Privacy Policy

1. Introduction

Kasih Guaman ("the Firm", "we", "us", "our") is committed to protecting the personal data of all individuals who engage with our services or interact with our website. This Privacy Policy explains what personal data we collect, how we use it, and what rights you have in relation to it.

This Policy applies to personal data collected through our website, contact forms, telephone enquiries, and in the course of providing legal services. It does not override the obligations arising under legal professional privilege, which apply separately to all client communications.

For questions about this Policy, please contact us at [email protected].

2. Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, phone number, residential address
• Enquiry details: information you share when describing your legal matter
• Communications data: records of correspondence between you and the Firm
• Technical data: IP address, browser type, and pages visited (via cookies and analytics tools)
• Identity and billing data: collected during formal engagement for legal services

We collect this data through our website contact form, telephone and email enquiries, direct consultation, and in the course of providing legal representation.

3. Legal Basis for Processing

We process personal data under the following legal grounds as provided by Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable principles:

• Consent: when you submit an enquiry form or opt in to communications
• Contractual necessity: when processing is necessary to provide legal services you have engaged us to perform
• Legitimate interests: for maintaining records, improving our services, and communicating about legal developments relevant to your matter
• Legal obligation: where we are required by Malaysian law or court order to process data

4. How We Use Your Data

Personal data is used for the following purposes:

• Responding to legal enquiries and scheduling consultations
• Providing legal advice, representation, and related services
• Maintaining client records and case management files
• Complying with obligations under Malaysian law and Bar Council regulations
• Improving our website and understanding how it is used (via anonymised analytics)
• Sending relevant information about changes to the law that may affect clients (with consent)

We do not sell personal data to third parties. We do not use your data for unsolicited marketing without explicit consent.

5. Data Sharing

We may share personal data with:

• Courts and regulatory bodies: where required for legal proceedings or compliance
• Opposing counsel and mediators: where necessary for your matter and with your knowledge
• IT and cloud service providers: who assist with secure data storage and communication (under data processing agreements)
• Professional indemnity insurers: where required for claims purposes

Any third parties who process data on our behalf are required to handle it in accordance with applicable data protection requirements.

6. Data Retention

We retain personal data for the following periods:

• Enquiries that do not result in engagement: up to 12 months
• Active client files: for the duration of the matter plus 7 years thereafter, in line with Malaysian Bar Council guidance
• Financial records: 7 years as required by Malaysian accounting and tax law
• Website analytics data: aggregated and anonymised after 26 months

After the applicable retention period, personal data is securely deleted or anonymised.

7. Data Protection Measures

We take reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, or loss. These include:

• Encrypted email communications for sensitive client matters
• Password-protected case management systems with access restricted to relevant staff
• Physical security at our office premises
• Regular review of data handling procedures

In the event of a personal data breach that poses a material risk, we will notify affected individuals and, where required, the relevant authorities in a timely manner.

8. Cookies

Our website uses cookies to support basic functionality and to understand how visitors use the site. Cookie types used include essential (functional), analytics, and optional preference cookies. You can manage your cookie preferences at any time through our Cookie Policy page.

9. Your Rights

Under Malaysia's PDPA and general principles of data protection, you have the right to:

• Access: request a copy of personal data we hold about you
• Correction: ask us to correct inaccurate or incomplete data
• Withdrawal of consent: withdraw consent to processing where consent is the legal basis, without affecting the lawfulness of prior processing
• Object to processing: in certain circumstances, request that we stop processing your data
• Erasure: request deletion of data we no longer have a lawful basis to retain

To exercise any of these rights, please write to us at [email protected]. We will respond within 21 days. Some requests may be subject to legal or professional limitations (for example, records we are required to retain under Bar Council rules).

If you believe we have mishandled your personal data, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

10. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites, and this Policy does not apply to them. We encourage you to review the privacy policies of any external sites you visit.

11. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18 years of age through our website or contact forms. If a child's information is provided in the context of a legal matter (for example, a child custody case), that data is handled with additional care and used only for the purpose of the legal proceedings.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law or practice. Where changes are material, we will display a notice on our website. The date at the top of this page reflects when the Policy was last revised. Continued use of our services after an update constitutes acceptance of the revised Policy.

13. Contact

For all privacy-related enquiries or requests:

Kasih Guaman
Jalan Tuanku Abdul Rahman 129, 50100 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 3-2693 4180