MɅYWEATHERS
Privacy Policy
Last updated: 26 June 2026
Mayweathers (“we”, “us” or “our”) understands that your privacy is important to you. We respect your right to privacy and are committed to protecting your personal information.
This Privacy Policy sets out how Mayweathers collects, holds, uses and discloses personal information, and how you may access or correct that information or make a complaint. It applies to all of the personal information we handle in the course of carrying on our legal practice.
By using our websites and services, or by otherwise providing us with your personal information, you consent to our collection, use, disclosure and handling of that information as outlined in this Privacy Policy. If we are unable to collect, use, disclose or handle your personal information as described, we may not be able to provide you with access to our services.
1. Our commitment under the Privacy Act
Mayweathers is bound by the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs) contained in it. We are committed to managing personal information openly and transparently, and to handling it in accordance with the APPs.
From 1 July 2026 and as a provider of designated services, Mayweathers is subject to obligations as a “reporting entity” under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) (AML/CTF Act). We comply with the Privacy Act in connection with those activities as described in section 10 below. For the avoidance of doubt, the Privacy Act applies to our handling of personal information generally, and not only to our AML/CTF activities.
2. The kinds of personal information we collect and hold
The kinds of personal information we collect and hold include:
-
contact and identity details, such as your name, role or position, postal address, email address, and telephone numbers;
-
information relating to your circumstances and affairs that is relevant to the matter or matters in which we are instructed;
-
information about your legal interests and requirements and the legal services you may wish to obtain;
-
information about our communications with you and your attendance at seminars and events held by us;
-
if you are an employee or prospective employee, information about your qualifications, skills and work experience;
-
if you are a supplier or prospective supplier, information about your business, services, products and prices; and
-
where we provide a designated service to you to which the AML/CTF Act applies, information collected to verify your identity and to meet our customer due diligence and record-keeping obligations (see section 10).
Sensitive information
Some of the information we collect is “sensitive information” as defined in the Privacy Act – for example, health information, or information about racial or ethnic origin, criminal record, or membership of a professional or trade association. In the course of litigation, dispute resolution and other matters we may need to collect and hold sensitive information about you. We collect sensitive information only where it is reasonably necessary for our functions or activities and, except where the Privacy Act otherwise permits (including where the collection is required or authorised by law or a court or tribunal order), with your consent. We apply additional care to the handling of sensitive information.
3. How we collect personal information
We collect personal information by a variety of means, including when:
-
you contact us with a question or enquiry, including through our website;
-
you subscribe to any newsletter or legal updates service we publish;
-
you attend a seminar or event that we host or present at;
-
you instruct us to act for you and we open a file and conduct a conflict check;
-
our clients provide, or we otherwise collect, information relating to parties relevant to the advice or services we are providing;
-
we undertake a search or investigation; and
-
you visit our website (including through cookies and analytics tools).
Where practicable, we collect personal information about you directly from you. However, we may collect information about you from a third party, such as a client, a third party information provider, the courts, or a person responding to our enquiries, where it is unreasonable or impracticable to collect it from you directly.
We are required to collect the full name and address of our clients under the professional conduct rules applicable in the jurisdictions in which we practise – in New South Wales, the Legal Profession Uniform Law Australian Solicitors’ Conduct Rules 2015, and in South Australia, the South Australian Legal Practitioners Conduct Rules made under the Legal Practitioners Act 1981 (SA). Accurate name and address information must also be collected to comply with trust accounting laws and our duty to the courts. If you are a client and do not provide us with name and address information, we cannot act for you; and if you do not provide accurate personal information, we may not be able to carry out your instructions or achieve the purpose for which the information has been sought.
Nothing in this Policy limits our duties of confidentiality or legal professional privilege, or our professional obligations under the legal profession legislation and solicitors’ conduct rules applicable in each jurisdiction in which we practise.
4. Dealing with us anonymously or using a pseudonym
Where it is lawful and practicable to do so, you may deal with us anonymously or by using a pseudonym. However, this will generally not be lawful or practicable where we are required to identify you or another person, or to verify that identity – including under the AML/CTF Act – or where our professional obligations require us to know who we act for and who is giving instructions. We may be able to provide general information on an anonymous basis, but we will usually be unable to act in a legal matter, or provide a designated service, without identifying you.
5. Unsolicited personal information
If we receive personal information about you that we did not solicit, we will determine within a reasonable period whether we could have collected that information under the Australian Privacy Principles had we solicited it. If we could not have, and it is lawful and reasonable to do so, we will take reasonable steps to destroy or de-identify that information as soon as practicable. Otherwise, we will hold, use and disclose that information in accordance with this Policy.
