Privacy Policy

Who we are

Pacific Legacy Migration is the trading name of The Trustee for PACIFIC LEGACY TRUST, ABN 65 201 913 202, of Level 1, 1/14 Flushcombe Road, Blacktown NSW 2148. The practice is operated by Munish Kumar Soni, a migration agent registered with the Office of the Migration Agents Registration Authority, MARN 0901499.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and separately by the confidentiality and record-keeping obligations in the Migration Agents Code of Conduct.

What we collect

Through the general enquiry form we collect your name, email address, optional phone number, the practice area you select and what you write in the message field.

If you use a secure visa intake, we may also collect the information reasonably needed to assess and conduct that matter. For a subclass 651 intake this includes identity and contact details, date and place of birth, residential address, passport and citizenship details, a passport biographical-page copy, a completed Form 956 appointment authorisation, travel plans and immigration history, employment and trip-funding information, and answers about health, criminal history, protective orders and Australian Government debts.

Health and criminal-record information is sensitive information. The secure intake asks for express consent before it is submitted. We do not use a passport number as our own client or application identifier.

Basic server security logs may record technical information such as time, browser type and IP address. Ordinary public marketing pages may use Google Ads conversion measurement to record actions such as selecting the “Get started” button. Information entered in the secure intake is not sent to Google for advertising measurement. The secure intake, document, agreement, payment and confirmation pages do not run advertising pixels, session replay or analytics scripts.

Use the correct channel

The general enquiry form and ordinary email are not secure channels for identity documents. Do not send passport numbers, dates of birth, visa grant numbers, health or character information, or document scans through them. Use only the designated secure intake or document portal when we ask you to.

Why we collect it

To respond to your enquiry; assess your circumstances and identify whether we can assist; verify your identity; provide immigration assistance if you engage us; prepare, review and manage your matter on your instructions; communicate with you; issue agreements, invoices and receipts; meet legal, professional, security and record-keeping obligations; and investigate complaints or security events.

Who we disclose it to

We disclose your personal information only as needed to conduct your matter, and only to:

• the Department of Home Affairs and, where relevant, the Administrative Review Tribunal
• translators, interpreters and other professionals engaged for your matter, on your instructions
• service providers used to host the secure portal, store protected records, deliver email and process payments, including Hostinger and Stripe, only to the extent needed to provide those services
• our professional indemnity insurer or legal advisers, where necessary
• the Office of the Migration Agents Registration Authority, if required by law or in response to a complaint
• anyone else you specifically authorise us to speak to, such as a sponsor or family member

We do not sell personal information, we do not share it for marketing, and we do not give it to third parties for their own purposes.

Overseas disclosure

Some technology providers may process or store information outside Australia. This can include locations used by our website hosting, email, security and payment providers. Before collecting through a secure portal, we identify the relevant providers in the collection notice and take reasonable steps to assess their safeguards. Your migration matter may also require communication with an overseas post, police authority, translator or other recipient; where possible, we tell you before that occurs.

How we store it, and for how long

Electronic records are held in access-controlled systems. Sensitive intake records and uploaded documents are encrypted at rest and are not included in email notifications. Payment-card details are entered on Stripe’s hosted checkout and are not collected or stored by this website. Paper records are held securely at our office. Access is limited to those who need it for your matter.

The Code of Conduct requires registered migration agents to keep client records for a minimum period after a matter concludes. We retain files for at least seven years, then destroy or de-identify them securely.

Accessing or correcting your information

You may ask us for a copy of the personal information we hold about you, and ask us to correct anything inaccurate. Write to info@pacificlegacymigration.com. We will respond within 30 days. We may need to verify your identity first. If we refuse access, we will tell you why in writing.

Under the Code of Conduct you are separately entitled to a copy of documents on your file. There is no charge for a first copy.

Complaints

If you think we have mishandled your personal information, please tell us first at info@pacificlegacymigration.com. We will respond within 30 days.

If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au. If your concern relates to our conduct as a registered migration agent, you may also complain to the Office of the Migration Agents Registration Authority.

Changes

We may update this policy. The current version is always the one published on this page, with the date it was last updated shown above.