Privacy Policy

1. Introduction

Bestari Legal ("we", "us", "our") is committed to protecting the personal information of individuals who use our tax advisory services or interact with our website. This Privacy Policy explains what personal data we collect, how we use it, and the choices available to you.

This policy applies to all clients, enquirers, and website visitors and is prepared in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. For privacy enquiries, contact us at [email protected].

2. Data We Collect

We collect personal data necessary to deliver our services and respond to enquiries. This includes:

• Identity information — full name, MyKad or passport number where required for LHDN filings
• Contact details — email address, phone number, and postal address
• Financial information — income details, tax documents, company financial records provided for advisory purposes
• Usage data — IP address, browser type, and pages visited when you access our website (via cookies)

Legal basis for processing: contract performance, legal obligation, and where applicable, your consent.

Retention period: Client data is retained for seven years from the end of the engagement in accordance with LHDN record-keeping requirements.

3. How We Use Your Data

• To deliver the tax advisory services you have engaged us for
• To prepare, submit, or respond to LHDN on your behalf
• To communicate about your engagement, including updates and requests for documents
• To comply with our own legal obligations, including LHDN agent registration requirements
• To improve our website through anonymised analytics (with your cookie consent)

We do not use your personal data for marketing purposes without your explicit consent, and we do not sell personal data to any third party.

4. Data Sharing

We share your personal data only where necessary and only with the following categories of recipients:

• LHDN (Inland Revenue Board of Malaysia) — for filing, audit correspondence, and representation purposes
• MIDA — where incentive applications require submission of company and financial details
• Service providers — secure document storage and communication platforms operating under confidentiality obligations

We do not transfer personal data outside Malaysia except where legally required or with your express consent.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encrypted document transmission, access-controlled storage systems, and practitioner confidentiality obligations. In the event of a personal data breach affecting your information, we will notify you without undue delay as required under applicable law.

6. Cookies

Our website uses cookies to function correctly and to understand how visitors use it. You can manage your cookie preferences at any time via our Cookie Policy page.

7. Your Rights Under PDPA

Under the Personal Data Protection Act 2010, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete personal data
• Withdraw consent where processing is based on consent (note: this will not affect data processed prior to withdrawal)
• Request that we limit processing in certain circumstances
• Lodge a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

8. Third-Party Links

Our website may contain links to external resources, including government portals such as MyTax. We are not responsible for the privacy practices of those sites and recommend reviewing their policies independently.

9. Children's Privacy

Our services are intended for persons aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately at [email protected].

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date above. We encourage you to review this page periodically. Continued use of our services following any changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related enquiries or to exercise your rights:

Bestari Legal
Level 18, Menara Bestari, Persiaran KLCC, 50088 Kuala Lumpur, Wilayah Persekutuan
Email: [email protected]
Phone: +60 3-2091 6473