Privacy Policy

PERSONAL DATA PROTECTION NOTICE

This Personal Data Protection Notice (“Notice”) describes how Shin Associates, a law firm with its place of business at Suite B-11-6, Level 11, Wisma Pantai, Plaza Pantai, No. 5 Jalan 4/83A, Off Jalan Pantai Baru, 59200 Kuala Lumpur, Malaysia including its associated parties, affiliates, successors, assigns, and licensees (collectively referred to as “SA”) is committed in using and safeguarding the privacy of your Personal Data in compliance with the Personal Data Protection Act 2010 (“PDPA”). Accordingly, this Notice is formulated with the purpose to explain to you how SA uses and Processes your Personal Data and is to be read together with other privacy policies and such terms and conditions of use as may be prescribed by SA from time to time, and any other agreements you may have entered into with SA (if any).

In the event of any conflict between the English and other language versions of this Notice, the English version shall prevail. SA reserves the right to modify, update or amend the terms of this Notice at any time by placing the updated Notice on https://www.shinassociates.com.my (“the Website”). By continuing to communicate with SA or by continuing to engage SA for services or use SA’s services or by continuing to provide Personal Data (whether in person, by e-mail, telephone conversation, facsimile transmission, letter, or otherwise) following the modifications, updates or amendments to this Notice, you shall be deemed to have accepted such modifications, updates or amendments.

For the purposes of this Notice:

“Personal Data” means all information and expressions of opinions that is directly or indirectly relating to a person, who is identified or identifiable from that information or expressions of opinions, including but without limitation, information and expressions of opinions in respect to physical or mental health, racial or ethnic origin, religious or similar beliefs and/or in respect of criminal or civil proceedings. Examples of Personal Data that may be Processed by SA includes but are not limited to your name, address, telephone number, NRIC/Passport No., email address, employment details, personal preferences, IP addresses, social media details, content preferences, bank account information, photographs and images, recordings, security details obtained from the visitation or entering of SA’s premises such as closed-circuit television (“CCTV”) recordings, visitation details obtained for/from the visitation or entering of SA’s premises such as visitation hours, sign-in and sign out times, details obtained from your application and/or proposal to SA in relation to your provision of goods and/or services to SA and/or at SA’s premises (“Provision of Goods and/or Services”), electronic and/or online details obtained from visiting or browsing the Website or SA’s pages that are available in social media websites such as Facebook, Twitter and LinkedIn (“Pages”) and/or from your use of any electronic online and/or offline data/file/information sharing platforms (including any mobile or web-based software and/or applications) affiliated or associated with: (i) SA; and/or (ii) any third parties affiliated or associated with or engaged by SA (“Sharing Platforms”), such as login information, social media information, content preferences, cookies, and internet protocol addresses, amongst others, details obtained from your application for employment with SA, details obtained from your proposed and/or continued engagement by SA as an independent contractor/service provider or otherwise as part of SA’s Personnel, details of your employees and/or independent contractors/service providers engaged by you in connection with the Provision of Goods and/or Services, and any information and/or expressions of opinions which may identify you that has been or may be collected, stored, used and Processed by SA or SA’s Personnel, stakeholders, associated parties, affiliates, related corporations, agents, independent contractors and other third parties that SA may be associated with from time to time, and any other information which may identify you which you have provided to SA and/or are incidental from such Personal Data.

“Process”, “Processed” or “Processing” all means the collection, usage, recording, storing, retention, disclosure, and other operation or set of operations described in the PDPA.

“Personnel” shall mean persons that are working for SA, whether directly or indirectly and regardless of the location the persons are working from and the nature of the contract, including but not limited to employees, agents, freelancers, officers, independent contractors, service providers, and casual or temporary or part-time workers.

Consent

By engaging SA to provide services or by interacting with SA either at our place of business, our events or otherwise, or using the Website and/or by using our Pages, you consent to the Processing of your Personal Data by SA, its Personnel, and all persons involved in the provision of services by SA.

Any consent and authorisation granted to SA, whether represented or not, does not replace any other consent and authorisation that was already provided to SA (if any), otherwise it shall take effect on the date of the visitation or entry of SA’s premises or the date on which you have provided Personal Data (whether in person, by e-mail, telephone conversation, facsimile transmission, letter, signing the visitor or guest book/form, entering information into the visitor management system, participation as a vendor to SA, whichever applicable, and are in addition to any rights SA has by law in connection with the Processing of the Personal Data which you have provided.

Collection of Personal Data

In addition to the Personal Data you provide to SA directly (i.e. during your communications with SA and/or when you engage SA to provide services or otherwise), SA may also collect your Personal Data from a variety of sources, including without limitation:-

from the visitation of or entry at our place of business; and/or
registration or attendance at any event or otherwise organised or sponsored by SA, whether solely or in association/partnership with any third parties; and/or
persons that you have appointed and authorised SA to communicate with such as representatives or liaisons, and emergency contacts; and/or
from the regulatory and governmental authorities and statutory bodies; and/or
information that is publicly available via the Sharing Platforms; and/or
from such other sources which you have given your consent and authorisation; and/or
from your application/proposal for the Provision of Goods and/or Services, and/or continued Provision of Goods and/or Services;
from your employees and/or independent contractors/service providers engaged by you in connection with the Provision of Goods and/or Services;
from your application for employment with SA;
From your existing/prior employer(s) in the event you have submitted an application for employment with SA;
from your proposed and/or continued engagement by SA as an independent contractor/service provider or otherwise as part of SA’s Personnel;
from the cookies used on the Website and/or from SA’s Pages; and/or
From your participation in group chats with SA’s Personnel on communication platforms such as WeChat, WhatsApp, Facebook, Google Hangouts, Slack, HipChat, and such other communication platforms with group chat functionality (“Communications Platforms”).

We use cookies on our Website to track website visitorship and experience. Most web browsers are designed to accept cookies. “Cookies” are small data files which contains information you have supplied yourself, such as your preferred language and region preferences which will assist in improving your experience and navigation in the Website, and may enable all features (for example, features such as, but not limited to, flash videos and content, language and region preferences) in the Website to fully function. If you do not wish to receive any cookies, you may set your browser to disable it.

The provision of your Personal Data is voluntary. However, if you do not provide your Personal Data, where essential, or disable “cookies”, SA may not be able to (i) communicate with you; (ii) provide you the services you require;(iii) provide access to certain sections of the Website; (iv) enable all features in SA’s Website, Pages, Communications Platforms and Sharing Platforms to fully function (for example, but not limited to, enable flash videos to be played, ensure you need not input content, language and region preferences each time you visit or browse the Website); (v) allow visitation and entering of SA’s premises; Process your participation in the proposed and/or continued Provision of Goods and/or Services; (vi) Process your application for employment with SA; or (vii) Process your proposed and/or continued engagement by SA as an independent contractor/service provider or otherwise as part of SA’s Personnel.

When you visit the Website, SA may record certain information in relation to your visit such as:

your IP or proxy server IP address;
basic domain information;
your internet service provider;
the date and time of your visit to the Website;
the length of your session;
the pages which you have accessed;
the number of times you access the Website within any month;
the size of the files you look at;
the website which referred you to our website; and
the operating system which your computer uses.

Various pages on the Website may also invite you to provide us with your name and contact details.

We also collect information from people who use the Website, to send news, information about our activities and updates in the legal field which we believe may be useful to you or us; to monitor who is accessing the Website and to profile the type of people accessing the Website.

Our Website does not target and is not intended to attract children under the age of 18 years old (“Minors”). We do not knowingly solicit personal information from Minors or send them requests for Personal Data. Please note that Minors shall be accompanied by the relevant parents, legal guardians and/or representatives when visiting or browsing the Website, Pages, Communications Platforms, and/or Sharing Platforms and/or when using the services that are available on the Website, Pages, Communications Platforms and/or Sharing Platforms. Where the relevant parents, legal guardians and/or representatives have authorised a Minor(s) to visit or browse the Website and/or use any of the services available in the same, the relevant parents, legal guardians and/or representatives shall be fully responsible for: (a) the online conduct of such Minor(s), (b) the controlling of the Minor(s)’ access to and use of the Website, Pages, Communications Platforms and/or Sharing Platforms and the services contained therein, and (c) the consequences of any misuse by the Minor(s) , including but not limited to transactions entered into by the Minor(s) from such access and use.

Purposes of Processing

SA may use and Process your Personal Data for the purposes relating to the services you have requested and for the general business activities of SA which shall include, without limitation:-

to communicate with you and/or such other persons as may be required for the purpose and purposes connected thereto;
to allow visitation and entering of SA’s premises;
for security purposes such as to assist in crime detection and prevention, and to facilitate and increase the security of SA’s premises in order to better provide a safe and secure environment;
to Process your participation in the Provision of Goods and/or Services and in this regard for SA to review and evaluate any documentation relating to the proposed and/or continued Provision of Goods and/or Services;
to allow third parties associated and/or affiliated with and/or engaged by SA to contact you for matters relating to the Provision of Goods and/or Services;
to conduct market research and analysis;
to contact the persons you have provided Personal Data of, such as representatives or liaison and/or emergency contacts;
to provide services offered by SA as desired by you;
to respond to questions, comments and complaints and to generally resolve disputes, if any;
to offer you current and future opportunities, news, and updates in the legal and related industries;
to enable all features in the Website, Pages, Communications Platforms, and Sharing Platforms to fully function;
for verification and identification purposes;
for general administrative and record keeping purposes;
to establish, maintain, and update databases for administrative and record-keeping purposes which may contain information regarding SA’s Personnel, and the provision of services to SA’s clients by SA’s Personnel;
for the purpose of conducting investigations and disciplinary proceedings;
to provide information to regulatory and governmental authorities in order to comply with statutory and government requirements;
for compliance with the law and such other purposes that is required or permitted by any law, regulations, guidelines, circulars, and/or relevant regulatory authorities;
in connection with any legal proceedings or prospective legal proceedings;
to establish, exercise or defend SA’s legal rights;
for the purpose of Processing your application for employment with SA;
For the purpose of communicating with you for the provision of services to SA’s clients in the event you are employed and/or seeking employment with SA or engaged and/or seeking to be engaged by SA as an independent contractor or otherwise as part of SA’s Personnel; and
for the purposes of disaster recovery,

and you consent to and authorise the Processing of your Personal Data in the manner as identified in this Notice.

Other Purposes

SA may also Process your Personal Data for other purposes such as:-

to send you materials such as newsletters, articles, write-ups as well as other updates relating to SA’s services;
for the purposes of disaster recovery; and
to distribute information or details of events, fairs, seminars, conferences, programs, workshops and talks, whether organised or produced/presented by SA or other third parties, which may be of interest to you;

by way of email or physical mail which includes, but not limited to, registered post and postcards.

Please rest assured that SA will ask for your consent before Processing your Personal Data for purposes other than those that are set out in this Notice, the applicable laws, and the terms in your agreements with SA, if any.

If you do not consent to SA Processing your Personal Data for the purposes listed above, please notify SA using the contact details stated below.

Transfer of Personal Data

As SA’s information technology storage facilities and servers may be located in other jurisdictions, your Personal Data may be transferred to, stored, used and Processed in a jurisdiction other than Malaysia. Further, your Personal Data may be transferred out of Malaysia for the purposes as described above. You understand, consent to, and authorise the transfer of your Personal Data out of Malaysia as described in this Notice.

