Asian Expertise. Global Reach.
Personal Data Protection Policy We at Oon & Bazul LLP recognise and respect your privacy, and strive to properly manage, protect and process the personal data you have entrusted to us. Our policy explains how we collect, use, disclose and/or process your personal data. This policy is provided in accordance the Personal Data Protection Act 2012 (the “PDPA”) and may be updated from time to time. Collection, Use, Disclosure and Processing of Personal Data Personal data refers to all data, whether true or not, about an individual who can be identified from that data or from that data and other information to which an organisation has or is likely to have access. Such data includes but is not limited to contact information (e.g. name, address, telephone number and email address) and billing information (e.g. bank account details, NRIC, passport or other equivalent identification number). We may collect, use, disclose and/or process your personal data for various purposes which include but are not limited to the following: • • • • •
Providing legal services to you or in the ordinary course of our work; Complying with applicable laws, regulations and for internal audit; Providing legal updates and newsletters to you; Organising seminars, events or other marketing activities; or Responding to your requests or enquiries. 1
Asian Expertise. Global Reach.
Personal Data Protection Policy
Collection, Use, Disclosure and Processing of Personal Data (cont’d) As the purposes for which we may/will collect, use, disclose or process your personal data depend on the circumstances, such purpose may not be specified above. However, we will notify you of such other purpose at the time of obtaining your consent, unless processing of your personal data without your consent is permitted under the PDPA or by any other written law. We may disclose your personal data to our affiliates, service providers ad agents, other professional advisors and consultants, whether situated in Singapore or outside of Singapore, for one or more of the purposes specified above, but only to the extent necessary for the performance of such services. Where your personal data is to be transferred out of Singapore, we will do so in accordance with the requirements prescribed under the PDPA. If you are acting as an intermediary or otherwise on behalf of a third party or supply us with information regarding a third party (such as a friend, a colleague, an employee etc.), you undertake that you are an authorised representative or agent of such third party and that you have obtained all necessary consents from such third party to the collection, use, disclosure and processing by us of their personal data. As we are collecting the third party’s data from you, you undertake to make the third party aware of all matters listed in this policy.
2
Asian Expertise. Global Reach.
Personal Data Protection Policy
Management of Personal Data We will take it that all personal data provided by you are accurate and complete and that none of it is misleading or out of date. You should promptly update us when there are any changes to the personal data which you have initially provided, so as to ensure that we have the most current, accurate and complete information. We will not be responsible for relying on inaccurate or incomplete personal data arising from your failure to update us of any changes to the personal data which you have initially provided. We will protect your personal data that is in our possession or under our control by making reasonable security arrangements to prevent unauthorised access, collection, use, disclosure, copying, modification, disposal or any other similar risks.
We will cease to retain documents containing your personal data or remove the means by which your personal data can be associated with you, as soon as it is reasonable to assume that the purpose for which your personal data was collected is no longer being served by the retention of your personal data and retention is no longer necessary for legal or business purposes. Access and Correction of Personal Data If you wish to access your personal data, correct or update your personal data, withdraw any consent given or deemed to be given in respect of our collection, use, disclosure or processing of your personal data, lodge a complaint or if you would like more information about our practices and protections for personal data and/or assistance with related 3 questions, please contact our Data Protection Officer by email at
[email protected].