Data Protection Notice (PDPA & GDPR)

Last Updated: 27th October 2026

This notice explains how SZL Capital Sdn. Bhd. (“SZL Capital”, “we”, “us” or “our”) handles personal data under the Personal Data Protection Act 2010 of Malaysia (as amended, the “PDPA”) and, where it applies to you, the EU and UK General Data Protection Regulation (“GDPR”). It supplements our Privacy Policy.

1. Data User / Controller

SZL Capital Sdn. Bhd., A1-13-16, Arcoris Business Suites, 10 Jalan Kiara, Mont Kiara, 50480 WP Kuala Lumpur, Malaysia. Contact: admin@szlcapital.com. We have not appointed a Data Protection Officer or EU/UK representative; data protection enquiries are handled at the address above.

2. Personal Data, Purposes and Legal Bases

• Enquiries and communications (name, email, phone, company, message): to respond to you. PDPA: your consent given by contacting us. GDPR: legitimate interests / steps at your request.
• Business relationships (professional details and information you share about a proposed collaboration): to assess and manage opportunities. PDPA: consent and necessity for entering a contract. GDPR: legitimate interests / pre-contract steps.
• Website operation and security (IP address, device and browser data, cookies): to run and protect the Website. GDPR: legitimate interests. PDPA: consent by using the Website.
• Legal and regulatory compliance: to meet legal obligations and handle claims. Legal obligation / legal claims.

Providing personal data is voluntary, but we may be unable to respond to you if you do not provide the information we reasonably need.

3. Principles We Follow

We apply the seven PDPA principles (General; Notice and Choice; Disclosure; Security; Retention; Data Integrity; Access) and the GDPR principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability.

4. Sharing and International Transfers

We share personal data only with professional advisers, service providers (for example Website hosting and email), affiliates and business partners relevant to your enquiry, and authorities where legally required. Data may be processed outside Malaysia. Where the GDPR applies, we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision; where the PDPA applies, we transfer data only as permitted by it.

5. Retention

We keep personal data only as long as necessary for the purposes above or as required by law, and then delete or anonymise it. Enquiry correspondence is generally kept for no longer than needed to deal with your enquiry and any resulting relationship, subject to legal retention requirements.

6. Your Rights

Under the PDPA you may: access your personal data; request correction; withdraw consent; and limit or prevent processing likely to cause damage or distress or for direct marketing.

Under the GDPR you may also: request erasure; restrict processing; object to processing based on legitimate interests; receive your data in a portable format; and not be subject to solely automated decisions with legal effect. Where processing relies on consent, withdrawal does not affect earlier processing.

To exercise your rights, email admin@szlcapital.com. We may need to verify your identity. We aim to respond within 21 days (PDPA) or one month (GDPR). A reasonable fee may apply to PDPA access requests.

7. Security and Breaches

We use reasonable technical and organisational measures to protect personal data. If a data breach is likely to cause significant harm, we will notify the affected individuals and the relevant authority as required by law.

8. Complaints

Please contact us first and we will try to resolve your concern. You may also complain to the Personal Data Protection Commissioner of Malaysia (Jabatan Perlindungan Data Peribadi, www.pdp.gov.my) or, if you are in the EU/UK, to your local data protection supervisory authority.

9. Changes

We may update this notice from time to time. The current version will always be on this page.

10. Notis Perlindungan Data (Bahasa Malaysia)

SZL Capital Sdn. Bhd. memproses data peribadi anda mengikut Akta Perlindungan Data Peribadi 2010 dan, jika terpakai, GDPR. Data peribadi dikumpul untuk menjawab pertanyaan, menguruskan hubungan perniagaan, mengendalikan laman web dan mematuhi undang-undang, dan mungkin didedahkan kepada penasihat profesional, penyedia perkhidmatan, ahli gabungan dan pihak berkuasa, termasuk di luar Malaysia. Anda berhak mengakses dan membetulkan data anda, menarik balik persetujuan, serta (di bawah GDPR) meminta pemadaman dan memindahkan data. Sila hubungi admin@szlcapital.com. Aduan juga boleh dikemukakan kepada Pesuruhjaya Perlindungan Data Peribadi Malaysia. Jika terdapat percanggahan, versi Bahasa Inggeris akan diguna pakai.