Privacy Policy

1. Introduction

Tegak Advocate ("the Practice", "we", "us") is committed to handling the personal data of clients and website visitors with care and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This policy explains what data we collect, how we use it, and what rights you have in relation to it.

This policy applies to personal data collected through this website and through the course of providing legal services. It does not cover client files, which are governed by the obligations of legal professional privilege and the confidentiality requirements of the Malaysian Bar.

2. Data Controller

The data controller for personal data collected through this website is:

3. Data We Collect

We collect personal data in the following circumstances:

• Contact form submissions: name, email address, and telephone number (optional) and the content of the message.
• Consultations and engagements: personal and estate-related data provided in the course of legal service delivery, governed by legal professional privilege.
• Website analytics: aggregated, anonymised data on page visits and usage patterns if analytics cookies are accepted.

We do not collect sensitive personal data (such as medical, financial, or biometric data) through the website contact form.

4. Legal Basis for Processing

Under the PDPA 2010, we process personal data on the following bases:

• Consent: for contact form submissions and optional cookies.
• Contract: for personal data required to provide legal services.
• Legitimate interest: for maintaining records of communications with enquirers.
• Legal obligation: where applicable under the Legal Profession Act 1976 or other applicable laws.

5. How We Use Your Data

Data collected through the contact form is used to:

• Respond to your enquiry
• Arrange an initial consultation
• Maintain records of pre-engagement communications

We do not use contact form data for marketing without your explicit consent, and we do not sell or share it with third parties for commercial purposes. Website enquiry data is retained for twelve months unless an engagement follows, in which case it is retained as part of the client file for the period required by our professional obligations.

6. Data Protection Measures

We take reasonable measures to protect personal data held by the Practice:

• This website uses HTTPS for all data transmission
• Access to client records is limited to personnel directly involved in each matter
• Physical files are stored securely within the office
• Digital communications containing personal data are transmitted over encrypted channels where possible

In the event of a data breach that affects your personal data, we will notify you and, where required, the relevant regulatory authority, within a reasonable timeframe.

7. Cookies

This website uses cookies for basic functionality and, if you consent, for analytics purposes. You can manage your cookie preferences at any time. For full details, see our Cookie Policy.

8. Your Rights Under the PDPA 2010

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to personal data we hold about you:

• Right of access: to request a copy of the personal data we hold about you.
• Right of correction: to request that inaccurate data be corrected.
• Right to withdraw consent: for data processed on the basis of consent.
• Right to limit processing: to request that we stop using data in certain ways while a correction or complaint is being considered.

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days. There may be circumstances in which legal professional privilege or statutory obligations require us to retain or restrict access to certain data.

For complaints about how your data is handled, you may contact the Department of Personal Data Protection Malaysia (PDPD): www.pdp.gov.my.

9. Third-Party Links

This website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any external sites you visit.

10. Children's Privacy

The services offered by Tegak Advocate are intended for adults aged 18 and over. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data relating to a minor, please contact us so we can delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. When we do, the updated date at the top of this page will reflect the change. Continued use of the website after an update constitutes acceptance of the revised policy. For significant changes, we will endeavour to provide more prominent notice.

12. Contact for Privacy Matters