Partner • TOH & ASSOCIATES

TOH & ASSOCIATES

Advocates and Solicitors

MEET OUR PARTNER

Evoto

Kirsten Toh

Certificate of Legal Practice (Malaysia)
LL.B. (Hons) University of London (UK)

M.B.A. RMIT University (AUS)

B.A. (Economics and Chemistry) Smith College (USA)

Kirsten Toh is our corporate and conveyancing partner at Toh & Associates. Prior to reading law, Kirsten worked in corporate strategy across various industries. She had also worked as an anti-trust and competition analyst for a consulting firm in New York in her previous career. She is principally involved in corporate and commercial advisory, conveyancing and general litigation matters.

Kirsten graduated from University of London with an Upper Second Division LLB degree in 2017. She had also passed the Certificate of Legal Practice in her first sitting. Kirsten obtained her Masters in Business Administration from the Royal Melbourne Institute of Technology, Australia in 2004. She had also completed her first degree in Economics and Chemistry from Smith College in United States in 1998. Kirsten has been called to the Malaysian Bar and has been admitted as an advocate and solicitor of the High Court of Malaya in 2019. Thereafter, Kirsten spent two and a half years at Zain & Co as a chambering pupil and legal associate under the tutelage of a Legal 500 corporate lawyer before joining Toh & Associates.

Kirsten has worked on numerous transactional matters including company sale of shares, shareholders and shareholders loan agreement and a range of commercial contracts including service agreements, service level agreements, commissioning and licencing, licencing and merchandizing, project management, sale and purchase and employment agreements. She has also advised clients in a broad range of issues which include personal data protection, competition law, defamation, joint-venture land development, employment, anti-bribery and corruption, incorporation of companies, partnerships, licencing and other corporate and commercial advisory matters.

WORK EXPERIENCE

Contact Us Now!

Practice Areas

Kirsten practices in the following areas of law:

Corporate

Commercial

Employment

Conveyancing

Divorce Law

Wills and Probate

Contact Us Now!

Kirsten’s Work Experience

Confidential Client: Advised a Malaysian investor in relation to the incorporation of a holding company and subsequent RM700,000 share acquisition of a food and beverage company., which includes drafting of shareholders agreement and the reviewing of share sale and shareholder’s loan agreement.
Confidential Client: Advised a foreign direct sales and multilevel marketing (MLM) company on the laws and regulations in relation to the MLM business and the requirements of an MLM licence from the Ministry of Domestic Trade and Consumer Affairs. Also advised the clients on the laws and regulations in relations to the registration and licencing of medical devices in Malaysia.
Confidential Client: Advised a local Malaysian company on the termination of a sale and purchase agreement executed with three other foreign companies and drafted the relevant notices for termination.
Confidential Client: Advised a local business owner on an alleged defamation claim made against the client and advised the client on the ensuing amicable settlement of the defamation claim.
Confidential Client: Advised an international oil and gas company in relation to its employment and secondment contracts with local and expatriate employees and reviewed the same for compliance with the Employment Act 1955.
Confidential Client: Advised a Singaporean technology company on the requirements of incorporation under the Companies Act 2016 and on the rules and guidelines of the Companies Commission of Malaysia in relation to the incorporation of a foreign-owned subsidiary in Malaysia.
Confidential Client: Advised a Dutch company on the requirements for setting up a representative office in Malaysia and obtaining the approval of MIDA for the representative office.
A Multinational Food Company: Advised the client on personal data protection laws and regulations in Malaysia, in particular in relation to the transfers of personal data of employees and ex-employees outside of Malaysia. Drafted the data protection notice and reviewed the same for compliance with the Personal Data Protection Act 2010.
Confidential Client: Advised an American teledentistry company on laws and regulations in relation to personal data protection, e-marketing, telemedicine and licencing requirements of medical devices in Malaysia.
An information technology distributor: Advised and reviewed the client’s Competitive Intelligence Module, a practical guide for the collection of competitively sensitive information from outside of the client’s organization, for compliance with the Competition Act 2010
On-demand multi-service technology platform company: Provided advice from Malaysian competition law perspective in respect of (i) a jurisdictional chart (overview table) setting out high-level pointers on competition law framework, including the prohibitions under statutory framework, the type of regime, investigative powers of the regulator, penalty framework, indicative quantitative thresholds (for merger control and abuse of dominance) and brief anecdotes on recent investigations by the regulator; and (ii) responses to frequently asked questions raised by the client’s employees and common issues faced by other industry players in the region.
Confidential Client: Advised a major American film production and distribution company in relation to its application for FINAS film distribution licence and subsequently, assisted the client with its application for film distribution licence renewals.
Confidential Client: Advised a major shareholder of a group of companies engaged in the plantation and power industries in Malaysia in relation to a proposed share swap transaction. Conducted due diligence, drafted term sheets and share swap agreement in respect of the proposed share swap transaction.
Confidential Client: Advised a major shareholder of a group of companies engaged in the plantation and power industries in Malaysia in relation to directors fiduciary duties and obligations and compliance with various government legislations in respect of corporate governance.
Confidential Client: Advised a renowned local artist in relation to copyright laws and in particular drafted and reviewed a commissioning agreement and a licencing agreement between the artist and a local online fashion store.
Confidential Client: Drafted and reviewed an intercompany service level agreement template for an international chemical company for use with its foreign associated companies and affiliates.
Confidential Client: Drafted and reviewed a service agreement between an international chemical company and its subcontractors.
Confidential Client: Drafted and reviewed the constitution of a major Malaysian real estate company for compliance with the provisions of the Companies Act 2016.
Confidential Client: Advised and assisted a British family to appeal to the Immigration Department for the endorsement of the Malaysian My Second Home (MM2H) visa after the endorsement was denied by the Immigration Department pursuant to a technical non-compliance.
Confidential Client: Attended board of directors meetings of various non-profit organizations and drafted the minutes of meeting in the capacity as representative of the company secretary of the organization.
Various Confidential Clients: Drafted and reviewed non-disclosure agreements, consulting agreements, event management agreement, merchandising and licencing agreements and service agreements for private individuals, small-medium enterprises and multinational companies in various industries.
Confidential Client: Providing Malaysian law-related advice and assisting a seismic data company, being a globally-operating seismic services company, with all employment-related matters in relation to operations in Malaysia, including the review of template employment agreements for Employment Act employees (EA Employees), non-Employment Act employees (Non-EA Employees) and seafarers, the International Commuter Assignment Agreements for EA Employees and Non-EA Employees and the template Secondment Agreement, to ensure compliance with Malaysian laws.
Confidential Client: Provided advice to the client on compliance of its job board service with the personal data protection and electronic communication law and regulations in Malaysia setting out high-level advice on personal data protection obligations in respect of the client’s obligation as a data user and/or a data processor, related to privacy consents, data security, data retention, data localization, sub-processors and international data transfers and further setting out requirements pursuant to electronic communication laws, including those related to unsolicited commercial email messages.
Confidential Client: Advised the client, a retailer of sportswear, in relation to personal data protection and e-marketing laws and regulations, including providing an overview of the data protection landscape in Malaysia and specifically in respect of issues related to sensitive personal data, marketing consents, SMS marketing, E-Commerce, data exportation, and enforcement. The scope of work for this matter also involved reviewing the general terms and conditions and privacy policy of the client’s online web store for compliance with the Personal Data Protection Act 2010.
Confidential Client: Provided advice to the client, a mobile device company, on compliance of its mobile application with the laws and regulations in Malaysia in relation to personal data protection, e-marketing and medical devices. The scope of work also consists of a legal review of the terms and conditions and privacy policy on the client’s mobile application and subsequently included a review of the client’s mobile application in order to ensure that the legal advice provided has been implemented

English Version (Sila rujuk dibawah bahagian Versi Ingris untuk Versi Bahasa Malaysia)

1. Personal Data Protection Act 2010 Notice

This notice is issued pursuant to the Personal Data Protection Act 2010 (“Act”) (“Privacy Notice”). It explains the type of data we collect or have collected and how we collect the data, the purposes of processing such data, the parties we disclose or have disclosed the data to and the choices available to you including how to access and correct such personal data.

