Privacy Policy

What personal data we collect

We may collect the following categories of personal data:

• Contact information: name, email address, phone number, and postal address
• Matter information: details you share about your legal situation in consultations, correspondence, or forms
• Technical data: IP address, browser type, and pages visited (collected via cookies where consent is given)
• Communication records: emails, messages, and notes from meetings

We collect this data through: contact forms on this website, email and telephone communication, and in-person consultations. We do not collect data from third-party sources without your knowledge.

Legal basis for processing

We process personal data on the following bases under the PDPA:

• Consent: where you have submitted a contact form or agreed to receive communications
• Contract: where processing is necessary to deliver the legal service you have engaged us for
• Legal obligation: where we are required by law to retain or process certain data
• Legitimate interest: to respond to enquiries and improve our services, where this does not override your rights

How we use your data

We use personal data for the following purposes:

• To respond to enquiries and schedule appointments
• To deliver legal services you have instructed us to perform
• To maintain records of communications and advice provided
• To comply with legal and professional obligations (including Bar rules)
• To improve this website where analytics data is collected with consent

We do not use your personal data for unsolicited marketing. We do not sell or rent your data to third parties. If you have asked that no follow-up contact be made after a consultation, that preference is recorded and respected.

Data retention

Retention periods vary depending on the nature of the data:

• Client matter files: retained for a minimum of seven years from the close of the matter, as required by professional rules
• Consultation notes (Quiet Consultation, no further action): retained for two years from the date of the appointment
• Contact form submissions (no matter opened): retained for twelve months
• Website analytics data: retained for up to twenty-six months where consent is given

Data sharing

We do not share your personal data with third parties except in the following limited circumstances:

• Where you have instructed us to correspond with another party or their solicitor on your behalf
• Where disclosure is required by law, court order, or by the rules of the Malaysian Bar
• With website hosting and analytics service providers who process data on our behalf under data processing agreements
• Where you have given explicit consent for a specific sharing purpose

In all cases, data is shared only to the minimum extent necessary.

Data protection measures

We take reasonable steps to protect personal data from unauthorised access, loss, or misuse, including:

• Secure storage of physical client files with restricted access
• Password-protected digital files with access limited to authorised staff
• Encrypted email communications where sensitive data is shared electronically
• Regular review of data handling practices

In the event of a personal data breach affecting your rights, we will notify you and the relevant authority in accordance with PDPA requirements.

Cookies

This website uses cookies to understand how it is used and to remember your preferences. Essential cookies are required for the site to function. Analytics and preference cookies are only used where you have given consent. For full details, see our Cookie Policy.

Your rights under the PDPA

Under the Personal Data Protection Act 2010, you have the following rights in relation to your personal data held by us:

• Right to access: to request a copy of the personal data we hold about you
• Right to correction: to request that inaccurate or incomplete data be corrected
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time
• Right to limit processing: in certain circumstances, to request that we stop using your data
• Right to be informed: to understand how your data is being used, which this policy addresses

To exercise any of these rights, write to [email protected]. We will respond within 21 days. If you believe we have not complied with the PDPA, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).

Third-party links

This website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend that you read their privacy policies separately.

Children's privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from persons under 18. If you believe we have inadvertently received data from a minor, please contact us and we will delete it promptly.

Changes to this policy

We may update this policy from time to time. When we do, the revised date at the top of this page will be updated. We recommend checking this page periodically. Continued use of our services after a change constitutes acceptance of the updated policy.