Privacy Policy

1. Data Controller

The data controller for personal information collected through this website and in connection with our services is:

Our practice is conducted in accordance with Malaysian law, including the Personal Data Protection Act 2010 (PDPA). Where relevant, we also refer to internationally recognised principles of personal data protection.

2. Data We Collect

We collect personal data only when it is necessary to provide our services or to respond to enquiries. The types of data we may collect include:

• Contact information: Name, email address, telephone number — provided via our website contact form or during an engagement.
• Matter-related information: Details about your estate, family circumstances, or assets — shared during consultations or in correspondence. This information is subject to strict legal professional privilege.
• Technical data: IP address, browser type, pages visited — collected automatically when you visit our website. This data is used in aggregate form and is not linked to identifiable individuals unless required for security purposes.
• Cookie data: Browser preferences and consent records. See Section 6 and our Cookie Policy for details.

We do not collect sensitive categories of data (such as financial account details or identity documents) through our website. Such information, if required for a legal engagement, is collected and handled under separate, documented arrangements.

3. How and Why We Use Your Data

We use personal data only for the purposes for which it was provided or for which we have a legitimate basis under the PDPA:

• To respond to enquiries: Contact details are used to reply to messages sent via the website form or email.
• To deliver legal services: Information shared during an engagement is used solely in connection with that engagement, in accordance with our professional obligations.
• To maintain records: We retain records of completed engagements in line with professional obligations under Malaysian law and Bar Council requirements.
• For website improvement: Anonymised technical data is used to understand how the website is used and to improve its content.

We do not sell personal data. We do not use personal data for direct marketing without explicit consent. We do not share personal data with third parties except as described below.

4. Data Sharing

Personal data may be shared with third parties only in the following circumstances:

• Relevant authorities: Courts, the National Land Registry, government agencies, or financial institutions — only when required as part of a legal engagement and with the client's knowledge.
• Service providers: Technical providers (such as website hosting) who process data only under our instruction and in accordance with our data handling standards.
• Legal obligation: Where disclosure is required by law or by a court order in Malaysia.

5. Data Retention

We retain client matter files for a minimum of seven years after completion of an engagement, in accordance with Bar Council guidelines and Malaysian legal requirements. Contact enquiries that do not result in an engagement are retained for twelve months and then deleted. Technical website data is retained for no longer than twenty-four months in aggregate form.

6. Cookies

Our website uses cookies to enable basic functionality and to understand how visitors use the site. We do not use cookies to track individuals across other websites. You can manage your cookie preferences at any time via our Cookie Policy page. Essential cookies cannot be disabled as they are required for the site to function.

7. Your Rights

Under the Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may request that inaccurate or incomplete data be corrected.
• Withdrawal of consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect processing carried out before that point.
• Objection to processing: In certain circumstances, you may object to how your data is being used.
• Complaint: If you believe your data has been mishandled, you may contact the Personal Data Protection Commissioner of Malaysia.

To exercise any of these rights, please write to us at [email protected]. We will respond within a reasonable period and in accordance with our obligations under the PDPA.

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those websites and encourage you to review their policies independently. A link from our site does not constitute an endorsement of that site's data practices.

9. Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18 directly through this website. If you believe a minor's data has been submitted without appropriate consent, please contact us and we will take appropriate steps.

10. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Client matter files are stored securely, access is restricted to authorised personnel, and electronic communications containing personal data are handled with appropriate care. In the event of a personal data breach affecting your information, we will notify you as required by applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The most recent version will always be available on this page, with the "Last Updated" date revised accordingly. Where a change is material, we will take reasonable steps to inform existing clients.

12. Contact for Privacy Matters

For any questions or requests relating to this Privacy Policy or to your personal data, please contact us: