Privacy Policy

1. Introduction

Damai Advocates ("we", "us", "our") is committed to handling personal data with care and responsibility. This Privacy Policy explains what personal information we collect, how we use it, and the rights you have in relation to it.

Our practice is governed by Malaysian law. This policy is drafted in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

If you have any questions about how we handle your data, please contact us at [email protected].

---

2. Data We Collect

We may collect the following categories of personal data:

• Identity information: your name and, where relevant, information about your family situation as it relates to your legal matter.
• Contact information: email address, telephone number, and postal address.
• Correspondence: the content of messages sent through our contact form, by email, or by post.
• Usage data: if you visit our website, we may collect information about your device and how you use the site (through cookies and similar technologies — see Section 6).

We collect only what is necessary for the purposes described in this policy. We do not collect sensitive categories of data (such as health data) unless it is directly relevant to a matter you have instructed us on, and only with your explicit consent.

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to enquiries submitted through our website or by other means.
• To carry out legal services you have instructed us to perform.
• To manage our professional obligations, including record-keeping requirements under Malaysian Bar rules.
• To improve the functionality and content of our website (using anonymised analytics where possible).

We do not use your data for marketing purposes without your explicit consent.

4. Legal Basis for Processing

We rely on the following legal bases to process your data:

• Consent: where you have given explicit consent (for example, by submitting our contact form).
• Contract: where processing is necessary to carry out a legal matter you have instructed us on.
• Legitimate interests: where we have a legitimate business interest, such as maintaining professional records or improving our services, and that interest is not overridden by your rights.
• Legal obligation: where processing is required to comply with Malaysian law or Bar rules.

5. Data Sharing

We do not sell your personal data to third parties. We may share your information in the following circumstances:

• With courts, tribunals, or opposing parties where necessary to conduct your legal matter.
• With other professionals (such as barristers or experts) engaged on your matter, with your knowledge.
• With our IT service providers who support our internal systems, under strict data processing agreements.
• Where required by Malaysian law or a valid court order.

6. Cookies

Our website uses cookies to function and, optionally, to understand how it is used. Essential cookies are necessary for basic site operation. Optional cookies (analytics, marketing, preferences) are only activated with your consent.

You can manage your cookie preferences at any time on our Cookie Policy page.

7. Data Retention

We retain personal data for as long as is necessary for the purpose it was collected. For legal matters, we follow the Malaysian Bar's recommended retention period of seven years following the conclusion of the matter. Website enquiries that do not result in an instruction are retained for no longer than twelve months.

After the applicable retention period, data is securely deleted or anonymised.

8. Data Protection Measures

We take reasonable steps to protect personal data from unauthorised access, disclosure, or loss. These steps include:

• Secure, password-protected access to client files and systems.
• Encrypted email and file transfer where possible.
• Restricting access to personal data to staff who need it to perform their role.
• Regular review of data handling practices.

In the event of a data breach that is likely to harm you, we will notify you and the relevant authority as required under Malaysian law.

9. Your Rights

Under the Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to correction: to request that inaccurate or incomplete data is corrected.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.
• Right to prevent processing: in certain circumstances, to request that we cease processing your data.

To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable time, and in any case within 21 days.

10. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their own privacy policies before submitting any personal information.

11. Children's Privacy

Our services are intended for adults (persons aged 18 and over). We do not knowingly collect personal data from anyone under 18 without the consent of a parent or guardian. If you believe a minor has submitted data to us without appropriate consent, please contact us and we will take prompt steps to address this.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will post an updated version on this page with a revised date. Continued use of our website following any such update constitutes acceptance of the revised policy.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the data we hold about you, please contact:

Damai Advocates
88, Jalan Burma, 10050 George Town, Penang, Malaysia
Email: [email protected]
Phone: +60 4-229 6157