Privacy Policy

1. Introduction

Pusaka Adil ("we", "us", "our") is a legal practice based at Lorong Burma 21, 10050 George Town, Penang, Malaysia. We provide inheritance and estate legal services to individuals and families in Malaysia.

We take the privacy of personal information seriously. This policy explains what personal data we collect, how we use it, and your rights in relation to it. It applies to data collected through our website at pusakaakadil.blog and in connection with our legal services.

If you have questions about this policy, please contact us at [email protected].

2. Personal Data We Collect

We collect personal data in the following ways:

a) Data You Provide Directly

• Name and contact details (email, phone number)
• Information about your legal matter — details of the deceased, family relationships, assets involved
• Identification documents and financial information required to administer an estate
• Correspondence you send to us

b) Data Collected Automatically

• IP address and browser type when you visit our website
• Pages visited, time spent, and referring URLs (via analytics cookies)
• Cookie preferences stored in your browser

c) Legal Basis for Processing

• Contract performance — to provide the legal services you have engaged us for
• Legal obligation — to comply with requirements under Malaysian law
• Legitimate interests — to maintain website security and improve our services
• Consent — for optional communications and non-essential cookies

Retention: Matter-related data is retained for seven years after the conclusion of the engagement, in accordance with professional obligations. Website analytics data is retained for no more than 26 months.

3. How We Use Your Data

• To respond to your enquiries and provide legal advice
• To prepare and file documents on your behalf in connection with estate matters
• To communicate with courts, government departments, banks, and other third parties as instructed
• To issue fee letters, invoices, and receipts
• To maintain our client records as required by the Malaysian Bar
• To improve our website based on usage patterns (analytics, with consent)

We do not sell personal data. We do not use your data for direct marketing without your explicit consent. You may withdraw consent for optional communications at any time.

4. How We Protect Your Data

• Physical client files are stored in locked cabinets accessible only to authorised staff
• Digital files are stored on password-protected systems with restricted access
• Email communications involving sensitive matter details are handled with care; we may suggest encrypted communication for particularly sensitive documents
• In the event of a data breach, we will notify affected individuals and the relevant authorities as required by Malaysian law

All client communications are protected by legal professional privilege, which is a fundamental protection under Malaysian law separate from data protection obligations.

5. Cookies

Our website uses cookies to function and to understand how visitors use it. Essential cookies are always active. Optional analytics and preference cookies are only activated with your consent.

For full details, please see our Cookie Policy.

6. Your Rights

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia and applicable principles, you have the following rights:

• Right of access — to request a copy of the personal data we hold about you
• Right of correction — to request that inaccurate or incomplete data be corrected
• Right to withdraw consent — for processing based on consent (such as marketing communications or optional cookies)
• Right to limit processing — in certain circumstances
• Right to complain — to the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights have been infringed

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.

7. Third-Party Links

Our website may contain links to external sites, including government portals and court resources. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.

8. Children

Our services are directed at adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. If changes are significant, we will take reasonable steps to notify existing clients directly.