1. Introduction
1.1 The Bar Association of the Kingdom of Cambodia ("BAKC", "we", "us", or "our") is committed to protecting the privacy and security of the personal information entrusted to us. This Privacy Policy explains how we collect, use, disclose, store, and otherwise process personal information through the official BAKC website, mobile application, and any related digital platforms or online services (collectively, the "Service").
1.2 The purpose of this Privacy Policy is to provide transparency regarding our information handling practices and to explain the rights and choices available to individuals whose personal information we process.
1.3 This Privacy Policy is intended to help you understand:
- what information we collect;
- how we use and protect your information;
- when we may disclose your information;
- the choices and rights available to you regarding your Personal Data; and
- how you may contact us regarding privacy matters.
1.4 By accessing or using the Service, creating an Account, submitting information to BAKC, or otherwise interacting with the Service, you acknowledge that you have read and understood this Privacy Policy.
1.5 This Privacy Policy applies to all users of the Service, including:
- members of BAKC;
- trainee lawyers;
- law firms;
- applicants for membership or other BAKC services;
- participants in seminars, Continuing Professional Development (CPD) programs, workshops, conferences, and other events; and
- members of the public who access or use the Service.
2. Key Terms
For the purposes of this Privacy Policy:
- Account means a unique account created for a User to access certain features of the Service.
- Application means the official mobile application operated by the Bar Association of the Kingdom of Cambodia.
- BAKC means the Bar Association of the Kingdom of Cambodia.
- Cookies means small text files placed on your Device that help the Service function properly, remember user preferences, improve security, and analyze website usage.
- Country means the Kingdom of Cambodia.
- Device means any device capable of accessing the Service, including a desktop computer, laptop, mobile phone, tablet, or other electronic device.
- Law Firm means a law office, law group or law firm registered with or recognized by BAKC.
- Member means any lawyer, trainee lawyer, law firm representative, or other person registered with or authorized by BAKC.
- Personal Data (or Personal Information) means any information relating to an identified or identifiable individual.
- Lawyer Directory means the online directory maintained by BAKC that enables the public to verify the registration status of lawyers and law firms.
- Service means the BAKC website, mobile application, member portal, and all related online services operated by BAKC.
- Service Provider means any third party engaged by BAKC to provide services on its behalf, including website hosting, cloud storage, cybersecurity, payment processing, information technology support, analytics, or similar operational services.
- Usage Data means technical or diagnostic information collected automatically through your use of the Service.
- User or You means any individual or legal entity accessing or using the Service.
3.Information We Collect
The information we collect depends on how you interact with the Service. Some information is provided directly by you, while other information is collected automatically to ensure the secure and effective operation of the Service.
3.1 Personal Data You Provide
Depending on the services you use, BAKC may collect the following categories of Personal Data.
Identity and Contact Information
This may include:
- full name;
- email address;
- telephone number;
- residential or business address;
- nationality (where required);
- date of birth (where required);
- identification number (id);
- professional title;
- law firm affiliation; and
- other information necessary to identify you or administer BAKC services.
Account Information
If you register for an Account, we may collect:
- username;
- encrypted password;
- account preferences;
- authentication information;
- login history; and
- other information necessary to maintain the security of your Account.
Professional Information
Where applicable, we may collect information relating to your professional status, including:
- lawyer registration status;
- trainee lawyer status;
- date of admission to the Bar;
- membership status;
- law firm information;
- areas of legal practice;
- Continuing Professional Development (CPD) records;
- licensing or regulatory information maintained by BAKC; and
- other professional information relevant to the services provided by BAKC.
Documents Submitted Through the Service
Where you submit applications or requests electronically, BAKC may collect documents such as:
- membership applications;
- supporting identification documents;
- academic qualifications;
- professional certificates;
- passport-size photographs;
- payment confirmations;
- requests for certificates;
- legal aid applications;
- complaints;
- correspondence; and
- other documents required for administrative or regulatory purposes.
Communications
When you contact BAKC, we may collect information contained in your communications, including:
- emails;
- messages submitted through online forms;
- customer support requests;
- feedback;
- survey responses; and
- other information voluntarily provided by you.
