Privacy Policy
Last Updated: 15 March 2025
1. Introduction
Adil Tax Law ("we", "us", "our") is committed to handling personal data responsibly and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This policy explains what data we collect, why we collect it, how we use it, and what rights you have in relation to it.
If you have questions about this policy or about how we handle your data, please contact us at [email protected] or at Suite B-15-3, Plaza Mont Kiara, 2 Jalan Kiara, 50480 Kuala Lumpur.
2. What Personal Data We Collect
Depending on the nature of your engagement with us, we may collect the following categories of personal data:
- Full name and identity information (NRIC, passport number where required)
- Contact details: email address, telephone number, postal address
- Financial and tax-related information: income declarations, tax returns, notices of assessment, bank statements, company financial statements
- Business information: company registration details, shareholding structures, related-party transaction records
- Communication records: correspondence, enquiry form submissions, emails
- Website usage data: IP address, browser type, pages visited (collected via analytics cookies, where consent is given)
3. Legal Basis for Processing
We process personal data on the following legal bases under the PDPA 2010:
- Consent: Where you have provided explicit consent, for example by submitting our contact form.
- Contract: Where processing is necessary to perform our engagement agreement with you.
- Legitimate interest: For operational purposes such as maintaining engagement records, security, and improving our service.
- Legal obligation: Where we are required by law to retain or disclose data.
4. How We Use Your Data
We use your personal data for the following purposes:
- Providing tax advisory services under the scope of your engagement
- Corresponding with you about your matter and sending written memoranda
- Communicating with LHDN and other authorities on your behalf, where instructed
- Internal administration, conflict of interest checks, and file management
- Responding to enquiries submitted through this website
- Compliance with legal and regulatory obligations
We do not use your data for unsolicited marketing. We do not sell or share your data with third parties for commercial purposes.
5. Data Retention
We retain engagement files for a minimum of seven years following the conclusion of a matter, in line with standard professional practice and potential audit or inquiry timelines. Website enquiry data is retained for twelve months. You may request deletion of data that is not subject to a legal retention obligation.
6. Data Sharing
We share your data only in the following circumstances:
- With LHDN or other regulatory bodies, where required by law or as part of your engagement
- With professional colleagues (e.g., accountants, auditors) as authorised by you in writing
- With our IT service providers, under confidentiality agreements, for document storage and communication purposes
We do not transfer personal data outside Malaysia unless you have explicitly authorised it and we have satisfied ourselves that adequate data protection standards apply.
7. Data Protection Measures
Client documents and data are stored in encrypted systems with access restricted to the advising team for your matter. Physical documents are stored in a locked environment. We maintain access logs and conduct periodic reviews of our data handling procedures. In the event of a data breach that may affect your rights, we will notify you within a reasonable time.
8. Cookies
This website uses cookies as described in our Cookie Policy. Essential cookies are necessary for site functionality. Analytics and preference cookies are optional and only activated with your consent.
9. Your Rights Under the PDPA 2010
Under the Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:
- Right to access: You may request a copy of the personal data we hold about you.
- Right to correction: You may request that inaccurate or incomplete data be corrected.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.
- Right to limit processing: You may request that we restrict the use of your data in certain circumstances.
- Right to raise a complaint: You may lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe we have handled your data unlawfully.
To exercise any of these rights, please write to us at [email protected]. We will respond within 21 days.
10. Third-Party Links
This website may contain links to external websites, including LHDN's official portal. We are not responsible for the privacy practices of those sites and recommend that you review their privacy notices independently.
11. Children's Privacy
Our services are directed at individuals aged 18 and above who are capable of entering into legal agreements. We do not knowingly collect personal data from persons under 18.
12. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or in applicable law. The updated policy will be posted on this page with a revised "Last Updated" date. Continued use of our services after a material change constitutes acceptance of the revised terms.
13. Contact for Data Matters
For any privacy-related enquiry or data subject request:
- Email: [email protected]
- Address: Suite B-15-3, Plaza Mont Kiara, 2 Jalan Kiara, 50480 Kuala Lumpur, Malaysia