Privacy Policy

Last updated: October 2026

​

1. About this Privacy Policy

Ekaterina Komarovskaya ABN 53 486 589 716 trading as EKom Legal (“EKom Legal”, “we”, “us” and “our”) understands the importance of protecting the privacy and confidentiality of personal information.

This Privacy Policy explains how EKom Legal collects, holds, uses and discloses personal information in connection with our legal practice and how you may access or correct your personal information or make a privacy complaint.

We handle personal information in accordance with applicable Australian laws and professional obligations, including the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) (AML/CTF Act), applicable AML/CTF Rules and applicable legal professional and conveyancing requirements.

This Privacy Policy may be updated from time to time to reflect changes in law, regulatory requirements, technology or our business practices. The current version will be published on our website.

​

2. Personal information we collect

Personal information is information or an opinion about an identified individual or an individual who is reasonably identifiable.

The types of personal information we collect depend on the nature of our relationship with you and the legal services we provide.

We may collect:

• your full name, residential, postal and business addresses, telephone number and email address;

• your date and place of birth;

• your occupation, employment information and professional details;

• identification and verification information, including information contained in passports, driver licences, Medicare cards, birth certificates and other identification documents;

• photographs, facial images and biometric information where used as part of an electronic identity verification process;

• information necessary to verify your identity, authority and right to deal with property;

• property information, including ownership details, title information, council and utility information, valuations, tenancy information and transaction details;

• information about companies, trusts, partnerships, self-managed superannuation funds and other entities with which you are associated;

• information concerning directors, shareholders, trustees, beneficiaries, beneficial owners, controllers, representatives and authorised persons;

• information about your business activities and business holdings;

• financial information, including bank account details, loan and finance information, payment information and transaction details;

• information concerning your source of funds and, where relevant or required, your source of wealth;

• tax information, including Tax File Number information where collection is required or authorised by law;

• information relevant to the legal services we provide, including information concerning your personal, family, financial or business circumstances;

• information obtained through property, company, court, government and other searches;

• records of correspondence, telephone conversations, meetings, instructions and other communications;

• information about your interaction with our website and electronic services, including IP address, browser and device information; and

• other information reasonably necessary for us to provide legal services or comply with our legal, regulatory and professional obligations.

We collect only personal information reasonably necessary for our functions, activities and professional obligations.

​

3. Sensitive information

Sensitive information is a category of personal information and includes information or opinions concerning matters such as an individual's racial or ethnic origin, political opinions or associations, religious or philosophical beliefs, trade or professional association or trade union membership, sexual orientation or practices, criminal record, health information and certain biometric information.

We may collect sensitive information where:

• you consent and the information is reasonably necessary for one or more of our functions or activities;

• collection is required or authorised by Australian law or a court or tribunal order;

• a permitted general situation or other exception under the Privacy Act applies; or

• collection is otherwise permitted by law.

Sensitive information may be relevant to a legal matter or may need to be collected or verified as part of our AML/CTF obligations.

We do not collect sensitive information merely because it is publicly available.

​

4. Verification of Identity and Right to Deal

As part of providing conveyancing and property-related legal services, EKom Legal may be required to verify the identity of clients and other persons and establish their authority or right to deal with property.

We may collect and use identification documents, photographs, facial images, biometric information and other verification information for these purposes.

Verification may be undertaken directly by us or through third-party identity verification service providers in accordance with applicable conveyancing requirements, participation rules, electronic conveyancing requirements and our professional obligations.

​

5. AML/CTF customer due diligence

Where EKom Legal provides a designated service under the AML/CTF Act, we are required to undertake customer due diligence and comply with other AML/CTF obligations.

For these purposes, we may collect, verify, use and retain information concerning:

• your identity;

• persons acting on your behalf;

• beneficial ownership and control of companies, trusts and other entities;

• directors, trustees, beneficiaries and other relevant persons;

• the nature and purpose of your relationship with us;

• the nature and purpose of a proposed transaction;

• source of funds and, where required, source of wealth;

• citizenship, residence, tax residence and relevant geographic connections where required for our AML/CTF assessment;

• whether you or another relevant person is a politically exposed person (PEP);

• sanctions and other regulatory screening results;

• transaction information;

• information required to assess money laundering, terrorism financing and proliferation financing risk; and

• information required for initial, ongoing or enhanced customer due diligence.

We may obtain or independently verify this information using third-party identity verification and AML/CTF screening providers, government and public registers, information service providers, financial institutions, professional advisers and other reliable and independent sources.

Where required by law or our AML/CTF Program, we may request additional information or documents from you.

