LawConnect Privacy Policy

Effective date: 17 August 2026

Who We Are

In this Policy, LawConnect means:

• Legal Marketplace Pty Ltd (ACN 676 482 509);
• LawConnect Pty Ltd (ACN 609 467 807);
• LawConnect US Inc. Delaware (6922429);
• WealthCounsel, LLC; and
• Any of the parents, subsidiaries, affiliates or related bodies corporate of the above entities.

Where your personal information is provided directly to LawConnect, the controller of your personal information is the LawConnect entity in the country in which your personal information is collected. In the event there is no LawConnect entity in your jurisdiction, Legal Marketplace Pty Ltd, located at Level 21, International Towers 2, 200 Barangaroo Ave, Barangaroo, NSW 2000 will be deemed the data controller of your personal information.

Full details of the ATI Group’s global subsidiaries and affiliates can be found here.

This Policy

This Policy explains how we collect, use, maintain, and disclose information collected about you, including when you visit our website, use our Services (including interaction with the AI chat), attend one of our events, or otherwise interact with us. It also describes your choices regarding the use, access, deletion, and correction of your personal information.

By submitting your personal information to us, interacting with our website, or using our Services, you acknowledge and agree to the processing of your personal information as set out in this Policy. If you do not agree to this Policy, you should not use the Services or interact with our website.

From time to time, we may revise or update this Policy or our information handling practices. If we do so, the revised Policy will be published on our website at lawconnect.com (our Website).

You are not obliged to provide personal information to LawConnect. However, in many cases, if you do not provide your personal information to us, we may not be able to supply the relevant product or service you have requested.

Contact Us

If you have questions about this Policy, or about how we collect, use, or otherwise process your personal information (including the transfer of your personal information outside your jurisdiction of residence), please contact us at:

Information We Collect, How We Use It, and the Legal Basis We Rely on to Do So

When you use or access our Services or otherwise interact with us, we may collect a variety of information that identifies you, or that may be combined with other information to identify you (your Personal information). We may collect this Personal Information from you or others acting on your behalf (e.g., your employer, or a law firm), from third parties, or automatically through your use of the Services.

In some circumstances, you may provide to us, and we may collect from you, personal information about a third party. Where you provide the personal information of a third party, you must ensure that the third party is aware of this Policy, understands it, and agrees to accept it.

1. From you or someone acting on behalf of you:

2. From others:

3. Automatically:

For more information about our use of cookies and tracking technologies, please see our Cookie Notice.

Where permitted by applicable law and our obligations in contracts with our clients, we may aggregate or anonymise your data so that it no longer identifies you, and use that aggregated or anonymised data to understand how the Website and Services are used and to improve them.

Artificial Intelligence and Automated Decision-Making

Artificial Intelligence services. We may use artificial intelligence and machine learning technologies (AI Technologies), including those provided by third parties, in our business operations and to provide our Services, including to:

• support, improve and optimise our Services and operations;
• automate certain processes and communications (including administrative);
• enhance and personalise your experience with our Services; and
• for quality assurance purposes.

Where we use AI Technologies, we take all reasonable steps to ensure your personal information is handled with due care and diligence and in accordance with applicable privacy laws. We will not input your information into Public AI (an AI tool that is publicly available via the internet, operating in an open rather than a closed environment, without controls as to the use or further dissemination of information). To the extent we input your information into any AI Technologies, we will use that information to improve our internal business processes to deliver legal services to you.

Automated decision-making. LawConnect does not use automated systems (including AI Technologies) to make, or to substantially and directly assist in making, decisions about you that could reasonably be expected to significantly affect your rights or interests. The AI Technologies described above support, personalise and improve the Services; they are not used to make decisions that produce legal or similarly significant effects for you.

Who Do We Share Your Personal Information With?

Where permitted by applicable law, we share your personal information for third parties to deliver the Services or in our legitimate interest. These third parties include:

• Our affiliated companies and offices, which are generally located in Australia, New Zealand, United Kingdom, Ireland, Poland, United States and Canada.
• Our professional advisors, such as our auditors, accountants and lawyers.
• Third-party service providers (including contractors and subcontractors) who perform services on our behalf in connection with our Services. These services by third parties include:
  • hosting and backup of the Services;
  • maintenance and support of the Services;
  • marketing communications providers;
  • billing, payment processing and debt recovery;
  • security of the Services;
  • improvement of the Services; and
  • analytics and reporting on the Services.
• Lawyers and law firms engaged through the Website and Services (see “Lawyers and Law Firms Engaged Through the Services” below).
• Any other third party where you have provided your consent.
• Other third parties in connection with corporate activities such as a mergers or acquisitions or refinancings.

We may disclose personal information to regulatory authorities and other third parties to comply with a regulatory or legal obligation, to enforce our rights, or where we have a good faith belief that it is necessary for the protection of a legitimate or vital interest such as the safety of a person or property, to the extent permitted by applicable law.

Where we share information with third parties, we require that contracts are in place that permit use and disclosure of personal information only to provide the relevant service and that protect your personal information in accordance with applicable Privacy Laws.

