Practice Suite

For The Profession

Legal

Privacy policy

Effective date: 24 May 2026

Last updated: 24 May 2026

This Privacy Policy describes how Profession Sector Holdings (ABN 45835398204) trading as The Profession ("we", "us", "our") collects, uses, stores, and discloses personal information in connection with Practice Suite, accessible at practice.theprofession.au.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) contained in that Act. This policy explains how we comply with those obligations.

If you have any questions about this policy or our handling of your personal information, please contact us at admin@theprofession.au.

1. Who this policy applies to

This policy applies to individuals who access or use Practice Suite, including subscribers and visitors to practice.theprofession.au. Practice Suite is intended for use by Australian legal practitioners. We do not knowingly collect personal information from individuals under the age of 18. If you are under 18, do not use this platform.

2. What personal information we collect

We collect personal information that is necessary to provide Practice Suite to you. This includes:

Account information: your name and email address, collected when you create an account.

Subscription and billing information: your subscription tier and billing status. Payment card details are processed and held by Stripe — we do not store card numbers or full payment details on our systems. We receive and store confirmation of subscription status, subscription tier, and transaction identifiers from Stripe.

Matter and practice data: the matter details, party information, document metadata, draft orders, case map content, arguments, evidence notes, evaluation records, and other content you create or upload while using Practice Suite. This data may include personal information about third parties — including parties to legal proceedings, children, and other individuals mentioned in court documents and legal materials.

Uploaded documents: documents you upload to the Practice Suite document register, including PDF files, Word documents, and images. These documents may contain sensitive personal information about third parties, including health information, financial information, and information about children.

Usage data: standard service logs including login timestamps, feature usage patterns, and error reports, used to maintain and improve the platform. We do not currently use any third-party analytics or product-tracking tools. Aggregate operational logs are generated by our hosting infrastructure (Supabase) for service reliability and debugging purposes only.

Communications: if you contact us by email, we retain records of that correspondence.

3. How we collect personal information

We collect personal information directly from you when you create an account, subscribe to Practice Suite, use the platform's features, upload documents, or contact us.

We also receive information from Stripe when you subscribe or when your subscription status changes.

We do not collect personal information from third parties other than Stripe in connection with your subscription. We do not purchase or acquire personal information from data brokers or marketing lists.

4. How we use personal information

We use personal information to:

  • provide, operate, and maintain Practice Suite and your account;
  • process your subscription and manage billing through Stripe;
  • send you transactional communications related to your subscription, including payment confirmations, subscription renewal notices, and notices of changes to the platform or these terms — these communications are necessary for the provision of the service and cannot be opted out of while you hold an active subscription;
  • send you product and platform communications if you have opted in to receive them at onboarding — you may opt out of these at any time;
  • monitor and improve the security, performance, and reliability of the platform;
  • comply with our legal obligations;
  • respond to enquiries and support requests.

We do not use your personal information for direct marketing to third parties. We do not sell your personal information.

5. AI processing — Anthropic API

Practice Suite uses the Anthropic API to provide AI-assisted features including document extraction, ratio identification, orders analysis, case map analysis, and submissions drafting assistance.

When you use these features, the relevant content — which may include text from uploaded documents, case map data, and other matter content — is transmitted to Anthropic's API for processing. This transmission occurs server-side. Signed URLs to your stored documents are not transmitted to Anthropic or any other third party.

We use the standard Anthropic API under Anthropic's standard API terms. Under those terms, Anthropic does not use API inputs and outputs to train its models by default. Content submitted via the API is not retained by Anthropic beyond the processing of the immediate request.

You should be aware that content you submit for AI processing may include personal information about third parties, including parties to legal proceedings. You are responsible for ensuring your use of AI-assisted features in Practice Suite complies with your professional obligations, including any confidentiality obligations and any obligations arising under applicable privacy legislation in respect of third-party personal information you handle in the course of your practice.

6. Document storage

Documents you upload to Practice Suite are stored in a private object storage bucket hosted in AWS ap-southeast-2 (Sydney, Australia). Documents are stored under access controls that restrict access to your account only. Documents are never publicly accessible and are only accessed via short-lived signed URLs generated server-side for your use within the platform.

