1. About Us

Advanced Conveyancing & Developments NSW Pty Ltd (ABN 81 675 372 988) trading as ACDNSW (we, us, our) is a licensed conveyancing practice operating across Greater Sydney, the Illawarra, South Coast and regional NSW, with offices at Wollongong, Randwick, Camden and Shellharbour.
Our principal and Privacy Officer is Antonella Ianni, Principal Licensed Conveyancer and Director. Privacy enquiries may be directed to:

  • Email: admin@acdnsw.au
  • Post: Ground Floor 2, 10 Regent Street, Wollongong NSW 2500
  • Website: www.acdnsw.au

2. About This Policy

This Privacy Policy sets out how ACDNSW collects, holds, uses and discloses personal information in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the 13 Australian Privacy Principles (APPs).

From 1 July 2026, ACDNSW is an APP entity under the Privacy Act. This is because ACDNSW is a Tranche 2 reporting entity under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) (AML/CTF Act), which brings us within the Privacy Act regardless of annual turnover. As a practical matter, we apply this policy to all personal information we handle in connection with our conveyancing services.

3. What Is Personal Information?

Personal information means any information or opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not and whether it is recorded in material form or not.
The personal information we typically collect includes:

  • Full name, date of birth, residential and postal address
  • Contact details (telephone, email)
  • Identity documents (driver licence, passport, Medicare card or equivalent)
  • Financial information relevant to your property transaction
  • Ownership and beneficial ownership information (for entities such as companies and trusts)
  • Information collected from publicly available sources or third parties to verify your identity or complete your matter

4. How We Collect Personal Information

We collect personal information:

  • Directly from you — in person, by telephone, email, or through our online enquiry forms
  • From third parties — such as real estate agents, lenders, other solicitors or conveyancers, government registries (NSW Land Registry Services, NSW Revenue, PEXA), and verification of identity (VOI) service providers
  • From publicly available sources — such as ASIC, PPSR and title registers

Where practicable, we collect personal information directly from you. We will notify you at or before the time of collection (or as soon as practicable afterwards) using our Privacy Collection Notice.

5. Why We Collect and Use Your Information

We collect, hold and use personal information for the following primary purposes:

  • Providing conveyancing and property transaction services to you, including preparing, reviewing and exchanging contracts, conducting title searches, and attending settlement
  • Verifying your identity — as required under NSW conveyancing legislation, the national e-conveyancing rules and, from 1 July 2026, under our AML/CTF obligations
  • Complying with our legal obligations under the AML/CTF Act, including conducting customer due diligence (CDD) and identifying beneficial owners
  • Communicating with you about your matter and responding to your enquiries
  • Complying with our professional, regulatory and legal obligations
  • Managing and administering our business

We will only use or disclose your personal information for a secondary purpose if you have consented, or an exception under the APPs applies (for example, it is required by law).

6. Disclosure of Personal Information

In the course of providing our services, we may disclose your personal information to:

  • Regulators and law enforcement agencies — where required or authorised by law
  • NSW Land Registry Services and NSW Revenue — for the registration of instruments and payment of duties
  • PEXA and other electronic lodgment network operators — for electronic settlement and lodgment
  • Identity verification (VOI) providers — to verify your identity as required by law
  • Other legal and professional advisers — for example, the other party's solicitor or conveyancer, lenders and financial institutions, strata managers, real estate agents and surveyors, where necessary to complete your matter
  • Our professional indemnity and cyber insurers — in connection with a claim or potential claim
  • Our technology and software service providers — including practice management, cloud storage, and document handling platforms (see Section 8 regarding overseas disclosure)
  • Regulators and law enforcement agencies — where required or authorised by law

We do not sell your personal information.

7. Security of Personal Information

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. Our measures include:

  • Secure digital and physical storage of client files and identity documents
  • Role-based access controls limiting staff access to personal information
  • Staff privacy and cyber security training
  • A documented Cyber Incident and Data Breach Response Plan
  • Documented information destruction processes

When personal information is no longer required, we take reasonable steps to destroy or de-identify it, subject to our legal retention obligations (see Section 9).

 

8. Overseas Disclosure

Some of the software and cloud platforms we use may store data on servers located outside Australia (including in the United States, Ireland or other jurisdictions). Before disclosing personal information to any overseas recipient, we take reasonable steps to ensure that the recipient handles the information in accordance with the APPs.

By engaging our services, you acknowledge that your personal information may be disclosed to overseas recipients in these circumstances. We maintain a Third-Party

Disclosure Register that identifies each provider, their data residency, and the legal basis for the disclosure.

If you are located in the United Kingdom, European Union or European Economic Area, we will provide you with a separate GDPR/UK GDPR Privacy Notice that explains your additional rights under those regimes.

9. Retention of Personal Information

We retain personal information for as long as it is needed for the purpose for which it was collected, or as required by law. Our standard retention periods are:

  • Identity verification records: seven years from lodgment of the dealing (VOI obligation under NSW conveyancing legislation and e-conveyancing rules)
  • AML/CTF records: seven years from the end of the client relationship (AML/CTF Act obligation)
  • Where both clocks apply to the same records, we retain documents to the later of the two dates

After the applicable retention period, personal information is securely destroyed or de-identified in accordance with our Personal Information Destruction Schedule.

10. Access and Correction

You have the right to request access to, and correction of, the personal information we hold about you. To make a request, please contact our Privacy Officer using the details in Section 1.

We will respond to access and correction requests within 30 days. We will acknowledge receipt of your request within 7 days. We may need to verify your identity before providing access.

Access may be refused in limited circumstances permitted by the APPs, including where providing access would unreasonably impact the privacy of another individual, or where access would be contrary to our obligations under law. Where access is refused, we will give you written reasons except where providing reasons is itself not permitted by law.

11. Notifiable Data Breaches

In the event of a data breach that is likely to result in serious harm to any individual (an eligible data breach), we are required by the Notifiable Data Breaches (NDB) scheme under the Privacy Act to notify the Office of the Australian Information Commissioner (OAIC) and the affected individual(s) as soon as practicable.

We operate a documented Cyber Incident and Data Breach Response Plan. If you suspect a data breach involving your personal information, please contact our Privacy Officer immediately.

12. Complaints

If you have a concern about how we have handled your personal information, please contact our Privacy Officer in the first instance using the details in Section 1. We will acknowledge your complaint within 7 days and endeavour to resolve it within 30 days.

If you are not satisfied with our response, you may make a complaint to the Office of the Australian Information Commissioner:

  • Website: www.oaic.gov.au
  • Phone: 1300 363 992

13. Automated Decision-Making

We do not currently use automated processes to make decisions that significantly affect your rights or interests. A disclosure requirement relating to automated decision-making takes effect from December 2026. We will update this Policy if our practices change.

14. Changes to This Policy

We review this Policy at least annually and update it to reflect changes in our practices or the law. The current version is always available on our website at www.acdnsw.au. If we make material changes, we will notify you by email or by notice on our website.

Client Feedback

Client satisfaction speaks louder than our words. Hear from them.

Website managed by CantyDigital

Compare