PRIVACY POLICY
CHISTY LAW CHAMBERS LLP
(Incorporation No. 0269333 – Securities and Exchange Commission of Pakistan)
2nd Floor, Almas Tower, MM Alam Road, Gulberg II, Lahore, Pakistan
(“CLC LLP”, “we”, “us”, “our”)
This Privacy Policy explains how CLC LLP collects, uses, stores, shares and protects personal data when you interact with us, use our website, communicate with us, or instruct us to provide services. It should be read together with our Terms & Conditions / Terms of Business, Cookie Policy, and Website Terms of Use.
1. Scope and application
This Privacy Policy applies to:
- visitors to our website and social-media platforms;
- prospective clients, clients and former clients;
- counterparties, referrers, partners and professional contacts; and
- any individual whose personal data we process in connection with our services.
Where you formally instruct CLC LLP, this Policy applies in addition to any engagement-specific terms.
2. Applicable law
CLC LLP processes personal data in accordance with applicable laws of Pakistan, including:
- the Pakistan Electronic Crimes Act, 2016 (PECA); and
- any data-protection, privacy, cyber-security or related legislation, rules or guidelines notified in Pakistan from time to time.
Where data is transferred or accessed outside Pakistan, we take reasonable steps to ensure appropriate safeguards consistent with this Policy and applicable law.
3. What personal data we collect
Depending on your interaction with us, we may collect and process the following categories of personal data:
3.1 Identification and contact data
Name, date of birth, nationality, CNIC/passport number, contact details, address, signatures, photographs, and copies of identity documents.
3.2 Client, case and instruction data
Information you provide in connection with legal, administrative, consultancy or coordination services, including correspondence, documents, declarations, applications, forms and supporting evidence.
3.3 Compliance and verification data
Information required for AML, CTF, sanctions and due-diligence checks, including source-of-funds information, corporate records, beneficial-ownership details, and screening results.
3.4 Technical and usage data
IP address, device identifiers, browser type, pages visited, referral data, and cookie-related information (see our Cookie Policy).
3.5 Communications data
Emails, messages, call records, meeting notes and other communications with us.
3.6 Marketing and enquiry data
Information you submit through enquiry forms, subscriptions, event registrations, or marketing interactions.
4. How we collect personal data
We collect personal data:
- directly from you or your authorised representatives;
- from third parties acting on your behalf (e.g., referrers, partners, advisers);
- from public sources, registries, authorities and databases;
- through our website, forms, communications and cookies; and
- where required by law or for compliance purposes.
5. Purposes of processing
We process personal data for the following purposes:
5.1 Service delivery
To assess enquiries, onboard clients, provide legal and related services, manage instructions, prepare documents, coordinate with third parties, and communicate with you.
5.2 Contractual and administrative purposes
To enter into, manage and perform contracts; issue invoices; receive payments; maintain records; and handle complaints or disputes.
5.3 Legal, regulatory and compliance obligations
To comply with Pakistan law, court orders, regulatory requirements, AML / CTF obligations, sanctions screening, and reporting obligations.
5.4 Website and communications
To operate, secure and improve our website and communications, manage cookies, and respond to enquiries.
5.5 Marketing and business development
To provide information about our services, updates or events, where lawful and appropriate. You may opt out of marketing communications at any time.
5.6 Protection of rights
To establish, exercise or defend legal rights; prevent fraud; and protect our business, personnel and clients.
6. Lawful basis for processing
Where required under applicable law, we rely on one or more of the following bases:
- your consent (where obtained);
- performance of a contract or steps taken at your request;
- compliance with legal or regulatory obligations;
- legitimate business interests (including service delivery, security, fraud prevention and quality control), balanced against your rights; and
- protection of vital interests, where applicable.
7. Sharing and disclosure of personal data
We may share personal data, on a need-to-know basis, with:
- courts, tribunals, regulators, government departments and authorities (Pakistan and overseas);
- banks, payment providers and financial institutions;
- immigration authorities, educational institutions, endorsement bodies, free zones and registries;
- independent lawyers, consultants, accountants, translators, and other professional advisers engaged for a matter;
- overseas partners or service providers providing administrative or coordination support only;
- IT, hosting, security and communications service providers; and
- any person to whom disclosure is required or permitted by law or court order.
All third parties act as independent entities under their own legal and regulatory obligations. CLC LLP does not control and is not responsible for their privacy practices.
8. International data transfers
Your personal data may be transferred to, stored in, or accessed from jurisdictions outside Pakistan where required for service delivery, coordination, or compliance (e.g., with overseas authorities or partners).
We take reasonable steps to ensure that such transfers are subject to appropriate safeguards consistent with this Policy and applicable law.
9. Data security
We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These include access controls, secure storage, and internal policies.
However, no system is completely secure. Transmission of information over the internet or via electronic communications carries inherent risks, and we cannot guarantee absolute security.
10. Data retention
We retain personal data only for as long as necessary for:
- the purposes for which it was collected;
- the duration of our relationship with you;
- compliance with legal, regulatory, AML and accounting obligations; and
- the establishment, exercise or defence of legal claims.
Retention periods may vary depending on the nature of the data and applicable legal requirements. Data may be securely archived or destroyed when no longer required.
11. Your rights
Subject to applicable Pakistan law, you may have the right to:
- request access to personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request deletion or restriction of processing, where lawful;
- withdraw consent where processing is based on consent; and
- object to certain processing activities.
Requests are subject to legal, regulatory and professional-obligation exceptions, including confidentiality, legal-privilege, AML and record-keeping requirements.
12. Marketing preferences
You may opt out of receiving marketing or promotional communications from us at any time by following the unsubscribe instructions or contacting us. Opting out does not affect service-related communications.
13. Third-party websites and platforms
Our website or communications may contain links to third-party websites or platforms. We are not responsible for the privacy practices, content or security of those third parties. You should review their privacy policies before providing personal data.
14. Children’s data
Our services are not directed at children. We do not knowingly collect personal data from minors without appropriate legal authority or consent.
15. Updates to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in law, regulation, technology or our practices. The updated version will be published on our website and will take effect from the date of publication.
16. Contact details
If you have any questions, requests or concerns regarding this Privacy Policy or our data-processing practices, please contact:
CHISTY LAW CHAMBERS LLP
2nd Floor, Almas Tower, MM Alam Road, Gulberg II, Lahore, Pakistan
Email: admin@chistylawchambers.com