Privacy Policy

1. Personal Data We Collect

We collect personal data only when you provide it to us or when it arises in the course of providing legal services. The categories we collect include:

• Identity data: full name, MyKad or passport number (where required for legal filings)
• Contact data: email address, phone number, postal address
• Matter data: details about the estate or legal matter you bring to us
• Financial data: fee payment records (processed via our accounts system)
• Technical data: IP address, browser type, and pages visited (via cookies and analytics, with consent)

How we collect it:

• Directly from you via our website contact form, email, or telephone
• During in-person or video consultations
• From documents you provide as part of your matter (e.g., grant of probate, land title, bank statements)
• From courts, registries, and government agencies in the course of acting on your behalf

Legal basis for processing:

• Contract: processing necessary to provide the legal services you have engaged us for
• Legal obligation: compliance with Malaysian law, court rules, and Bar Council requirements
• Legitimate interests: responding to enquiries, improving our services, maintaining records
• Consent: marketing communications and analytics cookies (where you have opted in)

2. How We Use Your Data

• To provide and manage the legal services you have engaged us for
• To respond to enquiries submitted via our website or by telephone
• To prepare, file, and manage legal documents and court submissions on your behalf
• To issue invoices and manage payment records
• To comply with our obligations under the Legal Profession Act 1976 and related regulations
• To carry out conflict-of-interest checks before accepting a new matter
• To improve our website and services (using anonymised analytics data, with consent)
• To send you service-related updates relevant to your matter

Data sharing: We do not sell or rent personal data. We may share data with:

• Courts, registries, and government authorities (as required to conduct your matter)
• Amanah Raya Berhad or other statutory bodies where relevant
• Opposing counsel or mediators in dispute matters (only what is legally required)
• Accountants or surveyors acting as third-party experts on your matter (with your knowledge)
• Our secure cloud document storage provider (data processed under a data processing agreement)

3. How We Protect Your Data

• Client files are stored on password-protected systems with restricted staff access
• Physical documents are held in locked storage at our Jalan Semarak office
• Email communications are conducted over encrypted connections (TLS)
• Sensitive documents shared digitally are transmitted via secure, access-controlled file links
• Staff with access to client data are bound by confidentiality obligations under the Legal Profession (Practice and Etiquette) Rules
• In the event of a data breach affecting your personal information, we will notify you without undue delay as required by applicable law

Retention periods:

• Client matter files: retained for a minimum of 7 years after closure, in line with Bar Council guidance
• Enquiry data (non-clients): retained for up to 12 months, then deleted
• Website analytics data: retained for up to 26 months in aggregated form
• Accounting records: retained for 7 years as required by Malaysian tax law

4. Cookies

Our website uses cookies to function and, with your consent, to improve the experience. We use:

• Essential cookies: required for basic site functionality (session management, security)
• Analytics cookies: used to understand how pages are visited (enabled only with consent)
• Preference cookies: remember your cookie consent choice (enabled only with consent)

You can manage your cookie preferences at any time via our Cookie Policy page.

5. Your Rights

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you
• Right of correction: to request that inaccurate or incomplete data be corrected
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time (this does not affect the lawfulness of prior processing)
• Right to limit processing: to request that we restrict processing in certain circumstances
• Right to object: to object to processing carried out on the basis of legitimate interests

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days of receiving your request.

If you have concerns about how we handle your data, you may lodge a complaint with the Department of Personal Data Protection (JPDP) of Malaysia, the supervisory authority under the PDPA 2010.

6. Third-Party Links

Our website may contain links to external websites — for example, court portals, government registries, or professional body sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.

7. Children's Privacy

Our legal services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18 through this website. If you believe a minor has submitted personal data to us, please contact us and we will remove it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. If changes are material, we will make reasonable efforts to notify affected individuals. Continued use of our website after updates are posted constitutes acceptance of the revised policy.