3.2 Information Collected Automatically
When you access or use the Service, certain information is collected automatically to help us operate, maintain, secure, and improve the Service.
This information may include:
- Internet Protocol (IP) address;
- browser type and version;
- operating system;
- device type and model;
- unique device identifiers;
- language settings;
- pages visited and features accessed;
- date and time of access;
- referring website or application;
- time spent on the Service;
- clickstream data;
- error reports;
- crash reports; and
- other technical or diagnostic information.
This information is generally used to administer the Service, monitor system performance, improve functionality, troubleshoot technical issues, detect unauthorized activity, and strengthen cybersecurity.
Where reasonably practicable, this information is aggregated or anonymized so that it does not directly identify individual users.
3.3 Information Collected Through the Mobile Application
Where you use the BAKC mobile application, we may request permission to access certain features of your Device where necessary to provide specific functionality.
Subject to your device settings and applicable permissions, the Application may access:
Camera
To allow you to:
- capture or upload profile photographs;
- submit supporting documents;
- scan documents where applicable; or
- use other features requiring image capture.
Photo Library
To enable you to:
- upload profile pictures;
- submit supporting documents;
- attach files to applications or requests; or
- replace previously uploaded images.
Push Notifications
To send notifications relating to:
- membership matters;
- Continuing Professional Development (CPD);
- seminar registrations;
- event reminders;
- account activity;
- security alerts;
- announcements; and
- other important communications relating to BAKC services.
You may manage or withdraw these permissions at any time through your device settings. However, disabling certain permissions may affect the availability or functionality of some features of the Application.
3.4 Lawyer Directory
As part of its statutory responsibilities, BAKC maintains a Lawyer Directory to enable members of the public, government institutions, courts, businesses, and other stakeholders to verify the registration status of lawyers and law firms.
Information published through the Lawyer Directory may include:
- lawyer's name;
- lawyer’s identification number (id);
- registration or membership status;
- date of admission or enrolment;
- law firm affiliation;
- office address;
- contact information approved for publication;
- areas of legal practice (where applicable); and
- other professional information that BAKC determines may appropriately be made available in accordance with applicable laws, regulations, or BAKC policies.
Information published through the Lawyer Directory is derived from BAKC's official records.
Publication of information in the Lawyer Directory forms part of BAKC's regulatory functions and is intended solely to assist the public in verifying the professional status of lawyers and law firms.
Publication does not constitute an endorsement, recommendation, accreditation, or guarantee of the quality of legal services provided by any lawyer or law firm.
Users must not use information obtained from the Lawyer Directory for unlawful purposes, including harassment, unsolicited commercial communications, identity misuse, or any activity prohibited by law.
4. Cookies and Similar Technologies
BAKC uses cookies and similar technologies to improve the functionality, security, and performance of the Service. Cookies are small text files stored on your Device that enable the Service to recognize your browser, remember your preferences, maintain secure sessions, and improve your overall user experience. Depending on the functionality available, the Service may use the following categories of cookies.
4.1 Essential Cookies
Essential cookies are required for the operation of the Service. These cookies enable core functionality such as:
- user authentication;
- secure login;
- account management;
- fraud prevention;
- security monitoring; and
- maintaining active user sessions.
Without these cookies, certain features of the Service may not function properly.
4.2 Functional Cookies
Functional cookies remember choices you make while using the Service, including:
- language preferences;
- login preferences;
- accessibility settings; and
- other personalized preferences.
These cookies improve your experience by allowing the Service to remember your settings during future visits.
4.3 Analytics Cookies
Subject to applicable law, BAKC may use analytics tools to understand how users interact with the Service. Analytics information may include:
- pages viewed;
- navigation patterns;
- device type;
- browser type;
- session duration;
- general usage statistics; and
- system performance information.
Analytics information helps BAKC improve the design, accessibility, functionality, and security of the Service. Where reasonably practicable, analytics information is collected in an aggregated or anonymized form.
4.4 Managing Cookies
Most web browsers allow you to manage cookies through your browser settings. You may choose to block or delete cookies at any time. However, doing so may affect certain features of the Service, including user authentication, saved preferences, and other functionality.
