Privacy Policy

1. Data Controller

The data controller for personal information collected through this website and in client engagements is Amanah Law, 62, Lebuh Pantai, 10300 George Town, Penang, Malaysia. You may contact us by telephone at +60 4-227 8493 or by email at [email protected].

2. Information We Collect

We may collect the following categories of personal information:

• Identification information: name, company name, job title or role
• Contact information: email address, telephone number, business address
• Matter information: description of the commercial arrangement or legal matter provided during intake
• Technical data: IP address, browser type, pages visited, visit duration (collected via cookies and analytics tools)
• Communication records: emails, letters, and call notes relating to enquiries or engagements

We do not request or collect sensitive personal data (as defined under the PDPA) through this website. If such information becomes relevant in an engagement context, it will be handled in accordance with applicable legal obligations.

3. How We Collect Information

Information is collected through the following means:

• Contact and enquiry forms on this website
• Email correspondence and telephone calls
• Written intake forms and document uploads during client engagement
• Cookies and analytics tools (see Section 8 below)

4. Legal Basis for Processing

We process personal information on the following legal bases under the PDPA:

• Consent: Where you have provided your information through a form or have agreed to our cookie policy
• Performance of a contract: Where processing is necessary to provide legal services you have engaged us for
• Legitimate interests: For internal administration, managing enquiries, and improving our services, where these interests are not overridden by your rights
• Legal obligation: Where we are required to retain information under applicable law or professional rules

5. How We Use Your Information

We use personal information for the following purposes:

• To respond to enquiries and assess whether and how we can assist
• To carry out legal services where engaged to do so
• To manage the administration of engagements, including billing and file management
• To comply with our obligations under Malaysian Bar Council rules
• To improve the quality and usability of this website
• To send service-related communications where relevant to an ongoing engagement

We do not use personal information for unsolicited marketing. We do not sell, rent, or trade personal information.

6. Sharing of Personal Information

We may share personal information in the following limited circumstances:

• With service providers who assist in operating this website or managing our systems, subject to confidentiality obligations
• With counterparties or third parties as required in the course of an engagement, with your knowledge and consent
• With regulatory authorities or courts where required by law or professional obligation
• With our professional indemnity insurers if a claim arises, to the extent required

We do not share personal information across international borders except where necessary in an engagement context and where appropriate safeguards are in place.

7. Retention

We retain personal information only for as long as necessary for the purposes for which it was collected, or as required by law or professional rules. For client matters, we typically retain files for seven years from the close of the engagement in accordance with Malaysian Bar Council guidance. For enquiries that do not result in an engagement, contact information is retained for no longer than twelve months.

8. Cookies and Analytics

This website uses cookies. A cookie is a small text file stored on your device that allows the website to recognise your browser and remember certain information. We use essential cookies (which are necessary for the website to function), and optional cookies for analytics purposes. You can manage your cookie preferences using the controls on this website. For full details, see our Cookie Policy.

9. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010, you have the following rights with respect to your personal information:

• Right of access: To request access to personal information we hold about you
• Right of correction: To request correction of inaccurate or incomplete information
• Right to withdraw consent: To withdraw consent to processing at any time, where processing is based on consent
• Right to prevent processing for direct marketing: To object to your information being used for marketing purposes

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days. Note that certain rights may be limited where we are required by law or professional rules to retain information.

10. Data Security

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, loss, or alteration. These include access controls on our systems, secure email protocols, and confidentiality obligations on all personnel. In the event of a personal data breach that is likely to affect your rights and freedoms, we will notify you as required under applicable law.

11. Third-Party Links

This website may contain links to external websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies independently before providing any information.

12. Children

Our services are intended for businesses and adults. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has provided information to us, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The most recent version will always be available on this page, with the Last Updated date indicated above. Continued use of this website following any update constitutes acceptance of the revised policy.

14. Contact for Data Matters

For any questions or concerns regarding this Privacy Policy or your personal data, please contact us:

• Email: [email protected]
• Telephone: +60 4-227 8493
• Post: Amanah Law, 62, Lebuh Pantai, 10300 George Town, Penang, Malaysia

If you are not satisfied with our response to a data-related request, you may lodge a complaint with the Department of Personal Data Protection Malaysia (Jabatan Perlindungan Data Peribadi).