Privacy Notice

This Notice sets out the details of LK’s commitment to protecting the privacy of its clients, contacts, persons who view LK’s website, suppliers, contractors and staff.

LK is a risk and dispute resolution law firm. LK assists clients to resolve disputes through litigation and arbitration throughout Australia, Asia, Europe, the Middle East and offshore jurisdictions.

LK’s constituent law firms are:

LK Law LLP in the United Kingdom; and
LK Law Pty Ltd in Australia.

The details of each separate legal entity are provided on LK’s website www.lk.law and in the Legal Notice also provided on LK’s website.

LK manages the personal information it collects, and the information flows associated with that personal information in each jurisdiction where is has offices, in accordance with the relevant privacy and data protection laws, regulations and guidelines, including: the Privacy Act 1988 (Cth), the Data Protection Act 2018 (UK) and the General Data Protection Regulation (“GDPR”).

LK’s key contacts for privacy related inquiries are as follows:

Mary-Louise Rahaley (for LK Law Pty Ltd in Australia)
Email: mrahaley@lk.law

Amy Harvey (for LK Law LLP in the United Kingdom)
Email: contact@lklaw.uk

KINDS AND CATEGORIES OF PERSONAL INFORMATION LK COLLECTS AND HOLDS

In this Privacy Notice:

“personal information” has the same meaning as the term “personal data” and means information relating to an identified or identifiable individual;
“data subject” means the identified or identifiable individual who is the subject of the personal information; and
“website” means LK’s website at www.lk.law.

LK collects and holds personal information (both current and historical) of the following kinds and categories:

personal details (including the data subject’s name, signature, date of birth, contact details (such as postal address(es), email address(es), telephone number(s)), nationality, occupation, employment history, educational qualiﬁcation(s) and government-issued identiﬁers (such as Tax File Number, Company Registration Numbers or Australian Business Numbers));
information required for LK to meet its legal and regulatory obligations;
information related to the subject of LK legal advice and representation;
financial information, including for billing purposes;
information about the data subject’s interests in areas of legal practice or events; and
records of meetings and events attended at the invitation of LK.

Where necessary, LK may also collect and hold sensitive information, including that relating to the data subject’s health, any disabilities, racial or ethnic origin, gender, special dietary needs, religious affiliation(s), membership of a professional or trade association or trade union, and political opinion(s). LK may also process personal data relating to criminal convictions and offences.

LK collects and holds its web traffic information when you visit LK’s website or communicate with LK through a social network service such as Facebook or LinkedIn. For more information see LK’s Cookie Policy.

HOW LK COLLECTS, HOLDS AND PROTECTS PERSONAL INFORMATION

LK generally collects personal information directly from prospective clients, clients and their authorised representatives, suppliers, contacts or staff in the following circumstances and ways:

information collected by LK in the course of providing legal services, including during the client and matter acceptance process;
as a consequence of your relationship with one or more of LK’s clients;
when you apply for employment, both paid and unpaid, with LK;
as a former employee of LK;
when you accept an invitation to, or attend, an LK event;
when you sign up to an LK online service or mailing list or complete an enquiry form on LK’s website;
when your details are entered into LK’s client relationship management software;
information collected via LK’s email, telephone, fax, SMS or any other electronic communication method;
information collected via LK’s website and social media channels in the form of information provided by your web browser, through the use of cookies or similar software (see LK’s Cookie Policy);
through independent investigation; and
information collected by LK by the use of CCTV on LK’s premises.

LK holds personal information in secured electronic and physical form.

LK takes the protection of all information it holds very seriously and has technical and organisational policies, processes and controls in place to protect it from misuse, interference and loss, and from unauthorised access, modification or disclosure.

LK also engages the services of third party providers of technology services to store the personal information it collects. Third party data storage providers adhere to the relevant privacy and data protection laws and regulations, as well as the appropriate information security industry standards, in the way that it holds personal information.

All LK permanent and contract staff with access to confidential information are subject to confidentiality obligations. LK also conducts regular security trainings.

LK has procedures in place to deal with any suspected data breaches and where legally required to do so, LK will notify you and the applicable regulators of any breach.

PURPOSES OF COLLECTING, HOLDING, USING, PROCESSING AND DISCLOSING PERSONAL INFORMATION

LK collects, holds, uses, processes and discloses personal information for the following purposes:

to enter into agreements for the provision of legal services with LK’s clients and to deliver these services;
to manage, account for and improve LK’s service to its clients;
to ensure the physical security of LK’s systems, staﬀ and premises (including the use of CCTV equipment and access passes);
to meet LK’s legal, regulatory and ethical obligations (including in respect of managing potential conﬂicts of interest); and
with the consent of the data subject, to market LK’s services.

LAWFUL BASES FOR PROCESSING PERSONAL INFORMATION

LK’s lawful bases for processing personal data are any one or more of the following:

the consent of the data subject to the processing of his or her personal information for one or more speciﬁc purposes. This consent may be revoked at any time, by emailing dataprotection@lk.law;
performance of a contract to which the data subject is party or to take steps at the request of the data subject prior to entering into a contract;
fulﬁlment of LK’s legal obligations;
processing and responding to requests, enquiries or complaints received by the data subject;
processing that is necessary for the performance of a task carried out in the public interest; and
processing that is necessary for the purposes of LK’s legitimate interests, except where these interests are overridden by the data subject’s interests or fundamental rights and freedoms.

For further details about the lawful bases upon which LK processes personal information, please email dataprotection@lk.law.

SOURCES AND RECIPIENTS OF PERSONAL INFORMATION

The sources of personal information collected, held and used by LK include clients, staff, intermediaries, third parties connected to the data subject (such as their business or personal associates, or employers) and open-source material (such as public records or other information freely available on the Internet).

The following is a list of potential recipients of personal information (in each case including respective employees, directors and officers):

LK’s constituent law ﬁrms. Reasonable endeavours are made to ensure that personal information is only accessible by those who have a lawful basis or legitimate interest in processing it. LK has an intra-office transfer agreement to safeguard these personal data transfers. Requests for restrictions on access should be made to dataprotection@lk.law;
LK’s clients, their professional advisers and their employers and employees;
barristers, solicitors, experts or other professionals LK instructs to carry out work in the furtherance of the delivery of legal services;
advisors and service providers of LK, including but not limited to LK’s accountants, auditors, insurers and litigation support vendors;
third party IT service providers, including cloud service providers;
courts or tribunals;
law enforcement agencies, regulators or other government or supervisory bodies with a legal right to the material or a legitimate interest in material; and
third parties with whom LK collaborates on marketing activities but only for the purposes and duration of the initiative / event.

Where LK enters into an engagement with a third party, LK confirms that the third party is obliged to adhere to the relevant privacy and data protection laws and regulations, including the GDPR, and that personal information is disclosed on a confidential basis only.

The transfer of personal data to third parties located outside of the United Kingdom (in the case of LK Law LLP) or outside of Australia (in the case of LK Law Pty Ltd) is addressed in the next section.

DISCLOSURE OF PERSONAL INFORMATION TO OVERSEAS RECIPIENTS

LK may disclose personal information to its constituent law firms in Australia and the United Kingdom, as well as to other recipients located overseas (including Asia, Europe, the Middle East, the Asia Pacific region and the Americas), if LK is required to do so to provide legal services. For example, where a party to a claim is based overseas, is related to an overseas entity, or a third party (such as an advisor or an IT service provider) is located overseas.

If so, LK will take such steps as are reasonable in the circumstances to ensure that the constituent law firms and recipients located overseas handle the data subject’s personal information in accordance with the relevant privacy and data protection laws, regulations and guidelines, and make such persons accountable if they mishandle the information. LK will also take such steps as are reasonable in the circumstances to ensure that there is no subsequent transfer of the said information without its authorisation.

LK has in place an intra-group transfer agreement to safeguard these personal data transfers. If, in the future, LK reorganises or transfer all or part of its business, LK may need to transfer your information to new entities or third parties through which LK’s business will be carried out.

Web traffic information is disclosed to Google Analytics when you visit LK’s website. Google stores information across multiple countries.

When you communicate with LK through a social network service such as Facebook or Twitter, the social network provider and its partner may collect and hold your personal information.

WEBSITE

LK uses cookies on its website. Please see LK’s Cookie Policy for details.

LK’s website may from time to time contain links to other sites that are controlled by third parties. Visitors should consult these other sites’ privacy policies and please be aware that LK does not accept responsibility for their use of information about you.

