Privacy Policy

1. Introduction and Scope

Amanah Counsel is committed to protecting the personal information of individuals who interact with our practice, including enquirers, clients, and visitors to our website. This Privacy Policy describes the types of personal data we collect, the purposes for which we use it, how we protect it, and the rights available to you under applicable Malaysian law.

This policy is governed by Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and applies to all personal data processing activities undertaken by our practice. For questions regarding this policy, contact us at [email protected].

2. Personal Data We Collect

We may collect the following categories of personal data:

• Identity data: full name, position, company name
• Contact data: email address, phone number, business address
• Enquiry data: the content of messages submitted via our contact form
• Technical data: IP address, browser type, and anonymised usage data collected via analytics tools
• Cookie data: consent preferences stored in your browser. See our Cookie Policy for details.

We collect data directly from you when you submit an enquiry form, contact us by phone or email, or engage us for services.

3. How We Use Your Data

We use personal data for the following purposes:

• Responding to your enquiries and communicating with you about potential engagements
• Delivering contracted services and fulfilling our obligations as your legal advisor
• Maintaining engagement records and correspondence in accordance with professional obligations
• Improving the functionality and content of our website using anonymised analytics
• Complying with legal and regulatory obligations applicable to a legal practice in Malaysia

The legal basis for processing your data is: your consent (for enquiry forms and cookies), the performance of a contract or pre-contractual steps (for service engagements), and our legitimate interests in operating a professional legal practice responsibly.

4. Data Retention

Enquiry data from individuals who do not proceed to an engagement is retained for up to 12 months and then securely deleted. Client engagement records are retained for 7 years following the close of the engagement, in line with Malaysian legal professional obligations. Technical and analytics data is retained in anonymised form only and does not include identifiable personal information.

5. Sharing of Personal Data

We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share personal data with:

• Service providers who assist with website hosting, email, and analytics (operating under data processing agreements)
• Professional advisors or bodies where disclosure is required by law or our professional obligations
• Law enforcement or regulatory authorities where we are required to do so by applicable Malaysian law

6. Data Protection Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or alteration. Access to client data is restricted to authorised personnel only. Our website uses HTTPS encryption. Internal data handling procedures are reviewed periodically and updated in line with evolving professional standards. In the event of a data breach that is likely to affect your rights, we will notify affected individuals in a timely manner.

7. Cookies

Our website uses cookies to support basic functionality and, with your consent, to gather anonymised analytics data. You may manage your cookie preferences at any time via our Cookie Policy page.

8. Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you
• Right of correction: to request that inaccurate or incomplete data be corrected
• Right to withdraw consent: where processing is based on consent, to withdraw it at any time without affecting prior lawful processing
• Right to limit processing: to request that we restrict the use of your data in certain circumstances
• Right to lodge a complaint: with the Personal Data Protection Commissioner Malaysia if you consider that your rights have been infringed

To exercise any of these rights, please contact us at [email protected]. We aim to respond within 21 days.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend that you review their privacy policies separately.

10. Children's Privacy

Our services are directed at businesses and individuals aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that we have inadvertently collected such data, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last Updated" date. We encourage you to review this policy periodically. Continued use of our website following any update constitutes acceptance of the revised policy.

12. Contact Information

Data Controller: Amanah Counsel

Address: No. 15, Jalan SS 6/6, Kelana Jaya, 47301 Petaling Jaya, Selangor, Malaysia

Privacy enquiries: [email protected]