Privacy notice

We are committed to protecting your privacy.

This Privacy Notice explains what Personal Information we, Deloitte Asia Pacific, collect about you, what we use it for, who we share it with and how we protect it. It also sets out your rights and who you can contact for more information or queries.

When used in this Privacy Notice, “we”, “us” and “our” refer to Deloitte Asia Pacific. In this Privacy Notice, information about you, which may be referred to as personal data in some jurisdictions, is referred to as “Personal Information”. Personal Information refers to information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual.

We may also sometimes collectively refer to handling, collecting, protecting, and storing your Personal Information as “processing” such Personal Information.

This Privacy Statement may be supplemented by privacy statements from Deloitte firms in the Asia Pacific region. For more details, please review the specific privacy statements related to the following Deloitte firms: 

Australia | China | Japan | Korea | New Zealand | South Asia | Southeast Asia | Taiwan

As used in this Privacy Notice, "Deloitte Network" refers to one or more of Deloitte Global, its network of member firms and their related entities. DTTL and each of its member firms are legally separate and independent entities. Please see www.deloitte.com/about for a detailed description of the legal structure of DTTL and its member firms.

Deloitte Asia Pacific website may include webpages provided by other entities of the Deloitte Network, which are designated according to the geography identified in the upper right-hand corner of the webpage. These webpages are provided by the designated entities and are not the responsibility of Deloitte Asia Pacific. Such webpages, as well as other websites that may be linked to the Website, are not governed by this Privacy Notice. We encourage you to review the applicable privacy notices on those webpages, which will inform you about who the related controller is and provide further information with respect to its processing of your Personal Information.

Member firms, and their related entities, are located all over the world and are subject to the privacy laws of the particular country or countries in which they operate. As a result, other entities within the Deloitte Network may have their own privacy statement governing the handling of any personal information they collect. Importantly, the websites of other member firms or their related entities, as well as other websites that may be linked to this Website, are not covered by this Statement.

We encourage visitors to review each website's privacy statement before disclosing any personal information.

For the Privacy Notices applicable to Deloitte firms in the Asia Pacific region, please visit:

Australia | China | Japan | Korea | New Zealand | South Asia | Southeast Asia | Taiwan

We may collect and process your Personal Information because: 

i.  you give it to us (for example, through the webpages of this website or any other website or application of Deloitte Asia Pacific which links to this Privacy Notice (collectively referred to as the “Website”), or 

ii.  other people give it to us (for example, other entities of the Deloitte Network or third- party service providers that we use to help operate our business); or

iii.  it is publicly available.   

When other entities of the Deloitte Network or other third-parties give us Personal Information about you, we make sure they have complied with the relevant privacy laws and regulations. This may include, for example, that it has informed you of the processing, and has obtained any applicable and necessary permission for us to process that information as described in this Privacy Notice.

We may process Personal Information from you when you interact with the Website or Communications. For example, we may also use cookies (small text files stored in a user's browser) or web beacons (electronic images that allow us to count users who have accessed content and to access certain cookies) to collect aggregate data. Where applicable, additional information on how we may use cookies and other tracking technologies, and how you can control these, can be found in the Cookie Notice on the applicable Website.

More information on how we use cookies and other tracking technologies on can be found on Cookie Notice.

We will only process these special categories of Personal Information when we are required to do so as a result of legal requirements imposed on us or after obtaining your explicit consent.

If you choose not to provide, or – where applicable - object to us processing the information we collect (see section “Your rights” below), we may not be able to process your instructions or provide you tailored communication, service, or assistance.

We understand the importance of protecting children's privacy. Our Website is not designed for, or intentionally targeted at, children. It is not our policy to intentionally collect or store information about children.