5. How We Use Your Personal Data
BAKC collects and processes Personal Data only where it is necessary to provide services, perform its statutory functions, administer its operations, comply with legal obligations, or protect the security and integrity of the Service.
Depending on your interaction with the Service, Personal Data may be used for the following purposes:
5.1 Providing and Maintaining the Service
We use Personal Data to:
- operate, maintain, and improve the website and mobile application;
- authenticate registered users;
- provide requested online services;
- maintain system security;
- detect and resolve technical issues; and
- ensure the reliable operation of the Service.
5.2 Managing Member Accounts
We may use Personal Data to:
- verify your identity;
- create and administer user accounts;
- maintain official membership records;
- manage profile updates;
- facilitate member access to online services; and
- administer member-related functions.
5.3 Administering BAKC Services
Personal Data may be used to administer services provided by BAKC, including:
- lawyer registration;
- trainee lawyer registration;
- law firm registration;
- membership renewal;
- Continuing Professional Development (CPD);
- seminars;
- conferences;
- workshops;
- legal aid services;
- issuance of certificates;
- online applications; and
- other services provided by BAKC.
5.4 Operating the Lawyer Directory
We process Personal Data to establish and maintain the Lawyer Directory, verify professional registration, promote transparency within the legal profession, and fulfill BAKC's regulatory responsibilities.
5.5 Communications
We may use your contact information to communicate with you regarding:
- account activity;
- membership matters;
- applications and requests;
- seminar registrations;
- CPD activities;
- administrative announcements;
- election notices;
- security alerts;
- policy updates; and
- other matters relating to BAKC's functions.
Communications may be sent by email, SMS, telephone, mobile application notifications, or other appropriate electronic means.
6. Legal Basis for Processing Personal Data
6.1 BAKC collects and processes Personal Data only where there is a lawful and legitimate basis for doing so.
6.2 Depending on the nature of the Service and the purpose for which your Personal Data is processed, BAKC may process Personal Data where it is necessary to:
- provide the Service or other services requested by you;
- create and manage your Account;
- administer membership, lawyer registration, trainee lawyer registration, law firm registration, and other professional services;
- perform BAKC's statutory functions and regulatory responsibilities;
- comply with applicable laws, regulations, court orders, or requests from competent authorities;
- protect the security, integrity, and proper operation of the Service;
- protect the rights, property, or legitimate interests of BAKC, its members, users, or the public; or
- where you have provided your consent.
6.3 Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn and may not apply where BAKC is required by law or regulation to continue processing or retaining certain information.
7. Sharing and Disclosure of Personal Data
BAKC treats Personal Data as confidential and does not sell, rent, or otherwise disclose Personal Data for commercial marketing purposes.
We disclose Personal Data only where necessary to provide the Service, fulfill our statutory responsibilities, comply with legal obligations, or protect the rights and security of BAKC and its users.
7.1 Service Providers
BAKC may engage carefully selected third-party Service Providers to assist in operating the Service. These Service Providers may provide services including:
- website hosting;
- cloud storage;
- information technology support;
- cybersecurity services;
- payment processing;
- email delivery;
- data backup and disaster recovery;
- analytics;
- maintenance of the Service; and
- other operational or technical services.
Service Providers are permitted to access Personal Data only to the extent necessary to perform services on BAKC's behalf and are required to implement appropriate security measures and confidentiality obligations.
7.2 Government Authorities and Regulatory Bodies
BAKC may disclose Personal Data where disclosure is required or permitted by applicable law. This may include disclosure to:
- courts;
- law enforcement authorities;
- government ministries;
- regulatory agencies;
- judicial authorities;
- anti-corruption authorities;
- financial intelligence authorities; or
- any other competent authority authorized by law.
Where practicable and legally permissible, BAKC will limit disclosures to the information reasonably necessary for the relevant purpose.
7.3 Lawyer Directory
Certain professional information relating to registered lawyers and law firms is intentionally made available through the Lawyer Directory.
