Privacy policy and collection notice
Privacy policy
MGK Legal, a law practice in Melbourne, Victoria. Last updated 29 October 2026.
1. Who we are
MGK Legal is a legal practice in Victoria. We handle personal information in line with the Australian Privacy Principles.
2. What we collect
- Names, roles, work email addresses and phone numbers of the people who instruct us.
- Business details: legal name, Australian Business Number (ABN), address, industry and size.
- The documents you send us, and any personal information they contain about you, the other party or anyone else.
- The answers you give in our online intake form.
- Sign-in records: when you sign in, and which documents you download.
- Payment records. Card details go directly to our payment provider, Stripe. We never see or store them.
3. Why we collect it
- To decide whether we can act for you, including conflict, sanctions and identity checks.
- To provide the legal service you engage us for.
- To invoice you and keep proper records.
- To meet our professional and legal obligations.
- If you give separate consent, to improve our playbooks using de-identified review outcomes.
4. Automated checks and decisions
We use computer programs in deciding whether we can act for you. Each result is reviewed by a lawyer before any decision is made or communicated.
| Check | Information used | What it affects |
|---|---|---|
| Conflict search | Names and ABNs of you, the other party and related parties | Whether we can act |
| Sanctions screening | The same names, compared with the Australian sanctions list | Whether we can act |
| ABN verification | ABNs and names, compared with the public ABN register | Whether we can act |
| Intake screening | Your intake answers, including the type of document and any dispute | Whether the work is within our services |
| Contractor classification flags | Facts you give about a working arrangement | Points raised in the advice |
5. Who we disclose it to
| Provider | What it does | Where |
|---|---|---|
| Anthropic | Provides the AI models we use to prepare drafts and reviews | Outside Australia, including the United States |
| Supabase | Stores your account, review details and documents | Australia (Sydney) |
| Vercel | Runs our website | Australia and the United States |
| Stripe | Processes card payments, if you save a card | Outside Australia, including the United States |
| Resend | Sends our system emails, which contain your email address and the title of your request | United States |
| Provides our email, if you write to us | Outside Australia, including the United States |
We do not sell personal information. We disclose it otherwise only where the law requires, or to our professional indemnity insurer if a claim arises.
6. How we keep it secure
Documents you upload go to encrypted private storage in Sydney. They are never public: each download is checked against your account, logged, and served through a link that expires within one minute. You sign in with a one-time link sent to your email, and our administration area also needs a code from an authenticator app. Documents you email to us are saved to your file. We keep files for 7 years after the work ends, then destroy them securely.
7. Access and correction
You may ask for access to, or correction of, the personal information we hold about you by writing to us through our contact page. We respond within 30 days.
8. Complaints
Write to us through our contact page. We acknowledge a privacy complaint within two business days and respond in writing within 30 days. If you are not satisfied, you may contact the Office of the Australian Information Commissioner, https://www.oaic.gov.au.
Collection notice (shown on our intake form)
MGK Legal collects the information in this questionnaire, and in the documents you send, to decide whether it can act for you and to provide the service. It runs automated conflict, sanctions and ABN checks, and a lawyer reviews every result. Your documents and review details are stored in Sydney by Supabase. Documents are processed by Anthropic, our email is provided by Google, system emails are sent by Resend, and card payments are processed by Stripe; these providers process information outside Australia, including in the United States. If you do not give us this information, we cannot act for you. This privacy policy explains how to access or correct your information and how to complain.