Privacy Policy

1. Introduction

Warisan Legal Services ("Warisan", "we", "us", "our") is a legal practice based in Kuala Lumpur, Malaysia, providing inheritance legal services including will drafting, probate applications, and estate consultations. We are committed to handling all personal data entrusted to us with care, discretion, and in compliance with Malaysian law, particularly the Personal Data Protection Act 2010 (PDPA) and the applicable rules of the Malaysian Bar.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have in relation to your data. It applies to information collected through this website, through our contact form, and through direct engagement with our practice.

2. Personal Data We Collect

We collect personal data only where necessary to provide our services or respond to your enquiries. The types of data we may collect include:

• Contact information: Full name, email address, telephone number, and postal address (where relevant to a matter).
• Identity information: MyKad or passport number and date of birth, where required for legal documentation.
• Estate and financial information: Details of assets, liabilities, and beneficiaries as required to carry out the services engaged.
• Website usage data: IP address, browser type, pages visited, and time of access, collected via cookies and analytics tools.

How We Collect Data

• — Directly from you, via the website contact form or email
• — During telephone or in-person consultations
• — From documents you provide in the course of an engagement
• — Automatically, via cookies when you browse this website

Legal Basis for Processing

We process personal data on the following bases under the PDPA 2010:

• — Consent: For non-essential cookies and marketing communications (where applicable).
• — Contract performance: To deliver the legal services you have engaged us for.
• — Legitimate interests: For website analytics and service improvement.
• — Legal obligation: To comply with Malaysian Bar regulations and court requirements.

Data Retention

Client files are retained for a minimum of seven (7) years following completion of the engagement, in line with professional obligations under the Solicitors' Accounts Rules and the Legal Profession Act 1976. Website enquiry data not resulting in an engagement is deleted within twelve (12) months of the initial contact.

3. How We Use Your Data

Personal data collected by Warisan is used for the following purposes:

• To respond to enquiries submitted through our website or by telephone.
• To prepare and deliver the legal services you have engaged us for.
• To communicate with you about your matter — including updates, documents, and appointments.
• To fulfil our legal and professional obligations, including court filings and regulatory compliance.
• To maintain internal records required by the Malaysian Bar and applicable law.
• To improve this website using aggregated, anonymised usage data.

We do not sell, rent, or share your personal data with third parties for marketing purposes. Data may be shared with courts, government registries, banks, and other institutions only as required for the specific matter you have engaged us for, and only with your knowledge or as required by law.

4. Data Protection Measures

• Client files are maintained in a secure office environment with restricted access.
• Digital records are stored on password-protected systems not accessible to unauthorised parties.
• Email communications containing sensitive information use secure connections (TLS).
• Access to client data is limited to the lawyers and staff directly involved in your matter.
• In the event of a data breach affecting your personal information, we will notify you and the relevant authority as required under the PDPA 2010.

5. Cookies

This website uses cookies to enable basic functionality and, with your consent, to understand how visitors use the site. Essential cookies cannot be disabled as they are required for the site to operate. Optional analytics cookies are only activated if you accept them. For full details, see our Cookie Policy.

6. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to correction: Request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: Withdraw consent for optional processing at any time (noting this may affect our ability to respond to enquiries).
• Right to limit processing: Request that we restrict how your data is used in certain circumstances.
• Right to object: Object to processing based on legitimate interests.

To exercise any of these rights, write to us at [email protected]. We will respond within fourteen (14) days. Note that some data cannot be erased while legal professional obligations require its retention.

If you believe your data rights have not been respected, you may lodge a complaint with the Department of Personal Data Protection (JPDP) at www.pdp.gov.my.

7. Third-Party Links

This website may contain links to external sites. Warisan is not responsible for the privacy practices of those sites and encourages you to review their respective privacy policies before submitting any personal data to them.

8. Children's Privacy

Our services are directed at adults (18 years and above). We do not knowingly collect personal data from persons under 18. If you believe we have inadvertently received data from a minor, please contact us at [email protected] and we will take prompt steps to address the matter.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Material changes will be communicated to active clients by email. Continued use of this website following any update constitutes acceptance of the revised policy.

10. Contact for Data Enquiries

For any questions about this Privacy Policy or about how we handle your personal data, please contact our data officer at: