Privacy Policy


Gallaway Cook Allan (GCA) collects personal information about its staff, clients, contractors, suppliers and others for the purpose of providing legal services throughout New Zealand.

GCA is bound by the Privacy Act 2020 (the Act) when dealing with personal information. Our lawyers are also subject to their obligations under the Lawyers and Conveyancers Act 2006 and the Conduct and Client Care Rules 2008 when handling personal information.

This Privacy Policy sets out how we collect, use, store and share personal information, and explains your rights in relation to your personal information.  

Personal information means any information which can be used to identify you.


We collect personal information about you when you visit our website, engage us, request our advice, ask us to send you publications, or when you otherwise interact with us. We may collect the following personal information:

If personal information we request is not provided, this may impact on our ability to supply our services; engage suppliers or contractors; or progress an applicant’s employment.  

Wherever possible, personal information will be obtained directly from you, or from your nominated agent. Personal information may also be obtained or verified through other means, where the Act permits this.


We may use technology such as cookies to collect information about your use of our website. The information we collect may include (for example) your IP address; domain name; search terms; your operating system and browser type; the date and time you visited our website; the pages you visited; the links you clicked on; and any other information you expressly provide.

This helps us to understand how users engage with our website, and how we might improve our website. We may also use third party cookies and other technology to obtain analytics and to advertise our services online.


We may use your personal information:

If you interact with us on social media, we may have access to your interactions and your profile information. We may use this information to communicate with you, for example by way of advertising or through responding to your interactions with us.


Personal information will be stored on GCA files and databases. GCA will take reasonable steps (including technical, physical, and/or organisational measures) to keep your personal information safe from loss, unauthorised activity, or other misuse. GCA personnel are required to respect the confidentiality of personal information and the privacy of individuals.

GCA will take reasonable steps to ensure that where unique identifiers are used, the risk of misuse will be minimised.


We may disclose your personal information to:

Personal information will only be shared with GCA personnel or third parties if it is necessary for them to carry out their work for us; to meet your request for legal services; or otherwise with your permission.

A business that supports our services and products may be located outside New Zealand (for example, an IT provider). This may mean your personal information is held and processed outside New Zealand. However, where this is the case, we will take reasonable steps to ensure this third party is required to protect your personal information in a way that, overall, provides comparable safeguards to those in the Act, or otherwise obtain your permission to disclosure of your personal information.


GCA will provide you with your personal information upon request, subject to certain grounds of refusal set out in the Act. GCA will also take reasonable steps to ensure personal information held about you is accurate. You have the right to ask us to correct your personal information.

If you do not want us to hold personal information about you, you can contact us to let us know. However, we may be unable to provide our services if you refuse to provide such information.

If you want to access or correct your personal information, please email us at Your email should provide evidence of who you are and set out the details of your request (e.g., the personal information, or the correction, that you are requesting).

Please contact our Privacy Officer, Diccon Sim, at (03) 477 7312 or, if you are concerned your privacy has been breached by GCA and/or you wish to make a complaint. You also have the right to make a complaint to the Office of the Privacy Commissioner at