Rest assured that Mint Legal utilises a world class data centre – same as the big banks - and is protected by security and encryption protocols to guard against interception. Your information is protected by Amazon Web Services (AWS) which even NASA and Dow Jones use and is stored locally in Sydney NSW.
Importantly, at Mint Legal your data is protected by the requirements of the most security-sensitive organisations of the world.
As at 2 August 2021
- We respect your privacy
www.mint.law (‘Website’ and ‘Platform’) is owned, operated and provided by Mint Legal Pty Ltd (ACN 629 537 613) trading as Mint Legal. The Platform contains products and services provided to users and guests by Mint Legal. For the purposes of this policy, Mint Legal is referred to as ‘the Company’, ‘we’, ‘us’ and ‘our’.
The Company respects your right to privacy and is committed to safeguarding the privacy of our customers, those who seek and engage in the provision or receipt of our services and those who visit our Platform, including all associated websites, microsites, databases, services, software and back end systems.
‘Personal information’ is information we hold which is identifiable as being about you.
We recognise and value the trust that individuals place in us when providing us with Personal information and we are committed to safeguarding the privacy and security of Personal information we collect from visitors to our Platform and/or the clients to whom we provide legal and other services.
The Company adheres to the Australian Privacy Principles contained in the Privacy Act 1988 (Cth) (‘the Act’). This policy sets out how we collect, use, disclose and treat your Personal information in connection with your use and our operation of our Platform, our services or otherwise when you interact with us.
Please read this policy before submitting any Personal information (whether via one of our websites, by email, in person or over the phone).
By using our Platform or our services, you will be asked to provide Personal information and, by doing so, you are accepting and consenting to the practices described in this policy. Further notices highlighting certain uses we wish to make of your Personal information, together with the ability to opt in or out of selected uses may also be provided to you when we collect Personal information from you.
If you do not agree to this policy, do not follow any prompts to accept this policy and do not access or use our Platform.
If we are not able to collect your Personal information, we may not be able to provide you with access to our Platform or our services or do business with you or the organisation with which you are connected.
If you link to or use other websites, services or software, please review the privacy policies posted at those websites. This policy does not apply to, and we are not responsible for, any third-party websites which may be accessible through links from this Website. If you follow a link to any of these third-party websites, they will have their own privacy policies and you will need to check these policies before you submit any Personal information to such third-party websites.
- Collection of personal information
The Company will, from time to time, receive and store Personal information you enter onto our Platform, provide to us directly, or given to us in other forms. We try only to collect Personal information about you that we need for the operation of the Company and our services, and to market and promote the Company and our services. The kinds of Personal information that we collect and hold about you may depend on the circumstances in which the information is collected. For example, we collect your email and, if you provide it, other contact details when you subscribe to our email lists.
You may provide basic information such as your name, job title, phone number, address and email address to enable us to send information, provide updates and process your request for our services and certain other information that you may wish to complete using the functionality available on our Platform.
We may collect additional information at other times, including but not limited to, when you register on the Platform, when you access and interact on the Platform, when you provide feedback, when you provide information about your personal or business affairs, when you change your content or email preference, when you respond to surveys and/or promotions, when you provide financial or credit card information, or when you communicate with our customer support.
Additionally, we may also collect any other information you provide while interacting with us. You are not obliged to give us your Personal information. However, if you choose not to provide us with your Personal information we may not be able to provide you with our services or fulfil one or more other purposes for which your Personal information is requested.
If your Personal information is collected by us from a third party, the Company is under no obligation to inform you of the collection, but such information will be subject to this policy and will be accessible by you on request, subject to any limitations or exceptions in the Act.
- How we collect your personal information
The Company collects Personal information from you in a variety of ways, including when you interact with us electronically or in person, when you access our Platform, and when we provide our services to you. We may also receive Personal information from third parties. If we do, we will protect it as set out in this policy.