6. The purposes for which we collect, hold, use and disclose personal information
We collect, hold, use and disclose personal information in order to:
-
respond to your enquiries;
-
provide legal services and carry out the instructions of our clients;
-
conduct conflict checks and client and matter onboarding;
-
meet our professional, regulatory and legal obligations, including under the AML/CTF Act;
-
recruit, employ and manage competent and diligent personnel;
-
monitor and improve the quality of, and satisfaction with, our legal services; and
-
let you know about legal developments, our expertise and legal services that may be of interest to you.
Generally, we use and disclose personal information only for the purpose for which it was collected (the primary purpose), or for a directly related secondary purpose that you would reasonably expect, or where you have consented, or where the use or disclosure is otherwise required or authorised by or under an Australian law or a court or tribunal order.
7. To whom we disclose personal information
Subject to our duties of confidentiality and legal professional privilege, we may share relevant personal information with:
-
parties related to a matter in which we are instructed, government authorities, regulators (including AUSTRAC and the courts), and service providers, as reasonably required to carry out our instructions;
-
our email marketing provider, for the purpose of sending you newsletters, invitations and legal updates; and
-
third party service providers who assist us with archival, auditing, accounting, legal, business consulting, information technology, document management and website services.
We will also disclose your personal information where we are required or authorised by law to do so, or in circumstances permitted under the Privacy Act – for example, where we have reasonable grounds to suspect that unlawful activity, or misconduct of a serious nature relating to our functions or activities, has been, is being, or may be engaged in, or in response to a subpoena, discovery request or court order.
Last updated: 26 June 2026
Mayweathers (“we”, “us” or “our”) understands that your privacy is important to you. We respect your right to privacy and are committed to protecting your personal information.
This Privacy Policy sets out how Mayweathers collects, holds, uses and discloses personal information, and how you may access or correct that information or make a complaint. It applies to all of the personal information we handle in the course of carrying on our legal practice.
By using our websites and services, or by otherwise providing us with your personal information, you consent to our collection, use, disclosure and handling of that information as outlined in this Privacy Policy. If we are unable to collect, use, disclose or handle your personal information as described, we may not be able to provide you with access to our services.
1. Our commitment under the Privacy Act
Mayweathers is bound by the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs) contained in it. We are committed to managing personal information openly and transparently, and to handling it in accordance with the APPs.
From 1 July 2026 and as a provider of designated services, Mayweathers is subject to obligations as a “reporting entity” under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) (AML/CTF Act). We comply with the Privacy Act in connection with those activities as described in section 10 below. For the avoidance of doubt, the Privacy Act applies to our handling of personal information generally, and not only to our AML/CTF activities.
2. The kinds of personal information we collect and hold
The kinds of personal information we collect and hold include:
-
contact and identity details, such as your name, role or position, postal address, email address, and telephone numbers;
-
information relating to your circumstances and affairs that is relevant to the matter or matters in which we are instructed;
-
information about your legal interests and requirements and the legal services you may wish to obtain;
-
information about our communications with you and your attendance at seminars and events held by us;
-
if you are an employee or prospective employee, information about your qualifications, skills and work experience;
-
if you are a supplier or prospective supplier, information about your business, services, products and prices; and
-
where we provide a designated service to you to which the AML/CTF Act applies, information collected to verify your identity and to meet our customer due diligence and record-keeping obligations (see section 10).
Sensitive information
Some of the information we collect is “sensitive information” as defined in the Privacy Act – for example, health information, or information about racial or ethnic origin, criminal record, or membership of a professional or trade association. In the course of litigation, dispute resolution and other matters we may need to collect and hold sensitive information about you. We collect sensitive information only where it is reasonably necessary for our functions or activities and, except where the Privacy Act otherwise permits (including where the collection is required or authorised by law or a court or tribunal order), with your consent. We apply additional care to the handling of sensitive information.
3. How we collect personal information
We collect personal information by a variety of means, including when:
-
you contact us with a question or enquiry, including through our website;
-
you subscribe to any newsletter or legal updates service we publish;
-
you attend a seminar or event that we host or present at;
-
you instruct us to act for you and we open a file and conduct a conflict check;
-
our clients provide, or we otherwise collect, information relating to parties relevant to the advice or services we are providing;
-
we undertake a search or investigation; and
-
you visit our website (including through cookies and analytics tools).
Where practicable, we collect personal information about you directly from you. However, we may collect information about you from a third party, such as a client, a third party information provider, the courts, or a person responding to our enquiries, where it is unreasonable or impracticable to collect it from you directly.