If we are unable to obtain or verify information required to satisfy our legal or regulatory obligations, we may be unable to accept instructions, provide a particular service, complete a transaction or continue acting.

We may also be required or authorised to disclose information to AUSTRAC or other government, regulatory or law-enforcement authorities.

6. How we collect personal information

Where reasonable and practicable, we collect personal information directly from you.

We may collect information through:

• meetings and discussions with you;

• telephone and video calls;

• email, post and other correspondence;

• questionnaires, client intake forms, authorities and engagement documents;

• documents and information supplied by you;

• electronic forms and client portals;

• our website;

• electronic verification-of-identity processes; and

• AML/CTF customer due diligence processes.

We may also collect personal information from third parties where permitted by law and reasonably necessary for our functions or activities, including from:

• real estate agents and property managers;

• banks, lenders, mortgage brokers and other financial institutions;

• other parties to a transaction or matter and their legal representatives;

• accountants, financial advisers and other professional advisers;

• Titles Queensland and other land registries;

• Queensland Revenue Office and taxation authorities;

• ASIC and other corporate or business registers;

• local councils;

• courts and tribunals;

• government departments, agencies and regulators;

• the Personal Property Securities Register;

• publicly available records and databases;

• search and information providers;

• identity verification and AML/CTF screening providers;

• insurers; and

• other persons or organisations involved in your matter.

We may collect information from a third party where it is unreasonable or impracticable to collect it directly from you, where you have authorised the collection, where independent verification is appropriate, or where collection is required or authorised by law.

7. Why we collect, hold, use and disclose personal information

We may collect, hold, use and disclose personal information where reasonably necessary to:

• provide legal advice and legal services;

• conduct conveyancing and property transactions;

• prepare contracts, transfers, notices, deeds and other legal documents;

• establish, manage and administer our professional relationship with you;

• communicate with you and other persons involved in your matter;

• verify identity, authority and right to deal;

• conduct conflict checks;

• undertake searches, investigations and due diligence;

• undertake customer due diligence and comply with AML/CTF requirements;

• assess money laundering, terrorism financing and proliferation financing risk;

• conduct PEP, sanctions and other appropriate screening;

• satisfy ongoing and enhanced customer due diligence requirements;

• comply with AML/CTF reporting and record-keeping obligations;

• conduct and complete electronic conveyancing and settlements;

• communicate with banks, PEXA, government agencies, registries and other participants in a transaction;

• administer accounts, invoices and payments;

• maintain our files and practice-management records;

• manage professional risk and insurance requirements;

• prevent or investigate fraud, cybersecurity incidents and other unlawful activity;

• protect or enforce our legal rights;

• respond to complaints, disputes, regulatory enquiries or legal proceedings;

• comply with court orders, legislation and regulatory requirements;

• comply with our professional obligations as an Australian legal practice; and

• undertake other purposes related to the purpose for which the information was collected which you would reasonably expect, or for which you have consented.

You are not generally required to provide personal information to us. However, if you do not provide information reasonably required for your matter or required by law, we may be unable to accept instructions, provide particular services, complete a transaction or continue acting for you.

8. Disclosure of personal information

Depending on the nature of your matter, we may disclose personal information to:

• other parties and their solicitors or representatives;

• barristers;

• accountants, financial advisers, valuers, experts and consultants;

• real estate agents and property managers;

• banks, lenders, mortgage brokers and other financial institutions;

• PEXA and other electronic conveyancing or settlement service providers;

• Titles Queensland and other land registries;

• Queensland Revenue Office;

• the Australian Taxation Office;

• local councils and utility authorities;

• ASIC and other government registers;

• courts, tribunals and dispute-resolution bodies;

• identity verification and VOI providers;

• AML/CTF screening, search and information providers;

• AUSTRAC;

• government, regulatory and law-enforcement authorities where required or authorised by law;

• title insurers and other insurers;

• our professional indemnity insurer;

• auditors and other professional advisers;

• electronic-signature providers;

• practice-management, document-management and accounting service providers;

• cloud-storage, cybersecurity, IT and communications providers; and

• other service providers reasonably necessary to provide legal services or operate our practice.

We do not sell, rent or trade personal information.

We take reasonable steps to limit disclosure to information reasonably necessary for the relevant purpose and to protect confidentiality and legal professional privilege where applicable.

​

Use of Artificial Intelligence

Ekom Legal may use artificial intelligence (AI) tools to help us deliver our services efficiently, for example to help draft and review documents and correspondence, summarise information, carry out legal research, and handle administrative work.

