Last updated: 25 August 2026
Not legal advice. This describes what the system genuinely does, which is a better starting point than a template. Have it reviewed before you rely on it, particularly the cross-border section, which is the part with real obligations attached and the part your law firm clients will read first.
Who we are
OB Automation runs marketing and enquiry handling for Australian law practices. If you have contacted a law firm and your enquiry was answered or captured by our system, this policy explains what happened to your information.
OB Automation is a business name of Bramley Nicholas Kayler-Thomson, ABN 51 705 846 965, 16 Tupia Pl, Kings Langley NSW 2147.
Contact: orchatabeeky@gmail.com · 0478 712 605
Whose information this covers
Two groups:
Our clients. The law practices who pay for the service, and their staff.
Enquirers. People who contact one of those practices. If you rang a law firm or filled in its enquiry form, this section is about you.
For enquirers, the law practice you contacted is responsible for your information. We handle it on their behalf, under their instructions.
What we collect from enquirers, and what we deliberately do not
We collect:
Your name
Your phone number and email address
The category of matter you are enquiring about, at the level of a label: family, commercial, wills and estates, employment
Whether the enquiry is urgent
The date and time of the enquiry, and how you found the firm
Any appointment you book
We deliberately do not collect the substance of your matter. The system does not ask for, and is built not to record, the facts of your situation, the names of other parties, documents, dates of events, or anything else that would form part of a legal matter. If you volunteer those details, they are not retained in our system.
That is a design decision, not an oversight. It exists because our systems are hosted overseas and because the substance of a legal matter belongs in your solicitor’s own files, not in a marketing platform.
Calls may be recorded where the firm has enabled it. If a call is recorded you will be told at the start of the call and you can decline. Recording laws differ between Australian states, so we apply the strictest standard nationally: clear notification, and a genuine option to say no.
Website visitors. We collect standard analytics and advertising measurement data, including the page you arrived on, the search or advertisement that brought you, and a click identifier from Google where one is present.
How we use it
Enquirer information is used for one purpose: passing your enquiry to the law practice you contacted, so they can respond, and booking your appointment if you asked for one.
We may send you a confirmation and reminders about an appointment you booked.
We do not sell your information. We do not use it to market other services to you. We do not build profiles, and we do not share it with anyone beyond what is described below.
Automated handling of your enquiry
Your first contact with the firm may be handled by an automated system rather than a person. That system takes your details and books appointments. It does not make decisions about your matter, it does not assess your enquiry, and it does not give legal advice. It is built so that it cannot.
A person at the law practice reviews every enquiry.
Where your information goes, and who processes it
This is the section worth reading properly.
To run the service, your information passes through providers located outside Australia:
Service
Where
What it handles
GoHighLevel
United States
Enquiry records, appointments, messaging and reporting
United States and elsewhere
Advertising measurement and Business Profile
Twilio
United States
Calls and text messages
Anthropic
United States
Understanding a spoken enquiry to extract the details listed above
This means personal information you provide is disclosed to and stored by overseas recipients. Under Australian privacy law this is a cross-border disclosure, and the law practice you contacted remains accountable for how those recipients handle your information.
We chose these providers for reliability, and each is bound by its own contractual and security obligations. GoHighLevel holds SOC 2 Type II and ISO/IEC 27001 certification and encrypts data in transit and at rest. There is currently no Australian hosting option for that platform.
This is precisely why the system holds no case facts. What crosses the border is a name, a phone number, an email address and a matter category.
If you would rather your information were not handled this way, tell the firm when you speak to them, or contact them directly by phone or in person instead.
How long we keep it
Enquiry records are kept in the law practice’s account for as long as they remain our client.
Appointment records are kept alongside them.
Call recordings, where made, are kept for no longer than the firm requires and are deleted on request.
Website enquiry submissions are kept until the enquiry has been dealt with.
If you want your information deleted sooner, email us and we will remove it, subject to the law practice’s own record-keeping obligations, which may require them to retain certain records independently of us.
Your rights
You can ask us to:
tell you what information we hold about you
correct anything that is wrong
delete your information
Email orchatabeeky@gmail.com and we will respond within a reasonable time. Where the information belongs to a law practice’s client file, we will refer you to that practice.
If you are not happy with how we have handled your information, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Security
Access to enquiry records requires a username and password, and is limited to the relevant law practice and to OB Automation. Data is transmitted over encrypted connections and encrypted at rest.
No system is perfectly secure. If something goes wrong we will tell affected people and the relevant law practice promptly.
Changes
If we change this policy we will update the date at the top. Material changes affecting how enquirer information is handled will be communicated to our clients, who may need to update their own privacy policies in turn.