Privacy Policy

1. Information We Collect

We collect personal information in the following ways:

1.1 Information You Provide Directly

• Your name, email address, and telephone number (provided via our contact form or by telephone)
• The nature of your enquiry or matter, as you choose to share it
• Further personal and estate-related information shared in the course of our legal engagement

1.2 Information Collected Automatically

• Browser type, device information, and IP address when you visit our website
• Pages visited and approximate session duration via analytics cookies (where consent has been provided)

2. Legal Basis for Processing

We process personal data on the following bases:

• Contract: To provide the legal services you have engaged us for
• Legitimate interest: To respond to enquiries and maintain records in a way consistent with running a legal practice
• Consent: For non-essential cookies and marketing communications, where you have given consent
• Legal obligation: Where required under Malaysian law, including the Legal Profession Act 1976 and the Personal Data Protection Act 2010 (PDPA)

3. How We Use Your Information

• To respond to your enquiry and provide the legal services you have requested
• To communicate with you about your matter, including updates on progress
• To maintain accurate and complete records as required by professional obligations
• To improve the functionality and content of our website, using aggregated and anonymised data where possible
• To comply with legal and regulatory requirements

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. How We Protect Your Information

• Physical files are stored securely in our Bukit Bintang office, accessible only to relevant staff
• Digital records are held on encrypted systems with access controls
• Our website uses HTTPS encryption for all data transmitted via our contact form
• In the event of a data breach that may affect your rights, we will notify you promptly and take remedial action

5. How Long We Retain Data

Retention periods depend on the nature of the relationship:

• Client matter files: Retained for a minimum of seven years following the close of the matter, as required by professional guidelines
• General enquiries: Retained for up to twelve months unless the enquiry leads to an engagement
• Website analytics: Aggregated data retained for up to twenty-four months

6. Cookies

Our website uses cookies to support basic site functions and, where consent is given, to understand how the site is used. Essential cookies are always active. Analytics and other optional cookies are only placed with your agreement. Please see our Cookie Policy for full details and controls.

7. Your Rights Under Malaysian Law

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the right to:

• Access personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent for processing based on consent (this does not affect processing already carried out)
• Limit or object to certain uses of your data
• Lodge a complaint with the Department of Personal Data Protection (Jabatan Perlindungan Data Peribadi), Malaysia

To exercise any of these rights, please write to us at [email protected]. We will respond within a reasonable timeframe.

8. Third-Party Links and Services

Our website may contain links to external websites. We are not responsible for the privacy practices of third-party sites. We may use service providers (such as web hosting and analytics services) who process data on our behalf under appropriate agreements. We do not transfer personal data outside Malaysia without appropriate safeguards.

9. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have done so, we will take steps to delete it promptly.

10. Updates to This Policy

We review this policy periodically and may update it to reflect changes in our practices or legal requirements. When we do, the revised date at the top of this page will be updated. Continued use of our website or services after any update constitutes acceptance of the revised policy.