Roche Legal QLD Pty Ltd (ABN 91 678 444 052) (“we”, “us”, “our”)
Last updated: 29 September 2026
Roche Legal is a Queensland law firm practising primarily in personal injury, TPD, wills and estate matters. We collect and handle personal information, including sensitive health information, in order to provide legal services. This policy explains what we collect, why, who we share it with, and your rights. We handle personal information in accordance with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth), and our professional obligations under the Australian Solicitors Conduct Rules and the Legal Profession Act 2007 (Qld).
1. What we collect
Identity and contact information: name, date of birth, address, phone, email, and identity verification documents.
Sensitive information, where relevant to your claim and with your consent:
- Health information, including medical records, diagnoses, treatment history, rehabilitation records, and medico-legal reports
- Criminal record information, where relevant to a matter
Claim-related information: accident and incident details, police reports, employment and income records, tax records, insurance and superannuation policy details, Medicare and Centrelink information, financial information relevant to your claim or our costs agreement.
Wills and estate information: details of your family, the people you want to benefit, your executors, guardians and assets, and for estate disputes, your relationship to the person who died and details of their will and estate. Much of this is about people other than you.
Government-related identifiers such as Medicare numbers, only where required to conduct your matter (for example, Medicare notice of charge and NDIS/Centrelink clearances).
Website and communication data: information you submit through our website forms, call and message records, and technical data such as IP address, browser type, pages visited, the ad or search that brought you to our website, and information collected by our advertising, analytics, security and bot protection tools (see sections 7 and 10).
2. How we collect it
We collect information:
- Directly from you, in person, by phone, email or SMS, through forms on our website, or through our AI assistant (see section 8).
- From third parties where necessary for your matter, including your treating doctors and hospitals, insurers (such as CTP insurers and WorkCover Queensland), your employer, superannuation funds and their insurers, the Queensland Police Service (including through Right to Information processes), Medicare, Centrelink, the NDIA, courts and tribunals, barristers, and medico-legal experts, and in estate matters, executors, beneficiaries and other parties to the estate.
- From publicly available sources where relevant to your matter.
If you give us personal information about another person (for example, a family member or witness), you should ensure they are aware of this policy.
You may deal with us anonymously or using a pseudonym for general enquiries, but we cannot act for you in a legal matter without identifying you.
3. Automated communications when you contact us
When you complete an enquiry form on our website, you will typically receive an automated response by SMS and email confirming receipt and providing next steps. By submitting the form with your phone number and email address, you consent to receiving these communications.
If you use our compensation calculator and choose “No thanks” when asked whether a lawyer should contact you, we still send your estimate to you once by email and SMS, and we keep one copy of your answers for record keeping purposes only. We will not contact you about your claim unless you ask us to.
These automated messages are sent through third-party communication and workflow platforms acting as our service providers (see section 7 on overseas disclosure). Every commercial electronic message we send identifies Roche Legal as the sender and, where the message is marketing in nature, includes a functional unsubscribe facility as required by the Spam Act 2003 (Cth). You can opt out of SMS or email communications at any time by replying STOP to an SMS, using the unsubscribe link in an email, or contacting us directly. We will always retain the ability to contact you about an active legal matter.
4. Why we collect and use your information
We use personal information to:
- Provide legal advice and representation, including preparing, negotiating, and litigating your claim
- Comply with pre-court procedures under the Motor Accident Insurance Act 1994 (Qld), Workers’ Compensation and Rehabilitation Act 2003 (Qld), and Personal Injuries Proceedings Act 2002 (Qld), and with court rules and directions
- Verify your identity and conduct conflict checks
- Manage our costs agreements, trust accounting, and billing, in compliance with Queensland Law Society trust account requirements
- Respond to your enquiries
- Comply with our legal, regulatory, and professional obligations
- With your consent, send you information about our services and legal developments relevant to you
5. Direct marketing
We may send you updates or information about our services where you have enquired with us or been a client, and you would reasonably expect to receive them. Every marketing communication will include a simple way to opt out, and we will action opt-outs promptly. We do not sell, rent, or trade your personal information to third parties for their marketing.
6. Who we disclose your information to
We only disclose your information where necessary to run your matter or where required or authorised by law. Depending on your matter, this may include:
- Courts, tribunals, and registries
- Insurers and their representatives, including CTP insurers, WorkCover Queensland, public liability insurers, and superannuation fund insurers
- Barristers, medico-legal experts, and other consultants engaged on your matter
- Your treating health providers
- Government agencies including Medicare, Centrelink, the NDIA, the Australian Taxation Office, and the Queensland Police Service
- Superannuation trustees and administrators (for TPD claims)
- Executors, administrators, beneficiaries and other parties to a will or estate matter, and their lawyers
- Litigation funders or cost assessors, where applicable and with your knowledge
- Our service providers, including practice management, document storage, accounting, IT support, and communication platforms, under obligations of confidentiality
- Our advertising and analytics providers (Google, Microsoft and Meta), limited to the website information described in section 10
- Any person you authorise us to share information with
We may also disclose information where we reasonably believe disclosure is required by law, court order, or to lessen or prevent a serious threat to life, health, or safety.
7. Overseas disclosure
Your information is primarily stored and processed in Australia, including our document systems and SMS delivery platform. However, some of our service providers store or process data overseas:
- Workflow automation services are hosted in the European Union (Germany).
- Our email is provided by Microsoft 365, which may store or process data in Australia and other countries.
