Privacy Policy

This Privacy Policy explains how Kavadias Pty Ltd trading as Nmap Law (ABN 33 686 251 829) (Nmap Law, we, us or our) collects, holds, uses and discloses personal information.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply to us, as well as our professional obligations as an Australian legal practice.

This Privacy Policy applies to personal information we collect about clients, prospective clients, suppliers, professional contacts, website visitors, individuals involved in matters on which we act, and other people who interact with us.

Personal Information We Collect

The kinds of personal information we collect will depend on our relationship with you and the nature of the matter or enquiry. It may include:

• your name, job title and contact details;
• information you provide when you contact us or ask us to advise you;
• information relevant to a legal matter, transaction, dispute, investigation or other professional service;
• information about your employer, business, role, representatives or counterparties;
• communications between you and us;
• billing, payment and account information;
• identity verification information and conflict-check information;
• information required by law, regulation, professional rules or court and tribunal processes; and
• technical information about how you use our website, where that information is collected by our website or hosting providers.

In some matters, we may also collect sensitive information, such as health information, membership of a professional or trade association, criminal record information, government identifiers, or other information that is necessary for us to provide legal services or comply with our obligations. We will only collect sensitive information where permitted by law, where you consent, or where it is otherwise necessary for the provision of legal services.

How We Collect Personal Information

We usually collect personal information directly from you. We may also collect it from:

• your employer, representatives, advisers or agents;
• our clients, where you are involved in a matter for that client;
• counterparties, witnesses, experts, barristers, consultants, investigators, service providers, courts, tribunals, regulators or government agencies;
• publicly available sources;
• documents, correspondence and records provided to us in connection with a matter; and
• website, email, hosting, security and analytics systems.

If you provide us with personal information about another person, you should ensure you are authorised to do so and, where appropriate, make that person aware of this Privacy Policy.

Why We Collect, Use and Disclose Personal Information

We collect, hold, use and disclose personal information for purposes connected with providing legal services, managing our practice and complying with our obligations. These purposes include:

• assessing whether we can act, including conflict checks and client onboarding;
• responding to enquiries and communicating with you;
• advising clients and providing legal services;
• managing legal matters, transactions, disputes, investigations and related work;
• briefing barristers, experts, consultants and other professional service providers;
• corresponding with courts, tribunals, regulators, government agencies, counterparties, insurers and other people involved in a matter;
• managing billing, payments, records, insurance, risk, security and administration;
• complying with legal, regulatory and professional obligations;
• protecting our rights, interests and professional position;
• improving our services and website; and
• sending legal updates, publications or information about our services, where permitted by law.

If you do not provide personal information we request, we may not be able to respond to your enquiry, assess whether we can act, provide legal services, or comply with our obligations.

Disclosure To Service Providers And Others

We may disclose personal information to third parties where reasonably necessary for the purposes described in this Privacy Policy. These third parties may include:

• barristers, experts, consultants, investigators and other professional advisers;
• courts, tribunals, regulators, government agencies and law enforcement bodies;
• counterparties and their representatives, where relevant to a matter;
• insurers, auditors, accountants and other business advisers;
• technology, hosting, email, document management, billing, payment, security and administrative service providers; and
• any other person or organisation where disclosure is permitted or required by law, professional rules, court orders or client instructions.

Overseas Disclosure

Some technology, hosting, email, storage, security or administrative service providers we use may store or process information outside Australia. Where this occurs, we take reasonable steps to ensure personal information is handled consistently with applicable privacy obligations.

Security

We take reasonable steps to protect personal information we hold from misuse, interference, loss, unauthorised access, modification and disclosure. However, no method of transmission or storage is completely secure, particularly over the internet.

You should not send confidential or sensitive information to us until we have confirmed that we can act for you.

Access And Correction

You may request access to personal information we hold about you, or ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading.

We may need to verify your identity before responding. In some circumstances, we may refuse access or correction where permitted by law, including where legal professional privilege, confidentiality obligations, court processes or professional obligations apply.

Complaints

If you have a privacy complaint, please contact us using the details below and provide enough information for us to understand and investigate the issue.

We will consider your complaint and aim to respond within a reasonable time. If you are not satisfied with our response, you may be able to complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Contact Us

Privacy enquiries, access requests, correction requests and complaints can be sent to:

Kavadias Pty Ltd trading as Nmap Law
ABN 33 686 251 829
Email: hello [at] nmaplaw [dot] com [dot] au

Changes To This Privacy Policy

We may update this Privacy Policy from time to time by publishing an updated version on this website.

Last updated: 9 June 2026