Privacy Policy

1. Who we are

Donna legal operates an online legal-services marketplace that helps Australian individuals and businesses obtain price guidance, automated case summaries and introductions to independent law firms. Donna legal is not a law firm and does not provide legal advice.

2. Information we collect

We collect personal information you provide to us directly, including:

• Identifiers - name, email, phone number, location, and where relevant date of birth or visa status.
• Matter information - the situation you describe in the intake form, documents you upload, deadlines, prior legal involvement and preferred lawyer type.
• Sensitive information - only with your consent and only where necessary (e.g. health information for personal-injury claims, criminal history for criminal-law matters).
• Technical information - IP address, device, browser, referring URL, and analytics events captured by cookies and similar technologies.
• Payment information - processed by our PCI-DSS compliant payment provider; we do not store full card numbers.

3. How we use your information

• Generate your case summary, eligibility indication and itemised price guide.
• Introduce you to suitable independent law firms on our panel and pass your matter details to them so they can prepare a fixed-fee quote.
• Operate, secure and improve the platform, including fraud prevention and product analytics.
• Send service messages and, with your consent, marketing communications (you can unsubscribe at any time).
• Comply with our legal obligations under the Privacy Act, AML/CTF rules, court orders and regulator requests.

4. Use of AI

We use large language models hosted by reputable providers to convert your intake answers into a short case summary and recommended next steps. Your information is only sent to these models for the purpose of generating your summary; it is not used to train third-party foundation models. The output is generated content, not legal advice, and is reviewed by a qualified lawyer before any work is performed for you.

5. Disclosure

• Independent law firms on our referral panel, only after you ask to be matched.
• Service providers who host our infrastructure, send emails, process payments, run analytics or provide AI services - bound by confidentiality and data-protection terms.
• Regulators, courts, insurers or law-enforcement bodies where required or authorised by law.
• A purchaser of our business, subject to equivalent privacy obligations.

Some service providers are located overseas (including the United States and the European Union). We take reasonable steps to ensure overseas recipients handle your information consistently with the APPs.

6. Security & retention

We store data in encrypted form on Australian-region cloud infrastructure with access controls, audit logging and regular vulnerability testing. We retain personal information for as long as is needed to provide our services and meet our legal obligations (typically 7 years for matter-related records), after which it is de-identified or securely destroyed.

7. Your rights

You may request access to, or correction of, the personal information we hold about you. You may also withdraw consent, opt out of marketing or ask us to delete your information (subject to legal retention requirements). To do so, email privacy@donnalegal.com.

8. Complaints

If you believe we have breached the APPs, contact our Privacy Officer at privacy@donnalegal.com. We will respond within 30 days. If you remain dissatisfied, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

9. Cookies

We use first- and third-party cookies for essential functionality, security, preferences and analytics. You can disable cookies in your browser; some features may not work as a result.

10. Changes

We may update this policy from time to time. The “Effective date” above will change when we do, and material changes will be notified by email or in-product banner.