How we use AI:

• A lawyer stays responsible. AI tools support our work but do not replace professional judgment. A qualified solicitor reviews and checks all AI-assisted work before it is relied on or sent to you or anyone else. Ekom Legal remains fully responsible for the legal services we provide.

• No automated decisions. We do not use AI to make decisions about your matter or your legal rights without a person being involved.

• Your information stays confidential. We use only AI tools that we have assessed for confidentiality, privacy and data security. Their terms must deal with how data is used and must not allow your information to be used to train AI models. Where practicable, we remove identifying details before using an AI tool.

• Privacy. We handle personal information in line with the Privacy Act 1988 (Cth) and our Privacy Policy.

• Fees. Using AI tools does not increase our agreed fees, and we do not charge you for AI software licence costs. Where we charge a fixed fee, it stays the same.

• We will tell you about significant use. If we plan to use AI for a substantial part of the work on your matter, we will tell you, explain what information the tool will access, and explain how we manage the risks.

Your choice

Your Client Agreement contains more information about our use of AI. If you would prefer that we do not use AI tools on your matter, please tell us in writing before we start work. We will respect your request, although this may affect how long some tasks take.

Questions

If you have any questions about how we use AI, please contact us at admin@ekomlegal.com.au or 0426 177 721.

​

9. AUSTRAC reporting and restrictions on disclosure

The AML/CTF Act may require or authorise us to disclose information to AUSTRAC and other government, regulatory or law-enforcement authorities.

The AML/CTF Act also restricts the disclosure of certain information relating to suspicious matter reporting and related matters where disclosure would, or could reasonably be expected to, prejudice an investigation.

Where those restrictions apply, we may be unable to tell you that particular information has been provided to AUSTRAC or explain certain actions taken in connection with our AML/CTF obligations.

Nothing in this Privacy Policy requires EKom Legal to disclose information where disclosure is prohibited or restricted by law.

10. Legal professional privilege and confidentiality

EKom Legal is subject to professional duties of confidentiality.

Nothing in this Privacy Policy limits legal professional privilege or our professional duties of confidentiality.

Information subject to legal professional privilege will be handled consistently with applicable law. The AML/CTF Act contains protections concerning legally privileged information and documents.

11. Technology and artificial intelligence

EKom Legal may use technology, including practice-management software, automated functionality and artificial intelligence tools, to assist with administrative, research, drafting, document-management, data-analysis and other legal practice functions.

Where personal or confidential information is processed using such technology, we take reasonable steps to assess and manage the confidentiality, privacy and security implications of the relevant service.

We do not authorise third-party technology providers to use client confidential information to train publicly available artificial intelligence models merely because we use their services.

We do not knowingly disclose client confidential information to public or open artificial intelligence systems in circumstances inconsistent with our professional, confidentiality or privacy obligations.

Where applicable law requires additional notification or consent in relation to a particular use of automated technology, we will take appropriate steps before using personal information for that purpose.

12. Overseas disclosure and processing

EKom Legal primarily operates in Australia.

Some technology, cloud, communications, identity verification, AML/CTF screening, information or other service providers used by EKom Legal may store or process information outside Australia or engage overseas service providers.

Where personal information is disclosed to an overseas recipient, we take reasonable steps required by applicable privacy law in connection with that disclosure.

Where practicable, we will identify the countries in which overseas recipients are likely to be located. The countries in which recipients of personal information are currently likely to be located include: Russia, India, Estonia, Ukraine.

These locations may change if our service providers alter their hosting, processing or subcontracting arrangements. We may update this Privacy Policy accordingly.

13. Security of personal information

EKom Legal takes reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

Depending on the circumstances, our security measures may include:

• password and access controls;

• multi-factor authentication;

• secure electronic systems and cloud services;

• cybersecurity protections;

• secure storage of physical records;

• restricting access to persons who require information for legitimate purposes;

• backup and recovery measures;

• procedures for dealing with suspicious or fraudulent communications;

• verification procedures for sensitive financial instructions, including independent verification of bank account details where appropriate; and

• secure destruction and deletion procedures.

No method of electronic transmission or storage is completely secure. Clients should exercise appropriate caution when transmitting confidential or financial information electronically and should contact us if they receive any unusual or suspicious communication purporting to be from EKom Legal.

14. Data breaches

EKom Legal maintains procedures for responding to suspected loss, unauthorised access or disclosure of personal information.

If we become aware of a suspected data breach, we will assess and respond to the incident in accordance with applicable privacy law.

