Legal
Privacy Policy
Last updated: 12 March 2026 · Effective date: 12 March 2026
1. Introduction
Bestari Tax ("we", "us", "our") operates from Suite 10-1, Menara Centara, Jalan Kuning, 50400 Kuala Lumpur, Malaysia. We provide tax advisory, compliance, and representation services to individuals and businesses.
We are committed to handling personal information with care, discretion, and in accordance with the Personal Data Protection Act 2010 (PDPA 2010) of Malaysia. This Privacy Policy describes what data we collect, how we use it, your rights in relation to that data, and how to reach us with any concerns.
By engaging our services or submitting enquiries through this website, you acknowledge that you have read and understood this policy.
2. Data We Collect
Personal Information You Provide
- Full name and identity information (MyKad or passport number where required for filing)
- Email address and telephone number
- Business name, registration number, and address (for corporate clients)
- Financial records, income documents, and tax-related correspondence shared for service delivery
- Any information submitted through our website contact form
Information Collected Automatically
- IP address and approximate geographic location
- Browser type and device information
- Pages visited on this website and session duration
- Referring website or search query (where applicable)
Legal Basis for Processing
Under the PDPA 2010, we process your personal data on the following bases:
- Your consent — given when you submit enquiries or engage our services
- Performance of a contract — where data processing is necessary to deliver agreed services
- Legitimate interest — for website analytics and service improvement
- Legal obligation — where required by Malaysian tax law or regulatory authority
Data Retention
Client engagement records are retained for a minimum of seven (7) years in accordance with tax filing obligations and potential audit timelines under Malaysian law. Website enquiry data not resulting in a client engagement is retained for up to twelve (12) months. You may request earlier deletion subject to any legal retention requirements.
3. How We Use Your Data
- Delivering tax filing, advisory, and representation services you have engaged us for
- Communicating about your engagement, including updates, document requests, and filing deadlines
- Correspondence with the Inland Revenue Board (LHDN) on your behalf, where instructed
- Sending relevant service information and regulatory updates (you may opt out at any time)
- Analysing how our website is used to improve content and accessibility
- Complying with obligations under Malaysian law, including anti-money laundering requirements
Data Sharing
We do not sell, rent, or trade your personal data. We may share information only in the following circumstances:
- With LHDN or other regulatory bodies as required by your engagement instructions
- With third-party service providers who assist in IT infrastructure and analytics, under strict confidentiality agreements
- Where required by court order, legal process, or applicable Malaysian law
4. Data Protection Measures
- All digital client files are stored on access-controlled servers with encryption at rest
- Website communications are transmitted over TLS/HTTPS
- Physical documents containing sensitive information are stored in secured, access-limited premises
- Team members with access to client data are subject to confidentiality obligations
- In the event of a data breach affecting your information, we will notify you and the relevant authority within the timeframe required by applicable regulations
6. Your Rights Under PDPA 2010
As a data subject under the Personal Data Protection Act 2010 (Malaysia), you have the following rights:
- Right to access — request a copy of personal data we hold about you
- Right to correction — request correction of inaccurate or incomplete data
- Right to withdraw consent — withdraw consent for processing at any time (this does not affect data processing completed prior to withdrawal)
- Right to limit processing — request that we restrict how we use your data in certain circumstances
- Right to erasure — request deletion of data we hold, subject to legal retention obligations
- Right to lodge a complaint — submit a complaint to the Personal Data Protection Department (JPDP) at www.pdp.gov.my
To exercise any of these rights, please write to us at [email protected]. We will respond within 21 days of receiving your request.
7. Third-Party Links
Our website may contain links to external websites, including the LHDN e-Filing portal and other government resources. These sites operate under their own privacy policies. Bestari Tax is not responsible for the data practices of third-party websites and we encourage you to review their policies before submitting any personal information.
8. Children's Privacy
Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from persons under the age of 18. If you believe a minor has submitted personal information through our website, please contact us and we will arrange for its removal.
9. Policy Updates
We may revise this Privacy Policy from time to time to reflect changes in our services, technology, or applicable law. Any significant changes will be noted at the top of this page with an updated effective date. Continued use of our website or services following a policy update constitutes acceptance of the revised terms.
10. Contact for Privacy Enquiries
If you have any questions or concerns about this Privacy Policy or the handling of your personal information, please reach us through:
+60 3-2782 4693
Suite 10-1, Menara Centara, Jalan Kuning, 50400 Kuala Lumpur, Malaysia