Privacy Policy

Grice Legal Pty Ltd (ABN 91 102 883 107) trading as Grice Legal

Last Updated: September 2026

1. Introduction

Grice Legal Pty Ltd trading as Grice Legal ("Grice Legal", "we", "us" or "our") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, hold, use, disclose and protect personal information in connection with our legal services, website, communications, client management systems and business operations.

We handle personal information in accordance with:

  • the Privacy Act 1988 (Cth);

  • the Australian Privacy Principles (APPs);

  • applicable legal professional obligations;

  • court and tribunal rules;

  • anti-money laundering, counter-terrorism financing and related compliance laws; and

  • other applicable Australian laws.

By using our website, engaging us to provide legal services, communicating with us, or otherwise providing personal information to us, you acknowledge that your information may be handled in accordance with this Privacy Policy.

2. Who We Are

Grice Legal is a Victorian law practice providing legal services in areas including:

  • Family Law;

  • Wills and Estate Planning;

  • Deceased Estates;

  • Property Law; and

  • Conveyancing.

3. What Information We Collect

The personal information we collect depends on the nature of our relationship with you.

We may collect:

Identification Information

  • name;

  • date of birth;

  • residential and postal address;

  • email address;

  • telephone number;

  • occupation and employment details;

  • photographic identification;

  • passport details;

  • driver's licence details;

  • Medicare or other government-issued identification details;

  • citizenship and residency information.

Client and Matter Information

  • information relating to legal matters in which we act;

  • documents and records provided by clients;

  • correspondence;

  • financial information;

  • trust and company information;

  • property ownership information;

  • family relationship information;

  • estate planning information;

  • litigation documents;

  • court orders and judgments.

Sensitive Information

Where reasonably necessary for legal services, we may collect sensitive information, including:

  • health information;

  • criminal history information;

  • biometric information used for identity verification;

  • racial or ethnic origin information;

  • religious beliefs;

  • union memberships;

  • other sensitive information relevant to legal representation.

Website and Technology Information

When you use our website or online services, we may collect:

  • IP address;

  • browser type;

  • device information;

  • website usage information;

  • cookie information;

  • online enquiry details;

  • analytics data.

4. How We Collect Personal Information

We collect information directly from:

  • clients;

  • prospective clients;

  • website users;

  • family members and authorised representatives;

  • witnesses and experts;

  • advisors and agents.

We may also collect information from third parties, including:

  • courts and tribunals;

  • government agencies;

  • land registries;

  • ASIC;

  • financial institutions;

  • accountants;

  • barristers;

  • medical practitioners;

  • identity verification providers;

  • opposing parties and their representatives;

  • publicly available sources.

5. Why We Collect Personal Information

We collect, hold and use personal information for purposes that include:

Legal Services

  • providing legal advice;

  • acting on legal matters;

  • preparing legal documents;

  • conducting litigation;

  • conveyancing transactions;

  • estate administration;

  • client communications.

Practice Management

  • billing and accounting;

  • conflict checking;

  • file management;

  • quality assurance;

  • staff training;

  • risk management;

  • insurance matters.

Regulatory Compliance

  • client identification;

  • anti-money laundering compliance;

  • fraud prevention;

  • sanctions screening;

  • responding to lawful requests;

  • compliance with court orders and regulatory requirements.

Business Operations

  • website administration;

  • cybersecurity;

  • IT support;

  • business continuity;

  • knowledge management;

  • service improvement.

6. Anti-Money Laundering and Identity Verification

To comply with legal, regulatory and professional obligations, we may collect and verify information regarding:

  • your identity;

  • beneficial ownership arrangements;

  • companies and trusts;

  • source of funds;

  • source of wealth;

  • transaction purposes;

  • politically exposed person status;

  • sanctions-related information.

We may use third-party identity verification and compliance providers to assist with these checks.

If you do not provide information reasonably required for identity verification or compliance purposes, we may be unable to act for you or continue acting for you.

Records collected for compliance purposes may be retained for periods required by law or regulatory obligations.

7. Artificial Intelligence and Technology-Assisted Services

To improve efficiency and client service, we may use technology-assisted tools and artificial intelligence systems.

These may include:

  • Microsoft 365 services;

  • Microsoft Copilot;

  • LEAP Legal Software;

  • LEAP AI;

  • document automation tools;

  • secure legal research and productivity platforms.

AI and technology-assisted tools may be used for:

  • document drafting;

  • summarisation;

  • administrative support;

  • legal knowledge management;

  • document review;

  • workflow automation;

  • internal productivity functions.

We do not rely solely on AI-generated outputs when providing legal advice.

