Privacy Policy

Personal Data Protection Notice

Messrs Akmal Saufi & Co.
Level 25, Menara Worldwide, Jalan Bukit Bintang, Kuala Lumpur
Email: pdpa@ascolaw.co
Person in Charge: Pn Nur Khalis Johar Amin

1. Introduction

This Personal Data Protection Notice (“Notice”) is issued pursuant to the Personal Data Protection Act 2010 (PDPA) and its amendments. It explains how Messrs Akmal Saufi & Co. (“the Firm”, “we”, “us”, “our”) collects, uses, discloses, and safeguards your personal data.

2. Types of Personal Data Collected

We collect your personal data, including but not limited to:

• Name, NRIC/passport number, contact details, address, email

• Employer and employment information

• Financial information where relevant

• Any other information provided for the purposes of legal engagement

Sensitive personal data, such as data relating to health, religion, or biometric data, will only be processed if strictly required for the provision of our services and with your explicit consent, or as permitted by law.

3. Purpose of Collection and Processing

Your personal data is processed for the following purposes:

• To provide legal services and related consultancy

• For client onboarding, conflict checks, file opening, and KYC procedures

• To communicate with you and manage your engagement with us

• To comply with our legal and regulatory obligations

• For internal record-keeping and administration

• For invoicing, billing, and payment processing

• For data security, risk management, and client support

• Any other purposes directly related to the above

If we require your data for purposes beyond those above, we will inform you and obtain your consent where required.

4. Disclosure to Third Parties

Your personal data may be disclosed, where necessary, to:

• Regulatory authorities, professional bodies, and government agencies

• Third-party service providers or professional advisers engaged by us (including auditors, banks, IT support, or consultants)

• Counterparties, opposing counsel, courts, tribunals, or other parties as required in the course of legal proceedings

• Any other party to whom you authorise us to disclose your data
  
  We require all such third parties to observe strict confidentiality and data protection obligations.

5. Data Subject Rights

You have the right to:

• Request access to, or correction of, your personal data held by us

• Withdraw your consent to processing (subject to legal or contractual restrictions)

• Request restrictions on the processing or sharing of your data

• Make a complaint to the relevant authority

To exercise your rights or for any queries/complaints, please contact:

Pn Nur Khalis Johar Amin
Email: pdpa@ascolaw.co

6. Data Security and Retention

We implement reasonable security measures (physical, electronic, and organisational) to protect your personal data from unauthorised access, disclosure, alteration, or destruction, as prescribed by the PDPA and its standards.

Your data will be retained only as long as necessary for the purpose for which it was collected and to comply with legal, regulatory, or internal policy requirements.

7. Obligatory or Voluntary Nature of Data

The provision of certain personal data may be obligatory for legal or compliance purposes. Failure to provide such data may result in us being unable to offer or continue to provide our services.

8. Changes to This Notice

We reserve the right to update or modify this Notice as required by law or our internal policies. The latest version will always be available at our office and on our website.

By engaging our services or communicating with us, you acknowledge that you have read and understood this Notice.