(Effective date: 2 December 2025)
PERSONAL DATA PROTECTION NOTICE
INTRODUCTION
1 Beyond Compliance Consulting Sdn. Bhd. (hereinafter referred to as “BCC”, “our”, “us” or “we”) care about the protection of your personal date.
This personal data protection notice (the “Notice”) is issued by BCC pursuant to the requirements of the Personal Data Protection Act 2010 (the “PDPA”) and the terms “personal data” and “processing” shall have the meaning as prescribed in the PDPA.
2 The Notice is issued in both English and Bahasa Malaysia and sets out how BCC collects, processes, uses and protects your personal data. In the event of any inconsistencies or discrepancies between this English version and the Bahasa Malaysia version, the English version shall prevail.
3 By providing BCC personal data, communicating with BCC, engaging BCC to provide professional services and work (the “Services”), continuing to engage BCC following receipt of the Notice, and/or interacting with BCC in connection with BCC’s business operations, including at our events, conferences, seminars, talks or otherwise, or by accessing our website www.bcomconsulting.com.my, you agree and consent to the processing of your personal data by BCC and all persons involved in BCC’s business operations for the purposes and in the manner as provided below.
COLLECTION OF PERSONAL DATA
5 When you instruct us to act for you, we would or may need to collect, record, hold, store, use and/or further process including organizing, consulting on or disclosing your personal data.
6 The personal data we collect, use and process includes any personal identifiable data that you provide or have provided to BCC, including information concerning your personal details (such as name, age, gender, identity card number, passport number, photograph, date of birth, race, nationality, citizenship), contact details (such as postal address, email address, phone number), education, qualification, skills and language capability details, employment details (such as Employment Insurance Scheme (EIS), Employees Provident Fund (EPF), Social Security Organisation (SOCSO), Income Tax details, employment details and history (such as present and past employers, present and past income, referees), financial details (such as bank account and credit card details), family details (such as marital status, details of spouse, children and/or immediate family) and any other information as we may from time to time request or come into possession of and that may be relevant and necessary for us to carry out the Services entrusted to us by you (such as physical or mental health or condition, political opinions, religious beliefs or other beliefs of a similar nature, sexual orientation, the commission or alleged commission of any offences).
7 We collect personal data through several methods which include but are not limited to:
7.1. information and/or documents you provide us by whatsoever means and/or in whatsoever manner;
7.2. information and/or documents obtained independently by us or given to us from other lawful sources in the ordinary course of the continuation of our business relationship and/or the provision of the Services, including without limitation, from online search facilities, public registries / data bases (including the relevant department of insolvency, land registries and/or registered credit reporting agencies), information obtained from third parties through lawful sources (including Federal, State or local government departments / statutory or regulatory authorities) and information generated from events organized by BCC and/or from cookies used on our website.
PURPOSE OF PROCESSING PERSONAL DATA
8. You hereby agree and consent to BCC using and processing your personal data for BCC’s business purposes including in the manner and for the purposes as described below:
8.1. for the purposes of the Services (including conducting searches and/or credit checks);
8.2. for the preparation of documents or instruments which may be required for the Services and such other ancillary work in connection with the Services, including but not limited to, preparing the necessary agreements, instruments or documents to which you are a party;
8.3. for BCC’s internal operational requirements (including collection and/or execution of legal documents, conducting searches);
8.4. for BCC’s administrative requirements (including conducting conflict of interest checks, due diligence checks, billing/invoicing, record keeping);
8.5. for BCC to comply with obligations under any law and/or regulation within or outside Malaysia existing currently and in the future, guidelines, guidance and/or requests given or issued by any legal, regulatory, governmental, tax, law enforcement, quasi-governmental or other authorities;
8.6. for any purpose required by law and/or regulation; and
8.7. for BCC to communicate with you or contact you, including for all the purposes set out in this paragraph 8 and paragraph 9 below;
8.8. for any other purpose that is incidental, ancillary or in furtherance to the above purposes.
9. BCC may also use and process the personal data for other purposes, such as:
9.1. send communications such as newsletters, articles, write-ups, other updates and festive greeting cards;
9.2. distribute information or invitations to events, conferences, talks or seminars which may be of interest to you; and
9.3. send as potential referees to (i) editors/researchers in ranking legal publications and journals; (ii) potential clients who request referees of past work in requests for proposals, tenders, submissions.
10. If you do not agree or consent to BCC processing your personal data for the purpose set out in paragraph 9 above, please notify us in writing at the contact details set out in paragraph 23 below. Please note, however, that BCC may process your personal data without your consent if it is permitted under the PDPA or any other relevant legislation, but BCC will not process or disclose your sensitive personal data without your explicit consent or unless provided for under Section 40 of the PDPA.
FAILURE TO PROVIDE PERSONAL DATA
11. It is voluntary for you to provide the personal data to BCC. However, if you do not wish to provide the personal data, BCC may be unable to provide you the Services, and/or communicate effectively with you.
