This Data Protection Notice (“Notice”) sets out the basis which Michael Por Law Corporation (“we”, “us”, “our” or “MPLC”) may collect, use, disclose or otherwise process personal data of our clients and/or any prospective job applicants in accordance with the Personal Data Protection Act (“PDPA”).
By interacting with us, using our website, submitting information to us, engaging our services, or applying for a position with MPLC, you agree and consent to MPLC, as well as our service providers and third parties appointed by us on your behalf, collecting, using and disclosing your personal data in the manner set forth in this Notice.
1. “Personal data” means data, whether true or not, about a client who can be identified: (a) from that data; or (b) from that data and other information to which we have or are likely to have access.
2. The personal data which we collect depend on the nature of your interaction with us. Examples of personal data which we may collect from you include, but are not limited to, the following:
- Your name or alias, gender, NRIC/FIN or passport number, date of birth, nationality, country of birth;
- Residential address, email address, telephone number;
- Marital status, employment information, financial information, salary information;
- Details of your next-of-kin, spouse, or other family members;
- Work related health issues and disabilities as well as vaccination status;
- Curriculum Vitae;
- Photographs and other audio-visual information; and
- Any other personal data and information provided to us arising out of your interaction with us.
COLLECTION, USE AND DISCLOSURE OF PERSONAL DATA
3. We generally collect personal data through the following ways:
- When you engage our services, or when you submit any personal data to us for purposes of enquiring about our services;
- When you communicate or interact with us via telephone, emails, letters, fax, meetings, website, including CCTV recordings while you are within our premises;
- When you submit an employment application or provide documents or information such as your resume;
- When you submit your personal data to us for any other reason.
4. We may collect and use your personal data for any or all of the following purposes:
- Performing obligations under or in connection with our provision of services requested by our clients;
- Verifying your identity, as well as conducting our necessary due diligence enquiries and/or searches as well as potential conflict searches;
- Responding to, handling, and processing queries, requests, applications and feedback from our clients;
- Managing our clients’ relationship with us;
- Processing payment of our tax invoices or any other financial transactions which you may have with us;
- Complying with any applicable laws, regulations, codes of practice, guidelines, or rules, or to assist in law enforcement and investigations conducted by any governmental and/or regulatory authority;
- Any other purposes for which you have provided the information; and
- Any other incidental business purposes related to or in connection with the above.
5. In addition, if you are seeking employment or any other appointment with MPLC, or if we have entered into an employment contract with you, we may collect your personal data and use your personal data for the following purposes:
- Processing and assessing your application;
- Performing background checks, verifying your credentials and qualifications as well as obtaining employment references;
- Performing our obligations under or in connection with your employment contract with us, including but not limited to, processing administration and human resources requirements;
- Any other purpose relating to your application or employment contract with us.
6. We may disclose your personal data as follows:
- Where such disclosure is required for performing obligations in the course of or in connection with our provision of our services requested by you;
- Where such disclosure is required for performing our obligations in the course of or in connection with the employment contract with you;
- To our agents, contractors, third party service providers who provide technology solutions or support to us, courier services, telecommunications, payment, payroll processing, training, storage archival, client support services;
- To any relevant authorities, including professional regulatory bodies and/or law enforcement agencies, whether local or overseas;
- To the extent necessary to comply with any laws, regulations, rules, directions, guidelines and other similar requirements;
- To any other party whom you authorize us to disclose your personal data.
WITHDRAWING YOUR CONSENT
7. The consent that you provide for the collection, use and disclosure of your personal data will remain valid until such time it is being withdrawn by you in writing. You may withdraw consent and request us to stop collecting, using and/or disclosing your personal data for any or all of the purposes listed above by submitting your request in writing or via email to our Data Protection Officer at the contact details provided below.
8. Depending on the nature of your request, please note that if you withdraw your consent to any or all use of your personal data, we may not be in a position to continue providing our services to you.
9. Please note that we may also not be able accede to your request of the withdrawal if we are legally required to retain such personal data collected from you as required by the relevant authorities or professional regulatory bodies.
10. Please note that withdrawing consent does not affect our right to continue to collect, use and disclose personal data where such collection, use and disclose without consent is permitted or required under applicable laws.
ACCESS TO AND CORRECTION OF PERSONAL DATA
11. If you wish to make (a) an access request for access to a copy of the personal data which we hold about you or information about the ways in which we use or disclose your personal data, or (b) a correction request to correct or update any of your personal data which we hold about you, you may submit your request in writing or via email to our Data Protection Officer at the contact details provided below.
12. Please note that a reasonable fee may be charged for an access request. If so, we will inform you of the fee before processing your request.
PROTECTION OF PERSONAL DATA
13. We take reasonable measures to safeguard your personal data from unauthorized access, collection, use, disclosure, copying, modification, disposal or similar risks. However, please note that no method of transmission over the Internet or method of electronic storage is completely secure. While security cannot be guaranteed, we strive to protect the security of your information and are constantly reviewing and enhancing our information security measures.
ACCURACY OF PERSONAL DATA
14. We generally rely on personal data provided by you (or your authorised representative). In order to ensure that your personal data is current, complete and accurate, please update us if there are changes to your personal data by informing our Data Protection Officer in writing or via email at the contact details provided below.
RETENTION OF PERSONAL DATA
15. We may retain your personal data for as long as it is necessary to fulfil the purpose for which it was collected, or as required or permitted by applicable laws.
DATA PROTECTION OFFICER
16. You may contact us if you have any enquiries or feedback by emailing us at firstname.lastname@example.org, and attention it to “MPLC Data Protection Officer”.
EFFECT OF NOTICE AND CHANGES TO NOTICE
17. This Notice applies in conjunction with any other notices, contractual clauses and consent clauses that apply in relation to the collection, use and disclosure of your personal data by us.
18. We may revise this Notice from time to time without any prior notice. You may determine if any such revision has taken place by referring to the date on which this Notice was last updated. Your continued use of our services constitutes your acknowledgement and acceptance of such changes.
Updated as of June 2022