Personal Data Protection (PDP) and Privacy Notice

Tay Chai Huat & Co. ("the Firm", “we”, “us”, or “our”) is a law firm regulated under Malaysian law. This Privacy Notice is issued in compliance with the Personal Data Protection Act 2010 (PDPA)and serves to inform you how we collect, use, store, and disclose your personal data.

By accessing our website, social media pages, or engaging our services, you hereby consent to the processing of your personal data in accordance with this Privacy Notice.

1. Collection of Personal Data

The Firm collects personal data directly from you and/or third parties including but not limited to:

Full name, NRIC/passport number, gender, nationality
Contact details such as address, phone number, and email
Financial details (e.g. income, bank account for disbursements or payments)
Employment and legal-related information
Any documentation provided to us in connection with legal advice or proceedings
Data captured via our website, contact forms, or social media interactions

We may also collect sensitive personal data when necessary, including health, religious belief, or criminal record information, as required by law or legal proceedings.

2. Purpose of Collection

Your personal data is collected and processed for the following purposes:

To verify your identity and legal standing
To provide legal services, advisory, and case management
To prepare legal documentation, filings, and submissions
To contact and communicate with you in relation to our services
To comply with our legal and professional obligations (e.g. client due diligence, AML/CFT)
For internal record keeping, billing, audit, and administrative purposes
To enforce our legal rights, including debt recovery or court action
For marketing and promotional materials (only with prior consent)

Failure to supply required personal data may result in us being unable to act for you or provide specific services.

3. Disclosure of Personal Data

We may disclose your personal data where necessary to the following parties:

Regulatory bodies (e.g. Bar Council, Bank Negara Malaysia)
Government agencies, law enforcement authorities, courts, and tribunals
Third-party service providers such as legal consultants, translators, IT support, cloud hosting providers, process servers, or courier companies
Our professional advisors including auditors, accountants, or insurers
Any party to whom disclosure is necessary for the Firm to comply with its obligations or to assert its legal rights

All third parties are contractually bound to process personal data only in accordance with our instructions and applicable law.

4. Safeguards and Retention

We implement appropriate technical and organizational security measures to prevent unauthorized access, loss, misuse, or alteration of your personal data. Your data will be retained for as long as necessary:

To fulfill the purpose it was collected for
To comply with legal, regulatory, or ethical obligations
As required under limitation periods for legal claims

Digital data is protected by secure servers, restricted access, and data encryption where applicable. Physical documents are stored in controlled access environments.

5. Rights of Data Subjects

You have the following rights under the PDPA:

Access: You may request access to your personal data we hold.
Correction: You may request correction of any inaccurate or incomplete data.
Withdrawal: You may withdraw your consent to use your data (subject to legal consequences).
Objection: You may object to certain processing activities.

To exercise these rights, submit a written request to:

Data Protection Officer
Tay Chai Huat & Co.
[Insert Office Address]
Tel: [Insert Phone Number]
Email: [Insert Email Address]

We reserve the right to charge a reasonable fee for data access requests and to verify your identity before processing.

6. Third-Party Websites and Social Media

Our website and social media platforms may contain links to third-party websites. We are not responsible for the privacy practices of such external sites. You are encouraged to read their privacy policies before sharing your data.

7. Consent and Acknowledgement

By engaging our services, visiting our website, or communicating with us, you acknowledge that you have read and understood this Privacy Notice and consent to the processing of your personal data as described herein.

Where you provide us with personal data of third parties (e.g. witnesses, employees, or family members), you confirm that you have obtained their consent or are otherwise legally entitled to do so.

8. Amendments to Privacy Notice

Tay Chai Huat & Co. reserves the right to amend this Privacy Notice from time to time. Any updates will be posted on our website or communicated via appropriate channels. Your continued use of our services constitutes your agreement to the updated terms.