Privacy Policy

1. Personal Data We Collect

We collect personal data in the following ways:

Information you provide directly

• Contact enquiries: name, email address, phone number, and any details you include in your message when you use our contact form
• Client engagement: when you instruct us, we collect identity documents, details of the estate, details of family members involved, and other information necessary to provide legal services
• Correspondence: records of communications between you and our solicitors by email, telephone, or post

Information collected automatically

• Cookies and analytics: browsing data, pages visited, time spent, device type, and approximate location (see our Cookie Policy)
• Technical data: IP address, browser type, operating system, and referral source

Legal basis for processing (Malaysia)

We process personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. The legal bases we rely on include: your consent (where you have given it); the performance of a contract when you engage our services; our legitimate interests in operating our practice and improving our services; and compliance with legal obligations applicable to legal practitioners in Malaysia.

2. How We Use Your Personal Data

• To respond to your enquiry and arrange an initial consultation
• To provide and manage legal services you have engaged us to perform
• To communicate with you about the progress of your matter
• To comply with our professional obligations as solicitors under Malaysian law
• To maintain accurate client records and conflict-of-interest checks
• To improve the functionality of our website using aggregated, anonymised analytics data
• To send you service-related communications (we do not send marketing messages without your specific consent)

We do not sell, rent, or trade your personal data to third parties for commercial purposes.

3. Data Sharing with Third Parties

We share personal data only where necessary and in accordance with applicable law:

• Regulatory authorities: the Malaysian Bar, the High Court of Malaya, the Land Office, Amanah Raya, EPF, or other bodies as required in the course of your legal matter
• Other legal practitioners: solicitors or barristers instructed as co-counsel or to obtain specialist advice in your matter
• Service providers: IT and website service providers who process data on our behalf under confidentiality agreements
• Analytics: aggregated, anonymised data may be processed by analytics providers to help us understand website usage

All sharing is subject to strict confidentiality obligations and, where required by law, is conducted only with your knowledge or consent.

4. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with our professional and legal obligations:

• Client files: retained for a minimum of 7 years from the conclusion of the matter, in accordance with Malaysian Bar requirements
• Website enquiries (not leading to engagement): retained for up to 12 months
• Cookies and analytics data: retained for periods as described in our Cookie Policy, typically 13 months or less

Data is securely deleted or anonymised once the applicable retention period has expired.

5. Data Protection Measures

We take reasonable and appropriate measures to protect the personal data we hold:

• Website traffic is encrypted via HTTPS/TLS
• Access to client files is restricted to solicitors and staff with a direct role in the relevant matter
• Physical documents are stored securely with controlled access
• In the event of a personal data breach that is likely to affect individuals, we will notify the relevant authority and affected individuals in accordance with the PDPA 2010 and applicable guidelines

6. Cookies

Our website uses cookies to function correctly and to help us understand how visitors use the site. For full details of the cookies we use, their purposes, and how to manage your preferences, please read our Cookie Policy.

7. Your Rights Under the PDPA 2010

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to the personal data we hold about you:

• Access: you may request a copy of the personal data we hold about you
• Correction: you may ask us to correct inaccurate or incomplete personal data
• Withdrawal of consent: where processing is based on your consent, you may withdraw it at any time (this does not affect the lawfulness of processing before withdrawal)
• Objection to direct marketing: you may ask us to stop using your data for any direct marketing purposes
• Enquiry and complaint: you may direct complaints about our handling of personal data to the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my

To exercise any of the above rights, please write to us at [email protected]. We will respond within 21 days of receiving your request.

Please note that certain rights may be subject to limitations where data must be retained for legal professional or regulatory purposes.

8. Links to Third-Party Websites

Our website may contain links to external websites, including government portals and regulatory bodies. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policy of any external site you visit.

9. Minors

Our website and services are directed at adults (aged 18 and over). We do not knowingly collect personal data from individuals under the age of 18. If a minor's personal data is provided in the context of a legal matter (for example, as a beneficiary), it is handled with the same care and under the same protections as all other personal data.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The revised policy will be posted on this page with an updated "Last Updated" date. We encourage you to review this page periodically. Your continued use of our website after any update constitutes acceptance of the revised terms.

11. Contact Us About Privacy

If you have any questions or concerns about this Privacy Policy or the way we handle your personal data, please contact our data privacy contact: