Privacy Policy
Last Updated: 14 April 2025 | Perak Partners, Level 14, Menara CIMB, Jalan Stesen Sentral 2, 50470 Kuala Lumpur, Malaysia
Perak Partners is committed to handling personal data responsibly. This policy explains what personal data we collect, why we collect it, how we use it, and the rights available to individuals under the Personal Data Protection Act 2010 (PDPA) of Malaysia. It applies to data collected through our website and through direct engagement correspondence.
1. Data Controller
The data controller for personal data processed in connection with this website and our legal services is Perak Partners, a law firm operating at Level 14, Menara CIMB, Jalan Stesen Sentral 2, 50470 Kuala Lumpur, Malaysia. For data-related enquiries, contact us at [email protected].
2. Personal Data We Collect
We collect personal data through the following means:
2.1 Enquiry and Contact Forms
- Full name
- Email address
- Telephone number (optional, where provided)
- Description of your legal matter (as provided in the message field)
2.2 Engagement Correspondence
Where an engagement is established following an initial enquiry, we may collect additional personal data relevant to the legal matter — including financial information, company details, and documentation shared for review purposes. This data is collected under the terms of the engagement letter and is subject to legal professional privilege.
2.3 Website Analytics
We may collect anonymised usage data through analytics tools (see Section 5 on cookies) to understand how visitors interact with our website. This data does not identify individuals directly.
3. Legal Basis for Processing
We process personal data on the following legal bases under the PDPA 2010:
- Consent: Where you submit an enquiry form or contact us directly, you consent to the processing of your data for the purpose of responding to your enquiry.
- Contract: Where an engagement letter is in place, we process data as necessary to perform our obligations under that agreement.
- Legitimate interests: We may process data for legitimate interests including improving our services, maintaining security, and complying with professional obligations as a law firm regulated by the Malaysian Bar.
- Legal obligation: Where we are required to retain or process data under Malaysian law or by order of a court or regulatory authority.
4. How We Use Personal Data
- To respond to your enquiry and assess whether an engagement can be established
- To perform legal services under an engagement letter
- To communicate regarding the progress of a matter
- To issue invoices and process payments
- To maintain conflict-of-interest records as required by the Malaysian Bar
- To comply with anti-money laundering obligations under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA)
- To improve our website based on anonymised usage data
We do not use personal data for marketing communications without your separate consent. We do not sell personal data to third parties.
5. Cookies and Website Analytics
Our website uses cookies to understand how it is used and to improve the user experience. Details of the cookies used, their purpose, and your options for managing them are set out in our Cookie Policy.
6. Data Sharing
We do not share personal data with third parties except in the following circumstances:
- Shariah advisers: Where an engagement involves Islamic finance structuring and coordination with a Shariah adviser is necessary, relevant information may be shared with the appointed adviser under confidentiality terms.
- Service providers: We use third-party services for email hosting, document storage, and website analytics. These providers are contractually required to handle data only in accordance with our instructions and applicable data protection law.
- Legal or regulatory obligation: We may disclose data where required by law, court order, or request from a regulatory authority including Bank Negara Malaysia or the Malaysian Bar.
- With your consent: In any other circumstance, data is shared only with your explicit prior written consent.
7. Data Retention
We retain personal data for the following periods:
- Enquiry data (no engagement established): 12 months from the date of the enquiry, unless you request earlier deletion.
- Engagement data: 7 years from the conclusion of the engagement, in accordance with the Limitation Act 1953 and professional obligations under the Malaysian Bar.
- Conflict-of-interest records: For the duration of the firm's operation, as required by the Malaysian Bar.
- Analytics data: Aggregated and anonymised; not subject to deletion requests as it does not identify individuals.
8. Data Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include:
- Encrypted storage for client documents and correspondence
- Access controls limiting data access to members of the engagement team
- Secure email protocols for client communications
- Regular review of security practices
In the event of a personal data breach that is likely to result in a risk to your rights or interests, we will notify you and the relevant authority as required under applicable law without undue delay.
9. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any external site before providing personal data.
10. Children's Privacy
Our services are directed at corporate and institutional clients and individuals acting in a professional or commercial capacity. We do not knowingly collect personal data from individuals under 18 years of age. If you believe we have inadvertently collected data from a minor, please contact us at [email protected] and we will delete it promptly.
11. Your Rights Under the PDPA 2010
As a data subject under the Personal Data Protection Act 2010 (Malaysia), you have the following rights:
- Right of access: To request a copy of the personal data we hold about you
- Right of correction: To request correction of inaccurate or incomplete personal data
- Right to withdraw consent: To withdraw consent to processing where consent is the legal basis, without affecting the lawfulness of prior processing
- Right to limit processing: To request that we limit the use of your personal data in certain circumstances
- Right to complain: To lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your rights have been infringed
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. Note that certain data processed under legal professional privilege or retained for compliance with the Malaysian Bar or AMLA may be subject to restrictions on deletion.
12. International Data Transfers
We do not routinely transfer personal data outside Malaysia. Where a third-party service provider processes data on servers located outside Malaysia, we ensure that appropriate data transfer safeguards are in place, consistent with the PDPA 2010.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The revised policy will be posted on this page with an updated effective date. Where changes are material, we will notify clients by email if we hold your contact details.
14. Contact
For any questions about this Privacy Policy or the personal data we hold:
- Email: [email protected]
- Post: Perak Partners, Level 14, Menara CIMB, Jalan Stesen Sentral 2, 50470 Kuala Lumpur, Malaysia
- Telephone: +60 3 2270 8146