Privacy Policy

1. Introduction

Amanah Legal ("we," "us," "our") is committed to protecting your personal information and handling it with care. This Privacy Policy explains how we collect, use, store, and protect information provided to us through this website and through our legal services. Our practice is based at Level 12, Menara See Hoy Chan, 374 Jalan Tun Razak, 50400 Kuala Lumpur, Malaysia.

We process personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. By using this website or engaging our services, you confirm that you have read and understood this policy.

2. Data We Collect

We collect personal information when you:

• Submit an enquiry through our website contact form
• Telephone or email us directly
• Attend an initial consultation or engage our services
• Browse our website (analytics data only)

The categories of personal data we may collect include:

• Your name and contact details (email, phone number)
• The nature of your legal enquiry (in general terms through the website form)
• Detailed personal and financial information shared during legal representation (governed by legal professional privilege)
• Website usage data collected through analytics tools (anonymised)

We do not request sensitive personal data through our website contact form. Any sensitive information shared in the context of a legal engagement is protected by legal professional privilege and handled under our strict internal confidentiality protocols.

3. How We Use Your Data

We use the information you provide for the following purposes:

• Responding to your enquiry and scheduling an initial consultation
• Conducting conflict of interest checks before accepting a matter
• Providing legal services as agreed in the engagement letter
• Maintaining accurate records required by professional obligations
• Improving the content and functionality of our website (anonymised analytics only)

We do not use your personal data for marketing communications. We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

4. Legal Basis for Processing

Under the PDPA 2010, we process your personal data on the following bases:

• Consent: You submit the website contact form voluntarily, and by doing so you consent to us contacting you in response.
• Contract: Once we enter an engagement with you, processing is necessary to fulfil that legal services agreement.
• Legitimate Interests: We may process certain data for conflict-checking and file management, which are necessary for us to operate a compliant legal practice.
• Legal Obligation: Certain record-keeping requirements apply to legal practitioners under Malaysian law.

5. Data Retention

Enquiry data from the website contact form is retained for 12 months from the date of submission if no engagement follows. Client matter files are retained for a minimum of seven years following conclusion of the matter, in compliance with professional obligations under the Legal Profession Act 1976. Anonymised website analytics data is retained in accordance with the applicable analytics service terms.

6. Data Protection Measures

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. These include:

• Access to client files restricted to practitioners directly involved in the matter
• Secure document storage for physical files held at our premises
• Password-protected systems for electronic records
• Staff awareness of confidentiality obligations

In the event of a data breach affecting your personal data, we will notify you in accordance with our obligations under applicable Malaysian law.

7. Cookies

Our website uses cookies to improve functionality and understand how visitors use the site. Essential cookies are necessary for the site to operate and cannot be disabled. Optional cookies (analytics and preference cookies) require your consent. Please see our Cookie Policy for full details and to manage your preferences.

8. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010, you have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate personal data
• Withdraw consent to processing (where processing is based on consent)
• Request that we cease processing your personal data for direct marketing purposes (though we do not conduct direct marketing)

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days of receiving a valid request. In certain circumstances, we may need to verify your identity before processing a request.

If you have concerns about how we handle your personal data and are not satisfied with our response, you may refer the matter to the Personal Data Protection Commissioner of Malaysia.

9. Third-Party Services

Our website may use third-party analytics tools (such as Google Analytics) that collect anonymised usage data. These services operate under their own privacy policies. We do not share personally identifiable information with these services. We do not use third-party advertising or tracking services.

10. Links to Other Websites

Our website may occasionally link to external websites for reference purposes. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policy of any third-party website you visit.

11. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18 through our website. If you believe we have inadvertently received information from a minor, please contact us at [email protected] and we will take appropriate steps to remove it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our practices. The updated version will be posted on this page with a revised "Last Updated" date. Your continued use of this website following any changes constitutes acceptance of the updated policy. We recommend reviewing this page periodically.

13. Contact

If you have questions or concerns about this Privacy Policy or how we handle your personal data, please contact us:

• By email: [email protected]
• By post: Amanah Legal, Level 12, Menara See Hoy Chan, 374 Jalan Tun Razak, 50400 Kuala Lumpur
• By telephone: +60 3 2148 7392