Privacy Policy

1. Who We Are

The data controller responsible for your personal information is:

• Business Name: Kalden
• Address: 15 Jalan P. Ramlee, 50250 Kuala Lumpur, Malaysia
• Telephone: +60 3-2654 8731
• Email: [email protected]

Kalden is a tax and revenue law practice operating under the regulatory framework of the Malaysian Bar. We are subject to applicable professional confidentiality obligations in addition to the requirements of the PDPA 2010.

2. Information We Collect

We may collect the following categories of personal data:

• Contact information: Your name, email address, telephone number, and postal address when provided through our contact form or by email.
• Enquiry details: Information you voluntarily share about your tax situation or legal matter when making an enquiry.
• Service-related information: Documents, financial figures, and correspondence provided during the course of a professional engagement.
• Website usage data: Technical information such as IP address, browser type, pages visited, and approximate location, collected via cookies or analytics tools.

We do not collect sensitive personal data — such as race, religion, health information, or political opinion — unless it is directly relevant to a specific matter you have asked us to assist with and you have provided it voluntarily.

3. How We Collect Information

• Contact form: When you submit a message through our website.
• Direct email or telephone: When you contact us directly.
• Client engagement: During the course of an engagement, through documents, correspondence, and meetings.
• Automated means: Through cookies and analytics tools when you browse our website. Please see our Cookie Policy for details.
• Third parties: In limited circumstances, we may receive information from other advisers or professionals acting on your behalf, or from public registries relevant to a matter.

4. How We Use Your Information

We use personal data only for the purposes for which it was provided or for directly related purposes, including:

• Responding to your enquiry and assessing whether we are able to assist.
• Providing the professional services you have engaged us for.
• Complying with our legal and regulatory obligations, including our duties as legal advisers.
• Maintaining records required by law or professional rules.
• Improving our website and understanding how visitors use it (in aggregate, anonymised form).
• Sending relevant professional updates or communications, where you have consented or where we have a legitimate interest to do so.

We do not use your personal data for automated decision-making or profiling purposes.

5. Legal Basis for Processing

Under the PDPA 2010, we process personal data on the following bases:

• Consent: Where you have voluntarily provided information to receive a response or service.
• Contractual necessity: Where processing is necessary to perform our professional obligations to you.
• Legal obligation: Where we are required to retain or process data to comply with applicable law.
• Legitimate interests: Where we have a legitimate professional interest that is not overridden by your privacy interests, such as maintaining internal records or improving our services.

6. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information. We may share data in the following limited circumstances:

• Regulatory authorities: Where we are legally required to disclose information, for example to the Inland Revenue Board (LHDN) or Royal Malaysian Customs Department in the course of representing you.
• Professional advisers: Counsel, other legal practitioners, or experts engaged in connection with your matter, under appropriate confidentiality obligations.
• Service providers: Trusted third parties who assist with website hosting, analytics, or communications, acting strictly on our instructions.
• With your consent: Where you have specifically authorised disclosure to a named third party.

All third parties processing personal data on our behalf are required to maintain appropriate security standards.

7. Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law or professional regulation:

• Enquiries that do not result in an engagement: Typically up to 12 months from the date of the enquiry.
• Client files from completed engagements: Generally 7 years from the conclusion of the matter, in accordance with standard legal practice and the Limitation Act 1953.
• Website analytics data: Typically retained in aggregated form for up to 24 months.

After the applicable retention period, personal data is securely deleted or anonymised.

8. Data Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or loss. These include:

• Secure email protocols and encrypted communications where appropriate.
• Access controls limiting data access to staff who require it.
• Physical security measures at our office premises.
• Regular review of internal data handling procedures.

While we maintain these measures, no transmission of information over the internet is entirely without risk, and we cannot guarantee the absolute security of data transmitted electronically.

9. Cookies and Website Analytics

Our website uses cookies to understand how visitors interact with our content and to store your preferences. Full details of the cookies we use, their purpose, and how to manage them are set out in our Cookie Policy.

Analytics tools we may use include Google Analytics. These tools collect anonymised usage information to help us improve our website. No personally identifiable information is shared with analytics providers without your consent.

10. Your Rights Under the PDPA 2010

Under the Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Right of access: To request a copy of the personal data we hold about you.
• Right of correction: To request that we correct any inaccurate or incomplete information.
• Right to withdraw consent: To withdraw consent for processing where consent was the basis for collection, without affecting the lawfulness of processing carried out before withdrawal.
• Right to limit processing: In certain circumstances, to request that we restrict how we use your personal data.
• Right to lodge a complaint: With the Personal Data Protection Commissioner if you believe your rights have not been respected.

To exercise any of these rights, please contact us in writing at [email protected]. We will respond within a reasonable period and no later than 21 days where required by law.

11. International Data Transfers

We do not routinely transfer your personal data outside Malaysia. In the event that any service provider or tool we use processes data in another jurisdiction, we take steps to confirm that appropriate protections are in place consistent with the requirements of the PDPA 2010 and any applicable guidance from the Personal Data Protection Commissioner.

12. Children's Privacy

Our services are intended for individuals who are 18 years of age or older. We do not knowingly collect personal information from minors. If you believe that a child has provided us with personal information, please contact us at [email protected] and we will take steps to remove it.

13. Third-Party Links

Our website may contain links to external websites operated by other parties. This Privacy Policy applies only to our own website. We are not responsible for the privacy practices of third-party sites and encourage you to review their respective policies before providing personal information.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or regulatory guidance. When we make material changes, we will revise the "Last Updated" date at the top of this page. We recommend reviewing this policy periodically. Continued use of our website after a change is posted constitutes acceptance of the updated policy.

15. Contact for Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact us:

• Email: [email protected]
• Telephone: +60 3-2654 8731
• Post: Kalden, 15 Jalan P. Ramlee, 50250 Kuala Lumpur, Malaysia