At Kalus Kenny Intelex, the protection of personal information is taken seriously. Personal information provided to the firm is handled in accordance with the law, including the Privacy Act 1988 (Cth), and the Australian Privacy Principles.
From 1 July 2026, to the extent that Kalus Kenny Intelex is a reporting entity under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth), personal information collected, used or disclosed for AML/CTF purposes is also handled in accordance with the privacy-related obligations applying to reporting entities.
This Privacy Policy explains how we collect, hold, use and disclose personal information.
1. Definitions
In this Privacy Policy:
Kalus Kenny Intelex includes:
- Kalus Kenny Intelex (ABN 53 292 470 996);
- KKI Lawyers Pty Ltd (ABN 15 669 287 503); and
- KK Services Pty Ltd (ACN 062 340 256).
Personal information means information or an opinion about an identified or reasonably identifiable individual, , whether the information or opinion is true or not and whether it is recorded in a material form or not, and includes biometric information.
Sensitive information is a subset of personal information and includes information or an opinion about an individual’s racial or ethnic origin, political opinions, religious or philosophical beliefs, sexual orientation, criminal record, health information and genetic information.
2. Collection Methods and Purposes
Personal information is collected only where it is reasonably necessary for business activities, legal services, administration, compliance and related purposes.
Personal information may be collected about actual and prospective clients, employees, suppliers, contractors and other third parties in order to provide legal services, manage business operations, and meet legal and regulatory obligations.
Where reasonably practicable, personal information is collected directly from the individual concerned. Personal information may also be collected from third parties such as other law firms, family members, business associates, accountants, financial advisers, referrers, counterparties, and publicly available sources.
Personal information may be collected when an enquiry is made, when legal services are provided, when a person applies for employment, when the website is used, or when there are other dealings with the firm.
The kinds of personal information collected may include:
- names, residential and business addresses, telephone numbers, email addresses, dates of birth, places of birth, nationality and immigration status, occupations, professional qualifications and professional memberships;
- opinions and information relating to business, personal or professional circumstances;
- information about dealings with the firm and its clients, including financial records, bank account details, insurance information and taxation information;
- in some circumstances, tax file numbers, Australian Business Numbers, passport details and driver licence details;
- identification information and verification details required for customer due diligence and know-your-customer procedures for compliance with conveyancing requirements and AML/CTF laws, including information taken from identity documents, beneficial ownership information and information about source of funds and source of wealth, where reasonably necessary to comply with legal obligations; and
- electronic data collected when the website is used, including IP address, browser type, cookies, location-related data and website usage information.
Sensitive information is not generally collected unless it is reasonably necessary for legal services, authorised by law, or the individual has consented.
Individuals may deal with the firm anonymously or by pseudonym where lawful and practicable. This will not apply where identification is required by law or where it is impracticable for the firm to deal with the individual on that basis.
If requested personal information is not provided, the firm may be unable to provide services or continue acting. This includes situations where identity verification or other compliance steps are required under conveyancing requirements and AML/CTF laws or other legislation.
3. Use and Disclosure
We use personal information as described in this policy and you expressly consent to us doing so, both in respect of your own personal information you provide to us, and in respect of anyone else’s personal information you give to us. Each time you give us someone else’s personal information, you warrant that you have their express consent to do so, as well as their agreement for us to use their personal information in accordance with this policy.
Personal information is used for the primary purpose for which it is collected and for related purposes that would reasonably be expected, including:
- providing legal services and managing client relationships;
- communicating with clients, counterparties and service providers;
- responding to enquiries;
- maintaining administrative, billing, file management and accounting systems;
- recruitment and employment-related processes;
- marketing, providing legal updates, publications and events where permitted by law;
- research, planning, security, risk management and service improvement;
- complying with legal and reporting obligations; and
- carrying out customer due diligence, verifying identity, assessing the risk of giving credit, preventing fraud and money laundering, tracing debtors, ongoing customer monitoring, screening and reporting required including under AML/CTF laws.
Personal information may be disclosed:
- with consent;
- where required in the course of providing legal services, to third parties including barristers, experts, agents, settlement service providers and other professional advisers;
- to confidential service providers assisting with functions including IT, document management, archiving, billing, banking, security, practice management or administrative support;
- to recruitment agencies in relation to employment applications;
- in connection with an actual or proposed sale, merger or restructure of the business;
- where required or authorised by law; and
- where applicable, to third parties including service providers, AUSTRAC, other regulators, law enforcement agencies, courts, tribunals, service providers such as Equifax, auditors and consultants in connection with AML/CTF compliance, verifying identity, assessing the risk of giving credit, preventing fraud and money laundering, tracing debtors, and to assist us in our business operations including complying with legal obligations.