Documents are retained for the life of your active subscription and for a period of 12 months following the date your subscription is cancelled or your account is closed. You will be notified before documents are scheduled for permanent deletion. You may request earlier deletion of your documents at any time by contacting admin@theprofession.au.

We do not access the content of your uploaded documents for any purpose other than providing the platform's features to you.

7. Disclosure of personal information

We do not sell, rent, or trade personal information.

We disclose personal information to third parties only in the following circumstances:

Service providers: we share information with third-party service providers who assist us in operating the platform, including:

  • Stripe Inc, for payment processing. Stripe's privacy policy is available at stripe.com/au/privacy.
  • Anthropic PBC, for AI processing as described in section 5 above. Anthropic's privacy policy is available at anthropic.com/privacy.
  • Supabase Inc, which provides the database, authentication, and file storage infrastructure on which Practice Suite is built. Data is stored in AWS ap-southeast-2 (Sydney, Australia). Supabase's privacy policy is available at supabase.com/privacy.

Each of these providers is engaged under terms that restrict their use of personal information to the provision of services to us.

Legal requirements: we may disclose personal information if required to do so by law, by a court order, or by a regulatory authority, or where we believe disclosure is necessary to protect our rights or the safety of any person.

Business transfers: if Profession Sector Holdings or the Practice Suite business is sold, merged, or transferred, personal information held by us may be transferred to the new owner as part of that transaction. We will notify affected users before any such transfer takes effect.

8. Cross-border disclosure

Our primary service providers — Stripe, Anthropic, and Supabase — are headquartered in the United States. Personal information may be transmitted to and processed in the United States and other countries in the course of providing Practice Suite.

Where personal information is disclosed to overseas recipients, we take reasonable steps to ensure those recipients handle the information in a manner consistent with the Australian Privacy Principles. Each of the third-party providers named in this policy maintains privacy and security standards that we consider appropriate for the nature of the information shared.

All uploaded documents are stored in Australia (AWS ap-southeast-2, Sydney) and do not leave Australia.

9. Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. Security measures include:

  • private object storage with row-level access controls for uploaded documents;
  • authentication required for all access to matter data;
  • server-side generation of short-lived signed URLs for document access;
  • encrypted connections (TLS) for all data in transit;
  • infrastructure hosted in AWS ap-southeast-2 with industry-standard physical and network security.

No method of transmission over the internet or electronic storage is completely secure. While we take reasonable precautions, we cannot guarantee the absolute security of personal information.

In the event of a data breach that is likely to result in serious harm to individuals, we will comply with our mandatory data breach notification obligations under the Privacy Act 1988 (Cth), including notifying affected individuals and the Office of the Australian Information Commissioner as required.

10. Your rights

Under the Australian Privacy Principles, you have the right to:

  • Access: request access to the personal information we hold about you.
  • Correction: request that we correct personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading.
  • Complaints: make a complaint about our handling of your personal information.

To exercise any of these rights, contact us at admin@theprofession.au. We will respond to access and correction requests within a reasonable time, and in any event within 30 days. We will not charge a fee for access requests.

If you are not satisfied with our response to a privacy complaint, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.

11. Retention

We retain personal information for as long as necessary to provide Practice Suite to you and to comply with our legal obligations.

Account and subscription data is retained for the duration of your subscription and for seven years following the end of the subscription, consistent with standard record-keeping obligations.

Uploaded documents are retained as described in section 6 above.

Usage logs and analytics data are retained for up to 24 months.

12. Cookies and tracking

Practice Suite uses cookies and similar technologies necessary for authentication and platform operation. We do not use cookies for third-party advertising or cross-site tracking.

No additional cookies are set beyond those necessary for authentication and platform operation.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will notify subscribers of material changes by email before they take effect. The effective date at the top of this policy will be updated whenever changes are made. Continued use of Practice Suite after the effective date of any update constitutes acceptance of the updated policy.

14. Contact

For all privacy enquiries, access requests, correction requests, and complaints:

Profession Sector Holdings
Trading as The Profession
Email: admin@theprofession.au