PERSONAL DATA PROTECTION ACT (PDPA) PRIVACY NOTICE

Messrs. Candida Entri and Associates

Last Updated: 5th August 2026

This Personal Data Protection Notice ("Notice") is issued to all visitors and users of cealaw.my ("Website"), in compliance with the Personal Data Protection Act 2010 of Malaysia ("PDPA").

By accessing, browsing, or using our Website, or by providing your personal data to us, you acknowledge that you have read, understood, and consented to the processing of your personal data in accordance with the terms of this Notice.

1. Collection of Personal Data

We may collect and process various types of personal data from you, including but not limited to:

• Identity Data: Name, NRIC/Passport number, date of birth, gender.

• Contact Data: Email address, phone number, mailing address, billing address.

• Technical & Usage Data: IP address, browser type, operating system, page views, cookies, and tracking technologies when you browse our Website.

• Transaction & Financial Data: Bank account details, payment information, purchase history.

• Any other personal data submitted directly by you via forms, customer support, or communications.

The provision of your personal data is generally voluntary. However, if you choose not to provide mandatory personal data, we may be unable to process your request, provide our products or services, or grant access to certain features of our Website.

2. Source of Personal Data

Your personal data is collected directly from you when you:

• Fill out contact or inquiry forms on our Website.

• Communicate with us via email, WhatsApp or phone call

• Interact with our Website automatically via cookies and similar web tracking technologies.

3. Purpose of Collection and Processing

We process your personal data for the following commercial and operational purposes ("Purposes"):

1. To provide, operate, and maintain our Website and services.

2. To process transactions, orders, and inquiries.

3. To communicate with you regarding updates, security alerts, and administrative messages.

4. To send marketing, promotional materials, or newsletters (subject to your consent).

5. To improve user experience, perform data analytics, and customize Website content.

6. To comply with legal, regulatory, and statutory obligations under Malaysian law.

7. For internal record-keeping, auditing, and fraud prevention.

4. Disclosure of Personal Data

We do not sell or rent your personal data to third parties. However, we may disclose your personal data to the following classes of third parties inside or outside Malaysia:

• Third-party service providers, IT/hosting providers, payment gateways, and logistics partners.

• Professional advisors, including lawyers, auditors, and tax consultants.

• Law enforcement agencies, regulatory bodies, or government authorities as required by Malaysian law or court order.

5. Security of Personal Data

In accordance with the Security Principle of the PDPA, we implement technical, administrative, and organizational measures to safeguard your personal data against loss, unauthorized access, misuse, alteration, or disclosure.

6. Retention of Personal Data

Your personal data will be retained only for as long as necessary to fulfill the Purposes for which it was collected, or as required to comply with applicable legal, accounting, or regulatory requirements. Once retention is no longer necessary, we will securely delete or anonymize your personal data.

7. Data Subject Rights (Access and Correction)

Under the PDPA, you have the right to:

• Request access to your personal data held by us.

• Request correction or updating of inaccurate, incomplete, or outdated personal data.

• Withdraw your consent for the processing of your personal data at any time (subject to contractual or legal restrictions).

• Limit the processing of your personal data, including opting out of direct marketing communications.

To exercise any of these rights, please submit a written request to our Data Protection Contact below.

8. Cookies and Tracking

Our Website uses cookies to enhance your browsing experience. Cookies are small text files placed on your device. You may choose to disable cookies via your browser settings; however, doing so may affect the functionality of certain parts of our Website.

9. Transfer of Data Outside Malaysia

Where necessary for cloud storage, web hosting, or global IT infrastructure, your personal data may be transferred to service providers operating outside of Malaysia. We will take reasonable steps to ensure that such overseas recipients provide a level of data protection comparable to the requirements of the PDPA.

10. Amendments to this Notice

We reserve the right to modify or update this Notice at any time to reflect legal changes or updates to our operational practices. Any changes will be posted directly on this page with an updated revision date.

11. Inquiries and Contact Information

If you have questions, concerns, or requests regarding this Privacy Notice or the processing of your personal data, please contact us via our email at cea@cealaw.my.