Privacy Policy

1. Introduction

Perisai Law ("we", "us", "our") is committed to protecting the privacy of those who use our services and visit our website. This Privacy Policy explains how we collect, use, and look after personal information in connection with our legal practice and this website.

This policy is prepared in accordance with the Personal Data Protection Act 2010 (Malaysia) ("PDPA"). If you have questions about how we handle your data, please contact us at [email protected].

2. What We Collect

We collect personal data in the following ways:

• When you submit an enquiry or contact form on our website (name, email, phone, message)
• When you engage our legal services (identity documents, pension records, correspondence)
• When you visit our website (via cookies and analytics tools — see our Cookie Policy)

We collect only what is necessary for the purpose it is collected for. We do not collect sensitive personal data such as health information unless directly relevant to your matter and with your explicit consent.

3. How We Use Your Information

• To respond to enquiries and provide legal services
• To manage our client relationship and case files
• To communicate updates, appointments, or developments in your matter
• To comply with legal and regulatory obligations
• To improve our website and understand how it is used (analytics)

We do not use your personal information for direct marketing without your consent. You may withdraw consent at any time by contacting us.

4. Legal Basis for Processing

• Consent — for website enquiries and optional communications
• Contract — where processing is necessary to perform legal services you have engaged us for
• Legitimate interests — for website analytics and improving our service
• Legal obligation — where the law requires us to retain or disclose records

5. Data Sharing

We do not sell or trade your personal information. We may share it with:

• Regulatory bodies or courts where required by law or your matter demands it
• Third-party service providers (e.g. IT systems, secure document storage) bound by confidentiality obligations
• Other legal advisors where your matter requires coordination, with your knowledge

Any sharing is limited to what is necessary and done in accordance with the PDPA.

6. Data Retention

Client matter files are retained for a minimum of seven (7) years after a matter closes, in line with professional obligations. Website enquiry data is retained for twelve (12) months unless a matter proceeds from it. We review and delete data that is no longer needed on a regular basis.

7. Data Protection Measures

• All electronic files are stored on access-controlled, encrypted systems
• Physical files are held in locked, restricted-access storage
• Staff access to personal data is limited to those who need it for their work
• Our website uses HTTPS encryption for all data in transit
• We conduct periodic reviews of our data security practices

In the event of a data breach that affects your rights or interests, we will notify you and the relevant authority as required by law.

8. Cookies

Our website uses cookies to understand how visitors use it. For a full explanation of what cookies we use and how to manage them, please read our Cookie Policy.

9. Your Rights

Under the PDPA 2010, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Withdraw consent where processing is based on consent
• Limit how we use your data in certain circumstances
• Lodge a complaint with the Department of Personal Data Protection (JPDP)

To exercise any of these rights, write to us at [email protected]. We will respond within fourteen (14) days.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend you review their policies independently.

11. Children's Privacy

Our services are directed at adults aged 18 and above. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently done so, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website after changes constitutes acceptance of the revised policy.

13. Contact

Data Controller: Perisai Law

B-5-3, Plaza Damansara, Jalan Medan Setia 1, 47400 Petaling Jaya, Selangor, Malaysia

Email: [email protected]

Phone: +60 3-7729 3846