Dear User ("you"), R&P China Lawyers ("R&P" or "we") values and protects your personal information. We are committed to safeguarding your personal information in accordance with the Personal Information Protection Law of the People's Republic of China ("PIPL") and other applicable laws and regulations, by adopting appropriate technical and organizational measures and enabling you to exercise your statutory rights.
This Privacy Policy (the "Policy") applies to our processing of personal information when you visit our official website, official WeChat account(s) and other online pages, contact us, attend events, request materials, apply for roles, and when we provide legal services and related support services. This Policy describes how and why we process personal information, the safeguards we adopt, and how you may exercise your rights.
Please read and ensure that you fully understand this Policy before using our online channels or otherwise interacting with us. Our online channels are generally not directed at minors under 18, and we do not knowingly process personal information of minors. If we become aware of such processing, we will take measures such as deletion in accordance with applicable laws.
Our online pages may include links to third-party platforms or incorporate third-party components (such as social media, analytics, registration/meeting tools). Where you follow such links, are redirected, or enable such functions, the relevant third party may process your information in accordance with its own rules. We recommend reviewing the third party's privacy policy/notice before use. Unless otherwise required by law, we are not responsible for such third-party practices, and any risks arising from your use of third-party services are borne by you.
We may update this Policy from time to time and publish the updated version on this page. If you continue to use the relevant services after an update becomes effective, you will be deemed to have acknowledged and accepted the updated Policy. If you do not agree to the updates, please stop using the relevant services.
This Policy will help you understand the following:
- How We Collect and Use Your Personal Information
- How We Entrust Processing, Share, Transfer and Publicly Disclose Your Personal Information
- How We Protect Your Personal Information
- How You May Exercise Your Rights
- How We Store Your Personal Information
- How We Transfer Personal Information Across Borders
- Governing Law and Dispute Resolution
- How to Contact Us
1. How We Collect and Use Your Personal Information
We process your personal information only to the extent necessary to achieve specific and legitimate purposes, and we adopt appropriate security measures to protect such information.
1.1 Types of Personal Information We May Process
In the course of your interaction with us and/or our provision of services, we may process the following categories of personal information:
(1) Contact information: name, employer/organization, department and position/title, email address, telephone number, mailing address, etc.
(2) Communication and business interaction information: inquiry details, feedback, correspondence records and related attachments submitted via email, telephone, forms, WeChat or other channels.
(3) Event and subscription information: information required for registration for or participation in online or offline legal seminars, lectures or similar events (such as employer, position, contact details, registration or attendance records).
(4) Recruitment and employment information: basic contact details, identification information, resumes containing education and work experience, qualification certificates and supporting documents, interview records, and identity verification information necessary for recruitment, hiring or onboarding as permitted by law.
(5) Legal services–related information: case or project background information, documents and evidence necessary for handling instructed matters, as well as information required for fee settlement and invoicing.
(6) Compliance and conflict-check information: identification information of clients or relevant parties necessary for complying with professional obligations and legal requirements, including conflict-of-interest checks, client onboarding and compliance reviews.
If you provide us with personal information relating to individuals other than yourself, you shall ensure that you have obtained the relevant individuals' authorization or have another lawful basis for such processing, and that appropriate notice has been given to them.
1.2 Main Purposes of Processing Personal Information
We may process your personal information for the following purposes:
(1) Communication and response: responding to your inquiries or cooperation requests, arranging meetings, and providing requested materials and necessary notices.
(2) Provision of legal services or advice and related support services: including acceptance and execution of instructed matters, fact-finding and legal analysis, issuance of legal opinions or documents, project management and delivery, internal quality control and file management, fee settlement and invoicing, complaint handling and dispute resolution.
(3) Conflict checks, client onboarding and compliance obligations: complying with professional conduct rules and applicable laws by conducting conflict-of-interest checks and necessary client onboarding and compliance reviews.
(4) Event organization and professional communications: managing event registration and logistics; where permitted by law, sending legal updates or event information that you have subscribed to or may be interested in, and managing opt-out or preference settings.
(5) Recruitment and human resources management: recruitment screening, interview and hiring assessment, onboarding and related administration.
(6) Reputation and market evaluation: when participating in legal rankings, awards or similar evaluations, providing the minimum information necessary for verification or feedback to relevant third parties where necessary and on a lawful basis.
If we intend to use personal information for purposes not specified in this Policy, or to process information collected for one purpose for another purpose, we will notify you in advance and obtain the necessary authorization in accordance with applicable laws.
