Personal Data Protection Notice
Introduction
This Personal Data Protection Notice (“Notice”) sets out how Messrs. Harnesh (“the Firm”, “we”, “our” or “us”) collects, uses, processes, discloses, stores and otherwise handles your personal data in accordance with the Personal Data Protection Act 2010 (“PDPA”) and all applicable laws and regulations. This Notice applies to our clients, prospective clients, employees, job applicants, vendors, service providers, website users and any other persons whose personal data is processed by us. By engaging our services, communicating with us, accessing our website or otherwise providing your personal data to us, you acknowledge that you have read and understood this Notice and consent to the processing of your personal data in the manner described herein.
Types Of Personal Data Collected
The personal data collected and processed by us may include, but is not limited to:
• personal identification information such as name, NRIC / passport number, nationality, gender and date of birth;
• contact details including address, telephone number and email address;
• occupation, employment and business-related information;
• banking, billing and financial information;
• information relating to legal matters, transactions, disputes or proceedings;
• information contained in correspondence, documents, forms, contracts or communications with us;
• information collected through our website, cookies and technology systems;
• CCTV recordings and security records where applicable; and
• any other personal data required for the purposes set out in this Notice.
Sources Of Personal Data
We may obtain your personal data directly from you or from various sources including:
• information and documents provided by you;
• public records and publicly available sources;
• regulatory authorities and governmental agencies;
• courts, tribunals and legal databases;
• employers, referees, financial institutions and professional advisers; and
• third parties connected with your legal matters or transactions.
Purpose Of Processing
Your personal data may be processed for purposes including but not limited to:
• providing legal advice and legal services;
• acting on your instructions and managing legal matters or transactions;
• conducting conflict checks, due diligence and client verification procedures;
• communicating with you;
• preparing legal documents and correspondence;
• billing, payment processing and financial administration;
• complying with legal, regulatory, tax, anti-money laundering and professional obligations;
• maintaining records and internal administration;
• recruitment and employment-related purposes;
• managing and administering our website, systems and operations;
• protecting our legal rights and interests; and
• any purpose incidental, ancillary or related to the above.
Disclosure Of Personal Data
Your personal data may be disclosed to and processed by:
• our partners, lawyers, employees, consultants and affiliated entities;
• courts, tribunals, regulatory authorities and governmental bodies;
• banks, insurers, auditors and professional advisers;
• external service providers including technology, cloud storage and IT providers;
• opposing parties, solicitors, witnesses and experts where necessary for legal proceedings or transactions;
• debt recovery agents or enforcement authorities; and
• any person where disclosure is required, authorised or permitted under law.
Transfer Of Personal Data Outside Malaysia
Your personal data may be transferred, stored or processed outside Malaysia where necessary for the purposes stated in this Notice, subject to appropriate safeguards and applicable legal requirements.
Security Of Personal Data
We take reasonable and appropriate technical and organisational measures to safeguard your personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.
Retention Of Personal Data
We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and professional obligations, resolve disputes and enforce our rights.
Rights Of Access And Correction
Subject to the PDPA and applicable laws, you may:
• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• withdraw consent for the processing of your personal data; and
• make inquiries or complaints regarding your personal data.
We may charge a prescribed fee for processing data access requests where permitted by law.
Failure To Provide Personal Data
Where indicated as mandatory, failure to provide your personal data may result in our inability to provide legal services, comply with legal obligations or continue our professional relationship with you.
Cookies And Website Usage
Our website may use cookies and similar technologies to improve user experience, website functionality, analytics and security, and by continuing to use our website, you consent to such usage.
Amendments To This Notice
We reserve the right to amend, update, or revise this Notice from time to time, and any updated version(s) will be published on our website and shall take effect upon publication.
Contact Details
If you have any questions, requests or complaints regarding this Notice or your personal data, please contact:
Messrs. Harnesh
1532, Block E, Unit E-15-D1, Level 15, Plaza Mont’ Kiara, No. 2, Jalan Kiara, Mont Kiara, 50480 Kuala Lumpur, Wilayah Persekutuan Kuala Lumpur
+603-2729 8319
admin@harnesh.com