Privacy Collection Notice

DLC Legal Pty Ltd (ABN 33 652 237 413) ("DLC Legal", "we", "us") operates the DLC Docs portal. This notice explains how we handle personal information collected through the portal. It supplements the DLC Legal Privacy Policy at dlclegal.com.au/privacy-policy, which continues to apply. Where the two differ for the portal, this notice applies.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

• Your account details: name, email address, business name, ABN and password (stored in encrypted form; we cannot see it).
• Business details you enter in the questionnaire, including registered and postal addresses.
• Names, job titles, email addresses and phone numbers of your staff, contractors and external providers (for example your IT provider) whom you nominate for roles in your policies.
• ASIC company extracts you choose to upload.
• Purchase records: package, licence term, amount paid and dates. Card details are entered directly with Stripe and are never seen or stored by us.
• Referral partner applications: business and contact details, and membership confirmations.
• Technical information such as IP address, browser data and session cookies needed to keep you signed in and keep the portal secure.

When you enter details of your staff or providers, you tell us that you are authorised to provide them and that you have told those people (or will tell them) that their details will be included in your policies and held by DLC Legal for that purpose. Only enter what you need: an external business name and general contact details are enough for a provider; a named individual is not required.

• To create your account, verify your business and process payment.
• To populate your policies and let you download them during your licence term.
• To apply yearly SMB1001 updates to your saved policies and tell you when they are ready.
• To send purchase confirmations, licence reminders and service notices.
• To assess referral partner applications and calculate commissions.
• To prevent misuse and fraud and to meet our legal obligations.

If you do not provide the information requested, we may not be able to generate your policies.

When you enter an ABN, we check it against the public Australian Business Register to confirm the entity name.

If you upload an ASIC extract, the file is sent to an artificial intelligence model, accessed through our platform provider, solely to read the company name, ACN, ABN and registered address so you can review them. The extract is processed for that request only and is not saved to your account or used to train the model. The model provider may process the file outside Australia. Uploading an extract is optional; you can type the details instead.

• Stripe, to process payments.
• Our hosting, database, storage and email providers, who store and deliver the portal and its emails on our behalf.
• Our AI model provider, only for ASIC extracts you upload.
• The referral partner who referred you, limited to the fact of your purchase for commission purposes.
• Our professional advisers, and government or regulatory bodies where required or authorised by law.

Some of these providers store or process information overseas, including in the United States. We take reasonable steps to ensure they protect it to a standard consistent with the Australian Privacy Principles. We never sell, rent or trade personal information.

Your answers and generated policies are stored in private, access-controlled storage. Only you, signed in to your account, can open them, and download links expire after a short time. DLC Legal staff with administrator access can view account records to provide support and manage licences.

We keep your information while your licence is live and for as long as needed afterwards for legal, tax and record-keeping purposes, then delete or de-identify it.

We may email you about updates to your pack and related DLC Legal products. You can unsubscribe at any time using the link in each email. Service emails about your purchase and licence will still be sent.

You can update most details yourself in your account. To request access to or correction of personal information we hold, or to make a privacy complaint, email privacy@dlclegal.com.au or enquiries@dlclegal.com.au. We aim to respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.