This information is published as part of BAKC's statutory responsibility to maintain official records and assist the public in verifying the professional status of lawyers and law firms.
Only information determined by BAKC to be appropriate for public disclosure will be published.
Publication in the Lawyer Directory does not constitute an endorsement, recommendation, certification, or guarantee of any lawyer or law firm.
7.4 With Your Consent
Where appropriate, BAKC may disclose your Personal Data to another person or organization where you have expressly authorized or consented to such disclosure.
7.5 Protection of Rights, Security, and the Public Interest
BAKC may disclose Personal Data where reasonably necessary to:
- investigate suspected fraud or misuse of the Service;
- respond to cybersecurity incidents;
- prevent unauthorized access to the Service;
- enforce these Privacy Policy, the Terms and Conditions, or other applicable policies;
- protect the rights, safety, or property of BAKC, its members, users, or the public; or
- establish, exercise, or defend legal claims.
8. Retention of Personal Data
BAKC retains Personal Data only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with applicable laws and regulations, maintain official records, resolve disputes, enforce legal rights, and carry out its statutory responsibilities.
The length of time that Personal Data is retained depends on the nature of the information and the purpose for which it was collected.
8.1 Membership Records
Information relating to lawyers, trainee lawyers, law firms, and other registered Members may be retained for as long as necessary to maintain official membership records and comply with applicable legal or regulatory obligations.
Certain records may continue to be retained after membership has ceased where required by law, professional regulations, or BAKC's record management policies.
8.2 User Accounts
Information associated with user accounts may be retained while the Account remains active and for a reasonable period after the Account has been closed to:
- facilitate account recovery;
- investigate security incidents;
- resolve disputes;
- comply with legal obligations; or
- protect the integrity of the Service.
8.3 Applications and Supporting Documents
Applications, supporting documents, uploaded files, correspondence, and administrative records submitted through the Service may be retained in accordance with BAKC's administrative requirements and applicable legal obligations.
8.4 Usage Data
Usage Data, including server logs, cookies, IP addresses, and diagnostic information, may be retained for a limited period to:
- maintain system security;
- detect unauthorized activity;
- investigate technical issues;
- improve the performance of the Service;
- support operational analytics; and
- comply with applicable legal obligations.
Where reasonably practicable, Usage Data will be anonymized or aggregated once it is no longer required for these purposes.
8.5 Secure Disposal
When Personal Data is no longer required, BAKC will take reasonable steps to securely delete, anonymize, or otherwise dispose of such information in accordance with applicable laws, internal policies, and accepted industry practices.
Certain information may continue to exist within secure backup systems for a limited period before permanent deletion.
9. International Transfers of Personal Data
9.1 BAKC primarily collects, processes, and stores Personal Data within the Kingdom of Cambodia.
9.2 However, certain Service Providers engaged by BAKC, including providers of cloud hosting, information technology infrastructure, cybersecurity, or technical support services, may process or store Personal Data in other jurisdictions.
9.3 Where Personal Data is transferred outside Cambodia, BAKC will take reasonable steps to ensure that appropriate contractual, technical, and organizational safeguards are in place to protect Personal Data against unauthorized access, disclosure, alteration, misuse, or destruction.
9.4 These safeguards may include confidentiality obligations, contractual data protection provisions, encryption technologies where appropriate, restricted access controls, and other reasonable security measures.
10. Your Rights
10.1 Subject to applicable laws and regulations, you may have certain rights concerning your Personal Data held by BAKC. These rights may include the right to:
- request access to the Personal Data held by BAKC;
- request correction of inaccurate or incomplete Personal Data;
- request updates to outdated Personal Data;
- request deletion of Personal Data where retention is no longer necessary or where deletion is permitted by law;
- withdraw consent where processing is based on your consent;
- request information regarding how your Personal Data is processed;
- object to certain processing activities where permitted by applicable law; and
- submit inquiries or complaints regarding BAKC's handling of your Personal Data.
10.2 To protect your privacy and maintain the integrity of our records, BAKC may require reasonable proof of identity before responding to a request relating to Personal Data.
