Who we are
Suggested text: Our website address is: https://eraandco.com.
We at Effa Ruzanna Anuar & Co (ERACO) recognize the importance of privacy and the sensitivity of personal information. As required under the Personal Data Protection Act 2010, the purpose of this Personal Data Protection Notice (“Notice”) is to inform you how we collect and process your personal data when you appoint or engage us to provide services, when you access and use our website or interact with us including through meetings, seminars, conferences or events.
By appointing or engaging us to provide services to you, by accessing and using our website, or by interacting with us, you consent to us using, collecting, and processing your personal data in the manner contemplated in this Notice.
This Notice may be amended or updated from time to time. We would advise you to check this Notice on our website from time to time for amendments or updates. By continuing to use or engage our services, using our website, or communicating with us subsequent to any amendments or updates to this Notice, would confirm and indicate your acceptance of the amendments or updates to this Notice.
Comments
Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address, and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who do we share your data with
Suggested text: If you request a password reset, your IP address will be included in the reset email.
How long we retain your data
Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights do you have over your data
Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where your data is sent
Suggested text: Visitor comments may be checked through an automated spam detection service.
What Personal Data Do We Collect?
Personal data generally means any information that identifies you. Your personal data is collected and processed by us at the start of our services or interaction and, from time to time, in the course of our engagement or interaction.
The type of personal data collected and processed by us includes:
- Name, date of birth, nationality, gender, NRIC / passport number, residency status, correspondence address, contact details including mobile, office and residential telephone number and facsimile number, e-mail address, banking details, financial / creditworthiness information;
- Employment category (private sector, government sector, self-employed, non-working or others), name of employer and office address, details of relationship with the company (e.g. promoter, director, shareholder);
- Such other information relevant or required for:
- Our legal engagement;
- Provision of legal services for the purposes of the legal engagement or legal transaction; and
- Compliance with legal and regulatory requirements; and
- Any additional information provided by you or third parties about you.
Source of Personal Data
Personal data collected will mainly be from you. However, some personal data may also be collected by us from other available sources including but not limited to credit reporting agencies, government departments or agencies, public registries, websites, social media, publications, events, seminars, and conferences.
How Do We Use Your Personal Data
Your personal data is collected and processed by us for our business activities including the following purposes:
- To verify your identity;
- To communicate with you including responding to your inquiries;
- All purposes related to or in connection with our legal engagement;
- To provide legal services for the purposes of the legal engagement or transaction;
- To comply with legal and/or regulatory requirements including court orders;
- For our day-to-day operations and administrative purposes including file management, billing, and collection, audits, reporting, investigations, etc.;
- For the purposes of enforcing or defending our legal rights and/or obtaining legal advice;
- To send you materials or publications including newsletters, articles or updates, or information about events, conferences, seminars, and talks that may be of interest to you;
- To promote, offer or market our services to you;
- To send as potential referees to (i) editors/researchers in ranking legal publications and journals and/or (ii) clients/potential clients who request referees of past work in relation to any proposal, submissions, tenders, or bids;
- To assist in the prevention, detection, or investigation of crime or possible criminal activities or for the administration of justice;
- For security and internal audit purposes;
- For such other purposes as may be directed or consented to by you; and
- For all other purposes in relation to or incidental to the above.
Disclosure of Your Personal Data
Under certain circumstances, we may be required to disclose your personal data to third parties. Third parties to whom your personal data may be disclosed by us are as follows:
- any persons directed by or consented to by you;
- any persons required for the purposes of the legal engagements and/or legal transactions including but not limited to counterparties, other advisors, financial institutions, regulatory bodies, etc;
- any person for the purposes of compliance with legal and regulatory requirements;
- our data processors i.e. third parties who we engage to process personal data on our behalf including but not limited to archival storage, data entry service providers, computer backup services, disaster recovery services, banks, and financial institutions, etc.; and
- our professional advisors including but not limited to legal advisors, tax advisors, financial advisors, auditors, insurance brokers, etc.
Further, we may also be required to transfer your personal data outside of Malaysia for the purposes of such third parties stated in this Notice. The transfer of your personal data outside Malaysia would also be required if you are traveling, residing, or based outside Malaysia.
Obligation to Provide Personal Data
We acknowledge that you have the right in deciding the information you wish to provide to us. The provision of the information listed above is voluntary in nature. However, please note that if you do not provide the information above or limit the way such information is to be processed, it may result in us not being able to:
- Communicate or correspond with you;
- Undertake the legal engagement or transaction and/or provide our services to you; and/or
- Grant access to our website.
Data Access and Data Correction
If you wish to request:
- For access to your personal information;
- For your personal data to be corrected or updated; or
- To withdraw your consent or limit the use of your personal data;
please submit your written request to:
Email: admin@eraandco.com
An administrative charge may be imposed for any request under paragraphs (a) and (b) above.
Further, we reserve the right to refuse your requests for any reasons permitted under law.
Disclaimer
The accuracy and completeness of your personal data depend on the information you provide. We assume that the information you have provided is accurate, up-to-date, and complete unless you inform us otherwise.
Where you provide any third-party information to us including but not limited to the employer, colleagues, or family information, it is our assumption that such information is accurate, up to date and complete and that you have obtained the necessary consent to disclose the same.
Conflict
In the event that there is any conflict between the English and national language version of this Notice, the English language version shall prevail.
