Privacy Policy

2. Data We Collect

We may collect the following categories of personal data:

• Identity data: full name
• Contact data: email address, telephone number, postal address
• Matter data: details of your employment situation or legal query as shared in consultations or correspondence
• Technical data: IP address, browser type, pages visited, and session data collected via analytics cookies (if consented)
• Communications data: the content of emails or messages you send us

We do not collect sensitive personal data such as financial account numbers or identity card numbers unless specifically required for a legal matter and with your knowledge.

3. Legal Basis and Purpose

Under the PDPA 2010, we process your personal data on the following grounds:

• Performance of a contract: to provide legal services you have engaged us for
• Compliance with a legal obligation: professional conduct rules and record-keeping requirements applicable to legal practitioners in Malaysia
• Legitimate interests: to respond to enquiries, manage our client relationships, and improve our services
• Consent: for marketing communications and non-essential analytics cookies, where you have opted in

We use your data to respond to initial enquiries, deliver legal advice and representation, maintain required professional records, and — if you have consented — to send relevant updates about employment law changes.

4. Data Retention

We retain personal data only as long as necessary for the purpose for which it was collected. For client matter files, we retain records for a minimum of seven years following closure of the matter, in line with standard legal practice in Malaysia. Enquiries that do not proceed to engagement are retained for 12 months and then deleted.

5. Disclosure to Third Parties

We do not sell or rent personal data. We may share data with:

• Courts, tribunals, or regulatory bodies where required by the conduct of legal proceedings or by law
• Opposing parties or their legal representatives, to the extent required by the legal matter
• Website hosting and analytics service providers who act as our data processors under data processing agreements
• Our professional indemnity insurers, where a complaint or claim arises

Any third-party service providers are required to handle data in accordance with our instructions and applicable law.

6. Data Protection Measures

We maintain reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. These include password-protected matter management systems, encrypted email communications for sensitive client correspondence, restricted access to client files, and regular review of security practices. In the event of a data breach affecting your rights or freedoms, we will notify you as required by applicable law.

7. Cookies

Our website uses essential cookies necessary for the site to function, and optional analytics cookies that help us understand how visitors use the site. You can manage your cookie preferences at any time via our Cookie Policy page. Essential cookies cannot be disabled as they are required for basic functionality.

8. Your Rights Under the PDPA 2010

As a data subject under Malaysian law, you have the following rights:

• Right of access: to request a copy of personal data we hold about you
• Right of correction: to request correction of inaccurate or incomplete data
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time (this does not affect processing already carried out)
• Right to limit processing: in certain circumstances, to request that we restrict how we use your data
• Right to complain: to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights have been violated

To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable time and in accordance with our obligations under the PDPA 2010.

9. Third-Party Links

Our website may contain links to external sites, including government resources such as the Ministry of Human Resources Malaysia. We are not responsible for the privacy practices of those sites. We encourage you to read their respective privacy policies.

10. Children's Privacy

Our services are intended for adults. We do not knowingly collect personal data from individuals under 18 years of age. If you believe a minor has provided us with personal data, please contact us and we will take appropriate steps.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted on this page with an updated date. Continued use of our website or services after any changes constitutes acceptance of the updated policy.

12. Contact

For data protection enquiries, please contact: