1. About this policy
McCulloch & Buggy respects the privacy of clients, prospective clients, service providers and other people whose personal information we handle. This policy explains how we collect, hold, use and disclose personal information and how individuals can request access, correction or make a privacy complaint.
We handle personal information in accordance with applicable Australian privacy laws, including the Australian Privacy Principles where they apply.
2. Personal information we may collect
Depending on our relationship with you and the nature of a matter, we may collect:
- identity and contact information, including names, addresses, telephone numbers and email addresses;
- information provided in enquiries, instructions, correspondence and legal documents;
- information about claims, disputes, insurance, property, conveyancing, wills, estates, probate, employment or commercial matters;
- financial and billing information;
- professional, employment or recruitment information;
- information obtained from clients, insurers, witnesses, experts, courts, tribunals, government bodies, public sources and other third parties; and
- technical information associated with use of our website or online enquiry form.
Some legal matters may involve sensitive information, such as health information, criminal records or other information protected by law. We collect sensitive information only where it is reasonably necessary for our functions and permitted by law.
Our work includes acting in insurance and defendant matters, a limited amount of plaintiff work, and transactional matters such as conveyancing, wills and probate. The information we collect will depend on the services we provide and may include property, financial, family, beneficiary and estate information where relevant.
3. How we collect and hold information
We generally collect information directly from individuals, including through meetings, telephone calls, email, correspondence and our website contact form. We may also collect information from clients, insurers, courts, tribunals, government agencies, other legal representatives, experts, witnesses, public records and service providers.
Personal information may be held in physical files and electronic systems operated by us or trusted service providers. Our online enquiry form is processed using Jotform. Although we seldom receive new clients through the website, information submitted through the form is handled in accordance with this policy.
Our Actionstep practice-management data is hosted in Australia in Amazon Web Services’ Sydney region (ap-southeast-2).
4. Why we use and disclose information
We may use or disclose personal information to:
- respond to enquiries and determine whether we can act;
- provide legal services, advice and representation;
- manage conflicts, client relationships, files, billing and administration;
- communicate with clients, insurers, courts, tribunals and other parties;
- engage barristers, experts, investigators, technology providers and other service providers;
- meet professional, regulatory, insurance, taxation and legal obligations; and
- protect our lawful interests and maintain the security of our systems.
5. Overseas disclosure and service providers
Although our Actionstep practice-management data is hosted in Australia, some technology or professional service providers may store or process personal information outside Australia.
We also act for a small number of clients in the United Kingdom. In insurance matters—principally where we act for a defendant—relevant personal information, reports and advice may be disclosed to overseas underwriters. The countries involved will depend on the client, insurer, underwriter and matter and may therefore vary.
Where applicable, we take reasonable steps required by law before disclosing personal information overseas. We limit disclosures to information reasonably necessary for the matter or service.
6. Security and retention
We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. We retain files and personal information for as long as required for legal, professional, insurance and business purposes, and securely destroy or de-identify information when appropriate.
7. Access and correction
You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. We may need to verify your identity before processing a request. Legal exceptions may apply, including where information is subject to legal professional privilege.
8. Privacy enquiries and complaints
Privacy requests or complaints can be directed to:
Richard Oldfield, Principal
McCulloch & Buggy
Level 8, 83 Mount Street
North Sydney NSW 2060, Australia
Email: ro@mcb.com.au
Phone: +61 2 9267 0500
We will consider privacy complaints and respond within a reasonable period. If you are not satisfied with our response, you may be entitled to contact the Office of the Australian Information Commissioner.
9. Changes to this policy
We may update this policy when our practices or legal obligations change. The current version and effective date will be published on our website.
Effective date: 14 July 2026.