3D Corporate Law

Privacy Policy

As at 1 July 2026

Our commitment

We are committed to protecting your privacy. We collect, use, share, process, and manage Personal Information only as reasonably necessary for carrying out our functions and activities.

If we prepare to provide, provide you with, or reasonably anticipate that we may provide you with, any Designated Services, we will handle your Personal Information in an open and transparent way, subject to our legal obligations, in accordance with this Privacy Policy.

What does this Privacy Policy cover?

This policy applies only to Personal Information handled in connection with our AML/CTF obligations under the AML/CTF Framework. Other parts of our legal practice may be outside the Privacy Act. We still handle that information confidentially under the legal profession legislation (as defined in section 3A of the Legal Profession Uniform Law Application Act 2014 (NSW)), including the Legal Profession Uniform Law Australian Solicitors’ Conduct Rules 2015 (NSW).

Meaning of words used in this Privacy Policy

TermMeaning
AML/CTF ActAnti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth).
AML/CTF FrameworkAML/CTF Act, AML/CTF Rules and AUSTRAC guidance.
AML/CTF RulesAnti-Money Laundering and Terrorism Financing Rules 2025 (Cth).
APPsThe Australian Privacy Principles in Schedule 1 of the Privacy Act.
AUSTRACAustralian Transaction Reports and Analysis Centre.
Designated ServicesProfessional Services in Table 6 of section 6 of the AML/CTF Act, including assisting a person to buy, sell or transfer a body corporate; assisting in equity or debt financing; selling or transferring a shelf company; assisting in creation or restructuring of a body corporate.
We / us / our3D Corporate Law Pty Limited (ABN 38 629 943 460), practising as 3D Corporate Law.
KYC InformationInformation to establish initial and ongoing customer due diligence under the AML/CTF Act, including identity, beneficial owners, PEP status, sanctions status, source of wealth and funds, and nature and purpose of the business relationship.
OAICOffice of the Australian Information Commissioner.
Personal InformationInformation or an opinion about an identified individual, or an individual who is reasonably identifiable, provided in connection with AML/CTF activities.
Privacy ActPrivacy Act 1988 (Cth).
Sensitive InformationPersonal Information including racial or ethnic origin, political opinions, religious beliefs, sexual orientation, criminal record, health information, genetic information or biometric information.

What privacy law applies?

We are a “small business operator” under s 6D of the Privacy Act and become subject to the Privacy Act only in relation to AML/CTF-related activities by operation of s 6E(1A). Under APP 2 you may interact with us anonymously where lawful and practicable, however this is not possible where we are required to verify identity under the AML/CTF Framework.

How do we collect Personal Information?

We collect Personal Information only by lawful and fair means, directly from the individual unless they have consented to collection from a third party, it is unreasonable or impractical to collect directly, or we are required by law to collect from a third party. We may collect when you visit us, communicate with us, attend events, or engage us to provide services including when you supply KYC Information.

What Personal Information do we collect?

We are required by law to collect and verify certain Personal Information and may be prohibited from providing services if we cannot do so. We collect KYC Information as required by the AML/CTF Act, which may include names, addresses, contact details, job titles, and information about services, transactions and usage history.

What if you don’t provide requested information?

If you do not provide requested Personal Information, we may be unable to provide Designated Services and/or comply with our legal obligations.

Purposes of collection

We collect and use Personal Information to provide Designated Services and comply with our regulatory obligations, including under the Legal Profession Uniform Law, the Solicitors’ Conduct Rules 2015 (NSW) and the Legal Profession Uniform General Rules 2015 (NSW). We will only use your Personal Information for the primary purpose of collection, or a related secondary purpose you would reasonably expect.

Disclosure of Personal Information

Subject to legal requirements, we do not share your Personal Information with third parties except with your express permission, or to contracted service providers supporting our due diligence processes.

We may disclose where required by law, including: to lessen or prevent a serious threat to life, health or safety; where we suspect unlawful activity; by warrant or subpoena; or to AUSTRAC (without your knowledge where required under the AML/CTF Framework). We may be prohibited from notifying you of such disclosures.

How do we protect your information?

We hold Personal Information in hard copy and electronic formats, protected by administrative and technical controls including multi-factor authentication, firewalls, encryption and anti-virus software. Where a data breach is likely to result in serious harm, we will comply with the Notifiable Data Breaches scheme. AML/CTF KYC records are kept for 7 years after the relationship ends.

Cross-border disclosure

We maintain your Personal Information within Australia unless agreed otherwise. We take reasonable steps to ensure overseas recipients do not breach the APPs.

Access and correction

You can request access to or correction of your Personal Information by contacting our Privacy Officer at davidw@3dcorporatelaw.com.au. We will respond within 30 days.

Complaints

Privacy complaints are handled by our Privacy Officer. We will acknowledge within seven days and provide a written response within 30 days. If unsatisfied, you may lodge a complaint with the OAIC at oaic.gov.au.

Date reviewed: 1 July 2026.