Privacy Policy

1. Data We Collect

We collect personal data that you provide directly to us, including:

• Contact details — full name, email address, phone number
• Matter-related information shared in consultations, correspondence, or documents
• Financial information required for billing purposes
• Technical data collected automatically via the website (IP address, browser type, pages visited)
• Cookie data, subject to your consent preferences

We collect this data when you submit an enquiry form, contact us directly, attend a consultation, or engage our services under a formal retainer.

2. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries and providing legal advice
• Conducting legal proceedings and related correspondence on your behalf
• Managing billing, invoicing, and payment records
• Maintaining conflict-of-interest checks
• Complying with legal and professional obligations under Malaysian law
• Improving our website and understanding how it is used (analytics cookies, where consented)

Legal basis for processing

Under the PDPA, our lawful basis for processing personal data is: (a) consent given voluntarily by you; (b) the performance of a contract for legal services; (c) compliance with our professional and legal obligations; and (d) our legitimate interest in providing and improving legal services. We retain personal data for as long as required by our professional obligations — typically seven years after a matter closes, unless a longer period is required by applicable law.

3. Data Sharing

We do not sell or rent your personal data. We share data only where necessary:

• With courts, tribunals, or mediators in connection with your matter
• With opposing counsel or parties where required by proceedings
• With service providers (e.g. secure document platforms) under confidentiality obligations
• With regulatory bodies such as the Malaysian Bar Council where required

We do not share personal data for marketing purposes or with third parties who are not involved in your matter without your explicit consent.

4. Data Protection Measures

• Encrypted email and document transfer platforms for client correspondence
• Access-controlled digital case management systems
• Physical files held in locked storage inaccessible to non-authorised personnel
• Staff bound by professional confidentiality obligations under the Legal Profession Act 1976
• Breach notification procedures in accordance with PDPA requirements

5. Cookies

Our website uses cookies to understand how visitors use it and to maintain basic functionality. You may manage cookie preferences via the cookie consent banner on our site or by visiting our Cookie Policy.

6. Your Rights

Under the PDPA, you have the right to:

• Access personal data we hold about you
• Request correction of inaccurate data
• Withdraw consent to marketing or non-essential data processing
• Request information about how your data is processed
• Lodge a complaint with the Personal Data Protection Commissioner of Malaysia

Note: Some rights may be limited where data is required for ongoing legal proceedings or to fulfil our professional obligations.

7. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing personal data.

8. Children's Privacy

Our services are directed at individuals who are 18 years of age or older. We do not knowingly collect personal data directly from persons under 18. If data concerning a child is relevant to your legal matter, it is processed only as required for those proceedings.

9. Policy Updates

We may update this policy periodically. The date at the top of this page reflects the most recent revision. Continued use of our services after a material change constitutes acceptance of the revised policy.

10. Contact

Data Controller: Warisan Advocates
47, Jalan Bangsar, 59100 Kuala Lumpur, Malaysia

For privacy enquiries: [email protected]