Privacy Policy

This Privacy Policy explains how CASL collects, uses, stores and discloses personal information, and how you can contact us about privacy matters.

CASL handles personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Last updated: 1 June 2026

Who this policy applies to

In this policy, CASL, we, us and our refer to CASL Group Pty Limited and its related corporate entities, include those listed below:

1. CASL Governance Ltd (ACN 643 977 833), AFSL 525889;
2. CASL Management Pty Limited (ACN 645 229 116), Corporate Authorised Representative Number 1292680; and
3. CASL Funder Pty Limited (ACN 645 229 643), Corporate Authorised Representative Number 1296364.

This policy applies to information we collect from clients, prospective clients, investors, suppliers, contractors, website users and other individuals we deal with.

We take reasonable steps to protect information we hold and respond appropriately to privacy enquiries and complaints.

What we collect

The personal information we collect depends on our relationship with you and the services involved. It may include your name, contact details, date of birth, organisation, job title, correspondence with us, records of enquiries, billing or payment details, claim or transaction information, identity verification information, and website or device information.

In some circumstances, we may collect sensitive information, such as health information, where this is reasonably necessary for our services and permitted by law. We will only collect sensitive information where we have your consent or another lawful basis to do so.

Where lawful and practical, you may deal with us anonymously or by using a pseudonym. However, in many cases we need to identify you to provide services, verify instructions, comply with legal obligations or communicate with you.

How we collect personal information

We usually collect personal information directly from you, for example when you contact us, complete a form, use our website, attend a meeting or event, or otherwise interact with us.

We may also collect personal information from your representatives, advisers, business associates and other third parties connected with a claim or transaction.

We may collect information from publicly available resources.

If you do not provide personal information we ask for, or do not authorise us to collect it where needed, we may be unable to provide some or all of our services or otherwise deal with you.

How we use and share personal information

We use and disclose personal information for the purpose for which it was collected, for related purposes you would reasonably expect, and where otherwise permitted or required by law.

This may include using personal information to:

• provide, manage and improve our services;
• assess and manage claims, transactions and other engagements;
• communicate with you and respond to enquiries;
• verify identity, authority and instructions;
• manage our business operations, records, risk and governance processes;
• comply with legal and regulatory obligations;
• protect or enforce our legal rights; and
• send information about our services, similar case investigations, publications or events.

We may disclose personal information to the following types of recipients where reasonably necessary for these purposes or otherwise permitted or required by law:

• our employees, officers and related corporate entities;
• lawyers, barristers, experts, consultants and other professional advisers;
• service providers who help us with administration, information technology, communications, document management, data hosting, identity verification or payment processing;
• courts, regulators, government bodies and law enforcement agencies;
• counterparties, co-funders, insurers and other participants in a claim or transaction; and
• other persons where you have consented or where disclosure is permitted or required by law.

Where third parties handle information for us, we take reasonable steps to require them to protect it and use it only for authorised purposes.

We do not sell personal information. Where permitted by law, we may send direct marketing communications about our services, publications or events. You can opt out at any time by using the unsubscribe function where available or by contacting us using the details below.

Overseas disclosure

We may disclose personal information to overseas recipients where this is reasonably necessary for our services or where our service providers store or process information outside Australia.

Where we disclose personal information overseas, we take reasonable steps in the circumstances to ensure the recipient handles the information in a manner consistent with applicable privacy obligations.

Access and correction

You may request access to personal information we hold about you, and ask us to correct it if you believe it is inaccurate, out of date, incomplete, irrelevant or misleading.

To make a request, please contact our Privacy Officer using the details below. We may need to verify your identity or authority before responding.

We will respond within a reasonable period and, where required, explain if we cannot give access or make a correction.

Storage and security

We hold information in paper and electronic form, including on systems used by our service providers. We take reasonable steps to protect it from misuse, interference, loss and unauthorised access, modification or disclosure.

Your information may be stored by CASL on data servers operated by trusted third party service providers located inside Australia or overseas.

Website, cookies and analytics

When you visit our website, we and our service providers may collect technical and usage information, such as your IP address, browser type, device information, and the date and time of access.

We use cookies and similar technologies to support website functionality, improve user experience, and understand how our website is used. You can usually adjust your browser settings to refuse cookies or notify you when cookies are being used; however, some parts of the website may not function properly if cookies are disabled.

We use Google Analytics to collect and analyse information about how users interact with our website, including through the use of cookies. This information may be stored and processed on servers located outside Australia in accordance with Google’s Privacy Policy.

Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their privacy policies before providing information to them.

Changes to this policy

We may update this policy from time to time to reflect changes in law, technology or our business practices. The current version is available on our website at www.casl.com.au and can also be provided in another form on request where reasonable.

Privacy complaints

If you believe we have breached this policy, the Privacy Act 1988 (Cth) or the Australian Privacy Principles, you can make a complaint to our Privacy Officer using the contact details below.

We will acknowledge your complaint within a reasonable period and aim to investigate and respond as soon as practicable. If you are not satisfied with our response, you may be able to make a complaint to the Office of the Australian Information Commissioner.

Contact us

If you would like to access or correct your personal information, make a privacy complaint, ask a question about this policy, or request a copy of this policy in another form, please contact our Privacy Officer:

CASL Management Pty Ltd
Attention: Privacy Officer
Level 13, 115 Pitt Street
SYDNEY NSW 2000
Phone: +61 2 8039 6100
Email: enquiries@casl.com.au

‍