Where a breach constitutes an eligible data breach under the Privacy Act, we will comply with applicable notification requirements, including notification to affected individuals and the Office of the Australian Information Commissioner where required.

15. Access to personal information

Subject to exceptions permitted by law, you may request access to personal information that EKom Legal holds about you.

To request access, please contact us using the details below.

We may require reasonable proof of identity before providing access to protect your information and the privacy of others.

We may ask you to identify the particular information you require so that we can respond efficiently.

We do not charge a fee for making an access request. Where permitted by law, we may charge reasonable costs associated with providing access. If a charge is proposed, we will notify you beforehand.

We will respond to access requests within a reasonable period.

We may refuse or limit access where permitted or required by law, including where providing access would:

• unreasonably affect another person's privacy;

• reveal legally privileged information;

• prejudice existing or anticipated legal proceedings;

• prejudice enforcement-related activities;

• reveal information that we are prohibited or restricted from disclosing; or

• otherwise fall within an exception recognised by the Privacy Act or another applicable law.

Where required by law, we will provide written reasons for refusing access and information concerning available complaint mechanisms.

16. Correction of personal information

We take reasonable steps to ensure that personal information we hold is accurate, up to date, complete, relevant and not misleading having regard to the purposes for which it is held.

You may ask us to correct personal information that you believe is inaccurate, out of date, incomplete, irrelevant or misleading.

We may require proof of identity and may request information reasonably necessary to assess the requested correction.

We will respond within a reasonable period.

Where required by the Privacy Act, if we refuse to make a requested correction, we will provide written reasons and information about available complaint mechanisms.

17. Retention and destruction

EKom Legal retains legal files and personal information for periods required or appropriate having regard to applicable legislation, professional obligations, limitation periods, professional indemnity requirements and legitimate practice-management requirements.

Our general legal file retention period will ordinarily be seven years following completion of the matter or rendering of the final account, unless a different retention period is required or appropriate.

Different retention requirements may apply to AML/CTF records.

Where required by the AML/CTF Act, customer due diligence, transaction and other AML/CTF records will be retained for the applicable statutory period. Depending on the type of record, this will commonly be seven years calculated from the relevant event specified by the AML/CTF Act.

The AML/CTF record-keeping requirements do not necessarily require us to retain a copy of every identity document used during verification. We determine the records required to be retained having regard to applicable legal, regulatory and professional requirements.

When personal information is no longer required to be retained, we take reasonable steps to securely destroy or de-identify it, subject to applicable legal and professional requirements.

18. Tax File Number information

Where EKom Legal is required or authorised to collect an individual's Tax File Number or TFN information, we handle that information in accordance with applicable taxation and privacy laws, including the Privacy (Tax File Number) Rule 2015.

We only request, use or disclose TFN information where permitted or required by law.

19. Privacy Collection Notices

This Privacy Policy provides general information about how EKom Legal handles personal information.

Where we collect personal information in circumstances requiring additional notification under the Australian Privacy Principles, we may provide you with a separate Privacy Collection Notice.

In particular, where personal information is collected for customer due diligence or other AML/CTF purposes, our Privacy Collection Notice may explain:

• what information is being collected;

• the circumstances of collection;

• why the information is required;

• any law requiring or authorising the collection;

• the consequences if the information is not provided;

• the persons or organisations to whom the information may usually be disclosed;

• potential disclosure to AUSTRAC;

• likely overseas disclosures, where applicable; and

• how you may access or correct your information or make a privacy complaint.

20. Privacy complaints

If you believe EKom Legal has breached the Australian Privacy Principles or otherwise handled your personal information inappropriately, you may make a complaint using the contact details below.

We will:

• acknowledge and consider your complaint;

• treat the complaint seriously and confidentially;

• investigate the matters raised as appropriate; and

• provide a response within a reasonable period.

We will ordinarily aim to respond within 30 days, although complex matters may require additional time.

If you are dissatisfied with our response, you may be entitled to make a complaint to the Office of the Australian Information Commissioner (OAIC).

Office of the Australian Information Commissioner
Website: oaic.gov.au
Telephone: 1300 363 992
Postal address: GPO Box 5218, Sydney NSW 2001

21. Contact EKom Legal

For privacy enquiries, access or correction requests, complaints or questions concerning this Privacy Policy, please contact:

EKom Legal
Ekaterina Komarovskaya
ABN 53 486 589 716

Postal address: PO Box 90, Browns Plains BC QLD 4118, Australia
Telephone: +61 426 177 721
Email: admin@ekomlegal.com.au
Email: kate@ekomlegal.com.au