Sultan Legal Arbitration

Privacy Policy & Data Governance Notice

Institutional data governance framework for Sultan Legal Arbitration, governing the limited handling of preliminary conflict clearance data, website interactions, and third-party scheduling integrations pursuant to Australian statutory standards.

Statutory Authority: Privacy Act 1988 (Cth) & APPs • Curial Law: Legal Profession Uniform Law (NSW) • Current Effective Date: October 2026
Section 01

1. Legislative Framework & Regulatory Scope

Sultan Legal Arbitration (“Chambers”) operates as an independent dispute resolution practice established under the laws of New South Wales, Australia, directed by Kashif Sultan, FCIArb (Arbitration Counsel & Arbitrator).

This Privacy Policy sets out Chambers’ formal data governance standards in strict accordance with the Privacy Act 1988 (Cth), the 13 Australian Privacy Principles (APPs), and the mandatory professional conduct and confidentiality standards prescribed by the Legal Profession Uniform Law (NSW) (“LPUL”).

The practice is committed to maintaining high standards of privacy, confidentiality, and data protection across all professional engagements, whether acting as independent arbitral tribunal (Sole Arbitrator, Co-Arbitrator, Presiding Arbitrator, Emergency Arbitrator) or as specialist contentious arbitration counsel.

Section 02

2. Information Collected & Purpose of Collection

Chambers collects personal and institutional information solely to the extent reasonably necessary for the performance of its professional legal and arbitral functions under APPs 3 and 5. Information collected through this web domain (www.sultanlegal.com) is limited to:

A. Contact & Professional Identifiers

Full legal name, professional title, corporate firm or institutional affiliation, primary business email address, direct telephone number, and physical office location.

B. Preliminary Conflict Clearance Parameters

Names of disputing parties, corporate parent entities, known commercial affiliates, adverse legal representatives, and identified third-party litigation funders or subrogated insurers, as submitted via the Conflict Clearance Gateway.

C. Appointment Coordination & Procedural Criteria

Designated arbitral institution (e.g., SIAC, ACICA, UNCITRAL, ICC, LCIA), chosen procedural rules, agreed legal seat (lex arbitri), substantive governing law, and general industry sector.

Primary Purpose: This data is gathered exclusively to perform adverse-party conflict checks in compliance with the IBA Guidelines on Conflicts of Interest in International Arbitration and LPUL ethical rules, and to facilitate preliminary consultation scheduling.

No Sensitive Data Collected: Chambers does not seek or collect sensitive personal information (such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health records) via this website.

Section 03

3. Quarantine of Confidential Dispute Materials

Mandatory Institutional Notice • Strict Case Data Exclusion

Substantive dispute documentation, commercial contracts, witness statements, expert reports, pleadings, and privileged evidentiary files are strictly NOT collected or received through this web domain.

Transmitting parties and instructing solicitors must not transmit confidential brief materials until preliminary conflict clearance has been formally confirmed in writing by Chambers and formal terms of appointment or legal retainers are mutually executed.

Following formal appointment, substantive case files are exchanged exclusively through designated, authenticated arbitral channels, secure institutional document repositories, or encrypted direct transmissions pursuant to procedural orders.

Section 04

4. Third-Party Service Providers & Overseas Disclosures

Under APP 8 (Cross-border disclosure of personal information), Chambers discloses that specific third-party operational service providers support the technological delivery of this website:

Cloudflare, Inc. (Edge Hosting & Security) Global Edge CDN

This website is statically pre-rendered and hosted via Cloudflare Pages. Cloudflare processes transient network telemetry (IP addresses, edge routing, HTTP headers) solely for threat prevention, DDoS protection, and edge caching. Web analytics are conducted via privacy-first, cookie-free Cloudflare Web Analytics, which does not track individuals across sites or build visitor profiles.

Calendly LLC (Consultation Scheduling Integration) United States / Global

Preliminary consultation booking is facilitated via Calendly LLC. When you interact with the scheduling modal or direct booking links on /instruct-counsel, your name, email address, and scheduling responses are transmitted directly to Calendly LLC and handled pursuant to the Calendly Privacy Notice. Servers supporting Calendly may be located in the United States and other global jurisdictions.

Zero Commercial Monetisation: Chambers does not sell, rent, license, or commercially disclose personal information to any commercial data brokers, advertising networks, or third parties for marketing purposes.

Section 05

5. Data Security, Storage & Record Retention

Pursuant to APP 11 (Security of personal information), Chambers implements rigorous physical, technological, and administrative safeguards to protect personal information against loss, unauthorised access, modification, or disclosure:

  • TLS 1.3 Edge Encryption: All browser-to-server data communications are encrypted in transit using Transport Layer Security (TLS 1.3).
  • Access Controls: Administrative access to registry communications and conflict records is restricted exclusively to authorised Chambers personnel under multi-factor authentication (MFA).
  • Record Retention Schedules: Records generated during preliminary conflict clearances are retained solely for the statutory period necessary to maintain accurate conflict registers under New South Wales legal practice regulations (typically a minimum of seven years for professional records), after which they are securely destroyed or permanently de-identified.
Section 06

6. Individual Rights under APPs 12 & 13

Under the Australian Privacy Principles, individuals have enforceable legal rights regarding the personal information held about them:

Right of Access (APP 12)

You may request access to personal information Chambers holds about you. Chambers will respond within 30 days of receiving a written request, subject to legitimate statutory exceptions (including legal professional privilege, confidentiality of arbitral deliberations, or ongoing dispute resolution proceedings).

Right of Correction (APP 13)

If you believe personal information held by Chambers is inaccurate, out-of-date, incomplete, irrelevant, or misleading, you may submit a written request for rectification. Chambers will take prompt, reasonable steps to correct the record without charge.

To exercise either right, please transmit a formal request in writing to the Chambers Privacy Officer using the institutional contact coordinates set out below.

Section 07

7. Chambers Contact Coordinates & OAIC Recourse

If you have an inquiry, request, or formal complaint regarding Chambers’ handling of personal information, please direct your communication to:

Chambers Privacy Officer • Sultan Legal Arbitration

Practitioner Kashif Sultan, FCIArb Arbitration Counsel & Arbitrator
Physical Registry
Suite 6, Level 1, 27 Hunter Street
Parramatta NSW 2150, Australia
Telephone Registry +61 2 8029 0269

External Privacy Regulatory Recourse (OAIC)

If Chambers does not resolve your privacy inquiry or complaint to your satisfaction within 30 days, you have the right to lodge a formal complaint with the independent national privacy regulator:

Office of the Australian Information Commissioner (OAIC)

Postal Address: GPO Box 5218, Sydney NSW 2001, Australia

Telephone: 1300 363 992

Website: www.oaic.gov.au