us that changes our bank details, contact our office by telephone before transferring funds.

We retain client files and records for at least seven years after a matter concludes, or longer where the law or the nature of the matter requires (for example, wills and estate planning documents). When personal information is no longer required, we take reasonable steps to destroy or de-identify it in accordance with APP 11.

4. Why we collect, hold, use and disclose personal information

We collect, hold, use and disclose personal information for the following purposes:

1. to provide legal services to our clients, including conducting matters, giving advice, drafting documents, conducting searches, and corresponding with other parties;

2. in the course of providing those services, to disclose information to third parties involved in a matter — including courts and tribunals, barristers, expert witnesses, family consultants and family report writers, mediators, valuers, accountants, interpreters and translators, process servers, other parties' legal representatives, and government departments and registries;

3. to comply with our legal and regulatory obligations, including under the Legal Profession Act 2007 (Qld), trust accounting requirements, taxation laws, and the AML/CTF Act (including reporting to AUSTRAC where required);

4. to operate our practice, including billing, trust accounting, file management, conflict checking, insurance, and quality and supervision processes;

5. to obtain, maintain and comply with the terms of our professional indemnity and other insurance policies;

6. to market our services to you by email or other electronic means, where permitted (see section 6); and

7. to comply with other applicable laws.

Except where required or authorised by law (including under the AML/CTF Act), we will not disclose your personal information for purposes outside the conduct of your matter and the operation of our practice without your knowledge and consent.

5. Technology providers and artificial intelligence

We use reputable third-party technology providers to operate our practice, including cloud-based practice management software, document storage, email and website hosting providers. These providers may store data on servers located in Australia or overseas.

We also use commercial artificial intelligence tools to assist with tasks such as document drafting, summarisation and legal research. Where AI tools are used:

1. all work product remains reviewed and supervised by a qualified lawyer, and responsibility for advice and documents rests with the firm;

2. we use paid commercial services under terms that prohibit the provider from training its models on our data; and

3. we apply judgment about what information is appropriate to process through such tools, consistent with our duties of confidentiality and privilege.

We do not use automated decision-making — that is, computer programs that make decisions significantly affecting your rights or interests without human involvement. All decisions about your matter are made by our lawyers.

6. Direct marketing

We may send you information about our services, legal updates and firm news by email where you are an existing client or have otherwise consented. You may opt out at any time by using the unsubscribe facility in the communication or by contacting our office, and we will action your request promptly.

7. Disclosure of personal information overseas

In some matters it is necessary to disclose personal information to overseas recipients — for example, where a matter involves assets, parties, witnesses or proceedings in another country. Given the nature of our client base, the most likely destination is China. Disclosure may also occur to countries such as the United States, the United Kingdom or member states of the European Union, including where our technology providers store data in those jurisdictions.

You should be aware that overseas recipients may not be subject to privacy laws equivalent to the APPs, and that the Act may not protect information once it is disclosed overseas. Where we propose to disclose your personal information to an overseas recipient in circumstances where APP 8.1 would otherwise apply, we will inform you and seek your express consent — including through our costs agreement at the commencement of your matter. If you communicate with us through an overseas-based messaging platform of your choosing (such as WeChat), you acknowledge that those communications are transmitted and stored by that platform outside Australia, and outside our control.

8. Access to and correction of personal information

You may request access to the personal information we hold about you, and request correction of it, at any time by contacting our office in person or in writing. We will respond within a reasonable period. We may decline access in the circumstances permitted by APP 12 — including where the information is subject to legal professional privilege belonging to another client, or where giving access would have an unreasonable impact on the privacy of others — and if we do, we will tell you why.

For current and former clients, requests for your client file are dealt with under our costs agreement and the Legal Profession Act 2007 (Qld), in addition to the Act.

9. Data breaches

We are subject to the Notifiable Data Breaches scheme under the Act. If we suspect that an eligible data breach has occurred, we will conduct a reasonable and expeditious assessment within 30 days. If we have reasonable grounds to believe an eligible data breach has occurred, we will prepare a statement setting out our details, a description of the breach, the kinds of information concerned, and the steps we recommend individuals take in response. Where practicable we will notify each affected individual directly by their preferred communication method; otherwise we will publish the statement on our website. The statement will be provided to the Office of the Australian Information Commissioner.

Notification is not required where remedial action is taken such that a reasonable person would conclude the breach is not likely to result in serious harm to any affected individual.

10. Third-party websites

Our website may contain links to third-party websites. We do not control those websites and are not responsible for their privacy practices. Third-party websites are not governed by this Privacy Policy, even if you reached them through a link on our website.

11. Complaints

If you believe we have breached this Privacy Policy, the Act or the APPs, you may make a complaint in writing to our office using the contact details below, marked to the attention of the Principal. We will acknowledge your complaint promptly and aim to respond within 30 days.

If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC):

• Website:www.oaic.gov.au

• Phone: 1300 363 992

• Post: GPO Box 5288, Sydney NSW 2001

Complaints about our conduct as a law practice may also be made to the Legal Services Commission (Queensland).

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the law or our practices. The current version will always be available on our website, and material changes will be notified by a notice on our website or by direct communication. The version published on our website at the relevant time applies to our handling of your personal information.

13. Contact us

R&G Law Group

West Village the Greenhouse

Level 4, 97 Boundary Street

West End QLD 4101

Phone: 07 3543 2545

Email:info@rglawgroup.com.au