How we handle your data

Last updated: 1 November 2026

This notice explains what happens to personal data submitted through this website (forms, pop-ups, the "Schedule a call" and "Get started" flows, the forms for our free downloadable guides, the deadline calendar, "Email me this result" on our calculators, and the sign-up for our tips), to information collected by cookies on it, and to data in the Synco app for iPhone (see "The Synco app"). It's processed in accordance with the Personal Data Protection Act 2010, as amended.

Who's responsible for your data

As explained in the footer of every page, "Synco" is a shared brand used by two separate service providers, Shukri Yusof & Co. (MIA Firm No. NF1688) and EMSY Sdn. Bhd. (Company No. 201801014288). Whichever of the two you're enquiring about is the data controller for that submission — for example, an incorporation or accounting enquiry is controlled by Shukri Yusof & Co., while an HR/payroll or emsy enquiry is controlled by EMSY Sdn. Bhd. Requests for our free guides on accounting, tax, audit and company compliance, deadline calendar subscriptions, calculator results sent by email, the monthly payment reminders, sign-ups for our tips, and the Synco app are controlled by Shukri Yusof & Co.

Our data protection officer for both providers is Muhamad Shukri Yusof. You can reach him at hello@synco.my (subject: "Data protection").

What we collect

Depending on which form or pop-up you use, this can include:

• Name, company name, email address, and phone number
• The service you're asking about, and any answers given in a qualifying question
• For "Schedule a call": your preferred date and time for a call
• Any free-text message you choose to include
• For our free guides: your business type, annual revenue band, financial year-end month, the language of the page, and a record of the consent you gave (its wording and time)
• For the deadline calendar: your email address, financial year-end month, incorporation date, SST taxable period, whether the company has employees, the language of the page, and a record of the consent you gave
• For "Email me this result" on our calculators: your email address, which calculator you used, the language of the page, and whether you asked for the monthly payment reminder or our tips. The answers you enter (such as a salary) are used only to work out the result in the email and are not kept
• For our tips (the sign-up in the footer, after blog articles, or a box on another form): your email address, the page you signed up on, the language, and a record of the consent you gave
• If you arrived from one of our advertisements, the campaign and advert you came from (taken from the link)
• If cookies are enabled on the site (see "Cookies and advertising"): device and browser information, pages visited, and whether you sent a form

What we use it for

Responding to your enquiry, preparing a quotation, confirming or rescheduling a requested call, sending you a guide you asked for, sending the deadline calendar and the reminders you subscribed to, emailing a calculator result you asked for and the monthly payment reminders you subscribed to, and — if you go on to engage us — administering that engagement. With your consent, we also send you emails about accounting, tax and company compliance (see "Marketing emails"), and we measure which of our advertisements bring enquiries. We don't sell your data, and we don't use it for purposes unrelated to the ones described here.

Marketing emails

When you download a guide, subscribe to the deadline calendar or ask for a calculator result by email, you can agree, in a separate box, to receive emails from Synco about accounting, tax and company compliance, including an offer of a free review session. We send these only if you have ticked the consent box, and no more than one email a week. Every marketing email has an unsubscribe link, and you can also withdraw your consent at any time by replying to any email or contacting us. Unsubscribing does not affect emails about an enquiry or engagement you have with us. Deadline reminders you subscribe to are not marketing emails: they are sent only for the dates you asked for, each has an unsubscribe link, and unsubscribing stops the reminders and your calendar link. The same is true of the monthly payment reminders from our calculators. You can also sign up for these emails on their own, in the footer of every page or after a blog article; you are added only after you confirm your email address.

Cookies and advertising

This site may use cookies and similar technologies from Meta (the Meta Pixel) and Google (Google Analytics and Google Ads). They record visits to our pages and, for our guides, that a form was sent, so we can measure and improve our advertising on Facebook, Instagram and Google Search and understand how the site is used. The information is processed by Meta Platforms and Google, including on servers outside Malaysia, under their own privacy policies. We do not send them your name, email address or phone number. You can block or delete cookies in your browser settings, and manage how Meta and Google use your data for advertising in your Facebook or Instagram ad settings and your Google ad settings.

The Synco app

The Synco app for iPhone ("Synco Malaysia" on the App Store) is for clients of Shukri Yusof & Co. You sign in with an account our firm sets up for your company; the app has no sign-up of its own. When you use it, we process:

• Your sign-in email address and the company your account belongs to
• Photos of receipts and other documents you take with the camera or upload, and the details you enter with them: amount, date, cash or bank, money in or out, and category
• Messages you send us in Inbox, and the documents and deadlines we share with you
• A push notification token for your phone, so we can tell you about new messages and deadlines (you can turn notifications off in your iPhone settings)

The camera is used only when you tap to take a photo. If you are offline, what you save stays on your phone until it can be uploaded, and is not deleted automatically. The app has no payments and no advertising, and we do not use what you send for marketing. We use it to do the accounting, tax and company secretarial work you engaged us for. Our staff may use an AI service (Anthropic) to read bank statements and receipts you send, and check what it reads against the original.

To close your app account, or to ask what we hold, email hello@synco.my (subject: "Data protection"). Closing the account stops access to the app; records we must keep by law for your company's accounts and filings are kept for as long as the law requires.

Who we share it with

We use service providers to run this website and handle your data on our behalf: website hosting (Cloudflare), our database (Supabase, servers in Singapore), our email service provider, and, for advertising measurement, Meta and Google. For the Synco app, our client platform's database and file storage (Supabase), Apple (push notifications) and Anthropic (reading documents for our staff). Some of these providers store data outside Malaysia. We share only what each one needs, and we do not sell your data. Your enquiry goes only to the Synco entity responsible for it.

How long we keep it

We keep enquiry, guide-request, calculator-result and sign-up records for 24 months after our last contact with you, unless you become a client, in which case the retention terms of the engagement apply. Records of marketing consent and withdrawals are kept for as long as needed to show we respected your choice.

Your rights

Under the PDPA, you can ask to access, correct, or limit how your data is processed, and you can withdraw your consent to marketing emails at any time. You can also ask for a copy of the data you gave us in a commonly used format, or for it to be sent to another organisation where that is technically feasible. To do this, or with any other privacy question, contact our data protection officer at hello@synco.my, or use the contact form or WhatsApp — please specify which service your original enquiry was about, so we can route it to the right entity.

This is a general notice covering the website's forms, pop-ups and cookies, and the Synco app. It doesn't replace the specific data-handling terms in an engagement letter, where one applies.