2. Personal Data which we collect from you

When you instruct us to act for you we would or may need to or may collect, record, hold, store, use and/or carry out any operation on including organising, consulting on or disclosing (“process”) your personal data which may include the following (“Personal Data”):-

Name, national registration identification card number, passport number, photograph, email address, postal address, age, telephone number, mobile number, EPF details, SOCSO details, income tax details, employment details and history including details of present and past income, bank account details, credit card details, marital status, gender, nationality, children’s details, names of relatives and how related including personal and contact details of relative, personal interests, hobbies, skills, languages, education or other related qualifications, achievements, ethnic origin, details of referees, medical records, physical, mental health or condition, political opinions, religious beliefs or other beliefs of similar nature, commission or alleged commission of offence, sexual orientation, directorship in companies, shareholding in companies, assets, involvement in legal proceedings including details of such legal proceedings, details of loans and other financial transactions, solvency, financial status, ownership of property, car registration details and all other related information necessary and incidental to our business.

3. How we collect Personal Data

We collect Personal Data through several methods which include but are not limited to information or comments you have provided to us by whatsoever means and/or in whatsoever manner and/or information obtained independently by us or given to us from other lawful sources.

4. Purposes for which we process Personal Data

We process your Personal Data for purposes which may include:

(a) for and/or in connection with the conduct of business and provision of services in the capacity of an advocate and solicitor, trademark agent, industrial designs agent, patent agent, commissioner for oaths, notary public and other similar capacity;

(b)for and/or in connection with pursuing the legitimate interests of the firm including processing which is necessary and incidental to the carrying out of the conduct of the business of the firm;

(c) for and/or in connection with complying with laws and regulations including requirements of any government or quasi-government or regulatory authorities or court of law;

(d) for and/or in connection with providing the legal services you require from us; communicating with you, inviting you to the events, talks or programmes organised by us; facilitating your payment to us for our services; for marketing and internal administrative purposes or for recruitment; and

(e) for and/or in connection with all other legitimate business purposes and/or incidental to our business and all purposes necessary for or related to any of the above purposes.

5.To whom we disclose Personal Data to

When processing your Personal Data, we may disclose such Personal Data to the following persons including but without limitation to:

(a)departments within our Firm including any of our partners, lawyers and employees on a need-to-know basis;

(b)our auditors, lawyers, consultants, insurers, proposed insurers, advisers, bankers, agents, third-party service providers (including law firms in other jurisdictions), business partners or associates or legal referral guides who are under a duty of confidentiality to us;

(c)government or quasi-government and regulatory authorities in Malaysia and in countries where we, our auditors, lawyers, advisers, bankers, agents, third party service providers (including law firms in other jurisdictions), business partners or associates or legal referral guides have a presence or require approvals or are required to submit such information;

(d)all other persons or bodies who provide us with services necessary and/or incidental to our business.

We may process your Personal Data including contacting you for the purpose(s) stated herein via telephone calls, text messaging, emails, cross-platform mobile messaging applications, post, facsimile, social media or by whatsoever form of available modes of communication.

6. Transfer abroad

We may transfer your Personal Data to places outside Malaysia when carrying out any of the purposes stated herein.

7. Accessing and updating your Personal Data

Under the Act, you have the right of access to your Personal Data upon payment of a prescribed fee and you may request that we correct any of your Personal Data which is inaccurate, incomplete or out-of date unless compliance is refused under the Act. We will notify you of the reasons for not being able to accede to your request. We may also exercise our discretion in allowing the corrections requested and/or may require further documentary evidence of the new data to avoid fraud and inaccuracy.

You may also withdraw your consent or restrict the purposes and methods in which we process your Personal Data and the personal data relating to other persons who may be identified from your Personal Data.

If you have any questions regarding our Privacy Notice or if you wish to request access to your Personal Data or correct your Personal Data or withdraw your consent or restrict the purposes and methods in which we process your Personal Data, you may send your request in writing to the following address:-

Attn: Compliance Officer

Address: 3A-47 Block B, Leisure Commerce Square, No 9 Jalan 8/9, Petaling Jaya, 40150 Selangor.

