Privacy Policy

Entity	NS LEGAL PTY LTD (trading as NS Legal)
Effective date	21 July 2026
Contact	info@nslegal.com.au | Level 7/263 Clarence St, Sydney NSW 2000

This English version is a convenience translation of the firm’s Chinese-language document and is provided for general reference only. In the event of any inconsistency or dispute, the Chinese version prevails.

1. Purpose and scope

This Privacy Policy explains how NS LEGAL PTY LTD (ABN 35 652 857 595, trading as NS Legal, “the Firm”, “we” or “us”) collects, holds, uses and discloses personal information. This Policy applies to the Firm’s website, booking forms, live chat, email subscriptions, enquiries, recruitment, events, and legal or migration-related services.

To the extent that they apply to the Firm, the Firm intends to comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles, professional obligations and other applicable laws. Where the EU or UK General Data Protection Regulation (GDPR) applies to particular processing activities, the additional provisions in clause 15 also apply; that clause does not extend the extraterritorial scope of those regulations themselves.

2. Responsible entity

NS LEGAL PTY LTD is responsible for the personal information covered by this Policy and, where applicable, acts as data controller. Privacy enquiries may be sent to info@nslegal.com.au, or by post to Level 7/263 Clarence St, Sydney NSW 2000.

3. Information we collect

Depending on how you interact with the Firm, we may collect:

• identity and contact details, including name, date of birth, address, email, telephone number, preferred language and identity-document information;
• booking, enquiry and communication records, including live-chat logs, emails, call notes and marketing preferences;
• matter information, including family, employment, education, financial, property, corporate, dispute, criminal, health, migration, visa and travel information;
• information about opposing parties, witnesses, family members, employees, directors, beneficiaries and other persons connected with an enquiry or matter;
• if you later become a client, related payment, billing and trust-account information (this Website does not currently process online payments);
• recruitment and professional information; and
• technical and usage information, such as IP address, device and browser information, referring pages, approximate location, cookie identifiers, pages viewed, and interactions with the website or messages.

Some material may be sensitive information under Australian law or special category data under the GDPR. The Firm collects it only where permitted by law, including where it is reasonably necessary for the Firm’s functions and, where required, with consent, or where another lawful basis exists.

4. How we collect

The Firm collects information directly through forms, live chat, bookings, telephone, email, documents, subscriptions and your use of the website. The Firm may also obtain information from authorised representatives, clients and opposing parties, courts and tribunals, government agencies, public sources, referrers, professional advisers, verification providers and other service providers.

If you provide the Firm with another person’s personal information, you must be authorised to do so or have another lawful basis, and where practicable make that person aware of this Policy. If the Firm receives unsolicited personal information, it will assess whether it could lawfully have collected it and, where required and permitted by law, will delete or de-identify it.

5. Consequences of not providing information

Where practicable, you may browse parts of the website anonymously or using a pseudonym. However, if you do not provide the necessary information, the Firm may be unable to respond, carry out conflict checks, verify identity, arrange bookings, provide services, meet legal obligations or consider a job application. Where a true identity is required for legal, regulatory, conflict-check or identity-verification purposes, please do not use a pseudonym.

6. Purposes of processing and legal bases

The Firm may process personal information for the following purposes:

• responding to enquiries, operating bookings and live chat, carrying out conflict-of-interest and identity checks, deciding whether to accept instructions, and providing legal or migration-related services;
• communicating with clients and others, and managing files, billing, trust monies, complaints, risk, insurance and professional obligations;
• operating, protecting, troubleshooting and improving the website and services, measuring audiences and understanding usage;
• sending newsletters, legal updates, event invitations or other marketing where permitted by law, and managing preferences;
• recruiting and managing personnel and suppliers;
• establishing, exercising or defending legal rights, preventing fraud and protecting the Firm, users and systems; and
• complying with court orders, professional obligations, tax, record-keeping, anti-money-laundering and other legal or regulatory obligations.

Where the GDPR applies, the Firm relies, as relevant, on: the performance of a contract, or taking pre-contractual steps at your request; compliance with a legal obligation; legitimate interests such as responding to enquiries, operating and protecting the Firm, conflict checks, fraud prevention and service improvement; consent (including for non-essential cookies or certain marketing); and the establishment, exercise or defence of legal rights or another permitted condition for processing special category data. You may withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

7. Website analytics, cookies and similar technologies

The Firm uses website analytics services provided by Google, and may in future use other analytics, advertising, conversion-measurement, embedded-content, customer-service or marketing technologies. These technologies may access cookies or similar identifiers and collect technical, usage and interaction information. Providers may combine this information with data they hold, in accordance with their policies.

The Firm uses this information to operate and protect the website, understand audiences and improve content, and, where enabled and permitted by law, to measure or personalise marketing. Where applicable law requires consent, non-essential technologies must be enabled only after you have consented. You may use the Firm’s cookie controls (if any), your browser settings and providers’ opt-out tools. Blocking these technologies may affect website functionality.

Before introducing materially different marketing technologies, the Firm will assess the privacy impact and, where reasonably necessary, update its notices or consent options. This Policy does not itself constitute consent where the law requires valid consent.

