Privacy Policy

1. Who we are

The data controller for this website and our services is:

2. Personal data we collect

When you contact us through this website, by telephone, or by email, we may collect:

• Your name
• Email address
• Telephone number (if provided)
• The content of your enquiry or message
• Pension-related documents and information you share with us in the course of a matter

We also collect limited technical data automatically when you visit our website, including IP address, browser type, and pages visited. This is used only for the purposes of maintaining and improving the website.

Legal basis for processing

Under the PDPA 2010, we process personal data on the following bases: (a) your consent, given when you submit a contact form or enquiry; (b) the performance of a contract, where you have engaged us for legal services; and (c) our legitimate interest in responding to enquiries and maintaining our practice.

Retention periods

General enquiry data is retained for 12 months. Client matter data is retained for 7 years following the close of a matter, in line with standard legal practice obligations. After these periods, data is securely deleted or anonymised.

3. How we use your information

We use the personal data you provide to:

• Respond to your enquiry and assess whether we are able to assist
• Provide legal services where you have engaged us
• Communicate with you about your matter and relevant updates
• Meet our legal and professional obligations as a law firm
• Maintain records as required by professional conduct rules

We do not use your personal data for marketing purposes without your explicit consent, and we do not sell or share your data with third parties for commercial purposes. We may share data where required by law or by a court order.

4. Data protection measures

We take reasonable technical and organisational steps to protect your personal data, including:

• Secure storage of client files with restricted access
• Staff awareness of confidentiality and data protection obligations
• Use of password-protected systems for digital records
• HTTPS encryption on this website

In the event of a data breach that affects your rights, we will notify you and the relevant authority as required under applicable Malaysian law.

5. Cookies

This website uses cookies to support its basic functions. Optional analytics and preference cookies require your consent, which is managed through the cookie banner when you first visit. For full details, see our Cookie Policy.

6. Your rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Withdraw consent for processing based on consent (this does not affect processing already carried out)
• Object to processing for certain purposes
• Lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia

To exercise any of these rights, contact us at [email protected]. We aim to respond to data requests within 21 days.

7. Third-party links

This website may contain links to external sites. We are not responsible for the privacy practices or content of those websites. We recommend reviewing their privacy policies before providing any personal information.

8. Children's privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted information through this website, please contact us so that we can remove it promptly.

9. Changes to this policy

We may update this policy from time to time. Any significant changes will be noted at the top of this page with a revised date. Continued use of this website after changes take effect constitutes acceptance of the updated policy.

10. Contact for privacy matters

For any questions about this policy or to exercise your data rights: