Privacy Policy
Last Updated: 15 March 2025 · Effective: 15 March 2025
Pusaka Chambers ("we", "us", "our") is committed to handling personal data responsibly. This policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it. It is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
1. Data Controller
Pusaka Chambers, Suite 5A, Menara Hap Seng, Jalan P. Ramlee, 50250 Kuala Lumpur, Malaysia is the data controller for personal information collected through this website and in the course of providing legal services. You may contact us regarding data matters at [email protected].
2. Data We Collect
We may collect the following categories of personal data:
- Contact details — full name, email address, telephone number, postal address
- Matter information — information you provide about your assets, family circumstances, or estate wishes in the course of our legal engagement
- Identity documents — copies of identity documents required to comply with legal obligations, where applicable
- Website usage data — anonymised information about how visitors interact with this website, where analytics cookies are accepted
- Correspondence — emails, letters, and records of telephone conversations relating to a matter
3. How We Collect Data
We collect personal data in the following ways:
- Through the enquiry form on this website
- By telephone or in-person consultation
- By email correspondence
- Through documents provided during the course of a legal engagement
- Through website analytics cookies (only where consent has been given)
4. Legal Basis and Purpose of Processing
We process personal data on the following grounds:
- Contract performance — to provide legal services you have engaged us to deliver
- Legitimate interests — to maintain records, communicate about matters in progress, and manage our practice administration
- Legal obligation — to meet obligations under the Legal Profession Act 1976, the AMLATFPUAA 2001, or other applicable legislation
- Consent — for optional analytics cookies, which may be withdrawn at any time through our Cookie Policy page
5. Data Retention
Matter files are retained for a minimum of seven years following the conclusion of an engagement, in accordance with standard legal practice obligations. Identity documents and KYC records are retained for a minimum of six years. Website enquiry data not resulting in an engagement is deleted within twelve months. Analytics data is retained for no longer than twenty-six months.
6. Data Sharing
We do not sell personal data. We may share personal data in the following limited circumstances:
- With correspondent or foreign counsel, where instructed by the client and necessary to carry out cross-border estate planning
- With courts, the Inland Revenue Board, or government agencies, where required by law or necessary to perform services
- With service providers who assist our practice administration (IT support, document storage) under confidentiality obligations
- Where we are legally required to do so
7. Data Security
We maintain physical, electronic, and procedural measures to protect personal data against unauthorised access, use, or disclosure. Electronic files are password-protected and access is restricted to authorised staff on a need-to-know basis. Physical documents are stored in locked premises. In the event of a data breach that poses a risk to individuals, we will notify the relevant parties and the Personal Data Protection Department in accordance with applicable requirements.
8. Cookies
This website uses cookies. Please see our Cookie Policy for a full explanation of the types of cookies used, their purposes, and how to manage your preferences.
9. Your Rights
Under the PDPA and applicable principles, you have the following rights in relation to your personal data:
- Access — to request a copy of the personal data we hold about you
- Correction — to request correction of inaccurate or incomplete data
- Withdrawal of consent — for processing based on consent (such as analytics cookies)
- Objection — to object to processing for direct marketing purposes
- Complaint — to lodge a complaint with the Personal Data Protection Department of Malaysia if you believe your rights have been infringed
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.
10. Third-Party Links
This website may contain links to external resources. We are not responsible for the privacy practices of third-party websites and recommend that you read their respective privacy policies before providing any personal data.
11. Children
Our services are directed to adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18.
12. Changes to This Policy
We may update this policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of this website following any changes constitutes acceptance of the revised policy.
13. Contact
For any queries about this policy or your personal data, please contact us at:
Pusaka Chambers
Suite 5A, Menara Hap Seng, Jalan P. Ramlee, 50250 Kuala Lumpur
Email: [email protected]
Telephone: +60 3-6156 8274