❋

Chen & Leung Barristers & Solicitors Privacy Policy

Chen & Leung Barristers & Solicitors (“C&L”, “we” or “us”) is committed to protecting the accuracy, confidentiality and security of the personal information we handle. This Privacy Policy describes how we collect, use and disclose personal information about clients, service providers and other individuals (“you”), whether through our website, in the course of providing legal services, or through any other interaction with our firm.

Much of the personal information we receive is collected in the context of providing legal advice. That information is governed by solicitor‑client privilege, the regulatory framework applicable to lawyers in British Columbia, and professional ethical obligations. These protections apply in addition to the practices described in this Privacy Policy.

What is Personal Information?

Under the Personal Information Protection Act (British Columbia) (“PIPA”), “personal information” means information about an identifiable individual. For the purposes of this policy, personal information includes any information defined as such under applicable privacy legislation.

Business contact information—such as your name, business title, business address, business telephone number or business email—is generally not considered personal information.

Depending on the nature of our engagement, the personal information we may collect includes your home address, personal contact details, billing information, information relating to a legal matter, and information about witnesses, beneficiaries, family members, directors, officers, employees, adverse parties, experts and other individuals connected to a legal file. Where possible, we collect information directly from you; in some cases, we may obtain information from third‑party sources.

Consent

PIPA deems consent to be given where the purpose of collecting, using or disclosing personal information would be obvious to a reasonable person. In such cases, C&L may handle personal information without express consent.

PIPA also permits the collection, use or disclosure of personal information without consent in certain circumstances, including where:

• the information is required to protect an individual’s health or safety

• obtaining consent would compromise an investigation or the accuracy of the information

• the information is publicly available from a prescribed source

• the collection, use or disclosure is required or authorized by law

Where consent is not implied or otherwise permitted by law, by providing personal information to C&L or to our service providers, you consent to its collection, use and disclosure in accordance with this Privacy Policy and applicable legislation.

You may withdraw your consent at any time, subject to legal or contractual restrictions. Withdrawal of consent may limit our ability to provide certain services.

If you provide personal information about another individual, you confirm that you have the authority or consent necessary to allow us to collect, use and disclose that information for the purposes described in this Privacy Policy.

Why Do We Collect Your Personal Information?

C&L collects, uses and discloses personal information for purposes including:

• establishing and managing client relationships, providing legal advice, performing legal services and avoiding conflicts of interest

• sharing information with third parties involved in a legal matter, such as opposing counsel, experts, witnesses, regulators or decision‑makers

• assessing whether to enter into business relationships with clients, suppliers or other parties, including evaluating creditworthiness

• administering accounts, issuing invoices, processing payments and fulfilling contractual obligations

• communicating with clients, suppliers and other parties, and understanding their needs and preferences

• developing, improving and delivering our legal services

• distributing newsletters, legal updates, event invitations and other communications

• maintaining and improving our internal precedent systems and knowledge resources

• managing and developing our business operations

• detecting and preventing fraud, negligence, breach of contract or other unlawful activities

• participating in business transactions such as mergers, acquisitions or financing arrangements

• complying with legal, regulatory and professional obligations

• any other purpose to which you have consented

To Whom Do We Disclose Your Personal Information?

C&L may disclose personal information to:

• service providers assisting with functions such as data processing, document management, marketing or office administration

• organizations assessing creditworthiness or collecting outstanding accounts

• financial institutions involved in payment arrangements or security interests

• individuals acting as your authorized agents

• insurers, law societies and other regulatory bodies

• third parties where disclosure is permitted or required by law or where you have provided consent

How Do We Protect Your Personal Information and Where Is It Stored?

C&L recognizes its professional duty to protect client confidentiality and its legal obligations to safeguard personal information.

Personal information is stored in secure physical or electronic locations, including servers operated by C&L or by trusted service providers. Storage locations may change over time.

We use administrative, technical and physical safeguards appropriate to the sensitivity of the information, including secure networks, firewalls and password‑protected systems. When personal information is processed by third parties, we take reasonable steps to ensure it remains protected.

How May You Obtain Access to Your Personal Information?

Under PIPA, individuals may request:

• access to their personal information in C&L’s custody or control

• information about how their personal information has been used

• the names of individuals or organizations to whom their personal information has been disclosed

We will respond within the time limits set by law and make reasonable efforts to assist applicants. Fees may apply as permitted by legislation.

C&L must refuse access where disclosure:

• could reasonably threaten the safety or mental or physical health of another individual

• could cause immediate or grave harm to the requesting individual

• would reveal personal information about another person

• would identify an individual who provided information in confidence

C&L may also decline access where:

• the information is protected by solicitor‑client privilege

• disclosure would reveal confidential commercial information that could harm C&L’s competitive position

• the information was collected without consent for an investigation that is not yet complete

• the information was created by a mediator or arbitrator in the course of their appointment

Requests for Correction of Personal Information

Individuals may request corrections to their personal information. If we agree that a correction is appropriate, we will update the information and, where reasonable, notify third parties who received the incorrect information.

If we decline to make a correction, we will annotate the record to reflect that a correction was requested.

Our Website

Using our website does not create a lawyer‑client, advisory or fiduciary relationship. Contacting C&L through the website or by email does not, on its own, establish such a relationship.

Cookies

Our website may use cookies to collect information such as browser type, operating system, referring website, visit duration, pages viewed and similar analytics. Cookies identify your browser, not you personally.

This information may be used to improve website functionality, analyze usage patterns and support marketing activities. You may adjust your browser settings to refuse cookies, though doing so may limit website functionality.

Other Websites

Our website may contain links to third‑party sites. C&L is not responsible for the content, security or privacy practices of external sites. Your interactions with those sites are at your own risk.

Changes to Our Privacy Policy

C&L may update this Privacy Policy from time to time. Any changes will be posted on our website and made available upon request. If new purposes for collection, use or disclosure arise, we will obtain any required consents unless otherwise permitted by law.

Further Information

If you have questions about this Privacy Policy or wish to request access to or correction of your personal information, please contact our Privacy Officer at:

info@cllawyers.ca

This Privacy Policy is effective as of June 01, 2026.