We may use your Personal Information for the purposes of, or in connection with:

• managing and/or improving our Website;
• tailoring the content of our Website to provide you with a more personalized experience; 
• conducting data analysis including, for example, regarding usage of the Website and demographics analyses of Website users;
• preventing fraud or criminal activity and safeguarding our technology systems and data security;
• monitoring and enforcing compliance with applicable terms of use, and that only authorized parties are accessing the Website.
• complying with applicable legal or regulatory requirements;
• dealing with requests and communications from competent authorities;
• investigating or preventing security incidents;
• conducting and analyzing our marketing activities;
• protecting our rights and/or those of other entities of the Deloitte Network.

We are required by law to set out in this Privacy Notice the legal grounds on which we rely in order to process your Personal Information. We rely on one or more of the following lawful grounds when we use your Personal Information for the purposes outlined above:

• the processing is necessary for compliance with a legal obligation we have such as keeping records or providing information to a public body or law enforcement agency;
• the processing is necessary for the purposes of a legitimate interest pursued by us or a third party (and are not outweighed by your privacy interests), such as the effective delivery of our Website; the effective and lawful operation of our Website or Communications; to prevent fraud or criminal activity or to safeguard our technology systems and/or data security; to support or protect our business interests; to ensure that complaints are investigated; to evaluate, develop or improve our services or products; or 

• you have consented to us processing your information for a specific reason, consent that you can always withdraw.

To the extent that we process any sensitive Personal Information relating to you for any of the purposes outlined above, we will do so because either: (i) you have given us your explicit consent to process that data; (ii) we are required by law to process that data, or (iii) the processing is necessary for the establishment, exercise or defense of legal claims or (iv) you have made the data manifestly public.

Please note that in certain circumstances it may be still lawful for us to continue processing your information for separate purposes even where you have withdrawn your consent, if one of the other legal bases described above is applicable.

We will only disclose your personal information as set out below. Importantly, we will never sell your personal information to third parties for advertising purposes or disclose it for an unrelated secondary purpose without your authorisation.

We may disclose personal information to:

• Other entities in the Deloitte Network;
• Third parties that we engage to assist us in providing professional services to clients or in the operation of our business (i.e. our subcontractors, advisors, and suppliers).

These entities and third parties may sometimes be located in other countries. A current list of Deloitte Offices around the world is available in the Deloitte Global Office Directory.

Where we disclose your personal information to other entities in the Deloitte Network, or to third party service providers, we will take steps to ensure that those recipients implement appropriate safeguards to protect that information from unauthorised access, modification, or disclosure, and from misuse, interference and loss.

We may also be required to disclose personal information to law enforcement, regulatory or government agencies, or to other third parties:

• To comply with legal or regulatory obligations or requests; or
• Where there is a legal or professional right or duty to disclose.

We may share non-personal, de-identified and aggregated information with third parties for several purposes, including data analytics, research, submissions, thought leadership and promotional purposes.

We will hold your Personal Information on our systems for the longest of the following periods: (i) as long as is necessary for the relevant activity or services; (ii) any retention period that is required by law; (iii) the end of the period in which litigation or investigations might arise in respect of the services.

Depending on your geographical location and corresponding local laws, you may have various rights in relation to the personal information we collect, control and process. Such rights may include the following:

• obtain confirmation that we are processing your personal information and request a copy or evidence of that processing;
• withdraw consent for the processing of your personal information;
• ask that we update, or correct, or rectify it;
• ask that we delete personal information that we hold about you, or restrict the way in which we use it;
• the right to object to the processing of your personal information;
• not to be subjected to automated decision-making;
• ask us to obtain a copy of your personal information in commonly used machine-readable format;
• for your personal information to be erased or to be forgotten.

To exercise your rights or if you have any questions concerning your privacy while using the Website, please contact DAPPrivacy@deloitte.com.   

We may modify or amend this Privacy Notice from time to time.

To let you know when we make changes to this Privacy Notice, we will amend the date at the top of this page. The new, modified, or amended Privacy Notice will apply from that revision date. Therefore, we encourage you to periodically review this Privacy Notice to be informed about how we are protecting your information.

This Privacy Notice was written in English. To the extent any translated version of this Privacy Notice conflicts with the English version, the English version controls.