Tel. No.: 603-5892 8650

Email: tohlaws@gmail.com

Please note that notwithstanding the withdrawal of your consent, we may still process your Personal Data under circumstances permitted by law.

8. We update our Privacy Notice from time to time

We review and update this Privacy Notice from time to time to reflect the changes in law and business practices. We would advise you to obtain the latest version of our Privacy Notice by contacting us or visiting our website to ensure that you are familiar with the latest version. By continuing to instruct us after communication of our latest Privacy Notice, you are deemed to have accepted and consented to the revision and update contained therein.

9. Impact of non-provision of Personal Data

Your consent for us to collect, maintain or process your Personal Data in accordance with the above is voluntary. Please note that in the event your Personal Data is not supplied or is insufficiently supplied to us, your instructions may not be accepted or your request to browse the information on our website may be denied.

Please further note that if you withdraw your consent or restrict the purposes and methods in which we may process your Personal Data, we may not be able to continue to act on your instructions.

10. Personal Data of third parties

You hereby confirm that you have obtained the consent from the person(s) whose personal data may be given to us by you or identified from your Personal Data which may be processed by us for the purposes stated herein including disclosure to the parties stated herein.

11. Inconsistencies

This Notice is provided in both English and Bahasa Malaysia. In case of any inconsistencies between the two versions, the English version shall prevail to the extent of such inconsistency.

12. Your consent

Please take note that by engaging our services, using our website or providing us your personal data, you hereby agree with and consent to us processing/continuing to process your Personal Data in accordance herewith.

Versi Bahasa Malaysia (Bahasa Malaysia Version)

1. Notis Akta Perlindungan Data Peribadi 2010

Notis ini dikeluarkan selaras dengan Akta Perlindungan Data Peribadi 2010 (“Akta”) (“Notis Privasi”). Ia menjelaskan jenis data yang kita kumpul atau telah kumpul dan bagaimana kita mengumpul data berkenaan, tujuan memproses data sedemikian, pihakpihak yang kita dedahkan atau telah dedahkan data berkenaan serta pilihan yang tersedia kepada kamu termasuk bagaimana hendak mengakses dan membetulkan data peribadi sedemikian.

2. Data Peribadi yang kita kumpul dari kamu

Apabila kamu mengarahkan kita untuk bertindak bagi pihak kamu kami perlu atau akan mengumpulkan, merekodkan, memegang, menyimpan, menggunakan dan/atau melaksanakan apa-apa operasi yang termasuk mengaturkan, merundingkan atau mendedahkan (“proses”) data peribadi kamu yang mungkin akan turut melibatkan yang berikut (“Data Peribadi”):-

Nama, nombor pendaftaran kad pengenalan, nombor pasport, gambar, alamat e-mel, alamat pos, umur, nombor telefon, nombor telefon bimbit, butir-butir KWSP, butir-butir PERKESO, butir-butir cukai pendapatan, butir-butir pekerjaan dan latar belakang termasuk butir-butir pendapatan semasa dan yang lepas, butir-butir akaun bank, butirbutir kad kredit, taraf perkahwinan, jantina, kewarganegaraan, butir-butir anak, nama saudara mara dan pertalian persaudaraan termasuk butir-butir peribadi dan cara untuk dihubungi, minat/kegemaran peribadi, hobi, kemahiran, bahasa-bahasa yang diketahui, pendidikan dan lain-lain kelayakan, pencapaian, asal-usul etnik, butir-butir rujukan, rekod-rekod perubatan, keadaan atau kesihatan fizikal dan mental, pendapat/fahaman politik, kepercayaan agama atau lain-lain kepercayaan yang bersifat serupa, sabitan atau sabitan yang dikatakan akan sesuatu kesalahan, penyesuaian seks, jawatan pengarah dalam syarikat-syarikat, pegangan saham dalam syarikat-syarikat, aset-aset, penglibatan dalam prosiding-prosiding guaman termasuk maklumat atas prosiding-prosiding guaman tersebut, butir-butir pinjaman dan lain-lain transaksi kewangan, kedudukan kewangan, solvensi, pemilikan hartanah, butir-butir pendaftaran kereta dan maklumat berkaitan lain yang perlu dan bersampingan dengan perniagaan kita.