1.3 Circumstances Where Processing May Be Conducted Without Consent
In accordance with applicable laws and regulations, we may process your personal information without obtaining your consent in certain circumstances, including but not limited to:
(1) where it is necessary for the conclusion or performance of a contract to which you are a party;
(2) where it is necessary for the performance of statutory duties or legal obligations;
(3) where it is necessary to respond to public health emergencies, or to protect the life, health or property of natural persons in emergency situations;
(4) where personal information is processed within a reasonable scope for purposes such as news reporting or public opinion supervision in the public interest;
(5) where personal information that has been disclosed by you or otherwise lawfully disclosed is processed within a reasonable scope in accordance with law;
(6) other circumstances as provided by laws or administrative regulations.
2. How We Entrust Processing, Share and Publicly Disclose Your Personal Information
To achieve the purposes set out in this Policy and to support our day-to-day operations and service delivery, we may, where necessary, entrust certain third parties to process personal information on our behalf. Such third parties typically include information technology service providers, event and conference support providers, background verification agencies, and professional service providers required for instructed matters (such as external lawyers or expert advisers, translators, accountants and tax advisers). We will require such third parties, through contracts or other arrangements, to process personal information only to the extent necessary and to implement appropriate confidentiality and security measures.
We may also share your personal information with relevant transaction parties in the event of a merger, acquisition, restructuring, liquidation or other similar transactions. Where a transfer of personal information occurs, we will require the recipient to continue to comply with personal information protection obligations no less stringent than those set out in this Policy, and to complete notification and consent procedures where required by applicable laws.
In certain circumstances, we may be required to disclose your personal information in accordance with laws and regulations, regulatory requirements or legal proceedings (such as requests from courts, police authorities or other law enforcement or regulatory bodies). In addition, where necessary to establish, exercise or defend our legal rights, or to protect the vital legitimate interests of you or others, we may also make disclosures as permitted by law.
3. How We Protect Your Personal Information
We attach great importance to the security of personal information and have implemented technical and organizational measures in line with industry standards to prevent unauthorized access, disclosure, alteration or loss of personal information. Such measures include, without limitation, encryption and de-identification, strict access control and permission management, log auditing, network security safeguards, confidentiality obligations and training for personnel, and incident response mechanisms.
In the event of a security incident that may compromise your personal information, we will take remedial measures in a timely manner in accordance with applicable laws, and notify you of the basic circumstances of the incident, its potential impact, and the measures taken or to be taken. Where required, we will also report such incidents to the competent authorities.
4. How You May Exercise Your Rights
Unless otherwise provided by laws and regulations, you have the following rights with respect to our processing of your personal information: the right to access and obtain copies, to rectify and supplement, to request deletion, to withdraw consent, to request explanations, to restrict or refuse automated decision-making.
You may submit requests through the contact channels set out in Section 8 ("How to Contact Us") of this Policy. To safeguard information security, we may verify your identity before processing your request. We reserve the right to refuse requests that are manifestly unfounded, technically impracticable, excessively burdensome, or that infringe upon the legitimate rights and interests of others, and will provide reasons where required by law.
5. How We Store Your Personal Information
Personal information collected and generated by us will be stored within the territory of the People's Republic of China.
We will retain your personal information only for as long as necessary to achieve the purposes set out in this Policy, or as required by applicable laws and regulations, regulatory requirements, judicial proceedings or professional conduct rules. Upon expiry of the retention period or where the information is no longer required, we will delete such personal information or irreversibly anonymize it, unless retention is otherwise required by law or reasonably necessary for purposes such as dispute resolution.
6. How We Transfer Personal Information Across Borders
As a general principle, personal information collected and generated within the People's Republic of China is stored on servers located in China. Where it is necessary to provide or transfer personal information outside China due to cross-border legal services, inter-office collaboration, client requirements or other business needs, we will comply with applicable legal obligations and implement appropriate contractual, technical and organizational measures to reasonably safeguard the security of personal information during cross-border transfers.
7. Governing Law and Dispute Resolution
The formation, validity, interpretation and performance of this Policy, and any disputes arising out of or in connection with this Policy, shall be governed by the laws of the People's Republic of China.
In the event of any dispute, the parties shall first seek to resolve the matter through amicable consultation. Failing such consultation, either party may submit the dispute to the competent people's court at the place where R&P is registered.
8. How to Contact Us
If you have any questions, comments or complaints regarding this Policy or our processing of personal information, or if you wish to exercise your personal information rights, you may contact us using the details below:
- Company Name: R&P China Lawyers
- Email: [email protected]
- Address: 17/F Central Towers Tower A, 555 Langao Road, Shanghai, 200333, P.R. China
We will verify and respond to your request within a reasonable period as required by law. If you are not satisfied with our response, you may lodge a complaint or report with the competent personal information protection authority.
尊敬的用户（以下称"您"），R&P 方旭律师事务所（以下称"R&P"或"我们"）重视并保护您的个人信息。我们将依据《中华人民共和国个人信息保护法》等适用法律法规，采取适当的技术与管理措施保障个人信息安全，并支持您依法行使相关权利。
本《隐私政策》（以下称"本政策"）适用于您访问我们的官方网站、微信公众号及其他线上页面，或当您与我们联系、参与活动、索取资料、申请职位，以及在我们提供法律服务及相关支持服务过程中所发生的个人信息处理活动。本政策说明我们处理个人信息的方式与目的、采取的保护措施，以及您行使权利的方式。
在您使用我们的线上渠道或与我们互动前，请仔细阅读并充分理解本政策。我们的线上渠道通常不面向未满18周岁的未成年人；我们亦不会在明知的情况下处理未成年人的个人信息。如发现相关情形，我们将依法及时采取删除等措施。
我们的线上页面可能包含第三方链接或调用第三方组件（例如社交媒体、统计工具、报名/会议工具等）。当您跳转或启用相关功能时，第三方可能依据其自身规则处理您的信息；建议您查阅其隐私政策/隐私声明。除法律另有规定外，我们不对第三方处理行为承担责任，使用第三方服务所产生的风险由您自行承担。
我们可能不时更新本政策，并在本页面发布更新版本。更新生效后如您继续使用相关服务，即视为您已理解并接受更新后的政策；如您不同意更新内容，请停止使用相关服务。
本政策将帮助您了解以下内容：
- 我们如何收集和使用您的个人信息
- 我们如何委托处理、共享、转移和公开披露您的个人信息
- 我们如何保护您的个人信息
- 您如何行使您的权利
- 我们如何存储您的个人信息
- 我们如何进行个人信息的跨境传输
- 适用法律与争议解决
- 如何联系我们
1. 我们如何收集和使用您的个人信息
我们仅在实现明确、合理目的所必需的范围内，处理您的个人信息，并采取相应安全措施。
1.1 我们可能处理的个人信息类型
在您与我们互动及/或我们向您提供服务的过程中，我们可能处理以下类别的个人信息：
（1）联络信息：姓名、工作单位/机构、部门与职务/头衔、电子邮箱、电话号码、通信地址等。
（2）沟通与业务往来信息：您通过电子邮件、电话、表单、微信等渠道提交的咨询内容、反馈意见、往来记录及相关附件材料。
（3）活动与订阅信息：您报名或参加线上或线下法律研讨会、讲座等活动所需的信息（如工作单位、职务、联系方式、报名或签到记录等）。
（4）招聘与录用信息：基本联络信息、身份信息、包含教育与工作经历的简历、资格证书与相关证明材料、面试记录，以及在法律允许范围内为招聘、录用或入职所必需的身份核验信息。
（5）法律服务相关信息：为办理委托事项所必需的案件或项目背景信息、文件材料与证据，以及收费结算、开票所需的信息。
（6）合规审查与冲突检索相关信息：为履行律师职业规范及法定义务所必需的客户或相关方识别信息，用于利益冲突检索、客户准入及合规审查。
如您向我们提供任何非您本人的个人信息，请确保您已取得相关个人的授权或具备其他合法处理依据，并已向其作出适当告知。
1.2 我们处理个人信息的主要目的
我们可能基于以下目的处理您的个人信息：
（1）沟通与回应：回应您的咨询或合作请求、安排会议、向您发送所索取的资料及必要通知。
（2）提供法律服务或咨询及相关支持服务：包括受理和开展委托事项、事实核查与法律分析、出具法律意见或文件、项目管理与交付、内部质量控制与档案管理、收费结算与开票、投诉处理与争议解决等。
（3）利益冲突检索、客户准入与合规义务：遵守律师职业规范及适用法律要求，开展利益冲突检索以及必要的客户准入与合规审查。
（4）活动组织与专业内容推送：开展活动报名与会务管理；在法律允许范围内，向您发送您已订阅或可能感兴趣的法律资讯与活动信息，并管理退订或偏好设置。
（5）招聘与人力资源管理：招聘筛选、面试与录用评估、入职办理及相关管理。
（6）声誉与市场评价：在参与法律评级、奖项评选或类似评价活动时，在必要且具备合法依据的情况下，向相关第三方提供核实所必需的最小限度信息，或用于征求反馈与核对信息。
如我们拟将个人信息用于本政策未载明的其他目的，或将基于特定目的处理的信息用于其他目的，我们将依据适用法律事先向您告知并取得必要授权。