The information we collect may include information such as users’ names (or the names of personnel or customers, as appropriate), mailing addresses, email addresses, telephone and/or facsimile numbers, dates of birth, postal addresses, credit card details, and other transaction or registration details. We may also collect data that can, under certain circumstances, indirectly lead to personally identifiable information. Users who register an account to use the Platform may choose to provide other information or related data in their profiles. We may also collect data from third party sources, for example, where we collect information about you to assist with “know your client” checks as part of our client acceptance procedures.
You are aware of and consent to our use of such Personal information to provide our services including through the Platform and to receive payments, as well as to develop and maintain a record of dealing between us and you, your preferences and uses of the Platform, and to manage our relationship.
The Company will generally collect this information by way of voluntary registration over the internet, by phone, facsimile and email, as well as feedback we may receive from our suppliers and contractors. Otherwise, the Company will not collect or monitor any Personal information about you without your consent.
When you visit the Platform, we may record, for statistical purposes or in order to improve the Platform or our service delivery, the following information:
- the date, length and time of your visit;
- web pages you have accessed;
- documents you have downloaded;
- your IP address;
- the features you use;
- the links you click on;
- the type, size and filenames of attachments you upload to the services on our Platform;
- the teams, Neutrals and people you work with; and
- the type of operating system and internet browser you use.
Where it is lawful and practicable to do so, we will provide you with the option of remaining anonymous where that is appropriate, such as survey requests or service delivery or quality control information we may request.
We may monitor and record calls and other electronic communications that you make to us in certain circumstances. For example, calls to us may be monitored and recorded for training and customer service purposes.
We use social networking services such as Twitter, Facebook and LinkedIn to communicate with the public about the Company and our services. When you communicate with us using these services we may collect your Personal information. The social networking service will also handle your Personal information for its own purposes. These sites have their own privacy policies.
If you provide Personal information to any third party via our Platform, that information will be collected and managed by those third parties as well as by us. Such third parties may have their own privacy policies that sets out how they collect and use Personal information and you should ensure that you familiarise yourself with any such privacy policies before deciding whether you wish to provide them with your Personal information.
We also receive information about you from our third-party service providers such as advertising and analytics service providers.
The term “sensitive information” refers to personal information about an individual’s racial or ethnic origin, political or philosophical beliefs or affiliations, trade or professional affiliations, sexual preferences or practices or criminal record and health information. We do not collect sensitive information unless it is volunteered by you.
- Use of your personal information
We will only use your Personal information where we are permitted to do so by applicable law.
We may use Personal information collected from you to provide you with information, updates, support and our services. We may also make you aware of new and additional products, services and opportunities available to you. We may use your Personal information to improve our products and services and better understand your needs, as well as to resolve disputes and troubleshoot problems and to enforce the policies of our Platform and exercise our legal rights.
We may contact you by a variety of measures including, but not limited to telephone, email, SMS or mail.
How we use information we’ve collected depends in part on how you use our Platform and any preferences you have communicated to us. Below are the principal legal grounds and purposes for which we use the information we collect about you:
4.1 To provide access to our Platform and our services and personalise your experience
We use information about you to provide our Platform and our services to you, including to process transactions with you, authenticate you when you log in, provide customer support, and operate and maintain our Platform.
Our Website also includes features that personalise your experience and improve your ability to collaborate effectively with other users. For example, we may use your stated job title to return search results we think are relevant to your job function. We also use information about you to connect you with other users seeking subject matter expertise. We may use your email domain to infer your affiliation with a particular organisation or industry to personalise the content and experience you receive on our Platform.
4.2 To answer your enquiries and deliver customer support
We use your Personal information to resolve technical issues you encounter, to respond to your requests for assistance, to manage and resolve complaints and to repair and improve our Platform and any of our services.
4.3 To communicate to you about our Platform and our services
We use your contact information to send communications via email and within our Platform.
4.4 To market, promote and drive engagement with us and our services that we think might be of interest to you
We will also use your contact information and information about how you use our Platform including the locale indicated by your Internet Protocol (IP) address to send promotional communications that may be of specific interest to you, including by email, mail, telephone or SMS and by displaying our ads on other companies’ websites and applications, as well as on platforms like Facebook, LinkedIn, Twitter and Google. These communications are aimed at driving engagement and maximising what you get out of using our Platform and our services, including information about new features, survey requests and newsletters. We also communicate with you about new service offers, promotions and contests. You can control whether you receive these communications by opting out as described directly below.
