Effective date: 25 May 2026 

Excel Legal respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, store and protect personal information in connection with our legal services, website, client communications and related business activities.

​

This policy has been prepared with reference to the Australian Privacy Principles under the Privacy Act 1988 (Cth), which require organisations covered by the Act to manage personal information in an open and transparent way.

​

1. Personal information we collect

We may collect personal information that is reasonably necessary for us to provide legal services, respond to enquiries, manage client matters and operate our firm.

​

The types of personal information we may collect include:

​

• your name, address, phone number and email address;

• date of birth and identity verification information;

• property details, title details and transaction information;

• contract, mortgage, loan, settlement and conveyancing documents;

• information about vendors, purchasers, borrowers, lenders, agents, brokers, family members, executors, attorneys, beneficiaries or other parties connected to a matter;

• financial information relevant to a property transaction, including settlement figures, loan information, deposit information, payment details and adjustment figures;

• government identifiers where required for verification, lodgement or legal compliance;

• instructions, correspondence and documents you provide to us;

• information collected through our website, online forms, booking tools, emails, phone calls or secure client portal; and

• any other information required to carry out your matter or comply with our legal and professional obligations.

 

We may also collect sensitive information where it is necessary for your matter, such as information contained in identity documents, death certificates, probate documents, medical or capacity-related documents, family arrangements or estate-related materials.

​

2. How we collect personal information

We may collect personal information directly from you when you:

​

• contact us by phone, email, website form or booking link;

• instruct us to act for you;

• complete an intake form;

• upload documents through a secure platform or client portal;

• provide identity documents for verification of identity;

• sign documents electronically or physically;

• provide information during a property, mortgage, title or lodgement matter; or

• communicate with us during the course of a legal matter.

 

We may also collect personal information from third parties where relevant to your matter, including:

​

• real estate agents;

• mortgage brokers;

• banks, lenders and financial institutions;

• other lawyers and conveyancers;

• government agencies and land title registries;

• Revenue NSW, councils, water authorities and strata managers;

• PEXA or other electronic lodgement and settlement platforms;

• verification of identity providers;

• family members, attorneys, executors or authorised representatives; and

• other parties involved in a transaction or legal matter.

 

3. Why we collect, use and disclose personal information

We collect, use and disclose personal information for purposes connected with providing legal services and operating our firm, including to:

​

• respond to enquiries;

• provide legal advice and representation;

• open, manage and complete client matters;

• verify your identity;

• review contracts, title documents, mortgages and other legal documents;

• prepare, lodge and complete property, mortgage and title-related documents;

• communicate with other parties involved in a matter;

• arrange settlement, including electronic settlement where applicable;

• liaise with banks, lenders, brokers, agents, government agencies and other representatives;

• issue invoices, receive payments and manage accounts;

• comply with legal, regulatory, professional and risk management obligations;

• manage conflicts of interest, file records and professional duties;

• maintain cybersecurity, fraud prevention and file security procedures;

• improve our website, systems and client service processes; and

• send important matter-related communications.

 

We will only use or disclose personal information for the purpose for which it was collected, for a related purpose you would reasonably expect, where you have consented, or where permitted or required by law.

​

4. Disclosure of personal information

Depending on the nature of your matter, we may disclose personal information to:

• other lawyers, conveyancers or representatives involved in your matter;

• real estate agents;

• banks, lenders and mortgage brokers;

• government agencies, regulators and land title authorities;

• Revenue NSW, local councils, water authorities and strata managers;

• PEXA, electronic lodgement platforms and settlement service providers;

• identity verification providers;

• barristers, consultants, experts or cost assessors;

• IT, cloud storage, cybersecurity, document management, accounting and practice management providers;

• insurers and professional advisers;

• courts, tribunals, regulators or law enforcement agencies where required; and

• any person authorised by you or required by law.

 

Where we use third-party service providers, we take reasonable steps to ensure that personal information is handled appropriately and securely.

​

5. Verification of identity and property transactions

For property, mortgage and title-related matters, we may be required to collect identity documents and related information to complete verification of identity checks, electronic settlement processes and land title lodgements.

​

This may include passports, driver licences, Medicare cards, birth certificates, change of name certificates, citizenship documents, death certificates, probate documents, powers of attorney, company documents or trust documents, depending on the matter.

​

We collect and use this information only where necessary for your matter, legal compliance, lodgement requirements, risk management or professional obligations.

​

6. Bank details and payment security

Property transactions can involve significant financial transfers. To help reduce the risk of cyber fraud:

We will never notify you of a change to our bank account or payment details by email alone.

​

Before transferring any funds, you should confirm payment details by calling our office using a trusted phone number. You should not rely solely on email instructions for payment details, particularly where bank account information is involved.

​

We may also ask you to verify bank account details, settlement directions or payment instructions through secure channels.

​

7. Website, cookies and analytics

When you visit our website, we may collect limited technical information such as your IP address, browser type, device information, pages visited, referral source and general website usage information.

​

Our website may use cookies or similar technologies to improve functionality, understand website traffic and enhance user experience. You can adjust your browser settings to refuse cookies, although some website features may not function properly.

​

If our website uses third-party tools such as analytics, booking forms, embedded videos or contact forms, those providers may collect information in accordance with their own privacy practices.

​

8. Overseas disclosure

Some of our technology providers, cloud platforms, email providers, software providers or support services may store or process information outside Australia.

​

Where personal information is disclosed overseas, we take reasonable steps to ensure appropriate privacy and security protections apply.

​

9. How we protect personal information

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure.

​

Our safeguards may include:

​

• secure document handling procedures;

• password-protected systems;

• controlled access to client files;

• secure client portals or document upload tools;

• identity verification procedures;

• email and cyber risk management practices;

• staff confidentiality obligations;

• secure storage of electronic and physical records;

• file management and retention procedures; and

• review of security practices where appropriate.

 

NSW legal practitioners also have professional confidentiality obligations in relation to client information.

​

10. Data breaches

If we become aware of a data breach involving personal information, we will assess the incident and take appropriate steps to contain, investigate and respond to it.

​

Where required by law, we may notify affected individuals and relevant authorities.

​

11. Accessing or correcting your personal information

You may contact us to request access to personal information we hold about you or to ask us to correct information that is inaccurate, incomplete or out of date.

​

We may need to verify your identity before responding to a request. In some circumstances, we may be unable to provide access to certain information, including where legal professional privilege, confidentiality, court obligations, regulatory obligations or another legal restriction applies.

​

12. Retention of client files and documents

We retain client files, documents and records for as long as required for legal, professional, regulatory, insurance, accounting and business purposes.

​

When information is no longer required, we will take reasonable steps to securely destroy, delete or de-identify it, subject to our professional obligations and any applicable legal requirements.

​

13. Third-party websites

Our website may contain links to third-party websites or resources. We are responsible for the privacy practices, content or security of our own website only. You should review the privacy policy of any third-party website you visit.

​

14. Complaints

If you have a privacy concern or complaint, please contact us first so we can review and respond to your concerns.

​

Contact details:
Excel Legal
Email: m.sidhu@excellegal.com.au 
Phone: (02) 9686 6961

We will aim to respond within a reasonable time.

​

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

​

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version will be published on our website with the effective date shown at the top of the page.