BAKC may decline or limit certain requests where:
- retention is required by law or regulation;
- disclosure would adversely affect the rights or privacy of another individual;
- the information forms part of official regulatory or disciplinary records;
- disclosure would interfere with legal proceedings, investigations, or regulatory functions;
- another lawful basis exists for refusing the request.
10.3 BAKC will consider and respond to requests within a reasonable period, taking into account the nature and complexity of the request.
11. Security of Personal Data
11.1 BAKC is committed to protecting the confidentiality, integrity, and availability of the Personal Data entrusted to us.
11.2 We implement reasonable administrative, technical, and organizational measures designed to protect Personal Data against unauthorized access, disclosure, alteration, misuse, loss, or destruction.
11.3 These measures may include:
- role-based access controls to restrict access to authorized personnel only;
- password protection and user authentication mechanisms;
- encryption of data in transit and, where appropriate, data at rest;
- secure network infrastructure and firewalls;
- security monitoring, logging, and audit trails;
- regular software updates and security patches;
- backup and disaster recovery procedures; and
- internal policies governing the handling of Personal Data.
11.4 Access to Personal Data is limited to employees, officers, contractors, or Service Providers who require such access to perform their duties and who are subject to appropriate confidentiality obligations.
11.5 Although BAKC takes reasonable steps to safeguard Personal Data, no method of transmitting information over the Internet or storing electronic information can be guaranteed to be completely secure. Accordingly, BAKC cannot guarantee the absolute security of Personal Data.
11.6 Users are responsible for maintaining the confidentiality of their Account credentials and should notify BAKC immediately if they believe their Account has been compromised or accessed without authorization.
12. How to Exercise Your Rights
12.1 If you wish to exercise any of the rights described in this Privacy Policy, you may submit a request using the contact information provided below.
12.2 To protect the security of Personal Data, BAKC may request reasonable proof of identity before processing your request.
12.3 BAKC will consider all requests in accordance with applicable laws, regulations, and internal policies. While we will make reasonable efforts to accommodate requests, there may be circumstances where we are legally required or otherwise permitted to retain or continue processing certain Personal Data.
12.4 Where a request cannot be fulfilled, BAKC will, where appropriate, explain the reasons for the decision.
13. Third-Party Websites
13.1 The Service may contain links to websites or online services operated by government agencies, courts, educational institutions, professional organizations, payment service providers, or other third parties.
13.2 These third-party websites operate independently of BAKC and maintain their own privacy practices and policies.
13.3 BAKC does not control, endorse, or assume responsibility for the content, security, availability, or privacy practices of third-party websites or services.
13.4 Users are encouraged to review the privacy policies of any third-party websites before providing Personal Data.
14. Changes to this Privacy Policy
14.1 BAKC may amend, revise, or update this Privacy Policy from time to time to reflect:
- changes in applicable laws or regulations;
- changes to the Service or its functionality;
- technological developments;
- improvements to our privacy and security practices; or
- changes to BAKC's operational requirements.
14.2 Where material changes are made, BAKC may provide notice through the website, mobile application, email, or other appropriate communication channels before the revised Privacy Policy becomes effective, where reasonably practicable.
14.3 The revised Privacy Policy will become effective upon publication unless otherwise specified.
14.4 Your continued use of the Service after the effective date of the revised Privacy Policy constitutes your acknowledgment of the updated Privacy Policy.
14.5 We encourage users to review this Privacy Policy periodically to remain informed about how Personal Data is collected, used, and protected.
15. Contact Information
15.1 If you have any questions this Privacy Policy, wish to exercise your rights, or require further information regarding the processing of your Personal Data, please contact:
The Bar Association of the Kingdom of Cambodia
Address: Building Street 1129 Corner Street 1930, Sangkat Phnum Penh Thmei, Khan Saen Sokh, Phnom Penh, Cambodia
Email: អាសយដ្ឋានអ៊ីមែលនេះត្រូវបានការពារពីបណ្ដាយន្តផ្ញើសាររំខាន ។ អ្នកត្រូវការបើកប្រើ JavaScript ដើម្បីមើលវា ។
Telephone: 081368768
Website: www.bakc.org.kh