Last updated: July 2026
This Privacy Notice is issued by Sing Leong & Associates (Advocates & Solicitors) (the “Firm”, “we”, “us”) pursuant to the Personal Data Protection Act 2010 (“PDPA”) (Act 709) of Malaysia. It explains how we collect, use, disclose and safeguard personal data — both of visitors to this website and of clients and other persons we deal with in the course of our legal practice.
Sing Leong & Associates is a firm of advocates and solicitors practising in Malaysia. Advocates and solicitors engaged in commercial legal transactions are data users for the purposes of the PDPA. Our designated contact for data protection matters is the Managing Partner, whose contact details appear at the end of this Notice.
Depending on our relationship with you, the personal data we process may include:
We collect and process personal data to: provide legal services under a client retainer; conduct conflict checks and client due diligence (including AML/KYC obligations); communicate with clients, counterparties and relevant institutions; comply with legal, regulatory and professional obligations; maintain our accounts and records; and respond to enquiries sent to us.
Personal data is not processed without the express or implied consent of the data subject, or unless processing falls within a statutory exception. Where you engage the Firm under a retainer, that engagement constitutes consent to the processing of personal data necessary to carry out your instructions. Sensitive personal data is processed only with explicit written consent or where required or authorised by law. Provision of certain data is mandatory for us to act for you — for example, identification data required for client due diligence; if such data is not provided, we may be unable to accept or continue an engagement.
We do not sell, license or trade personal data under any circumstances. Personal data may be disclosed without further consent only: where necessary for the conduct of the matter for which it was collected (including to opposing solicitors, financial institutions, land registries, courts and regulatory bodies); where required by law, court order or direction of a competent authority; or where permitted under a statutory exception. Third-party service providers who process data on our behalf are bound by contractual data protection obligations at least equivalent to those under the PDPA.
We maintain appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, modification or disclosure, including role-based access controls, password protection and two-factor authentication, encrypted storage and transmission of sensitive personal data, and locked physical storage for hard-copy files.
Personal data is not retained beyond the period necessary for the purpose for which it was collected, or as required by applicable law and professional obligations. Upon expiry of the applicable retention period, physical documents are securely destroyed and electronic records are permanently deleted.
Personal data is not transferred outside Malaysia unless the destination provides a level of protection equivalent to or higher than the PDPA, or the data subject has given explicit informed consent. In cross-border transactions involving foreign counsel or overseas financial institutions, data sharing is confined to what is strictly necessary and effected through secure channels.
This website uses only cookies and local storage entries that are strictly necessary for it to function — currently limited to remembering your cookie preference and language choice. We do not presently use analytics, advertising or other tracking cookies. If optional cookies are introduced in future, they will be loaded only with your prior consent, which you may give or withhold through the cookie banner and change at any time by clearing your browser data.
Under the PDPA you have the right to request access to your personal data held by the Firm and to request correction of any data that is inaccurate, incomplete or misleading. Requests must be made in writing to the Managing Partner. We will respond within 21 calendar days of receiving a valid request. We may charge a reasonable administrative fee as permitted by the PDPA, and may decline a request where disclosure would be contrary to the interests of justice, would be likely to prejudice ongoing proceedings, or is otherwise restricted by law or professional privilege.
This Notice is reviewed periodically and upon any material amendment to the PDPA or change in our data processing practices. The current version will always be available on this page.
Data protection enquiries and access or correction requests should be addressed in writing to: The Managing Partner, Sing Leong & Associates, B-09-01, Plaza Mont' Kiara, No. 2, Jalan Kiara, 50480 Kuala Lumpur, Malaysia, or by email to sing@singleong.com.my.
Versi Bahasa Malaysia boleh disediakan atas permintaan. 本声明的简体中文版本见本网站中文页面。