RIGHTS OF DATA SUBJECTS

Data subjects to whom the relevant legislation applies, have certain rights in respect of their personal data.

These rights, include:

the right to be informed about the collection and use of their personal information;
the right to request access to their personal information;
the right to request rectiﬁcation and / or the correction of their personal information;
the right to request erasure of their personal information;
the right to object to the processing of their personal information;
the right to request the restriction of processing;
the right to request their data in an accessible format;
the right not to be subject to a decision based solely on automated processing, including proﬁling; and
the right to lodge a complaint to the supervisory authority.

The data subject also has the right to withdraw their consent to the processing of their data.

To exercise these rights, please email dataprotection@lk.law or call +61 8 8239 4600 (Australia) and +44 207 400 2180 (United Kingdom).

If LK holds personal information about the data subject, it will give them access to the information on request in accordance with the relevant privacy and data protection laws, regulations and guidelines. LK may charge a reasonable fee for the processing of this request.

LK will also take reasonable steps to correct, rectify or erase any personal information it holds, on request by the data subject and in accordance with the relevant privacy and data protection laws, regulations and guidelines, when satisfied that the current personal information of the data subject is inaccurate, out-of-date, incomplete, irrelevant or misleading, having regard to the purposes for which it is held.

Where a data subject chooses not to provide personal information, or where they exercise their right to limit the processing of personal information, LK may be unable to provide relevant services, or there may be a restriction on the services that can be provided.

Formal Complaints Procedure (Data Protection)

First stage: If you wish to raise your concerns or make a complaint in relation to how your data is handled, please contact dataprotection@lk.law. Alternatively, please send a letter to LK Law LLP, 33 Blackfriars Lane, London EC4V.

We will acknowledge receipt of any complaint within 30 days. While there is no maximum time limit for providing a response, we will endeavour to adhere to the ICO’s guidance and provide a response within three months, and in any event without undue delay.

Second Stage: In the event that you are not satisfied with the outcome of your complaint or the way it is handled after the First Stage, you have a right to escalate the matter to the following supervisory authorities:

Information Commissioner’s Office on https://ico.org.uk/make-a-complaint/.

Australia

Office of the Australian Privacy Commissioner.

A complaint can be made via the website of the Office of the Australian Privacy Commissioner located here.

United Kingdom

Information Commissioner’s Office.

A complaint can be made via the channels set out by the Information Commissioner’s Office located here.

RETENTION OF PERSONAL INFORMATION

LK only keeps personal information for as long as necessary to fulfil the purposes for which it was collected. The retention periods are set out in the client’s letter of engagement. LK Law LLP’s policy is to retain personal information in relation to a client matter for 15 years from the conclusion of that matter. This is subject to certain exceptions. LK Law Pty Ltd’s policy is to retain personal information in relation to a client matter for 7 years from the conclusion of that matter.

To request information about LK’s retention policy or the destruction of personal information, please write to dataprotection@lk.law.

USE OF ARTICIAL INTELLIGENCE (AI)

For the purposes of providing legal services, LK may utilise commercially available AI products where it is necessary, provides efficiencies and/or is the best solution in the circumstances. In deciding to do so, LK will conduct a due diligence process to ensure that the AI product complies with the relevant legal requirements and it will regularly review the AI product to ensure continued compliance with legal requirements. LK does not, and will not, input personal information into open-source publicly available generative AI tools such as ChatGPT.

To opt-out of the input of your personal information into commercially available AI products by LK, please contact dataprotection@lk.law.

MARKETING SERVICES

You may withdraw your consent to receive marketing materials from LK at any time. An option to unsubscribe will be contained in every marketing communication LK sends. Alternatively, consent may be withdrawn at any time by writing to dataprotection@lk.law.

Please note that unless you exercise your right to request the deletion of your data (by emailing dataprotection@lk.law), LK will continue to store your data on its contact relationship management database (HubSpot) beside a note about your mailing preferences.

CHANGES TO THIS PRIVACY NOTICE

This Privacy Notice is regularly reviewed and updates will appear on LK’s website at www.lk.law.

This Privacy Notice was last updated in March 2025.

LK invites comments on the effectiveness of this policy and will take into account any suggestions in reviewing this Privacy Note.

HOW TO CONTACT LK

If you have any questions about this Privacy Notice or any personal information LK holds about you, please contact dataprotection@lk.law.