You may opt-out of receiving marketing information from us by using the unsubscribe link within each email, updating your email preferences, or by contacting us to have your contact information removed from our email subscription list or registration database.
4.5 To maintain and improve our Platform and our services
We are always looking for ways to make our Platform smarter, integrated and useful to you. We use collective learnings about how people use our Platform and our services and feedback provided directly to us to conduct market research and analysis, to troubleshoot and identify trends, usage, activity patterns and areas for improvement in our services and our Platform. For this purpose, we also may use your Personal information to carry out internal functions including training, market research and analysis.
We collect and analyse information on an anonymous or non-attributable basis to allow us to gain insights into the behaviour and business practices of companies, law firms and users which may be valuable to companies and the legal industry. Much of this information will help us to provide useful information and advice to companies, law firms and others of behaviours in relation to the procurement and provision of our services.
4.6 To meet our legal and regulatory obligations and protect our legitimate business interests and legal rights
Where required by law or where we believe it is necessary to protect our legal rights, interests and the interests of others, we may use information about you in connection with legal claims, compliance, regulatory, and audit functions, and disclosures in connection with the acquisition, merger or sale of a business.
We also use your information to consider application to manage our relationships with companies, law firms and other users of our Platform.
4.7 To promote safety and security
We use information about you and your use of our Platform and any other of our services to verify accounts and activity, to monitor suspicious or fraudulent activity and to identify violations of this policy.
4.8 To undertake activities for which we have obtained your consent
We use information about you where you have given us consent to do so for a purpose not listed above. For example, we may publish testimonials or featured law firm or client stories to promote our Platform, with your permission.
- For EU users – Legal bases for processing
If you are an individual residing in the EU, we collect and process information about you only where we have legal basis for doing so under applicable EU laws. The legal basis depend on how you use our Platform and the services you use. We collect and use your information only where:
- we need it to provide our Platform and our services, including to operate our Platform, provide customer support and personalised features and protect the safety and security of our Platform;
- it satisfies a legitimate interest (which is not overridden by your data protection interests), such as for research and development purposes, to maintain and improve our Platform and our services, to promote and market our Platform, for research and development purposes and to protect our legal rights and interests;
- you give us consent to do so for a specific purpose e.g. where you subscribe to our e-newsletter or request or download our publications;
- we need to process your data to comply with a legal obligation such as performing client due diligence/”know your client”, anti-money laundering, anti-bribery, sanctions or reputational risk screening, identifying conflicts of interests, for the prevention of fraud and/or other relevant background checks as may be required by applicable law and regulation and best practice at any given time (and if false or inaccurate information is provided and fraud is identified or suspected, details may be passed to fraud prevention agencies and may be recorded by us or by them), to enforce our legal rights, to comply with our legal or regulatory reporting obligations and/or to protect the rights of third parties;
- to ensure that we can recover any payments due to us and where necessary to enforce such recovery through the engagement of debt collection agencies or taking other legal action (including the commencement and carrying out of legal and court proceedings); or
- to reorganise or make changes to our business. In the event that we undergo a re-organisation (e.g. if we merge, combine, list or divest a part of our business), we may need to transfer some or all of your Personal information to the relevant third party (or its advisors) as part of any due diligence process or transfer to that re-organised entity or third party for the same purposes as set out in this policy or for the purpose of analysing any proposed transaction.
If you have consented to our use of information about you for a specific purpose, you have the right to change your mind at any time, but this will not affect any processing that has already taken place. Where we are using your information because we or a third party have a legitimate interest to do so, you have the right to object to that use though, in some cases, this may mean no longer using our Platform.
- Disclosure of your personal information
Subject always to legal professional privilege and our obligations to you for solicitor-client confidentiality, we may disclose your Personal information in to any of our employees, officers, insurers, professional advisers, agents, insofar as reasonably necessary for the purposes set out in this policy.