All legal advice remains subject to review, professional judgement and supervision by appropriately qualified legal practitioners.

Where personal information is processed through technology platforms, we take reasonable steps to ensure that providers maintain appropriate privacy, confidentiality and security standards.

8. Disclosure of Personal Information

We may disclose personal information to:

Professional Service Providers

  • barristers;

  • expert witnesses;

  • valuers;

  • accountants;

  • consultants;

  • mediators;

  • process servers.

Courts and Government Authorities

  • courts;

  • tribunals;

  • regulatory bodies;

  • law enforcement agencies;

  • government departments.

Technology and Business Service Providers

We utilise a range of technology providers in operating our legal practice, including:

  • Microsoft Corporation and related Microsoft 365 services;

  • LEAP Legal Software and related LEAP services;

  • LawConnect and related document sharing and collaboration services;

  • managed IT providers;

  • cybersecurity providers;

  • cloud hosting providers;

  • backup and disaster recovery providers;

  • payment processing providers;

  • insurers.

Information may be disclosed to these organisations where reasonably necessary to provide legal services or operate our business.

9. Overseas Disclosure

Some service providers used by Grice Legal may store, process or access personal information outside Australia.

This may include cloud computing, software, cybersecurity, backup, artificial intelligence and technical support providers.

Where personal information is disclosed overseas, we will take reasonable steps to ensure that the recipient handles the information in a manner consistent with Australian privacy laws, unless an exception under the Privacy Act applies.

10. Third-Party Platforms

We utilise services and software provided by third parties.

Relevant service providers may include:

  • Microsoft;

  • LEAP;

  • LawConnect;

  • payment service providers;

  • cloud service providers;

  • cybersecurity providers.

Information regarding how these providers handle personal information is available through their respective privacy policies.

Links to third-party websites are provided for convenience only. Grice Legal is not responsible for the privacy practices of external websites or services.

11. Security of Personal Information

We take reasonable steps to protect personal information from:

  • misuse;

  • interference;

  • loss;

  • unauthorised access;

  • modification;

  • disclosure.

Security measures may include:

  • secure office premises;

  • access controls;

  • password protection;

  • multi-factor authentication;

  • encryption technologies;

  • firewalls;

  • endpoint protection;

  • intrusion detection systems;

  • secure cloud environments;

  • staff confidentiality obligations;

  • cybersecurity monitoring.

Despite these measures, no method of electronic transmission or storage can be guaranteed to be completely secure.

12. Data Retention

We retain personal information only for as long as reasonably necessary for:

  • providing legal services;

  • complying with legal obligations;

  • maintaining client records;

  • regulatory compliance;

  • risk management;

  • dispute resolution.

Retention periods may vary depending on the nature of the matter and applicable legal requirements.

When personal information is no longer required, we will take reasonable steps to destroy or de-identify it unless we are required to retain it by law.

13. Cookies and Analytics

Our website may use cookies and similar technologies.

These technologies help us:

  • understand website usage;

  • improve website performance;

  • enhance user experience;

  • support security functions.

Third-party analytics providers may collect information regarding how visitors use our website.

You may adjust your browser settings to refuse cookies, although some website functionality may be affected.

14. Access to Personal Information

You may request access to personal information we hold about you.

Access may be refused where permitted by law, including where:

  • legal professional privilege applies;

  • access would unreasonably impact another person's privacy;

  • access would prejudice legal proceedings;

  • another lawful exemption applies.

Requests should be made in writing using the contact details below.

We may charge a reasonable administrative fee for substantial access requests where permitted by law.

15. Correction of Information

We take reasonable steps to ensure personal information is accurate, current and complete.

If you believe information we hold is inaccurate, incomplete, irrelevant or out of date, please contact us and we will take reasonable steps to correct it.

16. Notifiable Data Breaches

Where a data breach occurs involving personal information, we will investigate the incident and respond appropriately.

Where required by applicable law, including the Notifiable Data Breaches scheme under the Privacy Act, we will notify affected individuals and the Office of the Australian Information Commissioner.

17. Complaints

If you believe we have breached privacy laws or mishandled your personal information, please contact us using the details below.

We will investigate your complaint and provide a response within a reasonable period.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at:

www.oaic.gov.au

18. Privacy Officer

Privacy Officer
Grice Legal

Level 1
283 Whitehorse Road
Balwyn VIC 3103

Email: info@gricelegal.com.au
Telephone: +61 3 9831 5700

19. Changes to This Policy

We may amend this Privacy Policy from time to time.

The current version will always be available on our website.

Your continued use of our services after any amendment constitutes acceptance of the updated policy.