Stainton Chellew is committed to ensuring compliance with its legal obligations under the Privacy Act 2020.
Scope
This Privacy Policy sets out how we will collect, store, use, disclose and protect your personal information.
Process
Personal Information
Personal Information (or data) is any information that relates to an identifiable person.
We collect and store personal information for the purpose of conducting our business, to market our services and to meet our legal obligations, including in relation to our privacy and anti-money laundering compliance obligations.
Depending on the nature of your relationship with Stainton Chellew, the personal information we will collect from you may include:
- Name, date of birth, address and contact details;
- Occupation;
- Payment details;
- Employment history;
- Education and qualifications;
- Evidence of source of funds (in some cases); and
- Any other information that assists us in conducting our business, providing and marketing our services and meeting our legal obligations.
Collecting Personal Information
Use and disclosure of personal information
We may use or disclose personal information that you have provided to us, or which we have obtained about you, to our third parties providers, including technology providers who assist us in providing services or who perform functions on our behalf, such as providers that provide generative AI technologies to assist us in legal research, document review, document drafting and other legal tasks.
Our technology providers (including generative AI providers) may use your personal information to provide services to us, to administer, maintain, analyse, improve and/or develop their services, to undertake their business processes, to comply with their legal obligations and to conduct research. Unless we state otherwise, our technology providers will not use your personal information to improve AI training models, train, retrain or improve foundation models, improve third party products or services, conduct user profiling, advertising or similar commercial purposes, or to market products and services to you.
Our technology providers may rely on and make your personal information available to their third party providers (which may be located in countries other than New Zealand) in the course of delivering their services to us, including for hosting, cloud storage, email communication and web analytics purposes, such as the Azure OpenAI Service operated by Microsoft. Our technology providers may share your IP address and other information about your device to Microsoft for security reasons. Our technology providers may also share your personal information with their affiliates, any other entity that they merge with or sell their business or assets to, and other third parties (such as government agencies) if legally required to do so.
Security and Storage
Stainton Chellew takes all reasonable steps to ensure your personal information is safe from loss, unauthorised use, modification, disclosure, and any other misuse.
All information is stored electronically (requiring logins and passwords) or physically (in secured premises). Only authorised persons are permitted to access your personal information.
We will use, disclose or retain your personal information for as long as necessary to fulfil the purpose for which it was collected and as otherwise permitted or required by law.
In the event of a privacy breach, we have established procedures for notifying the Privacy Commissioner and the individual affected, including setting out the reasonable steps we have taken to mitigate the effects of a privacy breach, should we be required to do so under law.
Disclosure
We may need to disclose your personal information for the purpose of complying with our legal obligations, responding to your questions in relation to our services, or as otherwise stated at the time of collection. We will not disclose personal information except in accordance with the law.
We may disclose your personal information to third parties who:
- Perform checks that are necessary under the law on our behalf;
- Provide services and perform functions on our behalf (data storage providers, consultants and barristers); and
- Maintain databases against which your identity may be verified (this may include overseas recipients). We will take reasonable steps to ensure that any overseas recipient does not breach relevant privacy laws.
We may also disclose your personal information to the courts, tribunals, regulatory authorities and anyone else to whom you authorise us to disclose it.
Accessing your Personal Information
You have the right to access the readily retrievable personal information we hold and to request that your personal information be updated or corrected.
You can contact us to update any personal information we hold about you. We may charge a fee for providing access, and if so, we will advise you of the cost in advance.
Complaints
If you have any concerns about the way in which we collect, store and use your personal information, or if you have any queries about this Privacy Policy, please contact our Privacy Officer, Victor Mechkov, at victor@sclawyers.co.nz.
This Privacy Policy may be updated at any time.
Version, May 2025
