Privacy Policy

1 Data Controller

The data controller for personal information collected through this website is:

• Business name: Adil Kasih
• Address: 24, Jalan Anderson, 30300 Ipoh, Perak, Malaysia
• Telephone: +60 5-528 7194
• Email: [email protected]

Any questions about this policy or your personal data may be directed to the above contact details.

2 Personal Data We Collect

We collect personal data only where it is necessary for the purposes described in this policy. The categories of data we may collect include:

• Contact data: your full name, email address, and telephone number, provided when you submit our enquiry form or contact us directly.
• Correspondence data: details of your matter as included in messages you send to us.
• Usage data: anonymised information about how pages on this website are accessed, collected through analytics tools. This data does not identify you individually.
• Cookie data: preferences stored in your browser relating to your cookie consent choices. See Section 6 and our Cookie Policy for details.

We do not collect sensitive personal data (such as information about health, religion, or criminal history) through this website. Where such information is relevant to a legal matter you engage us on, it will be handled under a separate retainer agreement with appropriate confidentiality obligations.

3 How and Why We Use Your Data

We process personal data for the following purposes and on the following legal bases under the PDPA 2010:

• Responding to enquiries — to reply to messages submitted through our website or by telephone. Legal basis: legitimate interest and your consent in making contact.
• Providing legal services — where you engage us, to deliver the services agreed and comply with our professional obligations. Legal basis: performance of a contract.
• Website analytics — to understand how visitors use our website so that we can improve it. Legal basis: legitimate interest (anonymised data only).
• Legal compliance — to comply with obligations under Malaysian law, including the Legal Profession Act 1976 and applicable Bar Council rules. Legal basis: compliance with a legal obligation.

We do not use your personal data for direct marketing without your express consent, and we do not sell personal data to third parties.

4 Data Retention

We retain personal data only for as long as is necessary for the purpose for which it was collected:

• Enquiry data (no engagement): up to 12 months from the date of your last contact.
• Client matter data: 7 years following conclusion of the matter, in accordance with the Limitation Act 1953 and Bar Council guidelines.
• Analytics data: retained in aggregated, anonymised form and not subject to individual retention limits.

After the applicable retention period, personal data is securely deleted or anonymised.

5 Third Parties and Data Sharing

We do not share your personal data with third parties except in the following circumstances:

• Service providers: we may engage trusted third-party providers (such as web hosting and analytics services) who process data on our behalf under confidentiality obligations.
• Legal obligation: we may disclose data where required by law, court order, or the direction of a regulatory authority.
• With your consent: in any other circumstance, only with your prior agreement.

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend that you review their policies independently.

6 Cookies

This website uses cookies to support basic functionality and, where you consent, to enable analytics. You may manage your cookie preferences at any time through our Cookie Policy page.

• Essential cookies: required for the site to function. Cannot be disabled.
• Analytics cookies: used to understand visitor behaviour in anonymised form. Only placed with your consent.

7 How We Protect Your Data

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• Encrypted transmission (HTTPS) for all data sent to and from this website.
• Access controls limiting who within our practice can view personal data.
• Regular review of our data handling practices.

In the event of a data breach that is likely to cause harm, we will notify affected individuals and, where required, the relevant authority in accordance with the PDPA 2010.

8 Your Rights

Under the Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:

• Right of access: to request a copy of the personal data we hold about you.
• Right of correction: to ask us to correct inaccurate or incomplete personal data.
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to limit processing: to request that we restrict the use of your data in certain circumstances.
• Right to make a complaint: to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights have not been respected.

To exercise any of these rights, please contact us at [email protected] or at the address in Section 1. We will respond within 21 days.

9 Children's Privacy

This website is intended for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a minor has submitted data to us, please contact us and we will remove it promptly.

10 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of the website after any change constitutes acceptance of the revised policy. We recommend reviewing this page periodically.