We may also share your Personal information other third-party external advisors or experts engaged in the course of the services we provide to our clients and with their prior consent, such as barristers, legal counsel and technology service providers such as LEAP, Infotrack, eDiscovery, DocuSign and document review platforms.
Personal information is only supplied to a third party when it is required for the delivery of our services, including but not limited to the population of the required fields of any pages on the Platform or in the course of provision of services through the Platform or any other services we provide (such as updates or other information) or are provided to or by any trusted third party who assists us in conducting our business, or servicing you, and who agrees to keep your Personal information confidential, as well as any other person or entity (the ‘Recipient’) upon the basis that the Recipient may only collect, use or disclose the information for the purpose for which that information was originally collected by us.
We may from time to time need to disclose Personal information to comply with a legal requirement, such as a law, regulation, court order, subpoena, warrant, in the course of a legal proceeding or in response to a law enforcement agency request.
We may also use your Personal information to protect the copyright, trademarks, legal rights, property or safety of the Company, our customers or third parties.
Information that we collect may from time to time be stored, processed in or transferred between parties located in countries outside of Australia. We will only transfer Personal information to a foreign country for the purpose of providing you with our services and for carrying out any request you make when you use and interact with the Platform (e.g., if we outsource the platform or data storage to a cloud service provider).
If there is a change of control in our business or a sale or transfer of business assets, we reserve the right to transfer to the extent permissible at law our user databases, together with any Personal information and non-personal information contained in those databases. This information may be disclosed to a potential purchaser under an agreement to maintain confidentiality. We would seek to only disclose information in good faith and where required by any of the above circumstances.
We will otherwise not transfer your Personal information, or use, sell or disclose your Personal information without your consent, unless:
- such disclosure is permitted by you;
- such disclosure is permitted under the Act;
- we are required by law to disclose that information;
- we are trying to protect against or prevent actual or potential fraud or unauthorised transactions; or
- we are investigating fraud which we believe may have already taken place.
The Platform and/or other communications we make as part of or incidental to services we provide may contain links to websites which are owned or operated by third parties. You should make your own enquiries as to the privacy policies of these third parties. We are not responsible for information on, or the privacy practices of, such websites. Any links are provided for your convenience or by companies, law firms or other users of our Platform or services for their own purposes, and do not represent our endorsement of any linked third-party website. We recommend that you check the privacy policies of such third-party websites before providing them with your Personal information.
By providing us with Personal information, you consent to the terms of this policy and the types of disclosure covered by this policy. Where we disclose your Personal information to third parties, we will request that the third party follow this policy regarding handling your Personal information. We will not otherwise disclose any Personal information about you without your consent.
We may disclose Personal information overseas to provide our services and we will generally do so only where we need to disclose such information to third parties as listed above. If you are based in the European Economic Area (EEA), this will mean that your Personal information may be transferred to, accessible from, and/or stored at, a destination outside the EEA in which data protection laws may not be as comprehensive as in the EEA.
Regardless of the location of our processing, we will impose the same data protection safeguards that we deploy inside the EEA and implement appropriate measures to ensure that your Personal information is protected in accordance with applicable data protection laws. Where a third-party service provider processes the Personal information of EEA residents on our behalf, we will ensure that appropriate measures are in place to ensure an adequate level of protection for your Personal information, usually by including EU standard contractual clauses in our agreements with such third-party service providers.
We are the data controller of your Personal information processed by us under this policy.
- Security of your personal information
Mint Legal is committed to ensuring that the information you provide to us is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure information and protect it from misuse, interference, loss and unauthorised access, modification and disclosure.
The transmission and exchange of information is carried out at your own risk. We cannot guarantee the security of any information that you transmit to us or receive from us. Although we take measures to safeguard against this, we are committed to ensuring that the information you provide to us is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure information and protect it from misuse, interference, loss and unauthorised access, modification and disclosure.
