Privacy Policy

1. Data We Collect

When you contact us or engage our services, we may collect the following categories of personal data:

• Identity data: full name, company name, position or role
• Contact data: email address, telephone number, postal address
• Matter data: details you provide about your legal matter, vessel details, cargo documentation, and correspondence
• Technical data: IP address, browser type, and pages visited when you use our website (collected via cookies and server logs)
• Communication data: emails, messages, and notes from telephone calls

We do not collect sensitive personal data (such as health data, racial or ethnic origin, or financial account details) through our website. Sensitive data relevant to legal matters is handled under our professional confidentiality obligations.

2. How We Use Your Data

We use personal data for the following purposes:

• To respond to your enquiries and provide legal services under an engagement agreement
• To maintain records as required by our professional obligations as Malaysian-registered advocates and solicitors
• To send administrative communications relating to your matter (not marketing)
• To comply with legal and regulatory obligations, including anti-money laundering requirements under Malaysian law
• To improve our website and services through aggregated, anonymised analytics

We rely on the following legal bases for processing: contractual necessity (for engaged matters), compliance with legal obligations, and legitimate interests (for responding to enquiries and maintaining records). Where we send non-essential communications, we rely on consent.

3. Data Sharing

We do not sell personal data. We may share data in the following limited circumstances:

• Service providers: IT infrastructure and website hosting providers, under data processing agreements
• Professional counterparts: Overseas counsel, surveyors, or port agents involved in your matter, where necessary and with your knowledge
• Courts and authorities: Where required by law, court order, or our professional regulatory obligations
• Analytics: Aggregated and anonymised data may be processed by analytics tools (see our Cookie Policy)

4. Data Retention

Matter files and related personal data are retained for a minimum of seven years after the conclusion of an engagement, in accordance with professional standards and potential limitation periods under Malaysian law. Website enquiry data that does not result in an engagement is retained for up to 12 months. Technical and analytics data is retained for up to 24 months. Data is then securely deleted or anonymised.

5. Data Protection Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, or loss. These include:

• TLS encryption for data transmitted via our website
• Password-protected and access-controlled file management systems
• Staff training on data handling obligations
• Physical security at our office premises
• Periodic review of our data handling procedures

In the event of a data breach that is likely to affect your rights, we will notify you and the relevant authority in accordance with applicable law.

6. Cookies

Our website uses cookies for essential functionality and optional analytics. Essential cookies are necessary for the site to operate and cannot be disabled. Optional analytics cookies are only placed with your consent. For full details see our Cookie Policy.

7. Your Rights

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, and where applicable the GDPR, you have the following rights:

• Right of access: to request a copy of the personal data we hold about you
• Right to correction: to request correction of inaccurate or incomplete data
• Right to erasure: to request deletion of data where we no longer have a lawful basis to hold it
• Right to restrict processing: in certain circumstances
• Right to object: to processing based on legitimate interests
• Right to withdraw consent: where processing is based on consent, at any time
• Right to complain: to the relevant supervisory authority — in Malaysia, the Personal Data Protection Commissioner

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

8. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before sharing any personal data with them.

9. Children's Privacy

Our services are directed at businesses and individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us promptly and we will remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by updating the "Last Updated" date at the top of this page. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

11. Contact Information

For privacy-related enquiries, corrections, or complaints: