Art of Law Pty Ltd T/as Caruso & Co Legal
Last reviewed September 2025

Caruso & Co Legal is committed to protecting your privacy. We comply with the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs) in the way we collect, use, disclose, and hold personal information.

This Privacy Policy explains how we manage personal information, how you can access and correct your information, and how you can make a complaint if you believe we have not met our obligations.

1. Consent and acceptance

By using our website, entering into a costs retainer/agreement with us, or otherwise providing us with your personal information, you agree to the terms of this Privacy Policy.

You may withdraw your consent at any time by notifying us in writing. If you are a client, withdrawing consent may mean that we are unable to continue providing legal services to you.

We may update this Privacy Policy from time to time. The most current version will be available on our website, and the date of last update will be shown at the top of the policy.

2. What is personal information?

Under the Privacy Act, personal information means:

“information or an opinion about an identified individual, or an individual who is reasonably identifiable: (a) whether the information is true or not; and (b) whether the information or opinion is recorded in a material form or not.”

Personal information we may collect includes names, dates of birth, addresses, contact details, financial information, employment details, and other information relevant to the provision of legal services. Sensitive information (such as health, criminal, or family details) may also be collected where necessary and permitted by law.

3. How we collect personal information

We collect personal information in various ways, including:

• when you contact us in person, over the phone, or online

• through written communications such as emails, letters, or forms

• via our website, online enquiries, and social media platforms (including LinkedIn)

• when you attend our office, seminars, or events

• from third parties such as barristers, experts, courts, regulators, or government agencies.

We will generally collect information directly from you, but may also obtain it from others where relevant to a matter or permitted by law.

4. Accuracy and responsibility

We rely on the personal information you provide to be accurate, complete, and up to date. You are responsible for notifying us of any changes to your personal information as soon as possible.

5. Why we collect personal information

We collect and use personal information to:

• provide legal services and carry out client instructions

• identify and communicate with clients and other parties

• manage and secure client files and trust accounts

• comply with professional, legal, and regulatory obligations

• manage our business operations and improve our services

• inform you of updates in the law, firm news, or events

• send you newsletters or marketing (with an option to unsubscribe).

If we are unable to collect personal information, we may not be able to provide legal services to you.

6. Use and disclosure of personal information

We may use and disclose personal information:

• for the primary purpose for which it was collected

• for a related purpose you would reasonably expect, or where you consent

• to barristers, experts, mediators, or other service providers engaged in your matter

• to courts, tribunals, regulators, or government bodies

• to third-party providers who assist us with IT, cloud storage, or administrative functions (bound by confidentiality obligations)

• to our insurers, professional advisors, or auditors where necessary

• where required or authorised by law, or to prevent a threat to life, health, or safety.

We will not sell your information or disclose it for unrelated third-party marketing.

7. Website and cookies

You may browse our website without identifying yourself. If you submit an enquiry, the information will be handled in accordance with this policy.

Our website may use cookies or similar technologies to improve functionality and collect analytics such as browser type, device, IP address, and pages visited. Cookies do not access your computer or personal data. You can disable cookies in your browser, but some features of our website may not function properly.

Our website may contain links to external sites. We are not responsible for the privacy practices of third-party websites.

8. Security of personal information

We take reasonable steps to protect personal information from misuse, loss, unauthorised access, modification, or disclosure. Measures include:

• secure premises and restricted access to files

• password-protected IT systems, firewalls, and security monitoring

• confidentiality agreements, staff training, and internal policies

• secure disposal of information when no longer required.

Information may be stored electronically or in paper form, including with trusted third-party storage providers based in Australia.

9. Access and correction

You may request access to the personal information we hold about you, or ask us to correct it if inaccurate, out-of-date, or incomplete.

We will respond to access or correction requests within 14 days. If we refuse access or correction, we will provide written reasons and explain how you can complain.

10. Overseas disclosure

In limited circumstances, we may disclose personal information overseas, for example if required for your matter or where we use third-party service providers. Where this occurs, we will take reasonable steps to ensure the overseas recipient handles the information in accordance with the APPs.

11. Marketing communications

We may send newsletters, updates, or invitations to events. You may opt out at any time by clicking “unsubscribe” in our emails or contacting us directly.

We do not disclose personal information to unrelated third parties for their marketing without your consent.

12. Complaints

If you have a concern about how we handle your personal information, please contact our Privacy Officer in writing.

We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you are not satisfied, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.

13. Contact us

Privacy Officer

Nikita Meacham
Art of Law Pty Ltd T/as Caruso & Co Legal
Suite 4, 17 Hackney Road
Hackney SA 5069
Phone: (08) 8363 2460
Email: nmeacham@clegal.com.au