DISCLOSURE TO THIRD PARTIES, AND TRANSFER OF PERSONAL DATA OUT OF MALAYSIA
12. Your personal data will be held and kept confidential by BCC. However, it may be necessary for BCC to engage third parties, service providers or individuals to perform certain services and/or functions on BCC’s behalf. As some of BCC’s service providers (including BCC’s information technology storage facilities and servers) may be located in other jurisdictions, your personal data may be transferred to, stored, used and processed in a jurisdiction other than Malaysia. Further, your personal data may be transferred out of Malaysia for the purposes described in paragraph 9.3 above where such ranking legal publications and journals and/or potential clients are located outside of Malaysia.
13. You understand and hereby agree and consent that we may grant access, disclose and transfer your personal data to the third parties (whether within or outside Malaysia) (who may also subsequently process, disclose or transfer such data) for the purposes set out in paragraphs 8 and 9 above:
13.1. banks and financial institutions;
13.2. external advisors and professional service providers engaged by BCC in connection with its business operations and the provision of the Services (including auditors, company secretaries, lawyers, insurance providers);
13.3. third party service providers who provide administrative, information technology, telecommunications and computer or other services to us in connection with the operation of our business and the provision of the Services (including mailing, courier service providers and storage facility providers);
13.4. legal, regulatory, governmental, tax, law enforcement, quasi-governmental or other authorities within or outside Malaysia who may require such information;
13.5. ranking publications and journals and/or potential clients requiring referrals for us;
13.6. such other party as BCC deems necessary for the purposes mentioned in paragraph 8 and 9 above.
14. We may also disclose and transfer your personal data to any statutory bodies, regulatory bodies. local authorities and/or governmental and non-governmental authorities when and where required to do so, and any such person to whom BCC is directed and/or ordered by such statutory bodies, regulatory bodies, local authorities and/or governmental and non-governmental authorities to disclose and transfer such personal data to.
WEBSITE
15. We may use cookies on our website. If you do not wish for your personal data to be collected via cookies, please configure your internet browser to delete or deactivate cookies. Any personal data provided via your usage of our website shall be used and processed in the manner set out in this Notice.
16. Our website may contain links to other sites and pages. BCC shall not be responsible for any personal data or information that you may provide to other entities via these links.
SECURITY MEASURES
17. We keep all personal data confidential and implement appropriate administrative and security safeguards and procedures in accordance with applicable laws and regulations to prevent the unauthorized or unlawful processing of personal data and accidental loss or destruction of, or damage to, personal data.
PERSONAL DATA RETENTION PERIOD
18. We will retain your personal data as long as you are our client or for a period of six (6) to twelve (12) years from the date of the conclusion / termination of our engagement (depending on the nature of the Services performed). After this period, we will securely destroy / permanently delete your personal data.
REQUEST FOR ACCESS AND CORRECTION OF PERSONAL DATA AND OTHER INQUIRIES
19. You may at any time request access to, and/or correction of your personal data or limit the processing of your personal data by us (subject to any exceptions under applicable laws) via the contact details set out in paragraph 23 below. Please note that BCC has the right to charge a fee for providing access to your personal data.
YOUR OBLIGATIONS REGARDING YOUR PERSONAL DATA AND/OR THE PERSONAL DATA YOU PROVIDE
20. You have the responsibility to provide accurate, complete, not misleading and up-to-date personal data to BCC about yourself and any other person whose personal data you provide to BCC. To ensure the accuracy of such personal data, you are obliged in the event of any changes to promptly notify BCC of the changes via the contact details set out in paragraph 23 below.
21. In the event that you have to provide us with personal data relating to third parties, such as your spouse, children, family members or colleagues, or ask and/or authorize us to collect such personal data by reason of or incidental to our carrying out the Services, you warrant that you have obtained their consents and/or are authorized to provide consents on their behalf (as the case may be) to permit BCC to collect, process and use their personal data as set forth within the Notice and that you have ensured that they have read and/or are otherwise aware of the contents of the Notice.
AMENDMENT TO NOTICE
22. BCC reserves the right to amend or modify the Notice at any time without prior notice to you, including by placing the updated Notice on our website, and the updated version shall apply and supersede any and all previous versions. Please check BCC’s website for the latest version of the Notice. By continuing to communicate with BCC or by continuing to use BCC’s services following the modifications, updates or amendments to the Notice, you accept and agree to such modifications, updates or amendments.
CONTACT US
23. You may contact us or submit your inquiry, request or complaint in regards the processing of your personal data to:
Data protection manager
Beyond Compliance Consulting Sdn. Bhd.
A2-4, Wisma Nation Horizon, Jalan Petanak
93100 Kuching, Sarawak
Tel: +60(82) 238122
Beyond Compliance Consulting Sdn. Bhd.
Registration No. 201601038691 (1209632-V) helps businesses navigate regulatory complexities, strengthen governance, and manage risks effectively. We provide expert guidance to ensure compliance, integrity, and long-term resilience in an evolving business landscape.
Copyright © 2026 Beyond Compliance Consulting Sdn. Bhd. Registration No. 201601038691 (1209632-V) . All Rights Reserved.