Disclosure to Third Parties

SA may engage other companies, service providers or individuals to perform functions on SA’s behalf, and to the extent necessary for the purposes provided above, SA consequently may be required or need to provide access or disclose to your Personal Data to the third parties such as those listed below (not exhaustive):-

other business partners, industry associations, service providers, professional advisers or individuals to perform SA’s functions on its behalf, including, but not limited to SA’s agents, contractors, sub-contractors, consultants and service providers that provide advisory, accounting, auditing, financial services (including banks), legal services, information technology, data entry, storage facility, security and/or insurance services;
clients of SA;
regulatory and governmental authorities in order to comply with statutory and government requirements;
specified parties that SA is ordered or directed to disclose pursuant to an order of court, tribunal or authority, whether governmental or quasi-governmental with jurisdiction over SA; and
other third parties authorised by yourself.

This Notice only applies to the Processing of Personal Data by SA for the purposes specified in this Notice. It does not cover (a) the Processing of Personal Data conducted by SA for any other purposes not specified in this Notice, (b) the privacy policies and conduct of any third parties, even if such third parties are related to SA, and (c) third party websites to which SA provide links, even if such websites are co-branded with SA’s logo.

SA does not share nor sell your Personal Data with third party websites without your consent and authorisation. SA shall not be not responsible or held liable for the privacy practices and conduct of these third party websites or such other sites which you may have been linked or directed to via the Website, Pages, Communications Platforms and/or Sharing Platforms and/or to which you have provided Personal Data. You should read the privacy policies of such third party websites before disclosure of any Personal Data to these third party websites.

SA does not share nor sell your personal information to any third party without your consent and authorisation, but SA shall not be responsible or held liable for the actions of third parties that you may have been directed to and/or provided Personal Data to. You should read the privacy policies of such third parties before disclosing your Personal Data to such third parties.

Security of Personal Data

SA uses commercially reasonable physical, managerial, and technical safeguards to preserve the integrity and security of your Personal Data and will not knowingly allow access to your Personal Data to anyone outside SA, other than to you or as described in this Notice. However, SA cannot ensure or warrant the security of any information you transmit to SA and you do so entirely at your own risk. In particular, SA does not warrant that such information may not be accessed, altered, collected, copied, destroyed, disposed of, disclosed or modified by breach of any of SA’s physical, technical, or managerial safeguards.

Retention of Personal Data

SA will only retain Personal Data as long as it is necessary to achieve the purposes specified in this Notice and subject always to the applicable laws including the PDPA, the terms and conditions specified in your agreements with SA (if any) for the duration of your relationship with SA, and for such period as may be necessary to protect the interests of SA.

Access & Correction Requests and Inquiries

The provision of your Personal Data is voluntary. Subject to any exceptions under applicable laws, you may at any time hereafter request for (a) access to your Personal Data, (b) correction of your Personal Data, (c) to limit the Processing of your Personal Data, (d) withdraw your consent to the Processing of your Personal Data, and (e) seek further information by contacting the following:-

Jessie Tan Shin Ee

Address: Suite B-11-6, Level 11
Wisma Pantai, Plaza Pantai
No.5 Jalan 4/83A, Off Jalan Pantai Baru
59200 Kuala Lumpur, Malaysia

Telephone No.: +6032201 5584

Facsimile No.: +603 2201 9686

In respect of your right to access and/or correct your Personal Data, SA has the right to refuse your requests to access and/or make any correction to your Personal Data for the reasons permitted under the applicable law, such as where the expense of providing access to you is disproportionate to the risks to your privacy and/or when SA is unable to confirm your identity or the accuracy of the corrected Personal Data provided and/or when you have irrevocably granted to SA your consent, rights, title and ownership of interests for the purposes specified in this Notice.

Your Obligations in Relation to Your Personal Data

You represent and warrant that all Personal Data provided to SA is true, complete and accurate. In the event you are providing the Personal Data of third parties (such as representatives or liaison, emergency contacts, or otherwise) to SA, you further represent and warrant that (a) all necessary consent and authorisation from the third parties are procured, (b) you shall continuously maintain such consent and authorisation, and (c) that you have showed this Notice to such third parties.

