Personal Data Protection Notice for KFF Group
KFF PLT and its network firms (“KFF” or “us”) respect and are committed to the protection of your personal information and your privacy. This Personal Data Protection Notice explains how we collect and handle your personal information in accordance with the Malaysian Personal Data Protection Act 2010. Please note that KFF may amend this Personal Data Protection Notice at any time without prior notice and will notify you of any such amendment via our website or by email.
This Notice serves to inform you that your personal data is being processed by and/or on behalf of KFF.
There are various requirements that regulate the processing of:
Source of Personal Data
- Your personal data (of an individual);
- The personal data of your directors, shareholders, managers and/or officers (of a company);
- The personal data of your partners, managers and/or officers (of a partnership);
- The personal data of your office bearers (of a society, club or unincorporated body); and
- Where relevant, the personal data of your employees, service providers, customers, advisors, suppliers, agents, contractors, debtors, creditors, borrowers, lenders, representatives, any parties that have contractual relationship with you, or any parties that you deal with in your normal course of business.
(collectively referred to as “your” or “you”).
Nature of Personal Data
||In the course of your engagements with KFF, we request that you provide information, including personal data, to enable us to deliver the agreed services to you. Your personal data was collected from the information you have provided to us and from any other correspondence from you, either in hard copies or electronic formats.
||For purposes of client/engagement acceptance, continuance, verification or rending of agreed services, we may, from time to time, collect your personal data from public domain, KFF entities, credit reporting agencies or governmental agencies.
||We also collect your personal data directly/indirectly:
- Through marketing activities or events, e.g. seminars, business card collections, etc.
- When you contact us through our website, email and/or phone call, e.g. upon enquiry of our services.
Purposes of Collecting Personal Data
||The personal data processed by us may include your name, gender, race, national identify card number, passport number, nationality, contact numbers, postal addresses, email addresses, business trading name, type of business, regulatory and business licences, business registration documents, banking information, status, directorship, shareholdings, image (e.g. photograph) and any other personal information provided by you.
Disclosure or Transfer of Personal Data
||We are processing your personal data for all or any one or more of the following purposes:
- To render the agreed services.
- For client/engagement acceptance, continuance or verification purposes.
- For record purpose.
- To facilitate our compliance with any laws or regulations in the conduct of our business.
- To contact you regarding services, upcoming events, technical update, marketing and commercial materials which we feel may interest you.
- Other purposes, directly or indirectly relating to any of the above and/or related to KFF’s
Safeguard of Personal Data
Your personal data may be disclosed
to our agents, suppliers, service
providers, affiliates, or KFF entities, for purpose of delivering the agreed services to you and those purposes as set out in Purposes of Collecting Personal Data” section above.
Our work papers, documentation provided by you to us and correspondence with you which may contain your personal data, may be make available for inspection by the Malaysian Institute of Accountants, the Audit Oversight Board of Malaysia, the Companies Commission of Malaysia, the Inland Revenue Board of Malaysia, relevant governmental agency/authority or any other parties, in accordance with applicable industry requirements/guidelines, standards, by-laws, legal or regulatory requirements. We may also make our work papers, documentation provided by you to us and correspondence with you available to KFF
entities for risk management,
quality control, independence and
conflict of interest checking, and
Your personal data may be
transferred to and/or stored in a
place outside Malaysia for any of
the purposes set out in this Notice.
Retention of Personal Data
We have policies in place to ensure
that the processing of your personal
data is carried out in a secure
environment to prevent loss,
unlawful disclosure and/or misuse of
your personal data.
All personal data shall be kept and
retained by KFF for an on-going
business relationship with you, for
other purposes set out in this
Notice, and for us to comply with
by-laws, legal or regulatory
requirements, including the
requirements on records retention
period. Otherwise, we shall destroy
your personal data in a secured
You may request to access and to
correct any of your personal data or
to contact us with any enquiries or
complaints in respect of your
You have right to withdraw, in full
or in part, your consent given to us
previously, in respect of the
processing of your personal data,
subject to relevant laws,
regulations, contracts and
reasonable time period.
Should we are unable to comply with
such requests, we will inform you of
You have right to communicate to us
your objection to the processing of
your personal data for marketing
All requests should only be made in
writing to us send to the address
6, Lorong Pulau Tikus,
10350 Penang, Malaysia.
Attention of: Managing Partner
Impact on Failure to Supply Personal Data
You will provide any information
voluntarily and are responsible for
ensuring that the information you
provide us is accurate, complete,
and not misleading and that such
information is kept up to date. We
shall not be held responsible, in
the event that you provide us with
any false, incomplete or misleading
Any personal data provided to us by
you (where you are a data user of
such personal data), you are
responsible to ensure that the
processing of such personal data by
you and the disclosure of such
personal data by you to us are
complied with the PDPA.
If you fail to supply to us relevant
personal data or subsequently
withdraw your consent, we may not be
able to process your personal data
for any of the above purposes and
consequently we may not be able to
transact or contract with you, or to
provide the agreed services to you.
Please note that we may revise this
Notice at any time without prior
notice. You will be notified of any such amendment via our website or by email.
1 July 2020
Note: “processing” as defined under Section 4 of the PDPA.