Third parties such as Equifax may keep a record of personal information and provide it and the fact that a search was made to their other customers in connection with activities referred to above.
Personal information is not sold or disclosed to third parties for their direct marketing purposes. Where practicable, personal information may be de-identified or aggregated for analytics, reporting and service improvement purposes.
Legl – a third party service provider we use to assist us with AML/CTF compliance uses personal information in accordance with its privacy policy, a copy of which can be accessed at its website: https://legl.com/en-au/privacy-policy.
In some circumstances, the ability to notify an individual about a use or disclosure of personal information may be limited by law, including where AML/CTF laws prohibit tipping off a person about certain reports, enquiries or investigations.
We and any third party which holds personal information must comply with the law in relation to how that personal information is held and used. A person whose personal information is held by us or a third party can request details of what personal information is held and for any inaccurate information to be corrected. If we receive a request to delete personal information, statutory requirements may require we retain certain personal information, and if that applies, you have no claim against us.
If you decline to provide us with the personal information we require from time to time, we may not be able to provide – or continue to provide – services to you.
4. Overseas Disclosure
In the course of providing services and operating business systems, personal information may be disclosed to, accessed from, and stored with overseas recipients.
This may include service providers and technology vendors located in, or storing data in, other countries including but not limited to the European Union, the United States and Singapore. Those service providers and technology vendors assist us with tasks including practice management systems, document management systems, email, cloud storage, verification of identity, cybersecurity and AML/CTF screening services.
Reasonable steps will be taken to ensure that overseas recipients handle personal information in a manner consistent with the Australian Privacy Principles, unless an exception under the Privacy Act applies.
5. Data Quality
Reasonable steps are taken to ensure that personal information collected, used and disclosed is accurate, complete and up to date.
If any personal information held by the firm is inaccurate, incomplete or outdated, a request may be made to have it corrected.
6. Data Security
Personal information may be held in electronic and hard copy form. Reasonable steps are taken to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure.
Security measures may include password protection, access controls, secure premises, staff training, secure service providers, cybersecurity controls and secure destruction processes.
For verification of identity and AML/CTF purposes, information from identity documents and other sources will be collected and recorded only to the extent reasonably necessary to verify identity and comply with legal obligations. Unless another law requires otherwise, full copies of identification documents such as passports or driver licences are not retained solely for AML/CTF record-keeping purposes; instead, verification records and limited identification details are retained in accordance with regulatory guidance and a risk-based approach.
7. Access and Correction
A person may request access to personal information held about them, and may request correction of inaccurate, incomplete or out-of-date information, by contacting the Privacy Officer.
Access may be refused, or limited, where permitted or required by law. Reasons will be provided where required. In some cases, access cannot be given where doing so would breach legal obligations, including obligations that prohibit tipping off a person in connection with AML/CTF reporting or investigations.
A reasonable charge may apply for providing access where permitted by law.
8. Sensitive Information
Sensitive information is not collected, used or disclosed unless it is reasonably necessary for legal services, the individual has consented, or collection, use or disclosure is otherwise permitted or required by law.
9. Retention and Destruction
Generally, client and matter-related records may be retained for at least 7 years after completion of the relevant matter, and personal information of unsuccessful job applicants may be destroyed when no longer required.
Certain records may need to be retained for longer minimum periods under applicable laws, including the Legal Profession Uniform Law, the Corporations Act 2001 (Cth) and the AML/CTF Act, including in relation to client identification and transaction records. Once retention is no longer required, records – including personal information – will be able to be released to be securely destroyed or de-identified.
10. Complaints
If there is a concern that privacy has been breached, a complaint may be made to the Privacy Officer using the contact details below. Complaints will be treated confidentially, investigated and responded to within a reasonable time.
If the response is not satisfactory, a complaint may be made to the Office of the Australian Information Commissioner. Where relevant, information may also be sought from the Office of the Victorian Information Commissioner.
11. Changes to this Policy
This Privacy Policy may be updated from time to time. The current version will be published on the website and will take effect from the date of publication.
Last updated: June 2026.
13. Contact details
For queries about this Privacy Policy, requests for access or correction, or privacy complaints, please contact:
Privacy Officer
Kalus Kenny Intelex
Level 1, 4 Riverside Quay
Southbank VIC 3006
Email: privacy@kkilawyers.com.au
Phone: 03 8825 4800
