Shahrizan & CoBack to home
All articles

Privacy Policy & Personal Data Protection Notice

Shahrizan & Co ยท PDPA 2010

Shahrizan & Co (“the Firm”, “we”, “us” or “our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy and Personal Data Protection Notice (“Notice”) explains how we collect, use, disclose and safeguard your personal data in accordance with the Personal Data Protection Act 2010 (“PDPA”) and its subsidiary legislation.

This Notice is issued pursuant to section 7 of the PDPA. It is made available in both the English and Bahasa Malaysia languages. In the event of any inconsistency, the English version shall prevail.

1. Personal Data We Collect

Depending on your dealings with us, we may collect and process the following personal data:

  1. your name, identity card or passport number, and contact details (including address, telephone number and email address);
  2. information you provide through our website enquiry form, WhatsApp, email, telephone or correspondence;
  3. details relating to your legal enquiry or matter;
  4. information required to carry out client due diligence and to comply with our legal, regulatory and professional obligations; and
  5. technical information such as your IP address and browser type, which may be collected automatically when you use our website.

2. How We Collect Your Personal Data

We collect personal data directly from you (for example, through our enquiry form, email, WhatsApp, telephone or meetings), automatically through your use of our website, and, where relevant, from third parties such as your authorised representatives, in each case in accordance with the law.

3. Purposes of Processing

Your personal data may be processed for the following purposes:

  1. to respond to your enquiries and to provide legal services;
  2. to establish, manage and administer the solicitor–client relationship;
  3. to carry out client due diligence, conflict checks and to comply with anti-money laundering and other legal, regulatory and professional obligations;
  4. to administer, operate and improve our website;
  5. to send you legal updates or information where you have consented to receive them; and
  6. for any other purpose reasonably related to the above.

4. Consent

By submitting your personal data to us, you consent to its collection, use and disclosure for the purposes set out in this Notice. Where we process sensitive personal data (such as information relating to health or the commission of an offence), we will obtain your explicit consent unless the processing is otherwise permitted by law. Where you provide us with the personal data of any third party, you confirm that you are authorised to do so and that you have obtained the necessary consent.

5. Disclosure of Personal Data

We keep your personal data confidential and disclose it only:

  1. to our partners, employees and agents on a need-to-know basis;
  2. to third parties who assist us in providing our services (such as IT service providers, courts, counsel, experts and consultants);
  3. where required or permitted by any law, court order or regulatory authority; and
  4. with your consent.

6. Security

We take reasonable and practical steps to protect personal data in our possession from any loss, misuse, modification, unauthorised or accidental access or disclosure, alteration or destruction.

7. Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, and to satisfy our legal, regulatory and professional obligations, after which it will be securely destroyed or permanently anonymised.

8. Transfer Outside Malaysia

Where your personal data is transferred to or stored at a location outside Malaysia (for example, through cloud-based services), we will take reasonable steps to ensure that it is afforded a level of protection comparable to that required under the PDPA.

9. Cookies

Our website may use cookies to improve your browsing experience. You may disable cookies through your browser settings, although certain features of the website may not function properly as a result.

10. Your Rights

Subject to the PDPA, you have the right to request access to your personal data, to request correction of any personal data that is inaccurate, incomplete, misleading or out of date, to withdraw your consent to the processing of your personal data, and to limit the processing of your personal data for direct marketing purposes. We may charge a prescribed fee and require verification of your identity before processing any such request.

11. Changes to this Notice

We may review and update this Notice from time to time. The current version will be published on our website and will take effect upon publication.

12. Contact Us

If you have any request, question or complaint regarding your personal data or this Notice, please contact us at:

Shahrizan & Co
A-18-02, Tower A, Pinnacle Petaling Jaya, Lorong Utara C, PJS 52, 46200 Petaling Jaya, Selangor.
Email: shahrizanco@scolaw.my  |  Tel: 03-7931 6775

This Notice is provided for general information only, does not constitute legal advice, and does not create any solicitor–client relationship.