PERSONAL INFORMATION COLLECTION STATEMENT
INTRODUCTION
Reference to “CK Lee” means CK Lee & Co.
CK Lee collect, use and store your data (such reference to “data” means all forms of personal data) in relation to the operation of its business, which includes the provision of legal services to its clients, direct marketing to corporate subscribers, recruitment and employment.
CK Lee & Co is committed to protecting all data within its care and in accordance with, but not limited to, the Personal Data (Privacy) Ordinance.
Each section of this Personal Information Collection Statement details the categories of people whose data is used by CK Lee, how that data is used and how CK Lee protect that data.
Please also see CK Lee’s Privacy Policy Statement which details the overarching framework that CK Lee has in place.
WHAT DATA DOES CK LEE USE AND WHERE IS IT COLELCTED FROM?
| Type of data | Source of data |
| Contact information including your name, address, telephone number(s), e-mail, your organisation details (including job title, employer, place of work and organisation contact details) and your gender | You, CK Lee’s client and/or client’s insured, intermediaries, those involved in a matter and/or publicly available resources |
| Regulatory information including your date of birth, identity information, details of whether you are a Politically Exposed Person | You, CK Lee’s client and/or client’s insured, intermediaries, those involved in a matter and/or publicly available resources |
| Matter information including policy number/policy inception date, claim number, loss details/claim and any information provided to CK Lee in relation to the purpose upon which it is acting | You, CK Lee’s client and/or client’s insured, intermediaries, those involved in a matter and/or publicly available resources |
| Billing information including bank account details and payment/billing instructions | You, CK Lee’s client and/or client’s insured, intermediaries, those involved in a matter and/or publicly available resources |
| Marketing preferences including marketing communication preferences, legal and industry sector interests | You or your employer (if they are CK Lee’s actual or prospective client) |
| Visitors to CK Lee’s offices including CCTV recordings, building access records, health related information including dietary and access requirements | You or your employer (if they are CK Lee’s actual or prospective client) |
WHAT IS THE PURPOSE OF CK LEE USING YOUR DATA?
Personal data
| What your data may be used for | Why |
| Providing legal services (which may include the provision of management information to CK Lee’s client or as requested as a service in its own right to CK Lee’s client directly) | To perform CK Lee’s contract with you or your employer To comply with legal and regulatory obligations For a legitimate interest |
| Corresponding with you or to others (electronically and/or physically (e.g. by letter, fax, telephone (including within any recording or transcription), email, secure sharing portal or SMS), which may include the use of third party suppliers (such as electronic signature providers) to assist in delivering services to you) | To perform CK Lee’s contract with you or your employer To comply with legal and regulatory obligations For a legitimate interest |
| Part of court or legal proceedings (including legal claims, criminal actions, inquests, tribunals, arbitrations, mediations and/or regulatory actions) | To perform CK Lee’s contract with you or your employer To comply with legal and regulatory obligations For a legitimate interest |
| Managing and running checks within CK Lee’s anti-fraud systems and sharing information with CK Lee’s clients and other appropriate organisations for the purpose of preventing, detecting or prosecuting fraud (which may involve reference to Credit Reference Agencies) | To comply with legal and regulatory obligations For a legitimate interest |
| Conducting client due diligence checks, which may include the use of third party suppliers (such as identity verification providers) and screening for financial, adverse media, political positions and other sanctions | To comply with legal and regulatory obligations For a legitimate interest |
| Managing and running checks within CK Lee’s internal databases which relate to legal proceedings and/or claims handling services | To comply with legal and regulatory obligations For a legitimate interest |
| Complying with CK Lee’s legal obligations or making disclosures to government, regulatory or other public bodies where the disclosure is appropriate and/or permitted by law | To comply with legal and regulatory obligations For a legitimate interest |
| Managing professional relationships with clients and third parties | For a legitimate interest |
| Ensuring business policies are adhered to, e.g. policies covering security and internet use | For a legitimate interest |
| Operational reasons, such as improving efficiency, training and quality control including obtaining your feedback on the provision of services to you | For a legitimate interest |
| Providing training and legal updates | For a legitimate interest |
| Sharing information with associated law firms (for the purpose of CK Lee’s business operations) | To comply with legal and regulatory obligations For a legitimate interest |
| Preventing unauthorised access and modifications to systems | To comply with legal and regulatory obligations For a legitimate interest |
| Protecting the security of systems, website pages and data used to provide the services | To comply with legal and regulatory obligations |
| Marketing (by post and/or email for which you are always able to opt-out/unsubscribe with no detriment), development and/or tendering in relation to CK Lee’s products and services | For a legitimate interest |
| Providing access to files for audit, review or other quality assurance checks by a client, regulator, auditor, professional advisor, crime and law enforcement agency and/or governmental body. | To comply with legal and regulatory obligations For a legitimate interest |
| Providing information to CK Lee’s brokers and insurers | To comply with legal and regulatory obligations For a legitimate interest |
| Day to day operations of CK Lee’s business. For this, CK Lee may use third party service providers (for example procurement services, recruitment consultants, general office services, library services, translation services, website service providers and/or IT service providers) | For a legitimate interest |
Sensitive personal data
Sensitive personal data is subject to additional safeguards. The sensitive personal data which CK Lee use may relate to:
| What CK Lee use your special category personal data for | why |
| Providing legal and/or claims handling services | As necessary for the establishment, exercise or defence of legal claims As necessary for reasons of substantial public interest |
| Obtaining legal advice, establishing, defending and enforcing legal rights and obligations in connection with, any court or legal proceedings | As necessary for the establishment, exercise or defence of legal claims As necessary for reasons of substantial public interest |
| Complying with all relevant legal and regulatory requirements (such as anti-money laundering and client verification checks) | As necessary for reasons of substantial public interest |
| Responding to binding requests or search warrants or orders from the Courts and/or a governmental, regulatory and/or enforcement body and an authority or sharing information (on a voluntary basis) with the same | As necessary for the establishment, exercise or defence of legal claims As necessary for reasons of substantial public interest |
| Hosting you at CK Lee’s offices | You have given your explicit consent to the processing for your dietary and access requirements It is necessary to protect somebody’s vital interests or they are incapable of giving consent in case of any accidents and emergencies at CK Lee’s office |
In addition to the above, there may be occasions where CK Lee use personal data relating to criminal convictions and offences. CK Lee use criminal offence data where necessary in relation to legal claims, to prevent or detect unlawful acts, to comply with regulatory requirements relating to unlawful acts and dishonesty and to prevent fraud / money laundering.
Direct marketing to corporate subscribers
Where you receive a marketing email, event invitation or other direct mailing, CK Lee may collect information about you in the following way:
Voluntary and obligatory purposes
If data is collected directly from a data subject, some of that data will be supplied voluntarily (e.g. from a client instructing CK Lee) and some may not (i.e. CK Lee may be obliged to collect some data in order for CK Lee to operate its business, which includes (but is not limited to) the provision of legal services to its clients, direct marketing to corporate subscribers, recruitment and employment. If CK Lee were not able to use data, it would not be able to operate its business for the purposes specified in this Personal Information Collection Statement.
WHEN DOES CK LEE SHARE DATA?
CK Lee may share your data with the following parties in certain circumstances and where it is necessary to achieve the purposes detailed above:
The list above is not exhaustive.
HOW DOES CK LEE KEEP DATA SECURE?
Appropriate technical and organisational measures have been put in place to protect data. CK Lee limit access to data to those who have a genuine business need to access it. Those using data will do so only in an authorised manner and are subject to a duty of confidentiality.
CK Lee has a procedure to deal with any suspected data breach. CK Lee will notify you and any applicable regulator of a suspected data security breach where CK Lee is required to do so.
HOW LONG WILL CK LEE KEEP DATA
CK Lee’s policy is to retain data only for as long as needed to fulfil the purpose(s) for which it was collected, or otherwise as required by law, regulation and/or business continuity purposes. Under some circumstances, CK Lee reserves the right to anonymise your data so that it can no longer be associated with you.
WHAT ARE YOUR RIGHTS IN RELATION TO YOUR DATA
You have a right to request access to your data that CK Lee uses. Additionally, if any of your data is incorrect or inaccurate, you have the right to request correction.
Requests for access to or to correct personal data should be addressed to the Privacy Officer at CK Lee:
E-mail: kelvinlee@ckleelaw.com
Post:
Chi Kit Lee (Principal)
Units 8 & 9, Level 9,
K11 Atelier,
728 King’s Road,
Quarry Bay,
Hong Kong
You have a right to raise a concerns or complain about how your data is being used with:
| Data Protection Supervisory Authority | Contact details |
| Office of the Privacy Commissioner for Personal Data | https://www.pcpd.org.hk/ +852 2827 2827 communications@pcpd.org.hk |
Last updated: October 2024
PRIVACY POLICY STATEMENT
INTRODUCTION
Reference to “CK Lee” means CK Lee & Co.
CK Lee collect, use and store your data (such reference to “data” means all forms of personal data) in relation to the operation of its business, which includes the provision of legal services to its clients, direct marketing to corporate subscribers, recruitment and employment.
CK Lee & Co is committed to protecting all data within its care and in accordance with, but not limited to, the Personal Data (Privacy) Ordinance.
CK LEE’S DATA PROTECTION FRAMEWORK
CK Lee has an operational framework of controls, including policies, processes and guidance notes which ensures compliance with, but not limited to, the Personal Data (Privacy) Ordinance.
DATA USED BY CK LEE, HOW IT IS USED AND HOW IT IS PROTECTED
Please see CK Lee’s Personal Information Collection Statement, which details:
USE OF WEBSITE
CK Lee’s Website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connects may allow third parties to collect or share data about you. CK Lee does not control those websites, plug-ins or applications and CK Lee is not responsible for their activities. CK Lee encourages you to read the Personal Information Collection Statement of every website you visit when you go to those websites, plug-ins or applications.
COOKIES
Cookies are small text files that are downloaded to your device by websites you visit. The information that the cookies collect, such as the number of visitors to the site, the pages visited and the length of time spent on the site, is aggregated and therefore anonymous.
CK Lee’s website does not use cookies.
To find out more about cookies, including how to manage and delete them, visit www.allaboutcookies.org.
WHAT ARE YOUR RIGHTS IN RELATION TO YOUR DATA
You have a right to request access to your data that CK Lee uses. Additionally, if any of your data is incorrect or inaccurate, you have the right to request correction.
Requests for access to or to correct personal data should be addressed to the Privacy Officer at CK Lee:
E-mail: kelvinlee@ckleelaw.com
Post:
Chi Kit Lee (Principal)
Units 8 & 9, Level 9,
K11 Atelier,
728 King’s Road,
Quarry Bay,
Hong Kong
You have a right to raise a concerns or complain about how your data is being used with:
| Data Protection Supervisory Authority | Contact details |
| Office of the Privacy Commissioner for Personal Data | https://www.pcpd.org.hk/ +852 2827 2827 communications@pcpd.org.hk |
Last updated: October 2024