We are required to collect the full name and address of our clients under the professional conduct rules applicable in the jurisdictions in which we practise – in New South Wales, the Legal Profession Uniform Law Australian Solicitors’ Conduct Rules 2015, and in South Australia, the South Australian Legal Practitioners Conduct Rules made under the Legal Practitioners Act 1981 (SA). Accurate name and address information must also be collected to comply with trust accounting laws and our duty to the courts. If you are a client and do not provide us with name and address information, we cannot act for you; and if you do not provide accurate personal information, we may not be able to carry out your instructions or achieve the purpose for which the information has been sought.
Nothing in this Policy limits our duties of confidentiality or legal professional privilege, or our professional obligations under the legal profession legislation and solicitors’ conduct rules applicable in each jurisdiction in which we practise.
4. Dealing with us anonymously or using a pseudonym
Where it is lawful and practicable to do so, you may deal with us anonymously or by using a pseudonym. However, this will generally not be lawful or practicable where we are required to identify you or another person, or to verify that identity – including under the AML/CTF Act – or where our professional obligations require us to know who we act for and who is giving instructions. We may be able to provide general information on an anonymous basis, but we will usually be unable to act in a legal matter, or provide a designated service, without identifying you.
5. Unsolicited personal information
If we receive personal information about you that we did not solicit, we will determine within a reasonable period whether we could have collected that information under the Australian Privacy Principles had we solicited it. If we could not have, and it is lawful and reasonable to do so, we will take reasonable steps to destroy or de-identify that information as soon as practicable. Otherwise, we will hold, use and disclose that information in accordance with this Policy.
6. The purposes for which we collect, hold, use and disclose personal information
We collect, hold, use and disclose personal information in order to:
-
respond to your enquiries;
-
provide legal services and carry out the instructions of our clients;
-
conduct conflict checks and client and matter onboarding;
-
meet our professional, regulatory and legal obligations, including under the AML/CTF Act;
-
recruit, employ and manage competent and diligent personnel;
-
monitor and improve the quality of, and satisfaction with, our legal services; and
-
let you know about legal developments, our expertise and legal services that may be of interest to you.
Generally, we use and disclose personal information only for the purpose for which it was collected (the primary purpose), or for a directly related secondary purpose that you would reasonably expect, or where you have consented, or where the use or disclosure is otherwise required or authorised by or under an Australian law or a court or tribunal order.
7. To whom we disclose personal information
Subject to our duties of confidentiality and legal professional privilege, we may share relevant personal information with:
-
parties related to a matter in which we are instructed, government authorities, regulators (including AUSTRAC and the courts), and service providers, as reasonably required to carry out our instructions;
-
our email marketing provider, for the purpose of sending you newsletters, invitations and legal updates; and
-
third party service providers who assist us with archival, auditing, accounting, legal, business consulting, information technology, document management and website services.
We will also disclose your personal information where we are required or authorised by law to do so, or in circumstances permitted under the Privacy Act – for example, where we have reasonable grounds to suspect that unlawful activity, or misconduct of a serious nature relating to our functions or activities, has been, is being, or may be engaged in, or in response to a subpoena, discovery request or court order.
8. Disclosure of personal information overseas
Some of the third parties to whom we disclose personal information, including certain of our service providers, are located overseas, or store personal information overseas (including in cloud-based systems).
We are likely to disclose personal information to recipients located in the following countries:
-
New Zealand (in connection with our Auckland office and related operations); and
-
the United States of America (in connection with website hosting, email marketing and other cloud-based technology services).
We may also disclose personal information to recipients in other countries where a service provider we engage stores or processes data overseas. Before disclosing personal information to an overseas recipient, we take steps that are reasonable in the circumstances to ensure the recipient handles your information consistently with the APPs.
9. Government-related identifiers
To verify your identity, including for the purposes of the AML/CTF Act, we may collect government-related identifiers such as your driver licence, passport or Medicare details. We do not adopt a government-related identifier as our own identifier for you, and we use or disclose such identifiers only where required or authorised by law, or where otherwise permitted under the Privacy Act.
10. Anti-Money Laundering and Counter-Terrorism Financing
Where we provide a designated service under the AML/CTF Act, we are a “reporting entity” and must comply with that Act, the AML/CTF Rules, and the requirements of AUSTRAC. To do so, we collect, verify, use and retain personal information about our clients, and in some cases about beneficial owners and other related parties, for the purposes of:
-
conducting initial and ongoing customer due diligence (also known as “know your customer” or KYC checks), including verifying your identity;
-
monitoring transactions and the business relationship;
-
meeting our reporting obligations to AUSTRAC; and
-
meeting our AML/CTF record-keeping obligations.