Otherwise, we will disclose personal information to others where you have given permission, or where the disclosure relates to the main purpose for which we collected the information and you would reasonably expect us to do so.

Lawyers and Law Firms Engaged Through the Services

Where you elect as part of the Services, to disclose your personal information to a legal practitioner and/or law firm, we will disclose that information in order to fulfil our obligations to you.

• Interaction with lawyers: opting to connect with a lawyer may result in you receiving introduction messages from lawyers.
• Anonymity: your identity remains anonymous until you engage with a lawyer. Your identity and contact details are disclosed only upon engagement.
• Sharing of information: if the lawyer deems the case viable and wishes to pursue it further, we will share your personal information and the full, non-anonymised matter with them to facilitate their direct assistance.

Once we share your personal information with the lawyers and/or law firms you request, those relevant lawyers and/or law firms will handle the personal information in their control in accordance with privacy policy related to their firm.

SMS and Messaging Communications

If you provide your mobile phone number, we may use this number to send you communications via SMS or other messaging platforms (such as WhatsApp), including:

• service-related or transactional messages regarding your use of LawConnect;
• updates about your legal matters;
• promotional or marketing messages about LawConnect services and events (excluding third-party marketing), if you have opted in.

Standard messaging and data rates may apply as determined by your mobile carrier.

Your Direct Marketing Preferences

You can opt out of receiving certain marketing communications from us at any time by clicking the unsubscribe link in the email communications we send, following the unsubscribe instructions in an SMS or messaging communication, or by contacting us at help@lawconnect.com. We may continue to send you non-promotional communications, such as service-related emails, billing information, and certain product updates.

Where we rely on your consent, for example, for marketing or promotional messages, or to collect sensitive information, we obtain it separately through a specific opt-in, and not solely through your acceptance of this Policy.

Changes to This Policy

We may update this Policy from time to time for reasons such as operational or regulatory changes. If we make any changes, we will notify you by posting the revised Policy on this page, revising the “Effective Date” at the top of this Policy and, in some cases, we may provide you with additional notice such as within our Services or by sending an email. We encourage you to review our Policy regularly for any changes.

Children

Our Website and Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from individuals under the age of 18. If you become aware that an individual under 18 has provided us with personal information, please contact us using the details in the “Contact Us” section. If we become aware that an individual under 18 has directly provided us with personal information, we will take steps to delete that information.

International Transfers

Our Services are hosted and operated in Australia, New Zealand, the United States, Canada and the United Kingdom through LawConnect and our service providers. By using our Services you acknowledge that your personal information may be accessed by us or transferred to us in those jurisdictions, and accessed by or transferred to our personnel, affiliates, partners, and service providers who are located around the world.

As required by applicable laws, we take appropriate measures to ensure adequate protection of your personal information when it is transferred internationally and, if necessary, seek your prior consent. For example, where we transfer personal information from the United Kingdom to a country not covered by UK adequacy regulations, we use an appropriate safeguard, such as the UK International Data Transfer Agreement (IDTA) or the Standard Contractual Clauses with the UK Addendum.

Please note that your personal information may be subject to the laws of the jurisdiction in which you or your personal information are situated.

How We Protect Your Personal Information

We are committed to protecting your personal information and take steps reasonable in the circumstances to protect it against loss, and against unauthorised access, use, modification or disclosure, including, for example:

• firewalls implemented across all office networks and sites;
• anti-virus software deployed on all workstations;
• restricting and monitoring access to systems, including through suitable authentication measures;
• cyber security training for all employees at onboarding and throughout the year;
• imposing restrictions on physical access to paper files;
• requiring any third parties engaged by LawConnect to provide appropriate assurances to handle your personal information in a manner consistent with the applicable privacy laws; and
• taking reasonable steps to destroy or de-identify personal information after we no longer need it.

However, the internet is not a secure environment and we cannot warrant that the personal information you share will be completely secure. When you share personal information with us, you do so at your own risk, and we recommend you take security precautions to protect your personal information on the internet.

Storage of Personal Information

We keep your personal information only for as long as necessary to fulfil the purposes for which we collected it, including to provide the Services and to meet our legal, accounting, tax and regulatory obligations and to establish, exercise or defend legal claims. To determine the appropriate retention period, we consider the nature, sensitivity and volume of the personal information, the purposes for which we process it, whether those purposes can be achieved by other means, any minimum retention periods required by law, and whether you have withdrawn consent or objected to processing.

Where you hold an account, we generally retain your account information for the duration of your account and for 7 years after it is closed, unless a longer period is required by law or to resolve a dispute. When we no longer need your personal information, we securely destroy or de-identify it. We also retain your personal information in accordance with the terms and conditions of our contract with you.

Links to Other Websites or Third-Party Applications

Our website may contain links to other websites of interest. We do not have any control over external websites or their privacy procedures, and you should review the privacy statement of any website before providing your personal information.

Your Rights in Relation to Your Personal Information

You have the option not to share information with us. If you choose not to share your personal information, you may be unable to create a user account or take advantage of some features of the Services. Some information may still be collected automatically through your use of the Services.

