Legal
Privacy Notice
Last updated: 19 October 2026
This Privacy Notice is issued pursuant to the Personal Data Protection Act 2010 (“PDPA”). It explains how Hafiz Imran & Co. (“the firm”, “we”, “us”) collects, uses, discloses and protects personal data obtained through this website and in the course of enquiries made to the firm.
1. Who we are
Hafiz Imran & Co. is a firm of Advocates & Solicitors practising in Malaysia, with its office at Unit C-19-3A, 338 KL Trillion, Jalan Tun Razak, 50400 Kuala Lumpur, Malaysia. Any question or request concerning personal data may be directed to the Managing Partner at admin@hafizimran.com or +603 3010 6680.
2. Personal data we collect
We collect personal data that you provide to us voluntarily, including your name, organisation, email address, telephone number, the type of matter concerned, and any information you include in an enquiry made through this website, by email, by telephone or by WhatsApp. We ask that you do not send sensitive personal data, privileged documents or confidential case papers to the firm before an engagement has been confirmed.
3. Purposes of processing
Personal data is processed for the purposes of responding to your enquiry, conducting conflict checks, assessing whether the firm is able to act, and, where the firm is engaged, providing legal services, administering the matter, and complying with the firm’s legal and professional obligations, including those under the Legal Profession Act 1976 and anti-money laundering requirements.
4. Consent
By submitting an enquiry through this website or otherwise providing personal data to the firm, you consent to its processing for the purposes set out in this Notice. The provision of personal data is voluntary; however, if the data necessary to respond to an enquiry or to act on a matter is not provided, the firm may be unable to assist.
5. Disclosure
The firm does not sell or rent personal data. Personal data may be disclosed to service providers that support the firm’s operations, such as its website hosting and email service providers, under appropriate obligations of confidentiality; to counsel, experts or other parties where necessary in the conduct of an engaged matter; and to courts, regulatory bodies or authorities where required by law. Some service providers may store data on servers located outside Malaysia, in which case the firm takes reasonable steps to ensure the data remains protected in accordance with the PDPA.
6. Retention
Enquiry data that does not result in an engagement is retained for no longer than twelve (12) months, after which it is deleted. Data relating to engaged matters is retained for such period as is required by the firm’s professional and legal obligations, and is thereafter securely destroyed.
7. Security
The firm takes reasonable administrative and technical measures to protect personal data against loss, misuse, unauthorised access, modification or disclosure. As no method of transmission over the Internet is entirely secure, the firm cannot guarantee the security of information transmitted to it electronically.
8. Your rights
Subject to the PDPA, you may request access to, or correction of, the personal data held by the firm about you, and you may withdraw your consent to its processing. Requests should be made in writing to admin@hafizimran.com. The firm will respond within the period prescribed by the PDPA and may, where permitted, charge the prescribed fee for a data access request. If you are dissatisfied with the firm’s response, you may lodge a complaint with the Personal Data Protection Commissioner.
9. Cookies and third-party services
This website does not use analytics or advertising cookies. The Contact page displays an embedded Google Map, and links on this website may lead to third-party services such as WhatsApp, Facebook and news publishers. Those services may collect data in accordance with their own privacy policies, for which the firm is not responsible.
10. Changes to this Notice
The firm may revise this Notice from time to time. The revised version will be published on this page with an updated “Last updated” date.