We use data hosting service provider, Amazon Web Services, in Australia to host the information we collect, and we use technical measures to secure the information we collect. While we implement reasonable safeguards designed to protect your information, no security system is impenetrable and due to the inherent nature of the internet and the cloud, we cannot guarantee that data, during transmission through the internet or while stored on our systems, is absolutely safe.
The transmission and exchange of information is carried out at your own risk. We cannot guarantee the security of any information that you transmit to us or receive from us. Although we take measures to safeguard against unauthorised disclosures of information, we cannot assure you that personal information that we collect will not be disclosed in a manner that is inconsistent with this policy.
Alongside our role, please also note that where we have given you (or where you have chosen) a password which enables you to access certain parts of our Platform or online services, you are responsible for keeping this password confidential and for complying with any other security procedures that we notify you of. We ask you not to share a password with anyone.
We retain the personal information we collect for as long as the information is relevant to our business purposes or the purpose of collection or until you request that we remove the data by contacting us. The Platform may allow users to share their personal information for the purpose of resolving disputes and completing transactions. The Company encourages you to respect the privacy of other users. To best maintain the privacy of personal information, the Company will only provide only very limited information regarding one user to another for the purpose of provision of services to the first user and requested by that user.
If your personal information is used for two purposes, we will retain it until the purpose with the latest period expires; but we will stop using it for the purpose with a shorter period once that period expires. Our retention periods are also based on our business needs and good practice.
- Access to your personal information
You may request details of personal information that we hold about you in accordance with the provisions of the Privacy Act 1988 (Cth). We will try to provide you with your information within 30 days. We’ll need to verify your identity before completing your request. In certain circumstances, we are allowed to deny or limit the access we provide. If so, we will let you know in writing our reasons for refusing your request.
If you have any questions or would like a copy of the personal information which we hold about you or believe that any personal information we hold on you is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us via firstname.lastname@example.org .
The Company endeavours to ensure, but in no way guarantees, that the personal information it holds is accurate, complete and up-to-date. You will be able to update the personal information we hold about you through the Platform or by contacting us. You should promptly update your personal information if it changes or becomes inaccurate. You can help keep your personal information up to date and secure by maintaining confidentiality of any password, user name, accounts and profiles used on the Platform. In the event that you share your password or other personal information with others, you will be responsible for all actions taken on your account.
Under certain circumstances and in accordance with EU or other applicable data protection laws, you may have the right to require us to:
- provide you with further details on the use we make of your personal information;
- provide you with a copy of personal information that we hold about you;
- update any inaccuracies in the personal information we hold;
- delete any personal information that we no longer have a lawful ground to use;
- where processing is based on consent, to withdraw your consent so that we stop that particular processing;
- object to any processing based on the legitimate interests ground unless our reasons for undertaking that processing outweigh any prejudice to your data protection rights; and
- restrict how we use your personal information whilst a complaint is being investigated,
- and we will generally provide you with access, subject to certain exceptions permitted by law.
While it is our policy to respect the rights of individuals, please be aware that your exercise of these rights is subject to certain exemptions to safeguard the public interest (e.g. the prevention or detection of crime), our interests (e.g. the maintenance of legal privilege) and some of these rights may be limited (for example the right to withdraw consent) where we are required or permitted by law to continue processing your personal information to defend our legal rights or meet our legal and regulatory obligations.
We may also refuse access to your personal information in various circumstances, including where:
- providing access would have an unreasonable impact on the privacy of others;
- the request is frivolous or vexatious;
- the information relates to existing or anticipated legal proceedings and would not be accessible by the process of discovery in those proceedings;
- giving access would reveal our intentions in relation to negotiations with you in such a way as to prejudice those negotiations;
- providing access would be unlawful;
- denying access is required by or under any applicable law;
- we have reason to suspect that unlawful activity, or misconduct of a serious nature, that relates to our functions or activities has been, is being or may be engaged in and giving access would be likely to prejudice the taking of appropriate action in relation to the matter;
- giving access would be likely to prejudice enforcement related activities conducted by or on behalf of an enforcement body;
- providing access would be likely to prejudice enforcement related activities conducted by an enforcement body;
- giving access would reveal evaluative information generated within our organisation with a commercially sensitive decision-making process.
