Privacy policy

Current as at 20 October 2025

Stumm Law Pty Ltd ABN 48 690 083 553 (‘we’, ‘us’, or ‘our’) is an incorporated legal practice that is based in and operates from Brisbane, Queensland. We collect, hold, use and disclose personal information in carrying on our business. We respect your privacy and we are committed to safeguarding and managing your personal information responsibly. As part of our commitment to doing so, we have chosen to subject ourselves to the Privacy Act 1988 (Cth) (‘Privacy Act’).

This policy contains information about how we manage personal information. We will update this policy if there is any change in how we manage personal information. The current version of our privacy policy can be accessed free of charge at https://www.stummlaw.com.au/privacy or by contacting us at privacy@stummlaw.com.au. You can request a hard copy of our privacy policy to be sent to you free of charge. If you would like a copy of this privacy policy in a particular form (such as audio), then please contact us and we will accommodate any reasonable request.

What is personal information?

‘Personal information’ is defined in the Privacy Act as meaning information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true, and whether or not the information or opinion is recorded in a material form.

Why we collect, hold, use and disclose personal information

The reason we collect, hold, use and disclose your personal information will depend on the nature of our relationship and may include to:

• conduct conflict checks and verify your identity;
• contact you;
• provide legal services and carry out our functions and activities as a provider of legal services;
• seek to engage you, either as a client or as a service provider, and to manage contractual or other arrangements between us on an ongoing basis; or
• comply with and fulfil our legal, regulatory, reporting, risk management, auditing or professional obligations, needs or requirements.

The nature of our business and the services we provide mean that, generally, you will have to identify yourself when dealing with us. We will not be able to provide legal services to you unless you identify yourself. However, there may be some circumstances where you may be able to deal with us anonymously or by using a pseudonym. While you do not have to identify yourself or provide us your personal information, if you do not do so our interactions will be limited, and we will generally not be able to provide any services to you.

Collection of personal information

We collect various kinds of personal information in carrying on our business. We primarily collect personal information via email, telephone, videoconference or other forms of electronic communication, face-to-face meetings or public registers. We only collect personal information that is reasonably necessary for, or directly related to, one or more of our functions or activities. The kinds of personal information we collect about you will depend on the nature of your relationship with us.

If you are a client that receives legal services from us, or if you wish to receive legal services from us, then the personal information we may collect may include identification information (such as your full name, address, and date of birth), financial information (such as banking details), your location, the location from which you carry on business, records of our communications with you, your personal or professional contact information, your employment information, details about your professional qualifications, licences or memberships, and other information of a similar nature. We may collect this information from you, your employer, other members of your organisation, your authorised representatives, referrers, from sources you would expect us to collect your personal information (such as publicly available sources), or a counter party to a transaction in respect of which we act (or their representatives).

We also collect information about people who are our contractors, suppliers, business partners and service providers, or who are employed by or representatives or contractors of such people. We collect information that is necessary to establish, maintain, evaluate and conduct a business relationship with such people. The personal information we collect may include the kinds of information described above, and the information may be collected by similar means.

We may also collect personal information as part of our undertaking of promotional and marketing activities, such as in connection with seminars or events we deliver or host.

Holding of personal information

We hold all personal information we collect and all information we collect will be held securely and in accordance with the Privacy Act. We hold personal information for the same purposes for which we collect it.

We may hold personal information in hard copy or electronically, including by using Australian-based cloud services. We have adopted and will maintain administrative, technical and physical safeguards designed to protect the personal information held by us from unauthorised access, accidental loss and unauthorised modification. All service providers we use are required to hold personal information in accordance with the Privacy Act and to comply with appropriate information security standards.

We cannot provide any assurance regarding the security of information transmitted to us electronically as the internet is inherently insecure. Information you transmit to us electronically is at your own risk. In the event of any loss, or unauthorised access or disclosure of your personal information that is likely to result in serious harm to you, we will investigate and notify you and the Australian Information Commissioner as soon as practicable in accordance with the Privacy Act.

We will only retain your personal information for as long as is reasonably necessary or prudent in the circumstances. We will take reasonable steps to return, securely destroy or de-identify personal information when it is no longer to be retained by us.

We do not hold or store personal information outside of Australia.

Disclosure of personal information

The people to whom we may disclose or share your personal information may include:

• our clients and their representatives;
• counterparties to a transaction of which our client is or intends to be a party and their representatives;
• our professional advisers, auditors and insurers;
• our current or prospective service providers, including cloud service and data storage providers and providers or mailing house, marketing, research, data analysis, banking, payment, client contact, data processing, insurance, forensic, litigation support, data room, marketing and security services;
• people with whom we have co-promotional arrangements (such joint event sponsors) or third parties assisting us with events;
• professional bodies, such as the Queensland Law Society;
• regulatory authorities, courts, tribunals, government agencies, law enforcement agencies and other third parties; or
• people you have authorised to receive your personal information or who we are otherwise permitted to provide your personal information.

We do not disclose personal information to people outside of Australia.

Direct marketing

We may use your personal information to send you direct marketing communications, regulatory or industry alerts, and other information that we believe you may be interested in. These communications may be sent in various forms, including by posted mail or email. If we use your personal information for the purpose of direct marketing, we will provide you with a simple means by which you may ‘opt out’ or request not to receive direct marketing from us.

Accessing and correcting your personal information

We will endeavour to ensure the personal information we hold about you is accurate, up to date, complete, relevant and not misleading. You have a right to request access to or a correction of the personal information held by us. If you feel your personal information needs to be corrected, such as by being inaccurate, incomplete or outdated, or if you wish to access or correct any personal information we may hold about you, then please contact us using the details set out below.

Complaints or concerns

If you have a complaint or any concerns about our handling of your personal information, then you may make a complaint to us using the contact details set out below. We will take any privacy complaint seriously and our Privacy Officer will investigate all complaints received. We aim to respond to complaints in a timely and efficient manner and our target response time is within 30 days. We request that you cooperate with us during this process and provide us with relevant information we may require.

If you are not satisfied with our response then we request you contact us so that we may discuss your concerns and seek to address them. You can also lodge a complaint with the Office of the Australian Information Commissioner and information on how to do so is available on their website, https://www.oaic.gov.au/privacy/privacy-complaints/.

Contact us

If you have any questions relating to our management of personal information, then please contact our Privacy Officer by the following means:

© Stumm Law Pty Ltd ABN 48 690 083 553. Liability limited by a scheme approved under professional standards legislation.