Simon Reid-Kay & Associates (“SRKA”, “we”, “us”, or “our”) respects personal privacy and is committed to safeguarding your personal information. We operate exclusively in Hong Kong and act in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) (“PDPO”) and other applicable data privacy laws when collecting and using personal information provided to us, or which we have obtained from your visits to our website (srkandassociates.com) and use of our online services.
This Privacy Notice explains our information practices in relation to personal information. If you are a client of our Firm, you should read this Notice together with our terms of business.
When This Notice Applies
This Privacy Notice explains how we manage personal information that we obtain:
- In the course of carrying out business intake and conflict check procedures.
- From or about individuals who are our clients.
- From or about individuals in the course of providing legal services to our clients.
- From or about individuals in the course of operating our business generally, including marketing data and data from digital initiatives.
Note for Personnel & Applicants: If you work for our Firm or are applying for a position at SRKA, you should consult the internal data privacy information provided to you in connection with your role or recruitment process.
How We Collect Personal Information and The Types of Data Collected
The personal information we collect directly from you depends on the nature of your interactions with our Firm and whether you:
- Have engaged our legal services.
- Are a recipient of our marketing communications or attend our events.
- Have interacted with our website, similar technologies, or relationship tools.
- Have a connection to a member of our personnel.
- Have a vendor or professional relationship with our Firm.
We may also collect personal information about you from third parties, including instructing clients (where your information forms part of a client matter) and providers of verification services for client onboarding.
Categories of Personal Data We May Collect
- Basic Details: Your name, contact details, job title, and the name of your employer.
- Financial Information: Billing addresses, bank accounts, and payment information.
- Identification and Verification: Background verification information, evidence of ownership, or source of funds collected for business acceptance purposes and anti-money laundering (“AML”) requirements.
- Special Categories of Data: Information about health, race, ethnicity, or trade union membership where strictly relevant to a legal matter (e.g., employment law disputes).
- Legal Proceedings: Information that relates to criminal or civil matters.
- Children’s Data: Information that relates to children (collected strictly within the context of legal matters, as our Firm does not target children when offering services).
- Media Content: Photographic, audio, and video content (which can include CCTV footage if you visit our premises in Hong Kong).
- Preferences and Events: Information relating to marketing preferences, event registrations, and meetings (including dietary or access requirements).
- Technical and Usage Data: Information relating to your website usage collected through tracking technologies.
Purposes for Which We Use Your Personal Information
We will only use your personal information when the law allows us to do so. Most commonly, we process your data for the following purposes:
- Business Intake Procedures: Carrying out AML checks, conflict searches, and other client onboarding requirements.
- Providing Legal Advice: Managing transactions, litigation, or other legal matters upon which we are advising our clients.
- Marketing Our Services: Promoting our business, sending legal updates, and managing event invitations. You have the right to opt out of marketing communications at any time.
- Business Operations: Managing relationships with third-party suppliers, handling insurance arrangements, or seeking external professional advice.
Legal Bases for Processing
Where required under data protection principles, we rely on the following bases to handle your data:
- Performance of a Contract: To fulfill our agreement to provide legal services to you.
- Legal Compliance: To comply with statutory obligations (e.g., statutory AML requirements for law firms in Hong Kong).
- Legitimate Interests: For the effective operation and promotion of our legal practice, provided these interests do not override your privacy rights.
- Consent: Where you have explicitly agreed to a specific use of your data.
Transferring and Sharing Your Information
As a firm operating exclusively in Hong Kong, your personal information is stored securely on our local servers or secure cloud infrastructure.
We may provide personal information to third parties who perform operational services for us, or to professional advisors (such as barristers, expert witnesses, and local counsel) and service providers (such as secure document review platforms) to perform services on behalf of a client. We ensure these third parties maintain an appropriate level of protection and confidentiality.
On occasion, we may be required by law, regulators, courts, or law enforcement authorities to disclose personal information.
Identity and Access Management
Personnel and contractors using Firm-issued devices may choose to enable features using secure biometric information (e.g., facial recognition or fingerprint IDs) stored locally on their devices. This information remains securely on the device, is not transmitted to our external databases, and is managed in accordance with device security protocols.
Online Identification Technologies
We use cookies and similar online identification technologies on our website to optimise user experience and analyse site traffic.
If your contact details are held in our marketing database, we may use relationship tools to collect aggregate information about your interactions with us (such as email responses or event attendance) to ensure our records remain accurate and to improve our business development initiatives. If you prefer that we do not track these interactions, please contact us at the email provided below.
Confidentiality and Security
We take rigorous precautions to ensure your personal information remains confidential. We have put in place appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, altered, or accessed in an unauthorised way.
Access to your personal data is strictly limited to personnel and third parties who have a legitimate business need to know, and who are subject to a strict duty of professional confidentiality.
Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
In determining the appropriate retention period, we consider the volume, nature, and sensitivity of the data, the potential risk of harm from unauthorised use, and the applicable statutory limitation periods under Hong Kong law.
Your Data Privacy Rights
Under the Hong Kong PDPO, you have specific rights regarding your personal data:
- Right of Access: You have the right to request a copy of the personal data we hold about you.
- Right of Correction: You have the right to request that we rectify any inaccurate or incomplete personal data.
How to Exercise Your Rights
If you wish to exercise your data privacy rights, make a complaint, or ask a question regarding this notice, please contact us using the details below.
To protect your privacy, we will require you to verify your identity before processing any data access or correction request. In accordance with the PDPO, we reserve the right to charge a reasonable fee for processing data access requests.
Changes to Our Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in our practices or legal obligations. Any updates will be posted directly to this page on our website.
How to Contact Us
If you have any questions or queries regarding this Privacy Notice or our data handling practices, please contact our privacy team:
Email: info@srkandassociates.com
Website: srkandassociates.com