You may also ask us not to process your personal information for marketing purposes. You can exercise your right to prevent such processing at any time by using an unsubscribe facility or contacting us at email@example.com
It is very important to us that we maintain accurate and up-to-date personal information for the proper operation of our Platform and our services and for conducting our business generally. If you believe that your personal information is inaccurate or out-of-date, or irrelevant or misleading, please contact us via firstname.lastname@example.org and we will take reasonable steps to correct that information.
We will ask you to verify your identity before we give you access to your personal information or correct it. If we refuse to give you access to or correct your personal information, we will notify you and give you reasons why.
If we make a correction and we have disclosed incorrect personal information about you to others, you can ask us to tell them about the correction. We will do so unless there is a valid reason why not to do so.
If we refuse to correct your personal information, you can ask us to associate with it (e.g., attach or link) a statement that you believe the personal information is incorrect and why.
If you are not satisfied with our use of your personal information or our response to any exercise of these rights, you have the right to complain to the relevant supervisory authority (data protection regulator).
For EU users – your rights
If you are an individual residing in the EU, you have the right under the General Data Protection Regulation to request from us access to and rectification or erasure of your personal information, data portability, restriction of processing of your personal information, the right to object to processing of your personal information and the right to lodge a complaint with a supervisory authority.
To request access to or rectification, portability or erasure of your personal information, or to delete your account, please contact our Privacy Officer using the details provided below. If you live in the EU and you wish to exercise your right to restriction of processing or your right to object to processing, contact our Privacy Officer via email@example.com .
Notification to end users
Where our services are made available to you through an organisation, that organisation is the administrator of our services and is responsible for the accounts and/or service sites over which it has control. Where this is the case, please direct your data privacy questions to your administrator, as your use of our services is subject to your organisation’s policies. We are not responsible for the privacy or security practices of your organisation, which may be different to this policy.
- Data breaches
Australian laws provide that an eligible data breach arises when the following three (3) criteria are satisfied:
- there is unauthorised access to or unauthorised disclosure of Personal information, or a loss of Personal information, that we hold;
- this is likely to result in serious harm to one or more individuals; and
- we have not been able to prevent the likely risk of serious harm with remedial action.
The Company is required to take all reasonable steps to ensure an assessment of an eligible data breach is completed within 30 days. If an eligible data breach is confirmed, as soon as practicable we must provide a statement to each of the individuals whose data was breached or who are at risk, including details of the breach and recommendations of the steps individuals should take. A copy of the statement must also be provided to the Office of the Australian Information Commissioner.
Please be aware that we may change this policy in the future.
We may modify this policy at any time, in our sole discretion and all modifications will be effective immediately upon our posting of the modifications on our Platform.
Please check back from time to time to review our policy. Where required by applicable law, we will obtain your consent.
When you come to our Platform we may collect certain information such as browser type, operating system, website visited immediately before coming to our site, etc. This information is used in an aggregated manner to analyse how people use our site, so that we can improve our service.
Our site may from time to time have links to other websites not owned or controlled by us. These links are meant for your convenience only. Links to third party websites do not constitute sponsorship or endorsement or approval of these websites. Please be aware that the Company is not responsible for the privacy practises of other such websites. We encourage our users to be aware, when they leave our Platform, to read the privacy statements of each and every website that collects personal identifiable information.
- How to contact us
If you want to send us notices or service of process, please contact us:
- online at: firstname.lastname@example.org ; or
- by mail at: PO Box 1440, Scarborough, WA, 6922.
- Complaints about privacy
If you have a complaint, please email us at email@example.com . We take complaints very seriously and will respond shortly after receiving written notice of your complaint.
If you have any complaints about our privacy practices, please feel free to send details of your complaint to the Office of the Australian Information Commissioner, GPO Box 5218 Sydney NSW 2001 Phone 1300 363 992 or oaic.gov.au.
Liabilty limited by a scheme approved under Professional Standards Legislation.