Privacy Policy
How we handle personal data in connection with our website, enquiries and professional services.
Privacy Policy
Effective date: 8 July 2026
We respect the privacy of clients, prospective clients, website visitors and business contacts. This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you use our website, contact us or engage our professional services.
1. Personal data we may collect
We may collect personal data such as your name, contact number, email address, company name, job title, enquiry details, service requirements, billing or engagement information provided to us, and technical information generated when you visit our website.
2. Purposes of processing
We may process personal data to respond to enquiries, provide accounting, company secretarial, advisory, operational due diligence, human resource management and internal audit support, manage client engagements, issue correspondence or invoices, maintain records, comply with legal or regulatory obligations, and improve our website and administration.
3. Disclosure of personal data
We do not sell personal data. Where necessary, we may disclose personal data to authorised personnel, professional advisers, IT, email, hosting or administrative service providers, banks, regulators, statutory bodies or other parties where required for the stated purposes, by law, or with your consent.
4. Security
We take reasonable administrative, technical and organisational steps to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
5. Retention
Personal data is retained only for as long as necessary for the purposes for which it was collected, including professional, accounting, legal, regulatory and recordkeeping requirements. When no longer required, records will be deleted, anonymised or securely archived where appropriate.
6. Accuracy and updates
Please ensure that personal data provided to us is accurate and complete. You may contact us to request correction of your personal data where it is inaccurate, incomplete or outdated.
7. Access, correction and withdrawal
Subject to applicable law, you may request access to your personal data, request correction, withdraw consent where processing is based on consent, or object to direct marketing communications. We may request information to verify your identity before acting on a request.
8. Cookies and website data
Our website may use basic technical cookies, server logs or similar tools to support website functionality, security and performance. If analytics or third-party tools are used, the data may include device, browser and usage information.
9. Cross-border processing
Some website, email, cloud or administrative service providers may process or store data outside Malaysia. Where this occurs, we take reasonable steps to ensure appropriate safeguards are in place.
10. Contact us
For privacy-related enquiries, access or correction requests, please contact us at info@hccandco.com or 017-770 4166.
11. Updates to this Privacy Policy
We may update this Privacy Policy from time to time. The latest version will be available on this page.