1.3 依法无需同意即可处理的情形
根据相关法律法规，在特定情形下，我们可以依法处理您的个人信息而无需另行征得您的同意，包括但不限于：
（1）为订立、履行您作为一方当事人的合同所必需；
（2）为履行法定职责或者法定义务所必需；
（3）为应对突发公共卫生事件，或者在紧急情况下为保护自然人的生命健康和财产安全所必需；
（4）为公共利益实施新闻报道、舆论监督等行为，在合理范围内处理个人信息；
（5）依照法律规定，在合理范围内处理您自行公开或者其他已经合法公开的个人信息；
（6）法律、行政法规规定的其他情形。
2. 我们如何委托处理、共享和公开披露您的个人信息
为实现本政策所述目的并支持我们的日常运营与服务交付，我们可能在必要范围内委托第三方代表我们处理您的个人信息。相关第三方通常包括：信息技术服务机构、活动与会务支持机构、背景核验机构，以及在委托事项所需范围内的专业服务提供方（如外部律师或专家顾问、翻译人员、会计师、税务顾问等）。我们将通过合同或其他安排，要求该等第三方仅在必要范围内处理个人信息，并采取适当的保密与安全措施。
在合并、收购、重组、清算或其他类似交易中，我们亦可能与相关交易方共享您的个人信息；如发生个人信息转移，我们将要求承接方继续履行不低于本政策要求的个人信息保护义务，并在适用法律要求时履行告知及取得必要同意等程序。
在某些情况下，基于法律法规、监管要求或法律程序（例如法院、警方或其他执法或监管机构的要求），我们可能需要披露您的个人信息；此外，为行使、建立或抗辩我们的合法权利，或为保护您或他人的重大合法权益确有必要时，我们也可能依法进行披露。
3. 我们如何保护您的个人信息
我们高度重视个人信息安全，并采取符合行业标准的技术与管理措施，防止个人信息被未经授权访问、泄露、篡改或丢失。这些措施包括但不限于数据加密与脱敏、严格的访问控制与权限管理、日志审计、网络安全防护、人员保密义务与培训，以及信息安全事件应急响应机制。
如发生可能危及您个人信息安全的事件，我们将按照法律法规的要求及时采取补救措施，并依法向您告知事件的基本情况、可能产生的影响以及已采取或拟采取的应对措施；在必要情况下，我们亦将依法向有关主管部门报告。
4. 您如何行使您的权利
除法律法规另有规定外，您就我们处理您的个人信息依法享有以下权利：访问与复制、更正与补充、删除、撤回同意、请求解释说明、限制或拒绝自动化决策等。
您可以通过本政策第8条"如何联系我们"所列渠道向我们提交相关请求。为保障信息安全，我们可能在处理请求前核验您的身份。对于明显无端、过度增加技术负担、侵害他人合法权益或缺乏可行性的请求，我们有权依法予以拒绝并说明理由。
5. 我们如何存储您的个人信息
我们收集和产生的个人信息将存储在中华人民共和国境内。
我们将在实现本政策所述目的所必需的期限内保存您的个人信息，或依照适用法律法规、监管要求、司法程序及律师职业规范的要求予以保存。存储期限届满或不再需要保存时，我们将依法删除相关个人信息，或对其进行不可逆的匿名化处理，除非法律另有规定或为争议解决等合理目的需要继续保留。
6. 我们如何进行个人信息的跨境传输
我们在中华人民共和国境内收集和产生的个人信息原则上存放在境内服务器。若因跨境法律服务、跨办公室协作、客户要求或其他业务需要，确需向境外提供或传输个人信息，我们将依法履行相应义务，并采取必要的合同、技术与管理措施，以合理保障个人信息在跨境流转过程中的安全。
7. 适用法律与争议解决
本政策的订立、执行与解释，以及因本政策产生的任何争议，均适用中华人民共和国法律。
如发生争议，双方应首先通过友好协商解决；协商不成的，任何一方均可向 R&P 注册地有管辖权的人民法院提起诉讼。
8. 如何联系我们
如您对本政策或我们处理个人信息的相关事宜有任何疑问、意见或投诉，或希望行使您的个人信息权利，请通过以下方式与我们联系：
- 公司名称：方旭律师事务所
- 联系邮箱：[email protected]
- 联系地址：上海市普陀区岚皋路555号品尊国际中心A座17楼
我们将在收到您的请求后，依法在合理期限内进行核实并予以回复。如您对我们的答复不满意，您亦有权向有管辖权的个人信息保护主管部门投诉或举报。