- Our AI assistant, Jamie, is operated by a provider that records and stores conversations in the United States (see section 8).
- Our SMS provider is part of a global group and some support functions may occur outside Australia.
- Cloudflare, a United States based company, delivers and protects our website and our remote access systems. Information sent through them, including form entries, passes through Cloudflare’s network, which may include servers outside Australia.
- Our advertising and analytics providers, Google, Microsoft and Meta, receive information collected by their tools on our website, and Google receives the coded email address described in section 10. They process it in the United States and other countries.
Where information is handled overseas, we take reasonable steps to ensure providers are subject to contractual and security obligations consistent with the Australian Privacy Principles. Your client file is not sent overseas for processing except through these infrastructure providers.
8. Artificial intelligence and automation
We use technology, including AI-assisted tools and workflow automation, to improve the efficiency and quality of our services, for example in document drafting, legal research, and managing communications. Where we use these tools:
- All substantive legal advice and decisions about your matter are made and reviewed by a qualified legal practitioner. No decision affecting your legal rights is made solely by automated means.
- We take reasonable steps to ensure client information used with these tools is handled securely and confidentially, and we do not permit client information to be used to train publicly available AI models.
- You may ask us at any time how technology has been used in connection with your matter.
Jamie, our AI assistant. Our website and some of our text messages offer Jamie, an AI assistant, not a person. If you talk to Jamie, our provider in the United States records and transcribes the conversation, and we keep it so we can follow up your enquiry. You do not have to use Jamie, and you can call or email us instead.
Automatic checks on our forms. Some of our website forms ask screening questions, such as when your injury happened or your relationship to a person who has died. If your answers show we are unlikely to be able to help through that form, the form tells you and does not send. This is an automatic check, not legal advice about your situation, and you can still call us on 1300 335 334 to talk it through.
9. Storage, security, and retention
We store information in secured practice management and document systems, protected by access controls, encryption, and network security measures. Physical files are held securely at our offices.
We retain client files for a minimum of 7 years after your matter concludes, consistent with Queensland Law Society guidance and our professional obligations. Files for clients who were minors are retained at least until the client turns 21, or 7 years after the matter concludes, whichever is later. When information is no longer required, we destroy or de-identify it securely.
10. Cookies, advertising, analytics and security
Our website uses cookies and similar tools from Google (Google Analytics and Google Ads), Microsoft Advertising and Meta (Facebook and Instagram). They record things like the pages you visit, the ad or search that brought you to us, and whether you sent us an enquiry. We use this to see how our site is used, to measure which ads lead to enquiries, and to show our ads to people who have visited our site. These companies may link this with other information they hold about you, such as your account with them, and use it to improve their own services. When you send us an enquiry, we also keep a record of the ad, search term and page that led you to us.
If you use our compensation calculator and ask us to contact you, our website also sends Google a coded (hashed) copy of the email address you entered. Google uses it only to tell us whether your enquiry came from one of our ads. We do not send Google your injury details or your other answers, and we do not send the coded copy if you choose “No thanks”.
You can block or delete cookies in your browser, though some parts of our site may not work fully. You can turn off personalised ads at myadcenter.google.com, at account.microsoft.com/privacy/ad-settings and in your Facebook or Instagram ad settings, or opt out at youronlinechoices.com.au. Google Analytics has an opt-out at tools.google.com/dlpage/gaoptout. Google explains how it uses this information at policies.google.com/technologies/partner-sites, and Microsoft at privacy.microsoft.com/privacystatement.
Our compensation calculator saves what you type in your own browser so you can come back to it. It stays on your device, and you can remove it with the calculator’s start over option or by clearing your browser data. Our website may link to other sites, and this policy does not apply to them.
We use Cloudflare Turnstile to protect our enquiry forms from automated abuse. Turnstile runs in the background and generally does not require you to do anything. To assess whether a visitor is human, Cloudflare collects limited technical information from your browser, including your IP address, browser user agent, and related connection characteristics, and may set a cookie for this purpose. Cloudflare does not use this information to serve advertising to you. Cloudflare’s handling of this information is described in the Cloudflare Turnstile Privacy Addendum. See section 7 regarding overseas disclosure.
11. Children and clients under 18
We regularly act for injured children and young people, through a parent, guardian, or litigation guardian. Where we hold personal information about a person under 18, it is collected and handled with the consent and involvement of their parent or guardian, subject to the same protections as all client information, and retained in accordance with section 9 (including extended retention reflecting limitation periods for minors). We do not knowingly collect information from children other than in connection with a legal matter or with parental consent.
12. Access and correction
You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, or incomplete. Contact our Privacy Officer using the details below. We will respond within 30 days. We may need to verify your identity, and in limited circumstances may refuse access where the law permits (for example, where information is subject to legal professional privilege belonging to another client). If so, we will tell you why in writing. We do not charge for making a request, though a reasonable fee may apply for retrieving and copying archived records.
13. Complaints
If you believe we have mishandled your personal information:
- Contact our Privacy Officer (details below) with the details of your concern
- We will acknowledge your complaint within 7 days and aim to resolve it within 30 days
- If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or 1300 363 992. You may also contact the Queensland Legal Services Commission regarding the conduct of a law practice.
14. Contact us
Privacy Officer
Roche Legal
Level 34, 1 Eagle Street
Brisbane City QLD 4000
Phone: 1300 335 334
Email: privacy@rochelegal.com.au
15. Changes to this policy
We review this policy regularly and may update it from time to time. The current version will always be published on our website with the date of last update.