For personal information we process on behalf of our clients, we do so on the instructions of the client as controller.

You may have rights under data protection laws in relation to the personal information we hold about you, depending on which laws are applicable (e.g. the European General Data Protection Regulation (GDPR) or the UK Data Protection Act 2018) such as:

• Access: the right to request information regarding our processing of your personal information and access to the personal information which we hold about you.
• Correction: the right to request that we correct the personal information we hold about you if it is inaccurate or incomplete.
• Erasure: the right to request the deletion of your personal information in certain circumstances.
• Restriction: the right to object to, and requesting that we restrict, our processing of your personal information in certain circumstances.
• Transfer/portability: the right to request transfer of your personal information directly to a third party where this is technically feasible.

We will not charge you a fee for making a request to access your personal information. However, we may charge a reasonable fee for giving you access to it.

In some cases, we may refuse access or correction, or provide access only to certain information. In some cases, we may refuse to give you access to the information you have requested or only give you access to certain information. If we do this, we will provide you with a written statement setting out our reasons for refusal, except where it would be unreasonable to do so.

For us to facilitate your request, please ensure that your request specifies the type of request in the subject line and contains the information we need to investigate the request. We may require additional information from you to verify your identity or understand your request before providing additional information or actioning your request.

We will action requests to the extent required or permitted by applicable law and within the timeframes (if any) in that law.

Additional Information Specific to United Kingdom Residents

LawConnect is the data controller of the personal information it collects from you; for information we process on behalf of a law-firm client, contact that client to exercise your rights.

Additional Information Specific to California Residents

The California Consumer Privacy Act of 2018 (“CCPA”) and the California Privacy Rights Act 2020 (“CPRA”) provide California residents with specific rights regarding their personal information (“California Privacy Rights”):

• Disclosure Requests: related to our collection and sharing of personal information, or to your specific personal information collected in the previous 12 months;
• Do Not Sell or Share Requests: that we not sell or share personal information about you in accordance with the regulations; and
• Deletion Requests: that we delete (and direct our service providers to delete) your personal information, subject to certain exceptions.

The categories, sources and business or commercial purposes of the personal information we collect are set out in the “Information We Collect…” section above, and our retention approach is described in “Storage of Personal Information”. We share online identifiers, internet and other electronic network activity information, and similar personal information with advertising partners for cross-context behavioural advertising (targeted advertising).

Exercising your California Privacy Rights. To make a Disclosure Request or a Deletion Request, email privacy@ati-global.com with the subject “California Resident – CCPA Request”.

To make a Do Not Sell or Share request, submit a request to privacy@ati-global.com

Once you make a Do Not Sell or Share Request, we will wait at least twelve (12) months before asking you to reauthorise the sale or sharing of personal information. We will not discriminate against you as a result of your exercise of any of these rights.

Because we engage in targeted advertising, we treat recognised universal opt-out preference signals, such as the Global Privacy Control (GPC), as a valid request to opt out of the sale or sharing of your personal information for targeted advertising, as required by applicable US state law.

Additional Information Specific to Nevada and Virginia Residents

Nevada Residents. We do not sell or share your personal information with third parties for their independent marketing or promotional purposes. Should you wish to submit an opt-out request under Nevada law, email privacy@ati-global.com with your name and the email address associated with your use of the Services, and “Nevada do not sell” in the subject line.

Virginia Residents. We do not sell or share your personal data with third parties for their independent marketing or promotional purposes. To exercise your Virginia Consumer Data Protection Act (“VCDPA”) rights – which include access, correction, deletion, portability, and opting out of targeted advertising, the sale of personal data, and certain profiling – email privacy@ati-global.com with “VCDPA Request” in the subject line.

Additional Information Specific to Canadian Residents

If you are in Canada, we handle your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including Quebec’s Law 25. In addition to the rights described in “Your Rights in Relation to Your Personal Information” above, you may have:

• the right to withdraw your consent to our handling of your personal information in certain circumstances; and
• the right to de-indexation to remove or de-index a hyperlink that provides access to it, where the conditions in Law 25 are met.

To exercise any of these rights, please contact our Privacy Officer using the “Contact Us” details above.

How to Make a Complaint

If you believe we have not complied with our obligations under this Policy or applicable data protection law, please contact our Privacy Officer via the “Contact Us” details above. When you make a complaint, please identify yourself and your contact details, provide a brief description of the matter and why you think we have mishandled your personal information, and tell us how you would like us to resolve it. We will acknowledge, investigate and respond as soon as practicable and within no more than 30 days.

If we are unable to assist you or you wish to escalate, you may have the right to make a complaint to the data protection authority in your jurisdiction, including:

• Australia – the Office of the Australian Information Commissioner (www.oaic.gov.au);
• New Zealand – the Office of the Privacy Commissioner (www.privacy.org.nz);
• United States – your State Attorney General;
• Canada - the Office of the Privacy Commissioner of Canada (www.priv.gc.ca) and, for Quebec, the Commission d’accès à l’information du Québec (www.cai.gouv.qc.ca); and
• United Kingdom – the Information Commissioner’s Office (www.ico.org.uk).