1. Introduction
KS Lau & Co. and Butterworth Taxation Services Sdn. Bhd. (collectively referred to as the "Firm", "we", "our" or "us") are committed to protecting your personal data and respecting your privacy rights.
This Privacy Policy explains how we collect, use, process, disclose, store and protect your personal data in accordance with the Personal Data Protection Act 2010 ("PDPA") and other applicable laws and regulations.
This Privacy Policy applies to personal data collected through our website, professional engagements, events, communications and any other interactions with us.
By providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use and disclosure of your personal data in accordance with this Privacy Policy where such consent is required by law.
2. Collection of Personal Data
We may collect personal data directly from you or through authorised third parties in various ways, including:
- Through our website and online forms;
- During professional engagements and client onboarding procedures;
- Through correspondence, meetings, telephone calls and emails;
- During seminars, conferences, training programmes and events;
- During recruitment and employment application processes;
- Through referrals, business partners and service providers; and
- Through cookies and similar technologies when you visit our website.
3. Types of Personal Data Collected
The personal data we collect may include:
- Name, identification card number, passport number or other identification details;
- Residential, correspondence and business addresses;
- Telephone numbers and email addresses;
- Employment information, job title and company details;
- Banking and payment information;
- Tax, financial and business information required for our professional services;
- Professional qualifications and credentials;
- Photographs, video recordings and event attendance records;
- Information contained in documents provided to us for professional engagements; and
- Any other information voluntarily provided by you.
4. Purposes of Processing
We may collect, use and process your personal data for the following purposes:
- Providing audit, assurance, accounting, tax, advisory, corporate secretarial, payroll and other professional services;
- Verifying your identity and conducting client acceptance procedures;
- Complying with legal, regulatory and professional obligations;
- Conducting anti-money laundering, sanctions screening and know-your-customer procedures;
- Managing client relationships and responding to enquiries;
- Processing payments, invoices and collections;
- Organising seminars, events and training programmes;
- Recruitment and employment-related purposes;
- Sending newsletters, technical updates, invitations and marketing communications;
- Improving our services, systems and website functionality;
- Establishing, exercising or defending legal rights; and
- Any other purpose reasonably related to the foregoing.
5. Sources of Personal Data
We may obtain your personal data from:
- You directly;
- Your employer or organisation;
- Directors, shareholders, officers or authorised representatives of clients;
- Publicly available sources and regulatory authorities;
- Professional advisers and service providers;
- Referrals from existing clients or business associates; and
- Information generated through your use of our website.
6. Disclosure of Personal Data
We may disclose your personal data where necessary to:
- Our affiliated entities and business associates;
- Professional advisers and consultants;
- Regulatory authorities, government agencies and law enforcement bodies;
- Banks, insurers and financial institutions;
- IT service providers, cloud hosting providers and data processors;
- Professional bodies and regulatory organisations;
- Auditors and external reviewers;
- Legal advisers; and
- Other parties where disclosure is required or permitted by law.
7. Website Cookies
Our website may use cookies and similar technologies to improve functionality, analyse website traffic and enhance user experience.
Cookies may collect information such as browser type, device information, IP address and browsing behaviour. You may disable cookies through your browser settings, although certain website functions may not operate properly.
8. Transfer of Personal Data
Your personal data may be stored, processed or transferred to service providers or affiliated organisations located within or outside Malaysia where necessary for the purposes stated in this Privacy Policy.
Where such transfers occur, we will take reasonable steps to ensure that appropriate safeguards are in place to protect your personal data in accordance with applicable legal requirements.
9. Marketing Communications
We may use your personal data to send newsletters, technical updates, invitations, publications and information relating to our services. You may opt out of receiving marketing communications at any time by contacting us or using the unsubscribe facility included in our communications.
10. Data Security
We implement appropriate administrative, technical and physical safeguards to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction. Such measures may include:
- Access controls and authentication procedures;
- Data encryption where appropriate;
- Secure storage systems and backups;
- Staff confidentiality obligations and training; and
- Security assessments and monitoring procedures.
11. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal, regulatory and professional requirements, or to establish, exercise or defend legal rights.
When personal data is no longer required, it will be securely destroyed, deleted or anonymised.
12. Your Rights
Subject to the PDPA and applicable laws, you may have the right to:
- Request access to your personal data;
- Request correction of inaccurate, incomplete or outdated personal data;
- Withdraw consent where processing is based on consent;
- Opt out of direct marketing communications; and
- Make enquiries or complaints regarding the processing of your personal data.
13. Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices, content or security of such websites. Users should review the privacy policies of those websites before providing personal information.
14. Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy from time to time. Any changes will be published on our website and will take effect upon publication unless otherwise stated. Your continued interaction with us after such amendments constitutes your acceptance of the updated Privacy Policy.
15. Contact Us
If you have any questions, concerns, complaints, requests for access or correction of personal data, or wish to withdraw your consent, please contact us at KS Lau & Co. / Butterworth Taxation Services Sdn. Bhd.
Email: info@kslau.com.my
