Privacy Policy
Personal Data Protection Notice pursuant to the Personal Data Protection Act 2010 (Malaysia).
1. Introduction
Rafee Syafiq & Co. (“the Firm”, “we”, “us” or “our”) respects the privacy of every individual who visits our website at rscolaw.com.my (“the Website”) or otherwise provides personal data to us. This Privacy Policy explains how we collect, use, disclose and safeguard personal data in accordance with the Personal Data Protection Act 2010 (“PDPA”) and its subsidiary legislation.
By using the Website, submitting an enquiry, or engaging our services, you consent to the processing of your personal data as described in this Policy.
2. Personal data we collect
We may collect and process the following categories of personal data:
- Contact details: name, e-mail address, telephone number and mailing address;
- Enquiry details: information you provide when submitting an enquiry through the Website, by e-mail, telephone or in person, including the nature of your legal matter;
- Engagement data: identification documents, financial information and other data reasonably required for the provision of legal or company secretarial services, including data required under applicable anti-money laundering laws;
- Technical data: IP address, browser type and pages visited, collected automatically when you use the Website.
3. Purposes of processing
Your personal data may be processed for the following purposes:
- responding to your enquiries and providing legal, conveyancing, company secretarial and related services;
- opening, administering and maintaining client files;
- conflict-of-interest checks and client due diligence;
- billing, payment and account administration;
- complying with legal, regulatory and professional obligations, including obligations to the Malaysian Bar and under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001;
- maintaining the security and improving the content of the Website; and
- such other purposes directly related to the foregoing.
4. Disclosure of personal data
We do not sell personal data. Personal data may be disclosed, where necessary, to:
- courts, tribunals, land offices, regulatory bodies and government authorities;
- opposing parties and their solicitors, to the extent required in the conduct of your matter;
- banks and financial institutions involved in your transaction;
- our professional advisers, auditors and insurers;
- service providers who support our operations (for example, IT and web hosting providers), under obligations of confidentiality; and
- any party to whom disclosure is required by law or court order.
5. Data security and retention
We take practical steps to protect personal data against loss, misuse, unauthorised access, modification or disclosure, including access controls and secure storage. Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, to comply with our legal and professional obligations (including file retention rules applicable to advocates and solicitors in Malaysia), or to establish, exercise or defend legal claims, after which it will be securely destroyed or anonymised.
6. Your rights under the PDPA
Subject to the provisions of the PDPA, you have the right to:
- request access to your personal data held by us;
- request correction of personal data that is inaccurate, incomplete, misleading or out of date;
- withdraw consent to the processing of your personal data (which may affect our ability to act for you); and
- limit the processing of your personal data, including for direct marketing purposes.
Requests may be made in writing to the contact details below. We may charge a prescribed fee for access requests as permitted by the PDPA, and we may decline requests where permitted or required by law, including where data is subject to legal professional privilege.
7. Cookies and third-party links
The Website uses only essential cookies necessary for its operation (for example, session cookies used by our enquiry form). The Website may contain links to third-party websites and embedded content (such as maps). We are not responsible for the privacy practices of third-party websites and encourage you to read their respective privacy policies.
8. Changes to this Policy
We may update this Privacy Policy from time to time. The latest version will always be published on this page with the date of last revision.
9. Contact us
For any questions about this Policy or to exercise your rights under the PDPA, please contact:
Rafee Syafiq & Co.
Suite 17-2, 2nd Floor, Jalan Seri Rejang 1, Taman Sri Rampai, 53300 Kuala Lumpur
T: 03-4131 7043 · E: legal.rsco@gmail.com