3. Bagaimana kita mengumpul Data Peribadi

Kami mengumpul Data Peribadi menerusi beberapa kaedah yang termasuk tetapi tidak terhad kepada maklumat atau komen yang kamu telah bekalkan kepada kami melalui apa jua cara dan/atau apa jua kaedah dan/atau maklumat yang diperoleh sendiri oleh kami atau diberikan kepada kami oleh sumbersumber sah yang lain.

4. Tujuan bagi yang mana kita memproses Data Peribadi

Kami memproses Data Peribadi kamu bagi tujuan yang mungkin termasuk:

(a) untuk dan/atau berhubung dengan pengendalian perniagaan dan peruntukan perkhidmatan dalam kapasiti peguam bela dan peguam cara, ejen cap dagang, ejen reka bentuk perindustrian, ejen paten, pesuruhjaya sumpah, notari awam dan lain-lain orang yang berkedudukan yang serupa;

(b) untuk dan/atau berhubung dengan meneruskan dengan kepentingan sah firma termasuk memproses segala yang perlu dan bersampingan dengan melaksanakan pengendalian urus-niaga firma;

(c) untuk dan/atau berhubung dengan mematuhi undang-undang dan peraturan-peraturan termasuk keperluan pihak-pihak berkuasa kerajaan, kuasi kerajaan atau pihak berkuasa seliaan atau mahkamah undang-undang;

(d) untuk dan/atau berhubung dengan segala tujuan lain yang perlu dan/atau bersampingan kepada perniagaan kami dan segala tujuan yang perlu untuk atau berkaitan dengan mana-mana tujuan di atas.

5. Kepada siapa yang kami akan dedahkan Data Peribadi

Semasa memproses Data Peribadi kamu, kami boleh mendedahkan Data Peribadi sedemikian kepada orang-orang yang berikut termasuk akan tetapi tidak terhad kepada:

(a) jabatan-jabatan dalam Firma kami termasuk mana-mana dari rakan-rakan kongsi, peguam-peguam dan pekerja-pekerja kami atas dasar perlu ketahui;

(b) juruaudit-juruaudit, peguam-peguam, perunding-perunding, penanggung-penanggung insurans, penanggung-penanggung insurans yang dicadangkan, penasihat-penasihat, jurubank, ejen-ejen, pembekal perkhidmatan pihak ketiga (termasuk firma-firma guaman di dalam bidang kuasa lain), rakan-rakan atau sekutu-sekutu perniagaan atau, panduanpanduan rujukan undang-undang yang mempunyai tugas berkewajipan terhadap kita untuk menyimpan rahsia;

(c) pihak-pihak berkuasa kerajaan, kuasi kerajaan atau pihak berkuasa seliaan di Malaysia dan di negara-negara di mana kita, juruaudit-juruaudit kita, peguam-peguam, penasihatpenasihat, jurubank, ejen-ejen, pembekal perkhidmatan pihak ketiga (termasuk firmafirma guaman di dalam bidang kuasa lain), rakan-rakan atau sekutu-sekutu perniagaan atau, panduan-panduan rujukan undang-undang kami hadir atau memerlukan kelulusan atau dihendaki mengemukakan maklumat sedemikian;

(d) semua orang atau badan lain yang membekalkan kepada kami perkhidmatan yang perlu dan/atau yang bersampingan dengan perniagaan kami.

Kami boleh memproses Data Peribadi kamu termasuk menghubungi kamu bagi tujuan yang dinyatakan di sini menerusi panggilan telefon, pesanan ringkas, e-mel, aplikasi pesanan mobil pelantaran silang, pos, faks, media sosial atau menerusi walau apa cara komunikasi tersedia yang boleh didapati.

6. Perpindahan ke Luar Negeri

Kami boleh memindahkan Data Peribadi kamu ke tempat-tempat di luar Malaysia semasa melaksanakan mana-mana dari tujuan yang dinyatakan di sini.

