Omnia Lawyers Pty Ltd t/as Envision Legal ABN 29 667 197 382
hello@envisionlegal.com.au | www.envisionlegal.com.au
Version: March 2026
This Privacy Policy explains how Omnia Lawyers Pty Ltd trading as Envision Legal (we, us, our) collects, holds, uses, discloses, and protects personal information. It applies to all interactions with us — through our website at www.envisionlegal.com.au, via email at hello@envisionlegal.com.au, and in the course of providing legal services.
This policy complies with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as amended by the Privacy and Other Legislation Amendment Act 2024 (Cth). A separate engagement-specific privacy notice is provided when you retain us for legal services.
1. Who We Are
Entity: Omnia Lawyers Pty Ltd t/as Envision Legal
ABN: 29 667 197 382
Address: c/o Omnia Lawyers, 81-83 Campbell Street, Surry Hills NSW 2010
Email: hello@envisionlegal.com.au
Website: www.envisionlegal.com.au
Privacy questions and complaints should be directed to us using the contact details above.
2. Personal Information We Collect
Website and marketing interactions
When you visit our website, submit an enquiry, or interact with our marketing (including third-party websites), we may collect your name, email address, phone number, the nature of your enquiry, and technical data collected automatically (IP address, browser type, pages visited) via cookies and analytics tools.
Legal services (clients and prospective clients)
In providing or assessing legal services, we collect: full name, date of birth, and address (required by Rule 93 of the Legal Profession Uniform General Rules 2015 (NSW)); identity verification documents; entity details (ABN, ACN, trust structures); information about third parties relevant to your matter; and information from third-party sources such as ASIC, PEXA, the NSW Land Registry, and court records.
Sensitive information
We only collect sensitive information (including health information, financial information, and information about legal proceedings) where reasonably necessary for your matter and you have consented, or where required by law. Sensitive information is handled with a higher standard of care.
How we collect information
We collect information directly from you, from third parties involved in your matter (e.g. courts, government registries, opposing parties), automatically through your use of our website (via cookies), and from publicly available sources. If we receive personal information we did not request and do not need, we will destroy or de-identify it promptly.
3. Why We Collect and Use Personal Information
We use personal information to:
- Provide legal services — advise you, prepare documents, conduct transactions, and represent your interests
- Verify your identity — as required by Rule 93 of the Uniform General Rules and, from 1 July 2026, our AML/CTF compliance obligations where applicable
- Check conflicts of interest — before and during an engagement
- Billing and administration — to issue invoices, manage payments, and administer your file
- Respond to enquiries — and provide information about our services
- Marketing (with consent) — send newsletters and legal updates where you have consented or where permitted under the Spam Act 2003 (Cth) and APP 7.
- Improve our services — analyse website usage and improve our digital presence
We will not use your personal information for a secondary purpose unless you have consented, you would reasonably expect it, or it is required by law.
4. Disclosure of Personal Information
Parties involved in your legal matter
We may disclose relevant information to courts, tribunals, and regulators; opposing parties and their lawyers; barristers and experts retained on your behalf; government agencies and registries (ASIC, PEXA, Land Registry, ATO, Office of State Revenue); financiers, banks, insurers, and settlement agents; and other professionals (accountants, valuers) engaged as part of your matter. We disclose only what is necessary.
Service providers
We engage third-party providers to operate our practice, including:
- practice management software (Clio);
- Microsoft 365, including SharePoint (document storage and management), OneDrive (file storage), Teams (internal and client communication), and Outlook (email);
- website hosting and analytics providers; and
- payment processors.
All providers are contractually required to handle personal information in accordance with the APPs.
Legal and regulatory obligations
We may disclose personal information where required by law, including to comply with court orders, subpoenas, our AML/CTF obligations, mandatory reporting requirements, or to protect the safety or rights of any person.
Overseas disclosure
Some service providers may store or process data on servers located outside Australia, including in the United States and European Union (particularly Clio, whose servers are located in the United States, and Microsoft 365, whose data may be stored in the United States or European Union). Where we disclose personal information to overseas recipients, we take reasonable steps to ensure those recipients handle it consistently with the APPs, including through contractual protections such as Microsoft’s Data Processing Agreement and Clio’s Data Processing Addendum. Under APP 8.1, we remain accountable for that information.
5. Cookies and Website Analytics
Our website uses cookies and analytics tools (including Google Analytics) that may collect your IP address, browser type, device information, pages visited, and interaction data. This data is used in aggregated form to improve the website.
You can manage cookies through your browser settings — you may refuse all cookies, accept all, or be notified before a cookie is set. Blocking cookies may affect some website functionality. We do not use cookies for behavioural advertising.
6. How We Protect Personal Information
We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access (APP 11). Our measures include encryption in transit and at rest, access controls and multi-factor authentication, secure cloud-based platforms, and regular security reviews and staff training.
Data breach response
We maintain a data breach response plan under the Notifiable Data Breaches (NDB) scheme. If we identify an eligible data breach likely to cause serious harm, we will notify the OAIC and affected individuals as soon as practicable. If you believe your information has been compromised, please contact us immediately at hello@envisionlegal.com.au.
7. How Long We Keep Personal Information
- Client matter files: minimum 7 years after matter close, as required by the Legal Profession Uniform General Rules 2015 (NSW). Some matter types require longer retention.