Genuine nexus. We collect personal information for customer due diligence only where there is a genuine connection between that information and an actual or potential designated service. Where we provide services that are not designated services, we will not subject you to customer due diligence simply as a matter of convenience.
Identity documents. We are not required to retain copies of your full identity documents (such as a driver licence or passport) for AML/CTF record-keeping purposes. Where we collect such documents to verify your identity, we take reasonable steps to destroy or de-identify the copies once they are no longer needed, and we retain only the information from those documents that we are required to keep.
Notice and access limitations (“tipping off”). The secrecy provisions of the AML/CTF Act may prevent us from telling you about, or giving you access to, certain information – for example, where doing so would or could reasonably be expected to prejudice an investigation or disclose the existence of a suspicious matter report. In those circumstances, our obligations to notify you about the collection of your information (under APP 5) and to give you access to it (under APP 12) are limited to the extent necessary to avoid breaching those secrecy provisions.
11. How we hold and protect personal information
We take reasonable physical, technical and administrative safeguards to protect personal information from misuse, interference and loss, and from unauthorised access, modification and disclosure. For example, we maintain our files in secure offices, store electronic information in access-controlled systems, and limit access to personal information to those who have a need to know it. We also take reasonable steps to destroy or de-identify personal information when it is no longer needed for any purpose for which it may be used or disclosed, and is not required to be retained by law (see section 13).
12. Keeping your personal information accurate
We take reasonable steps to ensure that the personal information we collect, use and disclose is accurate, up to date, complete and relevant. We rely on you to provide accurate information and to let us know if your details change during the course of your matter or business relationship with us. Records held after a matter has concluded are not usually monitored or updated unless we receive further instructions or are required by law to do so.
13. Retention of personal information
We retain personal information for as long as it is needed for the purposes described in this Policy, and for as long as we are required to keep it under applicable laws and professional obligations – including our obligations relating to client files, trust accounting, and AML/CTF record-keeping. When personal information is no longer needed for any purpose for which it may lawfully be used or disclosed, and we are not required by law to retain it, we take reasonable steps to destroy it or to permanently de-identify it.
14. Data breaches
We maintain a data breach response plan and take steps to identify, contain, assess and respond to data breaches involving personal information. We are subject to the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act. If we become aware of an eligible data breach that is likely to result in serious harm to any individual whose personal information is involved, we will notify the affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by law, except to the extent that doing so would be inconsistent with a secrecy provision (including under the AML/CTF Act).
15. Direct marketing and opting out
From time to time we may send you newsletters, invitations and legal updates about our services. You can opt out of receiving these communications at any time by contacting us using the details in section 18, or by using the “unsubscribe” facility at the bottom of any marketing email we send you.
16. Accessing and correcting your personal information
You may request access to, or correction of, the personal information we hold about you by contacting us using the details in section 18. Unless we are subject to a duty of confidentiality or another restriction, or we are permitted to refuse access under the Privacy Act, we will give you access to your personal information within a reasonable period (and we aim to do so within 30 days of your request).
Examples of circumstances in which we may refuse to give you access to your personal information include where:
-
giving access would be unlawful;
-
we reasonably believe that giving access would pose a serious threat to the life, health or safety of any individual, or to public health or public safety;
-
giving access would have an unreasonable impact on the privacy of others;
-
the information would reveal the intentions of a party to negotiations in a way that would prejudice those negotiations;
-
giving access would reveal evaluative information in a commercially sensitive decision-making process; or
-
giving access would be inconsistent with a duty we owe (including a duty of confidentiality or legal professional privilege).
If you ask us to correct your personal information, we will either correct it or, if we consider it more appropriate, make a note of your requested correction in our records. We will not charge you for making a request to access or correct your record, but we may charge you for the cost of providing access, depending on the costs of obtaining and supplying the material.
17. Complaints
If you believe we have breached this Policy or the APPs, you may make a complaint to us by contacting us using the details in section 18. We will acknowledge your complaint and endeavour to respond to it within 30 days. If you are not satisfied with our response, you may refer your complaint to the OAIC.
You can contact the OAIC at GPO Box 5288, Sydney NSW 2001, by telephone on 1300 363 992, or online at www.oaic.gov.au/privacy/privacy-complaints.
18. How to contact us
For any privacy enquiry, request, or complaint, please contact us:
Email: info@mayweathers.com.au
Telephone: +61 2 8020 5720
Post: The Mezzanine, 12 O’Connell Street, Sydney NSW 2000
19. Changes to this Privacy Policy
We may update this Policy from time to time. The current version will always be available on our website at www.mayweathers.com.au. This Policy was last updated on the date shown at the top of this document.