7. Mengakses dan mengemas kini Data Peribadi Anda

Di bawah Akta yang berkenaan, kamu berhak untuk mengakses Data Peribadi kamu setelah membayar fi yang ditetapkan dan kamu boleh meminta agar kami membetulkan Data Peribadi kamu yang tidak tepat, tidak lengkap atau yang sangat lama melainkan penunaian permintaan kamu itu ditolak di bawah Akta berkenaan. Kami akan memaklumkan kamu mengenai sebab mengapa permintaan kamu tidak dapat disetujui. Kami boleh juga melaksanakan budi bicara kami untuk membenarkan pembetulan yang diminta dan/atau boleh menghendaki keterangan dokumentari tambahan bagi data baru itu untuk mengelakkan penipuan dan ketidaktepatan.

Kamu boleh juga menarik balik persetujuan kamu atau menyekat tujuan dan kaedah kita memproses Data Peribadi kamu dan data peribadi yang berkaitan dengan lain-lain orang yang boleh dikenal-pasti daripada Data Peribadi kamu.

Sekiranya kamu mempunyai apa jua soalan mengenai Notis Privasi kami atau kamu ingin meminta akses kepada Data Peribadi kamu atau membetulkan Data Peribadi kamu ataupun menarik balik persetujuan kamu atau menyekat tujuan dan kaedah akan bagaimana kami memproses Data Peribadi kamu, anda boleh menghantar permintaan kamu secara bertulis kepada alamat yang berikut:-

U/P: Pegawai Pematuhan

Alamat : 3A-47 Block B, Leisure Commerce Square, No 9 Jalan 8/9, Petaling Jaya, 40150 Selangor.

No. Tel: 603-5892 8650

E-mel: tohlaws@gmail.com

Sila ambil perhatian bahawa meskipun penarikan balik persetujuan kamu, kami masih boleh memproses Data peribadi kamu di bawah keadaan–keadaan yang dibenarkan oleh undang-undang.

8. Kami akan mengemas kini Notis Privasi kami dari masa ke semasa

Kami menyemak dan mengemas kini Notis Privasi ini dari masa ke semasa untuk menunjukkan perubahan dalam undang-undang dan amalan perniagaan. Kami menasihatkan anda untuk mendapatkan versi terkini Notis Privasi kami dengan menghubungi kami atau melawat kami di laman sesawang kami untuk memastikan agar kamu biasa dengan versi terkini. Dengan meneruskan untuk memberi arahan kepada kami selepas makluman Notis Privasi kami yang terkini, kamu dianggap sebagai telah menerima dan menyetujui semakan semula serta pengemaskinian yang terkandung di dalamnya.

9. Kesan Ketiadaan Data Peribadi

Sila dimaklumkan bahawa sekiranya Data Peribadi kamu tidak dibekalkan atau yang dibekalkan adalah tidak memadai, arahan-arahan kamu mungkin tidak akan diterima atau permintaan kamu untuk melayari maklumat di laman sesawang kami mungkin dinafikan.

Sila ambil perhatian selanjutnya bahawa jika kamu menarik-balik permintaan kamu atau menyekat tujuan dan kaedah-kaedah kami memproses Data Peribadi kamu, kami berkemungkinan tidak akan dapat meneruskan untuk bertindak atas arahan-arahan kamu.

10. Data Peribadi Pihak-pihak Ketiga

Kamu dengan ini mengesahkan bahawa kamu telah mendapatkan persetujuan dari orang (orang-orang) yang mana data peribadinya boleh diberikan kepada kami oleh kamu atau dikenal pasti daripada Data Peribadi kamu yang boleh diproses oleh kami bagi tujuan-tujuan yang dinyatakan di sini termasuk pendedahan kepada pihak-pihak yang dinyatakan di sini.

11. Percanggahan

Notis ini adalah sedia ada dalam Bahasa Ingris dan Bahasa Malaysia. Sekiranya terdapat percanggahan di antara dua versi, versi Bahasa Ingris adalah diutamakan.

12. Persetujuan Kamu

Sila ambil perhatian bahawa dengan memberikan kami persetujuan kamu, kamu dengan ini bersetuju dan membenarkan kami untuk memproses/meneruskan pemprosesan Data Peribadi kamu selaras dengan yang dinyatakan di sini.