- Website and marketing data: no longer than 3 years after your last interaction with us.
- Unconverted enquiries: up to 2 years, then destroyed or de-identified.
When information is no longer required, we take reasonable steps to destroy or permanently de-identify it (APP 11.2).
8. Your Rights
Access (APP 12): You may request access to the personal information we hold about you. We will respond within 30 days. We do not charge for access requests, though a reasonable fee may apply to the cost of providing access. We will give written reasons if access is refused.
Correction (APP 13): You may request correction of inaccurate, incomplete, or out-of-date information. We will take reasonable steps to correct it and notify relevant third parties if applicable.
Opt-out of marketing: Unsubscribe via the link in any marketing email, or contact us at hello@envisionlegal.com.au. This does not affect service-related communications.
Anonymity (APP 2): You may interact with us anonymously for general enquiries where practicable. We cannot provide legal services without identity verification.
Withdrawal of consent: Where we rely on consent, you may withdraw it at any time by writing to us. We will advise you of any consequences.
9. Marketing Communications
APP 7 of the Privacy Act governs our use of personal information for direct marketing. We will only send you direct marketing communications where permitted under APP 7, as follows:
With consent (APP 7.2): where you have expressly consented to receive marketing from us (for example, by subscribing to our mailing list or ticking a consent box), we may use your personal information to send newsletters, legal updates, and information about our services.
Existing clients (APP 7.3): where we have collected your contact details in the course of providing legal services to you, we may send you direct marketing about similar services, provided we give you a clear and simple means to opt out at the time of each communication, and you have not already opted out.
Opt-out: you may opt out of direct marketing at any time by clicking the unsubscribe link in any marketing communication or by contacting us at hello@envisionlegal.com.au. Under APP 7.3(d), we must give effect to an opt-out request within a reasonable period, and we will process opt-outs within 5 business days. Opting out does not affect service-related communications necessary for the conduct of your matter.
All marketing emails also comply with the Spam Act 2003 (Cth), including the requirement to include a functional unsubscribe mechanism in every commercial electronic message. We do not sell, rent, or trade your personal information to third parties for marketing purposes, and we do not engage in targeted behavioural advertising.
10. AI Tools and Automated Decision-Making
10.1 Use of AI Tools
We use artificial intelligence (AI) tools to assist with certain aspects of our legal practice. This may include document drafting assistance, legal research, contract review, and administrative tasks. We disclose this use in the interests of transparency and in anticipation of our obligations under APP 1.7 (effective 10 December 2026).
What AI tools we use: We may use AI-assisted tools for drafting, summarising, and reviewing documents and for administrative efficiency. These tools may include large language model (LLM) based platforms. We will update this policy if our use of AI tools changes materially.
How we protect your information when using AI: We do not input confidential client information or personal information into publicly accessible AI platforms. Where AI tools are used in connection with client work, we use platforms with appropriate data processing agreements and confidentiality protections. AI-generated output is always reviewed by a qualified lawyer before being relied upon or provided to you.
Human oversight: AI tools assist our lawyers; they do not replace professional legal judgment. All legal advice and decisions are made by, and remain the responsibility of, a qualified Australian legal practitioner.
10.2 Automated Decision-Making
We do not use automated decision-making processes (computer programs) that use your personal information to make decisions that could significantly affect your rights or interests without human review. All decisions that materially affect you are made by, or subject to review by, a qualified legal practitioner.
From 10 December 2026, APP 1.7 (introduced by the Privacy and Other Legislation Amendment Act 2024) will require disclosure in this policy where a computer program uses personal information to make decisions significantly affecting individuals. We will update this policy prior to that date to reflect our practices at that time.
11. Complaints
Complaints to us: Contact us at hello@envisionlegal.com.au or by mail to Envision Legal, c/o Omnia Lawyers, 81-83 Campbell Street, Surry Hills NSW 2010 (mark ‘Privacy Complaint’). We will acknowledge within 5 business days and respond substantively within 30 days.
Escalation to the OAIC: If you are unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au/privacy/privacy-complaints, by phone on 1300 363 992, or by post to GPO Box 5218, Sydney NSW 2001.
Privacy tort: From June 2025, individuals have a right to bring a civil claim for serious invasion of privacy under the Privacy and Other Legislation Amendment Act 2024. We are committed to handling your information in a manner that respects your privacy.
12. Children’s Privacy
Our website and marketing are not directed at individuals under 18. We do not knowingly collect personal information from children without parental consent. We will update our practices when the Children’s Online Privacy Code (expected December 2026) is finalised.
13. Third-Party Website Links
Our website may link to third-party sites. This Privacy Policy does not apply to those sites. We encourage you to review their privacy policies before providing personal information.
14. Updates to This Policy
We review this policy at least annually or when there is a material change to our practices or applicable law. The current version is available at www.envisionlegal.com.au/privacypolicy. We will notify you of material changes by posting the updated policy on our website and, where relevant, by direct notification.
15. Contact Us
Entity:Omnia Lawyers Pty Ltd t/as Envision Legal
Email: hello@envisionlegal.com.au
Websitewww.envisionlegal.com.au/privacypolicy
Address: c/o Omnia Lawyers, 81-83 Campbell Street, Surry Hills NSW 2010