Privacy Policy

1. Who We Are

The data controller is Pusaka Chambers, a law firm registered in Malaysia, located at:

G-5-8, Plaza Alam Sentral, Persiaran Perbandaran, 40000 Shah Alam, Selangor, Malaysia.

For data-related enquiries, contact: [email protected]

2. Information We Collect

We collect personal data in the following circumstances:

• When you complete a contact or enquiry form on this website (name, email, phone number, and any details you include in your message)
• When you engage us for legal services (additional information relevant to your estate matter, including identification documents, asset details, and family information)
• Through cookies and analytics when you browse our website (see Section 6)

We do not collect sensitive personal data unless strictly necessary for providing legal services, and we will obtain your explicit consent where required.

3. How We Use Your Information

Personal data is used for the following purposes:

• Responding to enquiries submitted through our website
• Providing legal advice and estate administration services
• Complying with our professional obligations as advocates and solicitors
• Sending communications relevant to an ongoing matter
• Improving our website through aggregated, anonymised analytics

We do not use your personal data for unsolicited marketing, and we do not sell or rent personal data to any third party.

Legal Basis for Processing

• Contract: processing necessary to deliver our legal services
• Consent: for analytics cookies and website enquiry forms
• Legitimate interest: for maintaining client records and communicating on active matters
• Legal obligation: where required by Malaysian law or our professional obligations

4. Data Retention

Website enquiry data is retained for up to 12 months unless a client engagement follows, in which case it forms part of the client file.

Client files, including estate matter records, are retained for a minimum of seven years following the conclusion of the matter, in line with legal professional requirements under Malaysian law. After this period, data is securely deleted or anonymised.

5. Data Protection Measures

• All electronic files are stored on password-protected systems with access limited to relevant staff
• Physical documents are kept in locked filing with restricted access
• We review access controls regularly and remove access promptly when staff roles change
• In the event of a data breach affecting your rights, we will notify you promptly in line with our obligations under the PDPA

6. Cookies

This website uses cookies to function correctly and to understand how it is used. Essential cookies are always active. Optional analytics and preference cookies are only placed with your consent, managed via the cookie banner.

For full details, please see our Cookie Policy.

7. Sharing Your Information

We do not share personal data with third parties except:

• Courts, government bodies, or counterparties where necessary to conduct your matter
• Third-party service providers who process data on our behalf under confidentiality obligations (for example, cloud storage or email providers)
• Where required by law or our professional regulatory obligations

We do not transfer personal data outside Malaysia without appropriate safeguards.

8. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent to processing at any time (where processing is based on consent)
• Request deletion of data where we no longer have a legal basis to retain it
• Object to processing in certain circumstances
• Lodge a complaint with the Department of Personal Data Protection Malaysia

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

9. Third-Party Links

This website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to read their policies separately.

10. Children

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe we have done so in error, please contact us and we will delete the data promptly.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be noted on this page with an updated date. Continued use of our website after changes are posted constitutes acceptance of the revised policy.