8. Direct marketing

Where you have consented or the law otherwise permits, the Firm may send updates or invitations. Marketing communications will identify the Firm and provide a valid means of opting out. You may opt out at any time by clicking the unsubscribe link in a message or by contacting info@nslegal.com.au. The Firm will action requests within the period required by law; however, it may still send non-marketing service or legal communications.

9. Disclosure of information

Where reasonably necessary, the Firm may disclose personal information to:

• the Firm’s directors, lawyers, registered migration agents, employees, contractors and related professionals;
• barristers, experts, translators, investigation or search agents, consultants, other law firms, opposing parties and their advisers, courts, tribunals, regulators and government agencies;
• technology, hosting, cloud-storage, email, customer-service, booking, analytics, document-management, e-discovery, identity-verification, cyber-security, payment, accounting, audit, insurance and archival-storage providers;
• potential purchasers, successors or advisers in a restructure or sale, subject to appropriate confidentiality obligations; and
• other persons with your consent, or as required or authorised by law or professional obligation.

Where applicable, disclosure is subject to legal professional privilege and to confidentiality and professional-conduct obligations. The Firm does not sell personal information.

10. Overseas disclosure

Some providers or recipients may be located outside Australia or may process data from outside Australia. Possible locations include the United States and other countries in which the Firm’s cloud, analytics, communications or professional-service providers operate (as notified at the time of collection or as stated in the provider’s materials). Where a matter requires it, information may also be disclosed to overseas clients, advisers, experts, authorities or opposing parties.

Where Australian Privacy Principle 8 — cross-border disclosure of personal information — applies, the Firm will take the reasonable steps required by law before disclosing to an overseas recipient, unless an exception applies. Where the GDPR’s cross-border transfer rules apply, the Firm will use a recognised mechanism where required, such as an adequacy decision or standard contractual clauses, and will apply supplementary safeguards where appropriate. Overseas laws and safeguards may differ from those in Australia.

11. Security and data breaches

The Firm applies administrative, technical and physical safeguards appropriate to the nature of the material, which may include access controls, authentication, personnel obligations, security providers, backups and incident-response procedures. No network or storage system can be absolutely secure; please do not send sensitive material or original documents through unapproved channels.

The Firm will assess suspected data breaches and, where required by the Notifiable Data Breaches scheme or other applicable law, will notify affected individuals and the relevant regulator. Please report suspected security incidents immediately to info@nslegal.com.au.

12. Retention

The Firm retains personal information only for as long as reasonably necessary for the purposes described in this Policy, including conflict management, legal services, professional and statutory record-keeping, insurance, dispute management, security and legal rights. Specific periods depend on the type of record, whether you become a client, the nature of the matter and applicable legal or professional requirements. When information is no longer needed, the Firm takes reasonable steps to destroy or de-identify it, except for archival or backup retention permitted by law.

13. Access and correction

You may contact info@nslegal.com.au to request access to the personal information the Firm holds about you, or to request correction. The Firm may need to verify your identity and will respond within a reasonable period and within any period required by applicable law. Where the law permits, the Firm may refuse or limit access — for example, where access would unreasonably affect others, disclose privileged material, prejudice legal proceedings or conflict with a legal obligation. If access is refused, the Firm will usually explain the reasons and how to complain, except where prohibited by law.

14. Privacy complaints

Please submit a written complaint to the privacy contact at info@nslegal.com.au, setting out the issue and the outcome you seek. The Firm will acknowledge, investigate and aim to respond within a reasonable period. If you are not satisfied, you may contact the Office of the Australian Information Commissioner (OAIC, oaic.gov.au). Depending on the nature of the service and the issue, you may also be able to raise the matter with a professional regulator or a migration-services complaints body. This process does not limit any of your legal rights.

15. Additional rights where the GDPR applies

Where the EU GDPR or UK GDPR applies to the Firm’s processing, you may have the right to access, correct and erase personal data, to restrict or object to processing, to obtain certain data in a portable format, to withdraw consent, and to complain to a competent supervisory authority. These rights are subject to conditions and exceptions, including legal professional privilege, legal rights and statutory or professional retention obligations.

You may object at any time to the use of data for direct marketing. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. The Firm does not currently make decisions producing legal or similarly significant effects about you solely through automated processing. To exercise rights, contact info@nslegal.com.au; the Firm may verify your identity and request the information needed to locate the relevant data.

16. Minors

This Website is not directed at minors. If you are under 18, a parent, guardian or other authorised adult should contact the Firm where appropriate. The Firm may process a minor’s information where a legal matter requires it and the law permits, applying appropriate safeguards. If you believe a minor has submitted information without appropriate authorisation, please contact the Firm.

17. Third-party websites

Links and embedded third-party features are governed by the privacy practices of the third parties, which the Firm does not control. Please read the relevant notices before providing information or enabling their content.

18. Changes and contact

The Firm may publish revised versions and update the effective date in response to legal, technical or business changes. Where there are material changes, the Firm will give separate notice where reasonable and appropriate. For questions, requests or complaints, please contact: Privacy Contact, NS LEGAL PTY LTD, Level 7/263 Clarence St, Sydney NSW 2000; info@nslegal.com.au.