Introduction

This is the privacy notice of CHAN & ONG (“we”, “our”, or “us”) and it describes how we collect, store, transfer and use personal data. It tells you about your privacy rights and how the law protects you. In the context of the law and this notice, ‘personal data’ and ‘processing’ shall have the meaning prescribed in the Personal Data Protection Act 2010 (“PDPA”).

By engaging us to provide services or by interacting with us either through our website or otherwise, you consent for us to the processing of your personal data and all persons involved in the provision of the services by us.

We may change this notice from time to time by updating our privacy notice on our website. We encourage you to check our privacy notice from time to time on our website, as the version of our privacy notice which is currently displayed on our website takes precedence over all previous version of our privacy notice.

Collection of Personal Data

When you instruct us, engage us, interact with us and or use our website, we ask you to provide personal data that is necessary for us to provide you with the services you requested in connection with our business. The provision of your personal data is voluntary. If you are unable to provide certain personal data which is necessary for us to provide our services, we will not be able to provide you with those services.

Such personal data may include your name, national registration identification number, address, telephone number, mobile number, email address, passport number, date of birth, gender, photograph, race, ethic origin, nationality, physical and mental health, marital status, employment details and history, income tax particulars, bank account details, children’s details, names and contact details of relatives, personal preferences, political opinions, religious beliefs, sensitive personal data and or such other relevant information and data to enable us to provide you with our services.

The information we process about you includes information you have directly provided to us and or information that we gather from third party databases and service providers.

Purpose of Processing

We may use the personal data you provide to us, together with other information, for the following purposes:

  • for and or in connection with our conduct of business and provision of services in the capacity of an advocate and solicitor;
  • facilitation of payment for our services;
  • such purposes specifically provided for in the services requested by you in connection with our services;
  • conduct training and awareness activities in connection with our services;
  • our internal records keeping;
  • compliance to any legal or regulatory requirements in connection with our services; and or
  • for and or in connection with all other purposes necessary and or incidental to our business or provision of services.

Disclosure of Personal Data

When processing your personal data, we may disclose such personal data to the following persons categories of persons including but without limitation to:

  • our partners, legal associates and employees on a need-to-know basis;
  • our third party service providers (including lawyers, bankers, insurers, auditors, accountant, consultants, agents) and processors of these third party service providers, other third-party service providers who provide administrative, telecommunication, computer, payment, printing, IT service, platform providers or other services to us to enable us to operate our business service or other services;
  • government or quasi-government and regulatory authorities, industry regulators and or any person to whom we are compelled or required to do so under law or in response to a competent regulatory or government agency.

Transfer of Data

We shall keep and process personal data in a secure manner. We endeavour, where practicable, to implement appropriate administrative and security safeguards in accordance with the applicable laws and regulations to prevent unauthorised or unlawful processing of personal data, accidental loss, destruction or damage to such personal data.

Where we consider it necessary or appropriate for the purposes of data storage or processing, we may transfer such personal data to places within or outside Malaysia.

Access and Correction

Subject to the exceptions under the applicable law, you have the right to make the following request for access to or correction of personal data held by us:

  • request access to your personal data in our records to check and verify your personal data;
  • request correction to your personal data where the personal data is inaccurate, incomplete, misleading or not up-to-date;
  • request to limit the processing of your personal data;
  • request explanation for our processing of your personal data.

Your written request for access or correction of personal data can be made to info@colaw.com.my.

We reserve the right to refuse your request for reasons permitted by law.