You shall immediately inform SA of any changes to the Personal Data which you have provided to SA to such extent necessary in order to enable SA to remain in compliance with the applicable law including the PDPA. SA will use reasonable efforts but shall not be obligated to procure updates from you on a regular periodic basis.

For the avoidance of doubt, you agree that SA shall not be liable for any costs, damages, fines, losses, liabilities and/or penalties that you and/or third parties (including but not limited to an individual or competent authority) have incurred or suffered as a result, whether directly or indirectly, from the breach of any terms, conditions, representations, warranties, and/or obligations detailed this Notice by yourself and/or by anyone acting on your behalf, instructions, and/or of such confirmation.

You further agree to indemnify and hold SA harmless against any actions, claims and/or demands brought against SA by any third parties (including but not limited to an individual or competent authority) and any costs, damages, fines, losses, liabilities and/or penalties (including but not limited to legal costs) which SA may incur or suffer, as a result, whether directly or indirectly, from the breach of any terms, conditions, representations, warranties, and/or obligations detailed in this Notice by yourself and/or by anyone acting on your behalf, instructions, and/or of such confirmation, particularly where SA was provided with false, incomplete or inaccurate Personal Data, failure to update SA of any changes to Personal Data, and/or the necessary consent and authorisation was not obtained or maintained from relevant third parties.

Notwithstanding anything contained herein, the liability of SA (if any) shall be limited to the fullest extent permitted by the applicable law. In no event shall SA be liable for any consequential, incidental, indirect, punitive or special damages, or loss of profits, loss of anticipated profits, data, business or goodwill, regardless of whether such liability (if any) is based on breach of contract, tort, strict liability, or otherwise, and even if SA has been informed or advised of the possibility thereof.

Your Obligations During the Visitation or Entry Onto SA’s Premises

During your visitation or entry onto SA’s premises, you may come into contact or receive any but not limited to Personal Data, information, documents, materials, files, prints, trade secrets and internal processes of SA, whether or not it has been explicitly or tacitly identified or regarded as being confidential (collectively referred to as “Confidential Information”).

By visiting or entering onto SA’s premises, you agree to:

keep confidential, at all times, all Confidential Information and shall not use or disclose or otherwise make available to others any such Confidential Information unless consented in writing by SA; and
not remove any Confidential Information from SA’s premises and photograph or otherwise record any matter to which you may have access to during your visit or entry onto SA’s premises without SA’s prior written consent.

For the avoidance of doubt:

the obligations of confidentiality imposed in this Notice shall continue even after the completion of (a) communications with SA; (b) the visitation or entry of SA’s premises; and/or (c) using the services or facilities that are available on SA’s premises, and/or (d) your Provision of Goods and/or Services;
nothing contained herein shall prevent any party from disclosing any Confidential Information to the extent required in connection with legal proceedings, or as required pursuant to law or an order of court, or the requirements of any governmental, statutory or regulatory authorities; and
any information shall not be confidential if the information is or becomes publicly known through no wrongful act by yourself or any person acting on your behalf, instructions and or confirmation, or any other party disclosing or seeking to disclose such information.

By visiting or entering onto SA’s premises, and/or when using the services or facilities that are available on SA’s premises, and/or participating as a vendor or independent contractor or service provider to SA, you further agree to observe reasonable safety precaution and conform to any applicable safety requirements, which are brought to your attention by SA or by signs posted in SA’s premises.

You further agree to release SA against any actions, claims, demands, costs, damages, fines, losses, liabilities and/or penalties (including but not limited to legal costs) to the extent caused by or resulting from your negligence or wilful misconduct.

Governing Law & Jurisdiction

This Notice is governed by and shall be construed in accordance with the laws of Malaysia. You hereby submit to the non-exclusive jurisdiction of the Malaysian courts.