Personal Data Protection Notice

IZAAN AZALAN & ASSOCIATES

Last updated: 7 November 2026

Izaan Azalan & Associates (“the Firm”, “we” or “us”) handles personal data in connection with enquiries, appointments, website use and our services.

This Notice explains the types of data collected, their sources, the purposes of processing, the parties who may receive the data, and your choices and rights.

1. Personal data collected

Depending on your dealings with us, the data collected may include your name, identity card or passport number, address, telephone number, email address, employment details, financial information, bank account details, assets and payment information.

It may also include information about your spouse, children, heirs, beneficiaries, witnesses and other relevant individuals; documents, correspondence, evidence and information relating to advice, transactions or proceedings; and appointment details, the purpose of your visit, visitor numbers and vehicle registration details for access or parking arrangements.

Technical information may include your Internet Protocol (IP) address, device type, browser, pages visited and interactions with the website, to the extent collected by the systems used.

Certain matters may involve sensitive personal data, including health information, religious beliefs, biometric data or information concerning the commission or alleged commission of an offence. Such data is processed with explicit consent where required or on another basis permitted by law.

2. Sources of personal data

Data may be obtained directly from you through forms, meetings, telephone calls, email, WhatsApp, appointment systems or documents; from your authorised representatives; from relevant parties including lawyers, witnesses, experts and institutions; or through public records, official searches, court documents and other lawfully obtained sources.

If you provide another individual’s data, please ensure that you have the authority or a lawful basis to do so and, where required, have informed that individual and obtained their consent.

3. Purposes of processing

Personal data is processed to the extent relevant and necessary to respond to enquiries; manage appointments; verify identity; conduct conflict checks; assess instructions; and provide agreed services.

Data is also used to prepare documents, conduct searches and handle transactions, negotiations or proceedings; communicate with you and relevant parties; arrange visitor access and parking; manage files, billing, payments, accounts and administration; maintain security and assess website usage and performance; and comply with legal, regulatory and professional obligations and protect or enforce lawful rights.

For takaful enquiries, information is used to respond to enquiries and manage related requests. If a matter proceeds to a quotation, application, renewal or claim, necessary information may be submitted to the relevant takaful operator through an authorised representative, subject to the required notice and consent. The operator’s privacy notice also applies to its processing.

4. Mandatory and voluntary information

Mandatory information is marked on forms or identified to you during your dealings with us. Other information may be provided voluntarily.

If necessary information is not provided, we may be unable to respond adequately to your enquiry, verify your identity, manage your appointment or accept and carry out your instructions.

5. Disclosure of personal data

Subject to the purpose of the matter, applicable law, confidentiality obligations and legal professional privilege, data may be disclosed to authorised lawyers, staff and representatives of the Firm; courts, tribunals, land offices, regulators and government agencies; parties to transactions or proceedings and their lawyers or representatives; experts, valuers, accountants, auditors, translators and process servers; and banks, payment providers and insurance or takaful operators.

Data may also be disclosed to providers of technology, website hosting, email, cloud storage, document management and appointment systems; and building management or security providers for visitor access and parking arrangements.

Disclosure is limited to information that is necessary or as permitted or required by law.

6. Transfers outside Malaysia

Technology services used may involve the transfer, storage or processing of data outside Malaysia by hosting, email, cloud storage, analytics or appointment system providers and their support providers.

Such transfers support relevant communications, storage, administration and digital functions. We will ensure that a legally permitted basis for the transfer exists and take the required protective measures, including obtaining consent where required.

7. Security and retention

We take reasonable practical steps to protect data against loss, misuse, alteration and unauthorised access or disclosure.

Data is retained for as long as necessary for its processing purposes, file management, dispute resolution and compliance with legal or professional obligations. When no longer required, data will be destroyed, permanently deleted or anonymised, as appropriate.

8. Cookies and website technologies

The website may use cookies and similar technologies to support functionality, security, user preferences and analysis of usage and performance.

Linked or embedded third-party services, such as maps and appointment systems, may also collect technical information or use cookies.

You may manage cookies through your browser settings and any options provided on the website, where applicable. Blocking certain cookies may affect website functionality. Where consent is required for particular technologies, it will be requested separately.

9. Your rights and choices

Subject to legal conditions and exceptions, you may request access to your personal data; request correction of inaccurate, incomplete, misleading or outdated data; withdraw consent by written notice; request restrictions on processing as permitted by law; require processing for direct marketing to cease; request direct transmission of data to another data controller, subject to technical feasibility and compatibility of data formats; or make enquiries or complaints.

We may require identity verification before fulfilling a request. Requests are subject to the protection of other individuals’ rights, confidentiality and legal professional privilege.

Withdrawal of consent may affect the services we can provide. We will explain the consequences where relevant. Certain processing may continue where another basis is permitted or required by law.

10. Consent and marketing

This Notice informs you about our handling of personal data. Where consent is required, we will obtain it separately and keep an appropriate record.

Consent to receive articles, news or marketing materials will be requested separately. You may unsubscribe or request that such communications cease without affecting the services provided.

11. Contact us

Requests, enquiries or complaints may be addressed to:

Izaan Azalan & Associates
Attention: Personal Data Protection Matters
A-08-19, Denai 128,
No. 17, Persiaran Metafasa,
Seksyen U16, Denai Alam,
40160 Shah Alam,
Selangor Darul Ehsan, Malaysia.

Telephone: +603-5526 7715
Email: izaanazalan.associates@gmail.com

12. Amendments

This Notice may be updated from time to time. The latest version and its update date will be displayed on the website.

If changes require additional notice or fresh consent, we will take those steps as required by law.

13. Language

This Notice is provided in Bahasa Melayu and English. In the event of any conflict or inconsistency between the two versions, the Bahasa Melayu version shall prevail.