Privacy Policy

1. Introduction

Payung Adil ("we", "us", "our") is committed to handling personal information with care and transparency. This Privacy Policy explains what data we collect, how we use it, how we protect it, and what rights you have regarding it.

This policy applies to personal data collected through our website at payungadil.blog, through our contact forms, and in the course of providing legal services at our office in Kuching, Sarawak, Malaysia.

We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the professional obligations applicable to legal practitioners registered with the Advocates Association of Sarawak. If you have questions about this policy, please contact us at [email protected].

2. What Personal Data We Collect

We collect personal data only to the extent necessary to provide our services and respond to enquiries. This includes:

• Contact information: Full name, email address, and telephone number submitted through our website contact form or provided to us directly.
• Identity and pension records: MyKad or identity documentation, pension contribution records, employment history, and related documents shared with us in the course of legal engagement.
• Communication records: Correspondence by email, letter, or telephone relevant to your matter.
• Website usage data: Analytics data (pages visited, session duration, browser type) collected via cookies, where you have consented. See our Cookie Policy for details.

Legal basis for processing:

• Consent — for website analytics and marketing communications.
• Contract performance — for data necessary to deliver agreed legal services.
• Legitimate interests — for enquiry management and service improvement.
• Legal obligation — where required by professional rules or law.

Retention: Client matter files are retained for a minimum of seven years after the close of a matter in accordance with professional obligations. Website enquiry data not resulting in an engagement is retained for up to 24 months.

3. How We Use Your Personal Data

• To respond to enquiries submitted via our website or contact form.
• To provide the legal services you have engaged us to deliver.
• To communicate updates on the progress of your matter.
• To prepare and file legal correspondence on your behalf.
• To meet our professional record-keeping obligations.
• To improve our website and services (using anonymised analytics data only).

We do not send marketing communications without your explicit consent. If you have consented, you may withdraw that consent at any time by emailing [email protected].

4. Data Sharing with Third Parties

We do not sell or rent personal data. We share data only where necessary:

• Pension and government bodies — when acting on your behalf and with your knowledge, for example EPF, LTAT, or Jabatan Perkhidmatan Awam.
• Professional advisers — where we seek specialist input for your matter, subject to confidentiality obligations.
• Service providers — website hosting and email services, subject to data processing agreements.
• Legal requirement — where disclosure is required by Malaysian law or a court order.

5. Data Protection Measures

We take reasonable measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• Access to client files restricted to the legal team members handling each matter.
• Secure storage of physical documents at our Kuching office.
• Password-protected digital systems for electronic records.
• Encrypted email for correspondence containing sensitive personal data where technically feasible.

In the event of a personal data breach that may affect your rights and freedoms, we will notify you and the relevant authority as required by the PDPA.

6. Cookies

Our website uses cookies for essential functionality and, where you have consented, for analytics. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

7. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Withdraw consent to processing where consent was the legal basis.
• Object to the processing of your data for direct marketing.
• Request erasure of personal data we no longer have a lawful basis to retain (subject to professional obligations).

To exercise any of these rights, contact us in writing at [email protected] or at our office address below. We will respond within 21 days.

If you consider that we have not handled your personal data appropriately, you may raise a complaint with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

8. Third-Party Links

Our website may contain links to external sites including government pension portals and professional body websites. We are not responsible for the privacy practices of those sites and encourage you to read their respective policies.

9. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe we have inadvertently received data from a person under 18, please notify us immediately at [email protected].

10. Changes to This Policy

We may update this policy from time to time. Where changes are material, we will post a notice on our website. Continued use of our website or services after a revised policy is posted constitutes acceptance of the updated terms.

11. Contact the Data Controller

For all data protection enquiries: