Effective date: 23 August 2026

Echo Law Pty Ltd (ABN 64 661 368 752) (“Echo Law”, “we”, “us”) is an incorporated legal practice. We are bound by the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs), and this Privacy Policy explains how we collect, hold, use and disclose personal information in providing legal services, conducting litigation (including class actions), operating our website and running our business.

What we collect and how

Depending on how you deal with us, the personal information we collect and hold may include your name and contact details; employment details; bank account and payment details; information about your enquiry, claim or participation in a proceeding; identity document details where we need to verify your identity; information you provide in a job application; and technical information from your use of our website, such as IP address and browsing activity.

Some of our matters may also involve sensitive information, such as health information. We only collect sensitive information with your consent or where otherwise permitted by law.

We generally collect personal information directly from you – through our website forms, by email or phone, or in the course of a matter. We may also collect it from third parties where reasonably necessary, such as regulators, courts, other parties and their advisers, public registers and identity verification services. Where lawful and practicable you may deal with us anonymously, but we will usually need to identify you to act for you, assess a claim or pay money to you.

How we use it

We use personal information to provide legal services and conduct proceedings (including assessing and processing claims and distributing funds); to communicate with you about matters in which you have registered your interest; to verify your identity; to respond to enquiries; to send you updates about our services and our other current, new or proposed claims; to assess job applications; to improve our website; to comply with our legal, professional and regulatory obligations; and to run our business. You can opt out of marketing communications at any time using the unsubscribe link in our communications or by emailing info@echolaw.com.au.

Identity verification

Occasionally we need to verify your identity – for example, before paying money to you. Where we do, we may collect government-issued identity document details (such as a driver licence or passport) and, with your consent, verify them using the Document Verification Service (DVS), an Australian Government service that confirms whether your details match the records of the agency that issued the document. Verification requests may be transmitted through third-party identity verification services, which we will identify when we seek your consent. We do not adopt government-related identifiers (such as licence or passport numbers) as our own identifier of you.

Who we share it with

Where reasonably necessary for the purposes above, we may disclose personal information to others involved in our matters (such as barristers, experts, litigation funders and settlement administrators); to courts, tribunals, regulators, government agencies and law enforcement; to identity verification services; to our professional advisers, auditors and insurers; and to service providers who support our business, such as IT and cloud, banking, litigation support, marketing and security services.

Some of our service providers, particularly cloud and technology providers, may store or access personal information outside Australia. Because our providers change from time to time it is not practicable to list every country, but they are likely to include the United States and other countries in which major technology providers operate. Where we disclose personal information overseas, we take the steps the APPs require to ensure it is handled in accordance with Australian privacy standards.

How we protect and keep it

We hold personal information electronically in our systems and those of our service providers, and in hard copy in secure areas, and we take reasonable steps to protect it from misuse, interference, loss and unauthorised access, modification or disclosure. If a data breach likely to result in serious harm occurs, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme. We keep personal information only as long as reasonably necessary for the purposes above and to meet our legal and professional obligations, after which we take reasonable steps to destroy or de-identify it.

We use cookies and analytics on our website to help it function and to understand how it is used; you can block or delete cookies through your browser settings.

Access, correction and complaints

You may ask us to provide access to the personal information we hold about you, or to correct it, by contacting us using the details below. We will respond within a reasonable period (usually 30 days); if the Privacy Act permits us to refuse a request, we will give you written reasons. If you have a complaint about how we have handled your personal information, contact us and we will investigate and respond, usually within 30 days. If you are not satisfied with our response, you may complain to the OAIC at www.oaic.gov.au or on 1300 363 992.

Changes and contact

We may update this Privacy Policy from time to time; the current version and its effective date will always be published on our website. If you have any questions, contact us at info@echolaw.com.au, on 1800 571 241 or +61 3 7046 3565.