Privacy policy
Last updated: 4 November 2026
Zest Legal Pty Ltd (ABN 42 666 178 892) trading as Zest Legal (we, us or our) is an Australian law practice. We respect your privacy and handle personal information in line with the Privacy Act 1988 (Cth), the Australian Privacy Principles and our professional obligations as lawyers, including confidentiality and legal professional privilege.
This policy explains how we collect, hold, use and disclose personal information when we provide immigration legal services and advice (Services), when you use our website, and when you otherwise deal with us.
The information we collect
Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not it is true or recorded in a material form.
Depending on how you deal with us, we may collect:
your name, date of birth, nationality and photograph (where a visa application requires one);
your contact details, including email address, telephone number and residential address;
passport details, visa history, immigration status and travel history;
relationship and family details, including information about your partner, children, sponsors and other people connected to your matter;
education, qualifications, employment history, employer and job title;
financial information, such as bank statements, tax records and evidence of funds, where needed for a visa application;
copies of identity documents, certificates and other supporting evidence;
information about a business that sponsors or nominates a worker, and its owners, officers and staff;
payment information (card payments are handled by our payment provider; we don't store full card numbers);
your enquiries, communications and feedback, and the services we've provided to you;
information about how you use our website (see Website, analytics and advertising below); and
any other information you, or someone acting for you, gives us.
Sensitive information is a subset of personal information that receives extra protection. Because of the nature of immigration matters, we may collect sensitive information such as:
racial or ethnic origin;
health information, including medical conditions and health assessment results (yours and, where relevant to a visa, your family members');
criminal history, police certificates and character information;
sexual orientation or relationship details;
information about family violence or relationship breakdown; and
biometric information, such as passport photographs.
We only collect sensitive information with your consent, or where the law otherwise permits it.
How we collect personal information
From you: through our website forms, by email, by phone or video, in consultations, and when we prepare your matter.
From people acting for you or connected to your matter: for example a sponsor, partner, employer, referee or another adviser.
From government and third parties: for example the Department of Home Affairs, assessing authorities or service providers, where this is needed for your matter.
Automatically when you use our website: see Website, analytics and advertising below.
Why we collect, hold, use and disclose personal information
We handle personal information to:
respond to your enquiry and assess whether and how we can help;
provide legal advice and services, including preparing and lodging visa and sponsorship applications;
communicate with you, and with the Department of Home Affairs, the Administrative Review Tribunal and other bodies on your behalf;
verify information and carry out checks needed for your matter, including conflict checks;
take payment, keep trust account and billing records, and meet our record-keeping obligations as a law practice;
run, measure and improve our website, services and advertising;
send you information about our services, where you have agreed or the law allows (you can opt out at any time);
comply with the law and our professional obligations, and resolve disputes; and
consider job applications, if you apply to work with us.
We use sensitive information only for the purpose it was collected (to advise you and act on your matter), for directly related purposes you would reasonably expect, with your consent, or where the law requires or allows it.
Who we disclose personal information to
We may disclose personal information to:
the Department of Home Affairs, the Administrative Review Tribunal, Australian Border Force and other Australian or overseas government bodies, as needed for your matter;
sponsors, employers, education providers and others involved in your application;
panel physicians and medical providers, skills assessing authorities, registration bodies, and translation or document verification services;
service providers who help us run our practice, including our practice management and accounting software, website host, email and IT providers, payment providers and professional advisers;
Google, for website analytics and advertising measurement (see below);
our staff and contractors;
anyone to whom our practice (or part of it) is transferred in good faith; and
courts, tribunals, regulators and law enforcement, where required or authorised by law.
We don't sell personal information.
Website, analytics and advertising
Our website uses:
Google Analytics, to understand how visitors find and use our site (for example pages viewed, how long visits last, approximate location, device and browser, and whether a visitor came from a search, an ad or another website);
Google Ads conversion measurement, to tell us when someone who clicked one of our ads goes on to contact us. Google may use cookies or similar identifiers for this;
a small piece of information stored in your browser that records how you first arrived at our site (for example "Google Ads" or "Google search") for up to 30 days. If you submit an enquiry form, this source is included with your enquiry so we know which channels are working. It contains no contact details; and
cookies set by Squarespace, which hosts our website, so the site and its forms work.
You can learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites, opt out of Google Analytics with Google's browser add-on, and manage ad personalisation in your Google account's ad settings. You can also block or delete cookies in your browser settings, although some parts of our website may then not work properly.
When you submit a form on our website, the details you enter are sent to us by email and stored by Squarespace. Please don't send passport numbers or other identity documents through our website forms; we will ask for these securely when we need them.
Overseas disclosure
Some of our service providers (including Google) may store or access personal information outside Australia, including in the United States. Where we disclose personal information overseas, we take reasonable steps to make sure the recipient handles it in a way consistent with the Australian Privacy Principles, unless you have consented otherwise or the law permits the disclosure. Where your matter requires it, we may also disclose information to overseas government authorities, for example to obtain police certificates.
Storage, security and retention
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, change or disclosure, including secure practice management software, access controls and confidentiality obligations for our team. No method of sending information over the internet is completely secure, so please contact us if you would like to provide sensitive documents another way.
Personal information is kept by us for as long as required by law, after which we securely destroy or de-identify it.
Your rights
Choice: you don't have to give us personal information, but if you don't, we may not be able to advise or act for you.
Anonymity: where practicable, you can deal with us without identifying yourself, for example when asking a general question.
Information about others: if you give us information about someone else (such as a partner or employee), please make sure they know you are doing so and why.
Marketing: you can opt out of marketing emails at any time using the unsubscribe link or by contacting us.
Access and correction: you can ask to see or correct the personal information we hold about you. We'll respond within a reasonable time. If we refuse a request, for example where the law allows us to, we'll explain why and how you can complain.
Complaints: if you have a concern about how we've handled your personal information, please contact us with the details. We'll investigate and reply in writing. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).
Links to other websites
Our website links to other sites, including government websites. We aren't responsible for their content or privacy practices.
Changes to this policy
We may update this policy from time to time by publishing a new version on our website. The date at the top shows when it was last changed.
Contact us
Email: hi@zestlegal.com.au