Privacy Policy

1. Data Controller

The data controller for personal information collected through this website is pelangilawina, No. 42, Jalan Bangsar, 59200 Kuala Lumpur, Malaysia. For data-related enquiries, contact us at [email protected].

2. What Personal Data We Collect

We collect personal data in the following ways:

• Contact form submissions: name, email address, phone number (optional), and any information included in your message.
• Direct communications: emails and telephone enquiries sent to the firm.
• Website analytics: anonymised browsing data collected through analytics tools (page views, session duration, device type). This data does not identify individual users.
• Cookies: session and preference cookies are used to maintain website functionality. See the Cookie Policy for details.

3. Legal Basis for Processing

We process personal data on the following grounds under the PDPA 2010:

• Consent: when you submit a contact form or enquiry to the firm.
• Legitimate interests: for analytics and website improvement that do not override your fundamental rights.
• Contract: where processing is necessary to provide legal services you have engaged us for.
• Legal obligation: where we are required to retain or report information under Malaysian law, including the Legal Profession Act 1976 and anti-money laundering obligations.

4. How We Use Your Personal Data

Personal data collected through this website is used for the following purposes:

• Responding to enquiries submitted through the contact form or by email
• Assessing and managing legal matters where an engagement is established
• Improving website content and user experience using anonymised analytics data
• Complying with professional and legal obligations applicable to legal practitioners in Malaysia

We do not use personal data collected through this website for marketing purposes without your explicit consent.

5. Data Sharing

We do not sell, rent, or trade personal data. Data may be shared in the following limited circumstances:

• Service providers: third-party providers who support website hosting, email, and analytics (bound by data processing agreements).
• Legal and regulatory authorities: where required by law or court order under Malaysian jurisdiction.
• Professional obligations: as required under the Legal Profession Act 1976, including conflict checks.

6. Data Retention

Enquiry data from contact form submissions is retained for 12 months from the date of submission, unless a legal engagement is established — in which case retention periods follow our professional obligations under Malaysian legal practice rules. Client matter files are retained for a minimum of 7 years after the conclusion of the matter, consistent with limitation periods under Malaysian law. Anonymised analytics data is retained in aggregated form.

7. Data Security

We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission (HTTPS), access controls on internal systems, and regular review of data handling practices. In the event of a data breach affecting personal data, affected individuals will be notified as required under applicable Malaysian law.

8. Cookies

This website uses cookies to support basic functionality and, where consent is given, to collect analytics data. You can manage cookie preferences at any time. For detailed information, see our Cookie Policy.

9. Your Rights Under the PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:

• Right to access: request a copy of the personal data we hold about you.
• Right to correction: request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: withdraw consent to processing where consent is the legal basis, without affecting the lawfulness of prior processing.
• Right to limit processing: request that we cease or restrict processing of your personal data in certain circumstances.
• Right to complain: lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your data has been processed unlawfully.

To exercise any of these rights, contact us at [email protected].

10. Third-Party Links

This website may contain links to third-party websites. pelangilawina is not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external website you visit.

11. Children's Privacy

This website is directed at businesses and adults. We do not knowingly collect personal data from individuals under 18 years of age. If you believe a minor has submitted personal data through this website, please contact us so that we can take appropriate steps.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. The date at the top of this page indicates when the policy was last revised. Continued use of this website after any update constitutes acceptance of the revised policy.