This Notice is issued under the Personal Data Protection Act 2010 (the “PDPA”) by Chin Lau Wong & Foo (“we”, “us” or “our”), Advocates & Solicitors, of A818, 8th Floor, Wisma Merdeka, Jalan Tun Razak, 88000 Kota Kinabalu, Sabah, Malaysia. It explains how we process your personal data when you use this website, send us an enquiry or otherwise contact us.
1. Personal data we collect
We may collect your name, company name, email address, telephone number, the area of law your enquiry relates to, and any information you include in your message. Your message may contain information about other people or sensitive personal data. Please share only what we need to understand your initial enquiry. Do not send confidential details until we have confirmed that we can act for you.
2. Source of your personal data
We collect personal data directly from you through our enquiry form, by email, by telephone or in person. If you give us personal data about another person, please make sure that person has been informed and has agreed to its disclosure.
3. Purposes
We process your personal data to:
- respond to your enquiry and communicate with you;
- check for conflicts of interest before we act for anyone;
- assess whether we can assist you and provide information on our fees;
- open a file and provide legal services if you instruct us;
- comply with our legal, regulatory and professional obligations, including anti-money laundering requirements and the rules that apply to advocates and solicitors in Sabah;
- keep proper records;
- maintain and secure our website and systems; and
- understand how our website is used, so that we can improve it.
4. Who we may disclose your personal data to
- our partners, lawyers and staff in our Kota Kinabalu, Sandakan and Tawau offices, on a need-to-know basis;
- service providers who support our practice, such as IT, email, data storage, website and website analytics providers, who process data on our behalf and are bound by confidentiality;
- our professional advisers, auditors and professional indemnity insurers;
- courts, tribunals, regulators, government authorities, the Sabah Law Society and law enforcement agencies, where required or permitted by law; and
- other parties with your consent or on your instructions, such as other parties to a transaction or their lawyers.
We do not sell your personal data.
5. Transfers outside Malaysia
Some of our service providers may store or process data outside Malaysia. Where this happens, we take reasonable steps to ensure your personal data receives protection as required by the PDPA.
6. Cookies and website analytics
This website uses Google Analytics, a service provided by Google, to understand how the site is used. Google Analytics places small files called cookies on your device and collects information such as the pages you view, how long you spend on them, the website or search that brought you here, your general device and browser type, and an approximate location derived from your internet (IP) address. We use this information only in aggregate, to see which pages are useful and to improve the site. We do not use it to identify you, and we do not combine it with the enquiry details you send us.
Google processes this information on our behalf and may store and process it outside Malaysia, including in the United States. Google’s own privacy practices are described at policies.google.com/privacy.
You may refuse or delete cookies through your browser settings, or install Google’s opt-out browser add-on at tools.google.com/dlpage/gaoptout. Refusing these cookies does not affect your ability to use this website or to send us an enquiry.
This website also loads fonts from Google Fonts and a small dialog library from a public content delivery network. Those providers receive your IP address as a necessary part of delivering those files. We do not use them to track you.
7. Is supplying your personal data obligatory?
Your name and at least one way of contacting you (an email address or telephone number) are obligatory if you want us to respond to your enquiry. All other information is voluntary. If you do not provide the obligatory information, we may be unable to respond to you or to assess whether we can act for you.
8. Your rights and choices
You may request access to, or correction of, your personal data held by us. You may also withdraw your consent, or ask us to limit the processing of your personal data (for example, by asking us to stop contacting you), by giving us written notice. We may charge a fee for access requests where the PDPA permits, and we will respond within the time required by the PDPA. Withdrawing consent may mean we cannot continue to deal with your enquiry or matter.
9. Security and retention
We take reasonable practical steps to protect your personal data from loss, misuse, unauthorised access and disclosure. We keep personal data only as long as necessary for the purposes above and for the record-keeping periods required of law firms. Enquiries that do not lead to an engagement are deleted after a reasonable period.
10. How to contact us
For requests, enquiries or complaints about your personal data, please contact:
Personal Data Enquiries, Chin Lau Wong & Foo A818, 8th Floor, Wisma Merdeka, Jalan Tun Razak, 88000 Kota Kinabalu, Sabah, Malaysia Tel: +60 88 238 111 · Email: [email protected]
11. Changes to this Notice
We may update this Notice from time to time. The latest version will always be published on this page, with the date it was last updated.
12. Language
This Notice is issued in English, Bahasa Malaysia and Chinese. If there is any inconsistency between the versions, the English version prevails.
