Privacy Policy

1. Introduction

Pusaka Cendana ("the Firm", "we", "us", "our") is a legal practice registered in Malaysia and operating from 19 Jalan Dungun, Damansara Heights, 50490 Kuala Lumpur. This Privacy Policy describes how we collect, use and protect personal data in connection with our estate administration, will drafting and legal consultation services.

We are committed to handling personal data in accordance with the Personal Data Protection Act 2010 (PDPA 2010) of Malaysia. By contacting us or using our website, you agree to the practices described in this policy. Questions regarding this policy may be directed to [email protected].

2. Personal Data We Collect

We may collect the following categories of personal data:

• Name, identity card number, and contact details (email address, telephone number)
• Postal address and residential information where relevant to estate matters
• Information about family members and beneficiaries provided in the course of estate instructions
• Financial information relating to estate assets and liabilities as provided by clients
• Communications sent to the Firm via our website contact form, email or telephone
• Technical data collected automatically when you visit our website (see Section 5)

We collect personal data directly from you when you contact us, complete a form on our website, or engage our services. Some information about third parties (such as estate beneficiaries) may be provided to us by you as the instructing client.

3. Legal Basis and Purpose of Processing

We process personal data on the following legal bases under PDPA 2010:

• Consent: Where you have provided information via our contact form or email enquiry.
• Performance of a contract: Where processing is necessary to carry out legal services you have engaged us to provide.
• Legitimate interests: For the day-to-day administration of our practice, including record-keeping and file management.
• Legal obligation: Where we are required to process or retain data under Malaysian law, including the Legal Profession Act 1976 and anti-money laundering obligations.

Personal data is collected and used for the following purposes: providing estate administration and legal consultation services; responding to enquiries and scheduling appointments; maintaining client files and records; complying with professional and legal obligations; and improving our website and services.

4. Data Retention

Client files and associated personal data are retained for a minimum of seven years following the conclusion of a matter, in accordance with the Bar Council's recommended practice and standard limitation periods under Malaysian law. Where legal obligations require longer retention, we will retain data accordingly. Data collected through website enquiries that do not result in an engagement will be retained for twelve months, after which it will be securely deleted.

5. Cookies and Website Data

Our website uses cookies to function correctly and, where consent is provided, to collect analytics information. Cookies are small data files placed on your device. You can manage your cookie preferences through the cookie banner on this website or through your browser settings. For full details, please refer to our Cookie Policy.

6. Data Sharing

Personal data is not sold or shared with third parties for marketing purposes. In the course of providing legal services, it may be necessary to share relevant information with:

• Courts, land registries and government departments (e.g., the Malaysian High Court, state land offices, EPF, inland revenue)
• Banks, insurance companies and financial institutions as part of estate administration
• Other professional advisers engaged with client consent (e.g., valuers, accountants)
• Our professional indemnity insurer where a claim is made or threatened

All third parties with whom data is shared are required to handle it lawfully and in accordance with applicable data protection obligations.

7. Data Security

We maintain physical and electronic security measures appropriate to the sensitivity of the personal data we hold. Client files are stored securely. Electronic communications are handled through business email accounts with appropriate access controls. In the event of a data breach that poses a risk to data subjects, we will notify affected individuals and the relevant authority as required by law.

8. Your Rights

Under PDPA 2010 and applicable Malaysian law, you have the following rights in relation to your personal data:

• Right of access: To request a copy of the personal data we hold about you.
• Right of correction: To request correction of inaccurate or incomplete data.
• Right to withdraw consent: Where processing is based on consent, to withdraw it at any time (without affecting the lawfulness of prior processing).
• Right to limit processing: To request that we cease using your data for certain purposes.
• Right to complain: To lodge a complaint with the Department of Personal Data Protection (JPDP) if you believe your data has been handled unlawfully.

To exercise any of these rights, please contact us at [email protected]. We will respond within thirty days.

9. Third-Party Links

Our website may contain links to external websites, including court portals and government services. We are not responsible for the privacy practices of those sites and encourage you to review their own policies before providing any personal information.

10. Children's Privacy

Our services are directed at individuals aged 18 and above. We do not knowingly collect personal data from minors. Information about minor beneficiaries provided in the course of estate instructions is handled solely for the purpose of administering the relevant estate.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last Updated" date. Continued use of our website following any change constitutes acceptance of the updated policy.

12. Contact

For data-related questions or to exercise your rights under PDPA 2010:

• Email: [email protected]
• Address: 19 Jalan Dungun, Damansara Heights, 50490 Kuala Lumpur
• Telephone: +60 3 2094 6837